This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/a1c6ec-c260-4ca2-887b-4bb94cbc2e73/1/W20XjxOFEwa1Y03xWXFjGfTYJHg.mft File: W20XjxOFEwa1Y03xWXFjGfTYJHg.mft (raw, json) Hash identifier: 6b7R1PyQsNLt/FQ4kfILZh+tbRMBVqh0d8TQJ4aHj6w= Subject key identifier: BC:06:94:45:A3:14:14:36:30:3E:A8:18:59:F8:9A:E4:58:12:86:F5 Authority key identifier: 5B:6D:17:8F:13:85:13:06:B5:63:4D:F1:59:71:63:19:F4:D8:24:78 Certificate issuer: /CN=5b6d178f13851306b5634df159716319f4d82478 Certificate serial: 019BF6BF0DC680419BE5D51A33952982F8DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W20XjxOFEwa1Y03xWXFjGfTYJHg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/a1c6ec-c260-4ca2-887b-4bb94cbc2e73/1/W20XjxOFEwa1Y03xWXFjGfTYJHg.mft Manifest number: 0E86 Signing time: Sun 25 Jan 2026 20:01:14 +0000 Manifest this update: Sun 25 Jan 2026 20:01:14 +0000 Manifest next update: Mon 26 Jan 2026 20:01:14 +0000 Files and hashes: 1: W20XjxOFEwa1Y03xWXFjGfTYJHg.crl (hash: yutmIg1fbCYGRGxWJzXlJPUc/YIep+nxwuaGYvE/3oI=) 2: _FNuMkl3v2Nr-UBjOpxHlg0teXw.roa (hash: 9cZpNueSaumO17rQqjzAi+IE89jzvt4E2xEEGBAq2wc=) 3: n1hcin5XuxDcfmvnyBOQ4_26dDM.roa (hash: IZZIXC5MuXhDzfA36CNDkCZUlVtgUezifVjte9uNxLw=) 4: q8wsMp1Y_CJ_xwQ88hUxtQO9jY0.roa (hash: XKBS9Ud90qTtFpLQE2ZqQ7TR2bCtsjqPIAvgArsCqb8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/a1c6ec-c260-4ca2-887b-4bb94cbc2e73/1/W20XjxOFEwa1Y03xWXFjGfTYJHg.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/a1c6ec-c260-4ca2-887b-4bb94cbc2e73/1/W20XjxOFEwa1Y03xWXFjGfTYJHg.mft rsync://rpki.ripe.net/repository/DEFAULT/W20XjxOFEwa1Y03xWXFjGfTYJHg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:bf:0d:c6:80:41:9b:e5:d5:1a:33:95:29:82:f8:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b6d178f13851306b5634df159716319f4d82478 Validity Not Before: Jan 25 20:01:14 2026 GMT Not After : Jan 26 20:01:14 2026 GMT Subject: CN=bc069445a3141436303ea81859f89ae4581286f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:78:23:5e:23:cc:c3:aa:bb:0c:49:e5:37:62: a4:74:84:7e:75:b4:51:5d:e2:a2:73:5f:45:68:30: 9a:2d:79:d3:60:9e:e9:f9:b5:e0:51:21:2e:0b:e2: 98:df:e0:76:b7:41:a2:00:1d:7f:cd:30:3f:05:58: f9:21:58:eb:b4:61:3c:12:8a:03:3d:fd:d2:6b:c5: c4:a2:70:02:00:ae:30:03:a2:17:ae:55:c6:82:d3: e8:f2:78:5c:95:ee:e9:6d:62:57:06:d3:36:81:8c: 57:f9:dc:30:04:c3:32:f4:04:df:b1:71:14:82:d0: ae:21:78:0a:0a:7b:31:20:90:02:d2:75:44:d2:f0: 98:26:76:20:42:9f:e2:95:40:e1:80:0b:97:f4:10: 44:24:36:0a:e8:cd:cb:83:b2:53:bc:92:d4:06:95: 93:a0:4a:fb:66:88:23:81:9a:1d:7e:0e:17:65:08: 94:87:67:a8:0e:63:16:80:d9:65:5c:f8:01:12:c6: b6:36:3a:dc:c5:10:19:54:c9:cf:09:37:cc:a2:aa: a8:4b:12:81:81:9d:91:59:9e:56:f9:b5:68:f2:49: aa:c5:39:c9:5c:b7:7c:a7:b4:4f:dd:8b:aa:ef:21: 2c:1c:51:4c:3c:df:d4:ce:58:30:65:cc:11:73:e9: ac:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:06:94:45:A3:14:14:36:30:3E:A8:18:59:F8:9A:E4:58:12:86:F5 X509v3 Authority Key Identifier: keyid:5B:6D:17:8F:13:85:13:06:B5:63:4D:F1:59:71:63:19:F4:D8:24:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W20XjxOFEwa1Y03xWXFjGfTYJHg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a1c6ec-c260-4ca2-887b-4bb94cbc2e73/1/W20XjxOFEwa1Y03xWXFjGfTYJHg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a1c6ec-c260-4ca2-887b-4bb94cbc2e73/1/W20XjxOFEwa1Y03xWXFjGfTYJHg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:96:50:c4:d9:68:8a:a8:4f:95:76:71:63:2e:6b:09:e1:e5: 4c:ea:57:b2:a7:e6:9e:82:d0:4b:55:9a:66:39:86:f0:00:83: ce:9a:75:dc:3d:b9:06:3f:01:32:65:96:47:95:7c:65:c9:38: 4f:36:7d:a2:88:d6:76:6d:45:5f:99:be:74:3d:f3:26:c2:0f: d1:4f:4c:e7:db:01:17:12:2f:18:1d:c3:af:43:c0:cd:3d:c8: e9:01:34:76:a2:2b:98:8f:28:9f:d5:1b:19:7a:89:b7:e8:0f: 89:ed:d9:53:02:d7:d6:8f:15:f2:12:07:f7:9a:e7:b7:3e:4c: 55:f3:52:b9:c2:a0:96:cd:1a:be:1b:c1:41:b4:6d:27:e8:85: c2:d7:15:4c:78:73:6f:75:4b:c4:a0:da:81:78:98:ec:e5:b1: dd:76:7a:78:11:05:65:e5:d6:59:da:e7:14:26:14:64:16:81: 39:0d:f3:c4:0b:4f:e9:94:0a:a4:29:4d:c3:8c:ad:e6:36:1d: 96:98:ff:3a:3c:cd:bd:7a:a9:13:27:d7:81:0f:ff:b4:9a:33: 1c:17:ca:81:d9:70:55:b0:c9:18:11:04:9d:65:c1:40:8a:9d: 8f:06:09:03:50:81:3c:f6:99:5f:7a:ff:8c:97:1c:b0:32:ef: 9f:d8:ad:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2vw3GgEGb5dUaM5UpgvjeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViNmQxNzhmMTM4NTEzMDZiNTYzNGRmMTU5NzE2MzE5ZjRk ODI0NzgwHhcNMjYwMTI1MjAwMTE0WhcNMjYwMTI2MjAwMTE0WjAzMTEwLwYDVQQD EyhiYzA2OTQ0NWEzMTQxNDM2MzAzZWE4MTg1OWY4OWFlNDU4MTI4NmY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzngjXiPMw6q7DEnlN2KkdIR+dbRR XeKic19FaDCaLXnTYJ7p+bXgUSEuC+KY3+B2t0GiAB1/zTA/BVj5IVjrtGE8EooD Pf3Sa8XEonACAK4wA6IXrlXGgtPo8nhcle7pbWJXBtM2gYxX+dwwBMMy9ATfsXEU gtCuIXgKCnsxIJAC0nVE0vCYJnYgQp/ilUDhgAuX9BBEJDYK6M3Lg7JTvJLUBpWT oEr7ZogjgZodfg4XZQiUh2eoDmMWgNllXPgBEsa2NjrcxRAZVMnPCTfMoqqoSxKB gZ2RWZ5W+bVo8kmqxTnJXLd8p7RP3Yuq7yEsHFFMPN/UzlgwZcwRc+msRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLwGlEWjFBQ2MD6oGFn4muRYEob1MB8GA1UdIwQY MBaAFFttF48ThRMGtWNN8VlxYxn02CR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzIwWGp4T0ZFd2ExWTAzeFdYRmpHZlRZSkhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9hMWM2ZWMtYzI2MC00Y2EyLTg4N2It NGJiOTRjYmMyZTczLzEvVzIwWGp4T0ZFd2ExWTAzeFdYRmpHZlRZSkhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9hMWM2ZWMtYzI2MC00Y2EyLTg4N2ItNGJiOTRjYmMyZTcz LzEvVzIwWGp4T0ZFd2ExWTAzeFdYRmpHZlRZSkhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAopZQxNlo iqhPlXZxYy5rCeHlTOpXsqfmnoLQS1WaZjmG8ACDzpp13D25Bj8BMmWWR5V8Zck4 TzZ9oojWdm1FX5m+dD3zJsIP0U9M59sBFxIvGB3Dr0PAzT3I6QE0dqIrmI8on9Ub GXqJt+gPie3ZUwLX1o8V8hIH95rntz5MVfNSucKgls0avhvBQbRtJ+iFwtcVTHhz b3VLxKDagXiY7OWx3XZ6eBEFZeXWWdrnFCYUZBaBOQ3zxAtP6ZQKpClNw4yt5jYd lpj/OjzNvXqpEyfXgQ//tJozHBfKgdlwVbDJGBEEnWXBQIqdjwYJA1CBPPaZX3r/ jJccsDLvn9itBg== -----END CERTIFICATE-----Generated at Mon Jan 26 05:37:42 2026 by rpki-client