This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/ac4c2d-8ab1-4e01-b6b1-29602215add0/1/W-oEa0mXgK7H1hgtLVanXrCJaM0.mft File: W-oEa0mXgK7H1hgtLVanXrCJaM0.mft (raw, json) Hash identifier: Sb2DOnkZ6+qqo8HxnAKeee4i7JeU6WyKtzvk+sT1hBI= Subject key identifier: D7:BB:AB:47:A2:E0:D0:F8:ED:8A:7F:C6:1A:0A:B9:48:78:85:F5:EF Authority key identifier: 5B:EA:04:6B:49:97:80:AE:C7:D6:18:2D:2D:56:A7:5E:B0:89:68:CD Certificate issuer: /CN=5bea046b499780aec7d6182d2d56a75eb08968cd Certificate serial: 019BF4D0EE02DAB3701145CBC8246676D575 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W-oEa0mXgK7H1hgtLVanXrCJaM0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/ac4c2d-8ab1-4e01-b6b1-29602215add0/1/W-oEa0mXgK7H1hgtLVanXrCJaM0.mft Manifest number: 16D2 Signing time: Sun 25 Jan 2026 11:01:31 +0000 Manifest this update: Sun 25 Jan 2026 11:01:31 +0000 Manifest next update: Mon 26 Jan 2026 11:01:31 +0000 Files and hashes: 1: W-oEa0mXgK7H1hgtLVanXrCJaM0.crl (hash: EW6KXv4cXLffXNfJqRWLVLhVmh33gERIc90jG8l+X4Q=) 2: zQPH05SIZNuQg4zGS0l4MvCEJwc.roa (hash: ueZfBj8JGiHYfSauWwC/j0GXwlPaWH1VC5mIskTovc0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/ac4c2d-8ab1-4e01-b6b1-29602215add0/1/W-oEa0mXgK7H1hgtLVanXrCJaM0.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/ac4c2d-8ab1-4e01-b6b1-29602215add0/1/W-oEa0mXgK7H1hgtLVanXrCJaM0.mft rsync://rpki.ripe.net/repository/DEFAULT/W-oEa0mXgK7H1hgtLVanXrCJaM0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:d0:ee:02:da:b3:70:11:45:cb:c8:24:66:76:d5:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5bea046b499780aec7d6182d2d56a75eb08968cd Validity Not Before: Jan 25 11:01:31 2026 GMT Not After : Jan 26 11:01:31 2026 GMT Subject: CN=d7bbab47a2e0d0f8ed8a7fc61a0ab9487885f5ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:5f:c8:7f:6c:0a:bd:00:b3:f9:ca:76:3e:7b: 4a:c1:ec:1e:8d:47:84:e8:cc:b0:6a:a3:ac:05:d2: 26:b9:89:5f:42:3f:14:c5:a4:ea:20:1e:82:25:17: 8a:91:49:49:40:b4:b2:c2:9b:5d:ec:07:74:75:bd: 82:aa:bd:73:78:f7:b6:c7:16:ce:e9:58:4e:77:f2: 32:03:b8:67:25:d3:06:5d:6b:3a:f7:6c:a6:3f:74: 02:8c:1f:c9:76:31:65:d6:6e:48:25:70:92:aa:4e: c4:85:af:c1:b4:ca:34:1a:7f:d8:7a:73:3a:dd:eb: 75:15:a8:ca:b7:2d:a0:6e:e3:75:f0:8e:97:87:03: b2:3a:41:32:d1:59:54:65:0d:e7:64:73:4d:24:9a: 46:40:0a:57:3e:ab:32:43:ba:44:70:d2:2d:a3:09: d3:77:4b:5d:8b:9b:af:bb:5e:1c:c2:28:53:c6:4b: d6:1e:cd:75:16:58:89:7e:ef:de:65:8f:23:59:73: 94:7b:04:21:4a:00:d0:e9:76:9c:aa:f2:18:4a:51: 8d:05:ca:8f:0b:df:48:31:a6:0c:11:ad:7f:0f:24: 63:f7:b9:90:ff:9f:e7:cc:20:2a:a2:fd:17:2b:a8: 89:7d:32:3c:86:84:42:88:17:72:a5:c9:b7:30:90: cd:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:BB:AB:47:A2:E0:D0:F8:ED:8A:7F:C6:1A:0A:B9:48:78:85:F5:EF X509v3 Authority Key Identifier: keyid:5B:EA:04:6B:49:97:80:AE:C7:D6:18:2D:2D:56:A7:5E:B0:89:68:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-oEa0mXgK7H1hgtLVanXrCJaM0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/ac4c2d-8ab1-4e01-b6b1-29602215add0/1/W-oEa0mXgK7H1hgtLVanXrCJaM0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/ac4c2d-8ab1-4e01-b6b1-29602215add0/1/W-oEa0mXgK7H1hgtLVanXrCJaM0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:13:7f:bb:bd:25:3f:0a:23:49:9b:85:b0:33:c2:dc:d4:1c: a1:3a:1f:08:80:aa:58:00:8d:c2:1d:82:25:00:ae:df:3f:17: e6:56:4e:0d:a0:06:85:0c:29:5b:14:d4:00:bc:6f:43:01:66: aa:06:5f:60:b7:5d:c3:ba:d2:53:60:d5:b2:cb:d0:3e:5b:e6: 4f:64:15:96:e3:84:69:e2:51:6e:dc:bd:52:17:9a:c4:0f:2c: 3a:16:3b:97:73:13:28:2f:3c:db:bf:5a:4b:84:2f:31:75:63: 6b:3c:24:05:12:52:52:5f:da:d7:bc:14:88:6b:ee:0d:64:91: 04:76:8b:31:d2:23:bc:b7:b4:01:5f:84:c7:d2:67:2b:92:78: 23:2b:5c:e7:f9:d8:8d:69:98:c5:a7:cc:47:d4:5e:f0:56:de: 0d:6e:60:06:e7:f5:cf:9e:86:14:89:a5:db:24:d0:33:b4:bf: 05:44:2b:08:3f:d1:6d:1a:16:41:1e:15:a2:e3:e3:42:4b:44: 0d:7f:cf:fb:e2:3b:d1:b0:6a:6f:22:75:df:0d:04:4c:ca:75: 2e:bf:84:06:41:3d:ae:0c:39:05:5d:0b:23:f6:5d:1f:87:f8: a9:62:88:97:79:43:4a:2f:3f:1b:7b:32:9d:d9:e8:8e:bd:39: 75:c6:c2:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv00O4C2rNwEUXLyCRmdtV1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViZWEwNDZiNDk5NzgwYWVjN2Q2MTgyZDJkNTZhNzVlYjA4 OTY4Y2QwHhcNMjYwMTI1MTEwMTMxWhcNMjYwMTI2MTEwMTMxWjAzMTEwLwYDVQQD EyhkN2JiYWI0N2EyZTBkMGY4ZWQ4YTdmYzYxYTBhYjk0ODc4ODVmNWVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvl/If2wKvQCz+cp2PntKwewejUeE 6MywaqOsBdImuYlfQj8UxaTqIB6CJReKkUlJQLSywptd7Ad0db2Cqr1zePe2xxbO 6VhOd/IyA7hnJdMGXWs692ymP3QCjB/JdjFl1m5IJXCSqk7Eha/BtMo0Gn/YenM6 3et1FajKty2gbuN18I6XhwOyOkEy0VlUZQ3nZHNNJJpGQApXPqsyQ7pEcNItownT d0tdi5uvu14cwihTxkvWHs11FliJfu/eZY8jWXOUewQhSgDQ6XacqvIYSlGNBcqP C99IMaYMEa1/DyRj97mQ/5/nzCAqov0XK6iJfTI8hoRCiBdypcm3MJDNmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNe7q0ei4ND47Yp/xhoKuUh4hfXvMB8GA1UdIwQY MBaAFFvqBGtJl4Cux9YYLS1Wp16wiWjNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVy1vRWEwbVhnSzdIMWhndExWYW5YckNKYU0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9hYzRjMmQtOGFiMS00ZTAxLWI2YjEt Mjk2MDIyMTVhZGQwLzEvVy1vRWEwbVhnSzdIMWhndExWYW5YckNKYU0wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC9hYzRjMmQtOGFiMS00ZTAxLWI2YjEtMjk2MDIyMTVhZGQw LzEvVy1vRWEwbVhnSzdIMWhndExWYW5YckNKYU0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASRN/u70l PwojSZuFsDPC3NQcoTofCICqWACNwh2CJQCu3z8X5lZODaAGhQwpWxTUALxvQwFm qgZfYLddw7rSU2DVssvQPlvmT2QVluOEaeJRbty9UheaxA8sOhY7l3MTKC88279a S4QvMXVjazwkBRJSUl/a17wUiGvuDWSRBHaLMdIjvLe0AV+Ex9JnK5J4Iytc5/nY jWmYxafMR9Re8FbeDW5gBuf1z56GFIml2yTQM7S/BUQrCD/RbRoWQR4VouPjQktE DX/P++I70bBqbyJ13w0ETMp1Lr+EBkE9rgw5BV0LI/ZdH4f4qWKIl3lDSi8/G3sy ndnojr05dcbCIg== -----END CERTIFICATE-----Generated at Sun Jan 25 20:09:12 2026 by rpki-client