This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft File: WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft (raw, json) Hash identifier: ORZ+gfv3hvXnqe1WNB4nvTU8XtV8lROf/1iOtStpuGg= Subject key identifier: 2A:1B:35:3F:19:3D:DD:57:45:FD:78:55:5E:4C:86:05:FD:DE:E9:D8 Authority key identifier: 5A:14:1C:50:90:82:4D:0A:17:C2:9E:C4:05:0E:21:00:71:13:FB:DA Certificate issuer: /CN=5a141c5090824d0a17c29ec4050e21007113fbda Certificate serial: 019BF27483DB6A266C25C72BD5BCB93B2256 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft Manifest number: 17F6 Signing time: Sun 25 Jan 2026 00:01:20 +0000 Manifest this update: Sun 25 Jan 2026 00:01:20 +0000 Manifest next update: Mon 26 Jan 2026 00:01:20 +0000 Files and hashes: 1: 0kbAZrj0KlIr6tTe_BrPv7Ou9Do.roa (hash: j8FCsH7KdJb2m1l6ogZ9wjzQrPPAwuq0Mi1PAn+gc3E=) 2: 9zo09ix2zYPkPjtRWCZtUQY7Hx8.roa (hash: 1YGiPxIeRO9HzGHWmN+x5SsxEkq0m2RwsZb+NYZ3A1U=) 3: BMHXoNqb9w8hGpmKpbza0EXvFx4.roa (hash: GAFHMPGGv6WbCFEAKXD/fdvXu0V9RH11YpVxeHI3Tgg=) 4: QQ4KxBaAki9JFj3Vc4-C08V1ydM.roa (hash: sU9ncWykONAWb2tj0sti+vKUahUUlRIsV/AFQ67WkR4=) 5: WhQcUJCCTQoXwp7EBQ4hAHET-9o.crl (hash: i8dzfkUDUVwSMgplGUx/esW8CZ0BBlEeONJ/og5pI40=) 6: WpRy_KPAxZKQEB_LsN9fBCkXol8.roa (hash: f3qEj6Yz1joliMM6YbG5U2guBbhW/iL/NGaA4Tk1ejo=) 7: aym4YZ7Ehm_KzkXD3V-QX01Qou4.roa (hash: QNBmXDOTHFhuiQC1mFg6H4twIsCe0r1/zgtBgEjdjlA=) 8: ttPcl3gpgQikkqNDHNv3FAV-nHQ.roa (hash: B0KgI8BvLZBPZBGXTpqu8AM7cdcZmvQ18YWeSHHi9Yw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft rsync://rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f2:74:83:db:6a:26:6c:25:c7:2b:d5:bc:b9:3b:22:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a141c5090824d0a17c29ec4050e21007113fbda Validity Not Before: Jan 25 00:01:20 2026 GMT Not After : Jan 26 00:01:20 2026 GMT Subject: CN=2a1b353f193ddd5745fd78555e4c8605fddee9d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:21:7d:b0:9e:24:9f:75:b8:ae:f8:9f:da:8a: 6f:0d:45:97:99:63:6b:aa:7b:13:4a:36:45:52:48: b3:76:40:e3:82:56:7e:00:06:30:04:40:db:22:3d: 36:af:97:df:4d:b7:d4:a0:25:ed:3a:a7:81:a8:e9: be:79:85:81:61:74:50:3c:68:6e:9d:8a:7d:82:ab: 80:62:6b:2a:b2:26:4f:0c:a2:74:79:0c:2f:8a:e2: 3f:37:50:4a:78:10:b2:b7:fe:c6:8c:0a:f2:60:e2: 37:69:7a:97:f9:ad:c7:67:67:66:cc:4e:36:2c:37: 13:d7:04:fc:e4:e8:fd:ef:47:63:f6:b2:ae:37:8c: 6e:06:68:2d:da:57:07:74:41:e5:5c:13:55:cf:2d: fb:c6:30:45:de:e6:c2:da:42:4d:b6:85:67:d0:d7: dd:d3:5b:22:7c:93:60:39:4e:44:ea:a1:db:77:93: c7:01:9b:8b:51:74:1c:d9:fb:07:eb:d7:98:ee:31: d4:87:10:44:09:3e:16:73:55:3b:b2:ab:02:33:59: 94:34:23:e4:b8:e1:15:35:09:b1:25:42:13:a7:b7: cf:41:57:01:b0:c0:0a:e5:41:5f:58:f6:f8:f2:5a: dd:95:28:91:01:32:5c:a2:e7:04:63:20:a9:46:21: 9f:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:1B:35:3F:19:3D:DD:57:45:FD:78:55:5E:4C:86:05:FD:DE:E9:D8 X509v3 Authority Key Identifier: keyid:5A:14:1C:50:90:82:4D:0A:17:C2:9E:C4:05:0E:21:00:71:13:FB:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:3c:5e:33:81:5c:b5:bc:41:22:3a:3a:8e:de:22:e4:75:38: c4:97:29:6a:f7:75:f1:d8:be:29:3f:de:93:e8:55:97:bf:53: 1e:ab:b1:ea:f9:ed:4a:82:b9:9e:cb:f8:29:09:d8:a1:ed:f7: 23:62:7b:dd:2e:74:13:c3:25:be:3b:a2:44:bf:e2:d1:b9:3c: bf:c2:de:de:75:6d:3a:3f:6e:3a:37:ad:80:14:fc:e0:87:0a: 12:e5:2a:96:3d:42:4a:66:0e:d2:f3:bf:e0:fd:d0:0a:3d:ee: c1:90:5c:2c:30:3c:1c:cf:5a:46:3b:71:4b:bc:26:6b:b9:5b: d7:b7:db:1a:f5:39:0a:e1:87:d9:18:cd:52:fa:af:cf:dc:48: 1e:14:1b:fc:ad:5d:20:f9:71:19:92:4c:20:98:e2:1b:eb:be: 8e:c1:1b:80:2d:cd:3a:26:cf:af:5d:c1:68:d6:21:28:5f:3b: 67:12:ef:c0:f9:ef:db:34:d5:7d:52:22:56:69:ba:79:07:1c: 8c:8e:8d:83:0b:8d:4d:45:a3:26:ab:15:5b:3b:97:1d:70:26: c2:dd:47:18:4e:7b:b2:11:1a:63:61:b5:a8:69:f0:65:a4:f0: 7f:02:9e:da:10:cd:46:70:97:8a:a1:0b:8b:5a:16:c1:45:15: 99:c3:27:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvydIPbaiZsJccr1by5OyJWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhMTQxYzUwOTA4MjRkMGExN2MyOWVjNDA1MGUyMTAwNzEx M2ZiZGEwHhcNMjYwMTI1MDAwMTIwWhcNMjYwMTI2MDAwMTIwWjAzMTEwLwYDVQQD EygyYTFiMzUzZjE5M2RkZDU3NDVmZDc4NTU1ZTRjODYwNWZkZGVlOWQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAziF9sJ4kn3W4rvif2opvDUWXmWNr qnsTSjZFUkizdkDjglZ+AAYwBEDbIj02r5ffTbfUoCXtOqeBqOm+eYWBYXRQPGhu nYp9gquAYmsqsiZPDKJ0eQwviuI/N1BKeBCyt/7GjAryYOI3aXqX+a3HZ2dmzE42 LDcT1wT85Oj970dj9rKuN4xuBmgt2lcHdEHlXBNVzy37xjBF3ubC2kJNtoVn0Nfd 01sifJNgOU5E6qHbd5PHAZuLUXQc2fsH69eY7jHUhxBECT4Wc1U7sqsCM1mUNCPk uOEVNQmxJUITp7fPQVcBsMAK5UFfWPb48lrdlSiRATJcoucEYyCpRiGf2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCobNT8ZPd1XRf14VV5MhgX93unYMB8GA1UdIwQY MBaAFFoUHFCQgk0KF8KexAUOIQBxE/vaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2hRY1VKQ0NUUW9Yd3A3RUJRNGhBSEVULTlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9iMjBlOTAtYmY2ZS00ZTI1LTg3ZDUt ZWNlZWZmOGU4NGUwLzEvV2hRY1VKQ0NUUW9Yd3A3RUJRNGhBSEVULTlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9iMjBlOTAtYmY2ZS00ZTI1LTg3ZDUtZWNlZWZmOGU4NGUw LzEvV2hRY1VKQ0NUUW9Yd3A3RUJRNGhBSEVULTlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwDxeM4Fc tbxBIjo6jt4i5HU4xJcpavd18di+KT/ek+hVl79THqux6vntSoK5nsv4KQnYoe33 I2J73S50E8MlvjuiRL/i0bk8v8Le3nVtOj9uOjetgBT84IcKEuUqlj1CSmYO0vO/ 4P3QCj3uwZBcLDA8HM9aRjtxS7wma7lb17fbGvU5CuGH2RjNUvqvz9xIHhQb/K1d IPlxGZJMIJjiG+u+jsEbgC3NOibPr13BaNYhKF87ZxLvwPnv2zTVfVIiVmm6eQcc jI6NgwuNTUWjJqsVWzuXHXAmwt1HGE57shEaY2G1qGnwZaTwfwKe2hDNRnCXiqEL i1oWwUUVmcMnnQ== -----END CERTIFICATE-----Generated at Sun Jan 25 09:06:54 2026 by rpki-client