This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/ef188b-62e9-4fd6-97f0-bb39329f87f3/1/wRc_R-wdkueIbqKQf_kn7hfL8vQ.mft File: wRc_R-wdkueIbqKQf_kn7hfL8vQ.mft (raw, json) Hash identifier: 83+Wp50ojmP3WrB4OZwFJ6ues3hu7QwGtFJAFvKYSrE= Subject key identifier: DC:86:32:45:C4:94:A7:25:33:52:BC:51:1B:DB:F0:00:2A:8A:AD:06 Authority key identifier: C1:17:3F:47:EC:1D:92:E7:88:6E:A2:90:7F:F9:27:EE:17:CB:F2:F4 Certificate issuer: /CN=c1173f47ec1d92e7886ea2907ff927ee17cbf2f4 Certificate serial: 019BF79A57BED5C6CF78C356F0AA5CFDC65A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wRc_R-wdkueIbqKQf_kn7hfL8vQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/ef188b-62e9-4fd6-97f0-bb39329f87f3/1/wRc_R-wdkueIbqKQf_kn7hfL8vQ.mft Manifest number: 050A Signing time: Mon 26 Jan 2026 00:00:45 +0000 Manifest this update: Mon 26 Jan 2026 00:00:45 +0000 Manifest next update: Tue 27 Jan 2026 00:00:45 +0000 Files and hashes: 1: J2ac7yBZ1rddlP4OYM3qXYokeC4.roa (hash: 661rctvmo5buxvwD1rNnJJOMy13YlgHsaEVyiDN+3aA=) 2: wRc_R-wdkueIbqKQf_kn7hfL8vQ.crl (hash: YUJ327eUwx4Wvfei/GDg0OVDGjV094LTSrV1F+DG44g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/ef188b-62e9-4fd6-97f0-bb39329f87f3/1/wRc_R-wdkueIbqKQf_kn7hfL8vQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/ef188b-62e9-4fd6-97f0-bb39329f87f3/1/wRc_R-wdkueIbqKQf_kn7hfL8vQ.mft rsync://rpki.ripe.net/repository/DEFAULT/wRc_R-wdkueIbqKQf_kn7hfL8vQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:9a:57:be:d5:c6:cf:78:c3:56:f0:aa:5c:fd:c6:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1173f47ec1d92e7886ea2907ff927ee17cbf2f4 Validity Not Before: Jan 26 00:00:45 2026 GMT Not After : Jan 27 00:00:45 2026 GMT Subject: CN=dc863245c494a7253352bc511bdbf0002a8aad06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:17:44:f9:36:97:07:9b:92:65:b5:2c:8b:f4: 85:72:73:d8:2e:be:12:8b:de:34:c2:f2:67:e9:f2: a2:39:bd:1a:26:b0:cb:e8:4a:4d:1c:d6:64:2d:3e: 8c:1e:ff:b5:78:d2:e1:23:3a:66:65:57:c1:6e:db: ea:a4:10:dd:47:79:4f:1b:17:25:0f:5d:ef:b7:56: 15:d3:0d:88:63:30:a3:08:8b:e9:70:e3:2e:03:78: ba:90:e1:63:3d:1f:22:c6:79:d9:99:3b:f1:e1:9a: 40:6c:55:8a:af:0c:38:86:30:9a:b2:80:35:fd:6c: 70:03:91:fd:89:a9:61:5b:5f:31:fd:e3:fb:03:8c: f9:34:eb:79:fa:c1:4f:c8:27:ef:70:67:8d:3f:cd: 61:d0:af:12:83:3b:16:19:7e:b6:1c:48:ed:20:03: 3f:ea:27:ff:03:61:b6:4f:c2:41:9c:9f:63:8c:2c: 75:6f:83:ed:c1:b1:f9:80:85:29:2e:12:34:a2:a2: 48:99:77:39:55:ca:f4:c5:b0:4d:02:c1:26:ba:ae: 98:9f:d1:33:da:c1:3a:90:56:8f:f2:35:d0:c4:46: 3b:0d:bc:26:35:d0:f0:a8:7e:f8:30:da:9c:dd:61: f6:f0:86:40:78:8d:5e:65:5a:f5:41:dd:a9:0c:fa: 5e:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:86:32:45:C4:94:A7:25:33:52:BC:51:1B:DB:F0:00:2A:8A:AD:06 X509v3 Authority Key Identifier: keyid:C1:17:3F:47:EC:1D:92:E7:88:6E:A2:90:7F:F9:27:EE:17:CB:F2:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wRc_R-wdkueIbqKQf_kn7hfL8vQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ef188b-62e9-4fd6-97f0-bb39329f87f3/1/wRc_R-wdkueIbqKQf_kn7hfL8vQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ef188b-62e9-4fd6-97f0-bb39329f87f3/1/wRc_R-wdkueIbqKQf_kn7hfL8vQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:8b:00:ee:4f:99:6f:ce:31:0a:0f:98:e3:02:28:02:64:c2: 9e:13:dd:ae:d6:7f:5c:45:f9:64:3c:e6:d7:22:02:f3:36:86: a5:98:2a:49:43:78:e9:8d:50:a7:c3:9f:e8:26:d9:14:40:cd: d6:b8:95:7b:65:07:00:b5:b1:c0:c9:ab:bd:46:30:11:7f:ad: 57:4a:8a:3f:ca:88:cf:78:a5:c8:85:ab:f4:50:67:be:97:72: 36:02:9e:7b:f5:c4:76:64:ad:30:92:f2:b9:ac:89:5a:49:ab: f1:0c:56:db:1c:33:83:19:c0:fd:bd:f8:f9:cf:b6:9e:77:f9: 81:24:d8:31:47:5a:a4:cf:76:50:39:65:d8:82:1a:03:18:88: 17:56:aa:ca:4f:ae:6f:bf:f7:2a:8a:7b:1c:24:0b:77:07:96: 23:ea:90:58:8d:7f:77:cf:5e:be:67:7b:3c:2e:3f:7c:81:04: a0:0f:a8:00:8b:1d:e2:d5:af:7a:29:8a:9d:34:ab:80:18:e3: 8c:f5:78:be:6d:f2:9e:04:64:7e:cb:52:87:5c:35:c8:7e:ee: 16:02:46:07:87:2f:43:bd:1b:df:56:c9:14:20:bb:0d:e1:65: d2:03:c7:94:45:92:21:18:d2:23:c4:15:68:e4:a2:ee:3f:58: f4:31:02:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3mle+1cbPeMNW8Kpc/cZaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxMTczZjQ3ZWMxZDkyZTc4ODZlYTI5MDdmZjkyN2VlMTdj YmYyZjQwHhcNMjYwMTI2MDAwMDQ1WhcNMjYwMTI3MDAwMDQ1WjAzMTEwLwYDVQQD EyhkYzg2MzI0NWM0OTRhNzI1MzM1MmJjNTExYmRiZjAwMDJhOGFhZDA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRdE+TaXB5uSZbUsi/SFcnPYLr4S i940wvJn6fKiOb0aJrDL6EpNHNZkLT6MHv+1eNLhIzpmZVfBbtvqpBDdR3lPGxcl D13vt1YV0w2IYzCjCIvpcOMuA3i6kOFjPR8ixnnZmTvx4ZpAbFWKrww4hjCasoA1 /WxwA5H9ialhW18x/eP7A4z5NOt5+sFPyCfvcGeNP81h0K8SgzsWGX62HEjtIAM/ 6if/A2G2T8JBnJ9jjCx1b4PtwbH5gIUpLhI0oqJImXc5Vcr0xbBNAsEmuq6Yn9Ez 2sE6kFaP8jXQxEY7DbwmNdDwqH74MNqc3WH28IZAeI1eZVr1Qd2pDPpe0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNyGMkXElKclM1K8URvb8AAqiq0GMB8GA1UdIwQY MBaAFMEXP0fsHZLniG6ikH/5J+4Xy/L0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1JjX1Itd2RrdWVJYnFLUWZfa243aGZMOHZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9lZjE4OGItNjJlOS00ZmQ2LTk3ZjAt YmIzOTMyOWY4N2YzLzEvd1JjX1Itd2RrdWVJYnFLUWZfa243aGZMOHZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS9lZjE4OGItNjJlOS00ZmQ2LTk3ZjAtYmIzOTMyOWY4N2Yz LzEvd1JjX1Itd2RrdWVJYnFLUWZfa243aGZMOHZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdIsA7k+Z b84xCg+Y4wIoAmTCnhPdrtZ/XEX5ZDzm1yIC8zaGpZgqSUN46Y1Qp8Of6CbZFEDN 1riVe2UHALWxwMmrvUYwEX+tV0qKP8qIz3ilyIWr9FBnvpdyNgKee/XEdmStMJLy uayJWkmr8QxW2xwzgxnA/b34+c+2nnf5gSTYMUdapM92UDll2IIaAxiIF1aqyk+u b7/3Kop7HCQLdweWI+qQWI1/d89evmd7PC4/fIEEoA+oAIsd4tWveimKnTSrgBjj jPV4vm3yngRkfstSh1w1yH7uFgJGB4cvQ70b31bJFCC7DeFl0gPHlEWSIRjSI8QV aOSi7j9Y9DEClw== -----END CERTIFICATE-----Generated at Mon Jan 26 05:08:56 2026 by rpki-client