This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/a2fd11-ff1d-4901-8b5a-cae35a871646/1/Wc_oEoYU0zJajOwYM9c7tqRpjA4.mft File: Wc_oEoYU0zJajOwYM9c7tqRpjA4.mft (raw, json) Hash identifier: dAjjHOoqbl0Ylzg9MMIki92OTbZqHJNGvAkSaGrBSWg= Subject key identifier: 07:53:F5:7D:0C:82:6E:9C:FA:FC:AB:5F:31:CA:0A:4F:AA:EB:25:F4 Authority key identifier: 59:CF:E8:12:86:14:D3:32:5A:8C:EC:18:33:D7:3B:B6:A4:69:8C:0E Certificate issuer: /CN=59cfe8128614d3325a8cec1833d73bb6a4698c0e Certificate serial: 019BF46303091C98FE93CCB73A4B0E0D9ACA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wc_oEoYU0zJajOwYM9c7tqRpjA4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/a2fd11-ff1d-4901-8b5a-cae35a871646/1/Wc_oEoYU0zJajOwYM9c7tqRpjA4.mft Manifest number: 05DD Signing time: Sun 25 Jan 2026 09:01:27 +0000 Manifest this update: Sun 25 Jan 2026 09:01:27 +0000 Manifest next update: Mon 26 Jan 2026 09:01:27 +0000 Files and hashes: 1: Wc_oEoYU0zJajOwYM9c7tqRpjA4.crl (hash: 2RZcNYd6ryVK4WiyJDedtS12DN7frhwrMMkoJzsF89A=) 2: _QT3lMVu1JStai6T69WGgwqn7ys.roa (hash: oNv+STRTc8dSmd+O/sB61KNG7rpMHLNG/eCHfujsdBY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/a2fd11-ff1d-4901-8b5a-cae35a871646/1/Wc_oEoYU0zJajOwYM9c7tqRpjA4.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/a2fd11-ff1d-4901-8b5a-cae35a871646/1/Wc_oEoYU0zJajOwYM9c7tqRpjA4.mft rsync://rpki.ripe.net/repository/DEFAULT/Wc_oEoYU0zJajOwYM9c7tqRpjA4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:63:03:09:1c:98:fe:93:cc:b7:3a:4b:0e:0d:9a:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59cfe8128614d3325a8cec1833d73bb6a4698c0e Validity Not Before: Jan 25 09:01:27 2026 GMT Not After : Jan 26 09:01:27 2026 GMT Subject: CN=0753f57d0c826e9cfafcab5f31ca0a4faaeb25f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:1a:2c:18:04:91:4f:ac:e9:d6:d8:8d:67:15: 04:15:ed:23:cf:cf:d0:0b:f3:f0:71:8d:b6:99:9d: 4a:af:f1:88:22:ce:5e:b9:bc:38:a3:71:5d:69:f3: 78:68:7f:b2:2d:6a:ce:4a:31:5f:a1:20:84:d3:22: 06:6e:28:c1:00:c8:07:69:87:69:a4:22:be:5e:5d: 7e:1a:ac:b5:48:ea:36:b6:6a:cf:4f:b3:25:13:8d: fe:28:e1:4f:f0:d3:14:16:54:f6:e1:14:05:a5:91: 7a:08:7f:f7:18:77:6c:a7:87:a7:42:34:cc:0d:7d: db:dc:0b:ce:84:ea:92:82:78:8d:6c:3d:cb:0f:80: 5c:af:13:07:a4:1b:de:13:d5:47:8f:e6:86:bc:2a: d7:2b:06:7a:e0:81:f6:ec:16:09:8e:a8:a1:97:6b: 43:ba:01:a1:cf:6a:ef:17:13:ba:c6:ca:0c:7d:a0: 22:aa:e7:cf:2e:cb:42:8a:b1:bf:17:12:db:7e:70: 75:34:60:b5:2f:da:a0:03:36:07:88:8f:4d:98:f4: 2f:00:dd:de:16:b2:e3:73:e3:99:af:fb:1b:a3:62: fb:ed:7b:ef:d2:13:48:b6:e8:25:53:12:0b:44:5d: e6:de:6b:32:62:f1:06:ca:fc:f6:50:7e:29:49:4f: 88:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:53:F5:7D:0C:82:6E:9C:FA:FC:AB:5F:31:CA:0A:4F:AA:EB:25:F4 X509v3 Authority Key Identifier: keyid:59:CF:E8:12:86:14:D3:32:5A:8C:EC:18:33:D7:3B:B6:A4:69:8C:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wc_oEoYU0zJajOwYM9c7tqRpjA4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a2fd11-ff1d-4901-8b5a-cae35a871646/1/Wc_oEoYU0zJajOwYM9c7tqRpjA4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a2fd11-ff1d-4901-8b5a-cae35a871646/1/Wc_oEoYU0zJajOwYM9c7tqRpjA4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:c4:8e:c3:35:49:bb:03:9c:c2:d0:33:67:3a:5b:15:5c:06: bd:72:c1:b1:67:a5:05:5f:4a:f9:2c:ad:42:48:30:1e:c5:60: 61:c2:c4:53:35:07:f5:7b:1e:96:73:98:a4:6d:bf:d3:98:30: c4:57:b2:8a:b0:5c:7b:6b:bb:3a:90:62:af:41:d0:ed:b3:a0: 3f:af:19:59:ad:27:49:8a:11:a7:1b:8b:78:50:b0:44:43:7b: 95:a8:6c:a7:b4:fc:14:da:34:38:14:3f:2e:96:a3:a5:a5:c3: 94:a7:ca:90:f3:2e:ee:55:0a:1b:23:73:bf:14:d2:4b:4a:f3: cf:6a:8c:d5:70:11:f2:43:21:eb:3b:c0:7b:2c:e5:bf:de:53: 5c:15:b9:ce:09:fa:bb:99:85:f8:ed:be:d1:4e:31:74:d6:07: 00:ce:97:66:9f:38:4e:1a:b9:cd:1d:4a:66:6b:bb:74:57:3d: cf:b0:6b:fa:c3:38:e0:4b:ea:c4:20:f6:53:2d:3e:8c:aa:8f: ed:b5:f3:da:c7:a7:74:65:ac:57:5f:2e:ad:93:1a:b1:94:49: e7:23:3e:98:fc:a7:1d:4f:b2:f0:50:b2:78:57:34:62:39:ee: 6d:ba:75:3c:ce:9c:89:ba:af:5a:77:4d:80:24:b5:a5:35:9a: e5:47:c1:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0YwMJHJj+k8y3OksODZrKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5Y2ZlODEyODYxNGQzMzI1YThjZWMxODMzZDczYmI2YTQ2 OThjMGUwHhcNMjYwMTI1MDkwMTI3WhcNMjYwMTI2MDkwMTI3WjAzMTEwLwYDVQQD EygwNzUzZjU3ZDBjODI2ZTljZmFmY2FiNWYzMWNhMGE0ZmFhZWIyNWY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRosGASRT6zp1tiNZxUEFe0jz8/Q C/PwcY22mZ1Kr/GIIs5eubw4o3FdafN4aH+yLWrOSjFfoSCE0yIGbijBAMgHaYdp pCK+Xl1+Gqy1SOo2tmrPT7MlE43+KOFP8NMUFlT24RQFpZF6CH/3GHdsp4enQjTM DX3b3AvOhOqSgniNbD3LD4BcrxMHpBveE9VHj+aGvCrXKwZ64IH27BYJjqihl2tD ugGhz2rvFxO6xsoMfaAiqufPLstCirG/FxLbfnB1NGC1L9qgAzYHiI9NmPQvAN3e FrLjc+OZr/sbo2L77Xvv0hNItuglUxILRF3m3msyYvEGyvz2UH4pSU+IlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAdT9X0Mgm6c+vyrXzHKCk+q6yX0MB8GA1UdIwQY MBaAFFnP6BKGFNMyWozsGDPXO7akaYwOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2Nfb0VvWVUwekphak93WU05Yzd0cVJwakE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9hMmZkMTEtZmYxZC00OTAxLThiNWEt Y2FlMzVhODcxNjQ2LzEvV2Nfb0VvWVUwekphak93WU05Yzd0cVJwakE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9hMmZkMTEtZmYxZC00OTAxLThiNWEtY2FlMzVhODcxNjQ2 LzEvV2Nfb0VvWVUwekphak93WU05Yzd0cVJwakE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAusSOwzVJ uwOcwtAzZzpbFVwGvXLBsWelBV9K+SytQkgwHsVgYcLEUzUH9XselnOYpG2/05gw xFeyirBce2u7OpBir0HQ7bOgP68ZWa0nSYoRpxuLeFCwREN7lahsp7T8FNo0OBQ/ LpajpaXDlKfKkPMu7lUKGyNzvxTSS0rzz2qM1XAR8kMh6zvAeyzlv95TXBW5zgn6 u5mF+O2+0U4xdNYHAM6XZp84Thq5zR1KZmu7dFc9z7Br+sM44EvqxCD2Uy0+jKqP 7bXz2sendGWsV18urZMasZRJ5yM+mPynHU+y8FCyeFc0Yjnubbp1PM6cibqvWndN gCS1pTWa5UfBEw== -----END CERTIFICATE-----Generated at Sun Jan 25 17:52:50 2026 by rpki-client