This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/bd98c9-fce3-4bba-b49b-4cae325c0e28/1/rWUjcvDl0WnCAPfR0IDoVw_-23E.mft File: rWUjcvDl0WnCAPfR0IDoVw_-23E.mft (raw, json) Hash identifier: 02smToKWDT80O2lvJXU3EEeh5v/XDsGfm41TV0YGzHk= Subject key identifier: 16:06:2A:2B:AA:0D:77:4B:90:02:59:D1:28:7B:F5:C5:13:68:27:95 Authority key identifier: AD:65:23:72:F0:E5:D1:69:C2:00:F7:D1:D0:80:E8:57:0F:FE:DB:71 Certificate issuer: /CN=ad652372f0e5d169c200f7d1d080e8570ffedb71 Certificate serial: 019BF8400A1FCBEEA7809A36EEE016097D8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rWUjcvDl0WnCAPfR0IDoVw_-23E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/bd98c9-fce3-4bba-b49b-4cae325c0e28/1/rWUjcvDl0WnCAPfR0IDoVw_-23E.mft Manifest number: 0555 Signing time: Mon 26 Jan 2026 03:01:44 +0000 Manifest this update: Mon 26 Jan 2026 03:01:44 +0000 Manifest next update: Tue 27 Jan 2026 03:01:44 +0000 Files and hashes: 1: TVDGXyDJKjGf9M2l61hPydz0GW8.roa (hash: GPBRCtJGeJYsInHOu3V8vVubHvszvLhmWvGPlsGdKsk=) 2: rWUjcvDl0WnCAPfR0IDoVw_-23E.crl (hash: WWNMzU9YKjWtI0csqEkhXtu2LvSsOkZy1zigw85Jg58=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/bd98c9-fce3-4bba-b49b-4cae325c0e28/1/rWUjcvDl0WnCAPfR0IDoVw_-23E.crl rsync://rpki.ripe.net/repository/DEFAULT/db/bd98c9-fce3-4bba-b49b-4cae325c0e28/1/rWUjcvDl0WnCAPfR0IDoVw_-23E.mft rsync://rpki.ripe.net/repository/DEFAULT/rWUjcvDl0WnCAPfR0IDoVw_-23E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:40:0a:1f:cb:ee:a7:80:9a:36:ee:e0:16:09:7d:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad652372f0e5d169c200f7d1d080e8570ffedb71 Validity Not Before: Jan 26 03:01:44 2026 GMT Not After : Jan 27 03:01:44 2026 GMT Subject: CN=16062a2baa0d774b900259d1287bf5c513682795 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:de:7d:19:c7:50:5a:4a:bd:a5:99:29:d4:d7: 39:fc:71:23:17:1e:14:fb:82:28:29:d7:49:49:fd: aa:54:80:be:f5:d1:6e:8f:c2:a9:09:08:2c:1b:60: 53:c0:6e:4e:95:01:5b:8a:48:ec:8c:46:12:ce:42: 55:b8:64:13:f4:db:ff:7a:98:90:c6:06:3e:f1:e3: 06:50:11:d2:88:ea:86:e8:31:ec:b7:3b:e2:99:96: 68:e6:12:36:4d:55:08:88:6b:f4:86:b5:7c:bd:74: 9c:4c:db:74:55:44:e8:e5:52:82:fc:9a:6b:29:2f: be:f9:09:62:05:80:85:d0:2c:ee:4c:5e:4a:70:1f: d2:32:6f:b7:2e:34:89:59:b0:10:f5:ab:a5:0b:cd: 2a:a9:05:a5:f1:10:a0:d8:44:f4:e4:4f:91:fe:8c: 26:5d:19:17:5e:63:7f:ae:57:4c:ec:ee:16:58:15: c2:1d:61:bb:09:45:c3:96:a2:0c:25:f4:d3:d6:41: 93:84:07:e8:54:ee:a4:c5:d9:1c:ac:20:9e:bc:45: 6d:df:6a:a2:45:27:1a:de:b0:b4:c1:7f:ab:59:56: 1c:68:e6:3c:dd:eb:f7:3f:65:92:3b:fc:e8:a3:eb: 0f:f1:77:cb:73:80:3d:5a:30:2c:b8:a9:79:2c:44: 57:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:06:2A:2B:AA:0D:77:4B:90:02:59:D1:28:7B:F5:C5:13:68:27:95 X509v3 Authority Key Identifier: keyid:AD:65:23:72:F0:E5:D1:69:C2:00:F7:D1:D0:80:E8:57:0F:FE:DB:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rWUjcvDl0WnCAPfR0IDoVw_-23E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/bd98c9-fce3-4bba-b49b-4cae325c0e28/1/rWUjcvDl0WnCAPfR0IDoVw_-23E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/bd98c9-fce3-4bba-b49b-4cae325c0e28/1/rWUjcvDl0WnCAPfR0IDoVw_-23E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:fd:e1:e4:e9:0d:81:75:28:0c:4f:c1:fe:c4:a2:40:89:1e: 54:b4:31:00:ea:b1:f0:37:04:56:44:91:ec:10:19:6a:57:64: 02:69:29:18:9a:00:c5:2e:2e:e9:90:1e:5a:b0:9f:3b:ec:7c: a7:ac:ed:10:05:bf:46:3a:a8:39:d0:2d:73:ae:94:38:ee:dc: a8:05:c1:d1:96:ba:45:fd:b6:13:83:17:3b:dd:ef:fd:92:2d: f0:a5:78:b7:19:a5:fc:c3:71:27:fe:7e:e1:95:55:1d:3f:e0: e9:bd:66:7f:04:7b:bf:9d:ed:c0:ad:9e:a4:9d:44:d8:a7:6d: 68:a0:a3:e7:90:88:70:f2:da:e0:03:da:12:5e:cf:98:7c:63: 8f:75:2f:4e:74:30:7e:fd:e0:53:c8:23:67:4f:6b:de:da:ef: e5:9a:9e:08:f4:52:77:49:99:99:c1:53:b7:17:2c:3e:f1:1b: 4d:74:59:ca:ee:b9:f8:55:37:29:07:44:38:80:6d:d7:4d:84: 0f:7f:7c:f3:1a:82:19:94:77:84:06:e2:8d:f5:d9:e7:dd:07: e7:36:88:0f:4c:8c:92:37:8e:87:be:9b:ab:f5:8f:64:21:16: f1:d3:97:db:fc:7b:71:40:57:84:f1:f2:2a:a3:88:33:07:48: 84:f1:bc:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4QAofy+6ngJo27uAWCX2LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkNjUyMzcyZjBlNWQxNjljMjAwZjdkMWQwODBlODU3MGZm ZWRiNzEwHhcNMjYwMTI2MDMwMTQ0WhcNMjYwMTI3MDMwMTQ0WjAzMTEwLwYDVQQD EygxNjA2MmEyYmFhMGQ3NzRiOTAwMjU5ZDEyODdiZjVjNTEzNjgyNzk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuN59GcdQWkq9pZkp1Nc5/HEjFx4U +4IoKddJSf2qVIC+9dFuj8KpCQgsG2BTwG5OlQFbikjsjEYSzkJVuGQT9Nv/epiQ xgY+8eMGUBHSiOqG6DHstzvimZZo5hI2TVUIiGv0hrV8vXScTNt0VUTo5VKC/Jpr KS+++QliBYCF0CzuTF5KcB/SMm+3LjSJWbAQ9aulC80qqQWl8RCg2ET05E+R/owm XRkXXmN/rldM7O4WWBXCHWG7CUXDlqIMJfTT1kGThAfoVO6kxdkcrCCevEVt32qi RSca3rC0wX+rWVYcaOY83ev3P2WSO/zoo+sP8XfLc4A9WjAsuKl5LERXlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBYGKiuqDXdLkAJZ0Sh79cUTaCeVMB8GA1UdIwQY MBaAFK1lI3Lw5dFpwgD30dCA6FcP/ttxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcldVamN2RGwwV25DQVBmUjBJRG9Wd18tMjNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9iZDk4YzktZmNlMy00YmJhLWI0OWIt NGNhZTMyNWMwZTI4LzEvcldVamN2RGwwV25DQVBmUjBJRG9Wd18tMjNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9iZDk4YzktZmNlMy00YmJhLWI0OWItNGNhZTMyNWMwZTI4 LzEvcldVamN2RGwwV25DQVBmUjBJRG9Wd18tMjNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAav3h5OkN gXUoDE/B/sSiQIkeVLQxAOqx8DcEVkSR7BAZaldkAmkpGJoAxS4u6ZAeWrCfO+x8 p6ztEAW/RjqoOdAtc66UOO7cqAXB0Za6Rf22E4MXO93v/ZIt8KV4txml/MNxJ/5+ 4ZVVHT/g6b1mfwR7v53twK2epJ1E2KdtaKCj55CIcPLa4APaEl7PmHxjj3UvTnQw fv3gU8gjZ09r3trv5ZqeCPRSd0mZmcFTtxcsPvEbTXRZyu65+FU3KQdEOIBt102E D3988xqCGZR3hAbijfXZ590H5zaID0yMkjeOh76bq/WPZCEW8dOX2/x7cUBXhPHy KqOIMwdIhPG8zw== -----END CERTIFICATE-----Generated at Mon Jan 26 05:38:54 2026 by rpki-client