This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft File: w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft (raw, json) Hash identifier: WdUJBvyuLD5K1ts2d9mE2wDLQVaMf9HaSz9c399sz3k= Subject key identifier: FF:43:A7:29:DA:E4:F7:95:A3:04:59:30:B0:5D:44:0C:DD:38:D3:16 Authority key identifier: C3:5F:03:94:9E:66:1E:24:BE:0F:1E:08:C6:4D:AD:05:E3:1C:4E:AF Certificate issuer: /CN=c35f03949e661e24be0f1e08c64dad05e31c4eaf Certificate serial: 019BF5ABC7BA4B4AF274977290BD22AF0861 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft Manifest number: 17F3 Signing time: Sun 25 Jan 2026 15:00:34 +0000 Manifest this update: Sun 25 Jan 2026 15:00:34 +0000 Manifest next update: Mon 26 Jan 2026 15:00:34 +0000 Files and hashes: 1: 77h1Q6qUz5qlMm7h_AznswYtOZ0.roa (hash: sRXxLopp6/463zgP26zWNJzhuSr+AeItnoxYVZGJazU=) 2: HN1urgNHkidDzjrtQwQt8embI9M.roa (hash: EeB/nRcF8dH+A2iZTqxjbaTiyibP5r0zfqmmI1yddPU=) 3: w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.crl (hash: /90W7rEcBfrHJUF0cfdlnc3kCWbcb55wqBw9frltZNM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft rsync://rpki.ripe.net/repository/DEFAULT/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ab:c7:ba:4b:4a:f2:74:97:72:90:bd:22:af:08:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c35f03949e661e24be0f1e08c64dad05e31c4eaf Validity Not Before: Jan 25 15:00:34 2026 GMT Not After : Jan 26 15:00:34 2026 GMT Subject: CN=ff43a729dae4f795a3045930b05d440cdd38d316 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f7:19:ba:97:95:01:98:ea:47:f2:86:74:9e: c2:cb:6c:35:43:27:a2:02:fb:90:ff:19:c9:74:3f: 5e:59:5c:8a:44:1b:23:96:20:7d:a8:22:47:28:cd: 0b:ef:3e:05:aa:73:1c:50:8f:15:a8:7c:3f:4f:66: 35:66:0d:dd:f7:f5:29:1a:3d:d2:bb:d0:2d:5d:6e: 84:95:40:b1:02:54:ee:62:ae:f5:e2:07:84:d6:cb: 12:bd:9c:4a:86:88:b3:ac:8e:25:cd:78:14:29:bf: c1:25:4a:05:f3:77:58:aa:9c:cb:c0:bc:23:05:88: fc:07:81:4d:9c:f2:a1:d8:3a:ff:8c:86:4a:fd:62: 09:82:cd:d8:cb:b4:95:5b:f8:19:6b:bb:f5:ae:6a: 76:ed:2d:f6:e1:26:33:55:22:5d:25:0f:75:a8:b3: 3a:9c:7e:a7:3f:1c:f5:64:52:7f:e9:5f:7f:90:db: 54:9d:57:db:c3:93:7d:fa:ff:48:ba:14:2a:54:87: 67:c0:61:6e:af:86:6a:8f:38:62:d4:77:4f:60:c2: 3f:38:c5:19:ba:78:d4:7d:80:70:0c:f0:e5:46:dc: b4:0c:d9:0c:f3:30:8a:2a:7f:93:a9:33:b2:8b:8e: 0b:a9:86:4d:b3:6a:69:b8:7a:5c:84:35:d7:ed:08: e1:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:43:A7:29:DA:E4:F7:95:A3:04:59:30:B0:5D:44:0C:DD:38:D3:16 X509v3 Authority Key Identifier: keyid:C3:5F:03:94:9E:66:1E:24:BE:0F:1E:08:C6:4D:AD:05:E3:1C:4E:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:7c:59:86:02:c4:52:32:21:57:f0:12:ec:8c:6e:bf:d9:db: 8e:e8:32:40:f3:c3:16:61:36:a0:d7:41:03:1d:f8:0b:27:49: f0:dd:f0:42:12:b9:06:b9:be:4a:64:81:cb:c9:1a:cc:3f:01: 51:0e:51:01:9d:57:0c:b9:bb:46:08:2c:19:f9:31:9e:11:59: 86:e8:b0:e9:6c:1c:8e:0d:30:c1:b9:5d:d4:29:fd:39:05:a3: 28:0d:f0:b9:33:30:76:15:5b:fa:f1:ed:20:53:3a:10:08:f8: 01:56:8e:82:d4:4f:8b:44:d8:fb:a0:df:d6:01:1f:41:f9:c8: 63:70:3e:ea:2b:23:3e:44:38:44:dc:cb:70:43:8e:9a:c9:1b: e5:09:60:99:80:1f:eb:e9:2c:5f:92:14:2b:0c:24:31:40:cd: 44:70:f5:ab:d8:fb:70:bd:2f:c6:32:07:17:53:af:e6:f6:c3: 9d:07:f3:7f:da:ca:7f:b4:bf:bc:c2:4d:f3:96:c5:56:b4:0d: 8e:69:b4:e8:34:1a:d7:cf:8d:26:6c:87:63:fa:03:3e:e5:de: 2c:68:82:63:09:0b:6b:49:59:f7:31:41:1a:c4:fc:74:7e:0e: cb:b9:14:b2:74:62:68:f4:d3:44:78:e0:64:45:b6:d7:a6:90: e4:7c:6c:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1q8e6S0rydJdykL0irwhhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzNWYwMzk0OWU2NjFlMjRiZTBmMWUwOGM2NGRhZDA1ZTMx YzRlYWYwHhcNMjYwMTI1MTUwMDM0WhcNMjYwMTI2MTUwMDM0WjAzMTEwLwYDVQQD EyhmZjQzYTcyOWRhZTRmNzk1YTMwNDU5MzBiMDVkNDQwY2RkMzhkMzE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxvcZupeVAZjqR/KGdJ7Cy2w1Qyei AvuQ/xnJdD9eWVyKRBsjliB9qCJHKM0L7z4FqnMcUI8VqHw/T2Y1Zg3d9/UpGj3S u9AtXW6ElUCxAlTuYq714geE1ssSvZxKhoizrI4lzXgUKb/BJUoF83dYqpzLwLwj BYj8B4FNnPKh2Dr/jIZK/WIJgs3Yy7SVW/gZa7v1rmp27S324SYzVSJdJQ91qLM6 nH6nPxz1ZFJ/6V9/kNtUnVfbw5N9+v9IuhQqVIdnwGFur4Zqjzhi1HdPYMI/OMUZ unjUfYBwDPDlRty0DNkM8zCKKn+TqTOyi44LqYZNs2ppuHpchDXX7QjhZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP9Dpyna5PeVowRZMLBdRAzdONMWMB8GA1UdIwQY MBaAFMNfA5SeZh4kvg8eCMZNrQXjHE6vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzE4RGxKNW1IaVMtRHg0SXhrMnRCZU1jVHE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8yODlmYzItZjI3OC00ZjY2LWI4ZWMt Yzc0M2NiNmQyZmMzLzEvdzE4RGxKNW1IaVMtRHg0SXhrMnRCZU1jVHE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8yODlmYzItZjI3OC00ZjY2LWI4ZWMtYzc0M2NiNmQyZmMz LzEvdzE4RGxKNW1IaVMtRHg0SXhrMnRCZU1jVHE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI3xZhgLE UjIhV/AS7Ixuv9nbjugyQPPDFmE2oNdBAx34CydJ8N3wQhK5Brm+SmSBy8kazD8B UQ5RAZ1XDLm7RggsGfkxnhFZhuiw6Wwcjg0wwbld1Cn9OQWjKA3wuTMwdhVb+vHt IFM6EAj4AVaOgtRPi0TY+6Df1gEfQfnIY3A+6isjPkQ4RNzLcEOOmskb5QlgmYAf 6+ksX5IUKwwkMUDNRHD1q9j7cL0vxjIHF1Ov5vbDnQfzf9rKf7S/vMJN85bFVrQN jmm06DQa18+NJmyHY/oDPuXeLGiCYwkLa0lZ9zFBGsT8dH4Oy7kUsnRiaPTTRHjg ZEW216aQ5HxsHA== -----END CERTIFICATE-----Generated at Sun Jan 25 19:45:57 2026 by rpki-client