This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/b63a01-7e7b-4a5f-9683-1cd9926c5495/1/W0ShsaCcqepQ5aW9W3d737XzVls.mft File: W0ShsaCcqepQ5aW9W3d737XzVls.mft (raw, json) Hash identifier: cvCj3+spV4Qkkh/8zvcg5eNlztfr8W9oHRF2oGBmFJk= Subject key identifier: DE:50:55:A2:91:D6:0D:28:85:BB:56:95:B4:BD:7C:F4:AE:10:68:92 Authority key identifier: 5B:44:A1:B1:A0:9C:A9:EA:50:E5:A5:BD:5B:77:7B:DF:B5:F3:56:5B Certificate issuer: /CN=5b44a1b1a09ca9ea50e5a5bd5b777bdfb5f3565b Certificate serial: 019BEB95FEE3C85275EF378C95043A34C9B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W0ShsaCcqepQ5aW9W3d737XzVls.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/b63a01-7e7b-4a5f-9683-1cd9926c5495/1/W0ShsaCcqepQ5aW9W3d737XzVls.mft Manifest number: 1C Signing time: Fri 23 Jan 2026 16:00:34 +0000 Manifest this update: Fri 23 Jan 2026 16:00:34 +0000 Manifest next update: Sat 24 Jan 2026 16:00:34 +0000 Files and hashes: 1: W0ShsaCcqepQ5aW9W3d737XzVls.crl (hash: MH68+IGuEsYI84Luus7iPNFYGKs1755AhnQIm2URc5M=) 2: y7HPoPOKJt4_BEiMkLGZ9Q4eEJM.asa (hash: w9rApASglHDBpx/DYcJualDyoNDP/7m3UoJGYbB33JQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/b63a01-7e7b-4a5f-9683-1cd9926c5495/1/W0ShsaCcqepQ5aW9W3d737XzVls.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/b63a01-7e7b-4a5f-9683-1cd9926c5495/1/W0ShsaCcqepQ5aW9W3d737XzVls.mft rsync://rpki.ripe.net/repository/DEFAULT/W0ShsaCcqepQ5aW9W3d737XzVls.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:eb:95:fe:e3:c8:52:75:ef:37:8c:95:04:3a:34:c9:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b44a1b1a09ca9ea50e5a5bd5b777bdfb5f3565b Validity Not Before: Jan 23 16:00:34 2026 GMT Not After : Jan 24 16:00:34 2026 GMT Subject: CN=de5055a291d60d2885bb5695b4bd7cf4ae106892 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:93:eb:2d:39:dc:ad:a1:41:28:62:d0:a2:34: bf:bd:db:61:33:cf:fe:64:f4:eb:5a:88:d1:1c:dc: fc:9c:35:6a:81:33:c2:c5:b9:24:27:c9:56:35:ad: 60:aa:4e:04:cd:0f:6a:d3:da:06:8d:44:60:7b:9b: 9a:2a:2c:7a:03:8e:87:0f:c2:1c:a8:73:55:5e:76: ee:04:94:39:91:0e:42:da:54:8a:20:d7:3c:ca:90: bc:15:ad:71:9c:d8:36:a8:82:11:16:f6:88:51:e5: 15:82:b1:f6:ea:0e:02:14:24:1b:c0:0b:91:ff:92: 3e:9c:87:ce:3b:b6:97:8b:8d:c1:cb:a0:4a:31:2e: 11:60:11:bc:69:ff:ed:13:48:ec:4a:be:0f:bd:6f: cb:b5:77:f3:ec:6d:cf:37:d8:67:94:54:2b:66:d9: 2a:b0:4c:94:c1:65:16:b8:df:3d:5e:9b:88:ae:0d: 0a:f5:e0:10:27:41:5d:02:48:40:80:4e:4b:db:45: a2:7c:6e:d8:c3:3b:b5:b4:ff:b9:34:e1:dc:42:f1: 20:2c:5c:e7:82:32:7c:1c:78:70:38:dd:fa:7c:e5: 30:58:97:e5:b8:bf:a5:5e:e0:ef:30:fd:9a:63:bf: a2:f3:28:70:44:9a:c6:2f:d8:3b:b8:54:7a:80:3a: 6b:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:50:55:A2:91:D6:0D:28:85:BB:56:95:B4:BD:7C:F4:AE:10:68:92 X509v3 Authority Key Identifier: keyid:5B:44:A1:B1:A0:9C:A9:EA:50:E5:A5:BD:5B:77:7B:DF:B5:F3:56:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W0ShsaCcqepQ5aW9W3d737XzVls.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b63a01-7e7b-4a5f-9683-1cd9926c5495/1/W0ShsaCcqepQ5aW9W3d737XzVls.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b63a01-7e7b-4a5f-9683-1cd9926c5495/1/W0ShsaCcqepQ5aW9W3d737XzVls.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:b4:35:7f:a2:54:e2:8a:22:d0:d3:8d:43:9a:fe:62:1e:17: a7:6e:36:53:1a:38:75:bf:97:08:60:3d:9d:c6:ce:6c:8b:18: c6:fe:6d:44:bf:b1:24:a3:ea:02:83:71:e3:d6:88:93:59:b3: a7:d7:06:3a:97:58:cb:9e:1c:c6:48:18:d6:d9:ba:80:0e:ef: 0f:78:44:44:5b:5b:51:e3:49:d1:08:93:d6:3c:54:18:65:d1: 45:50:3d:84:a7:16:7f:cf:d9:cd:8e:0a:89:fa:17:ed:c5:9f: 1d:4b:c5:bf:1c:7f:fd:1d:e5:ed:30:5d:ac:ab:2d:d6:ae:0f: 9f:c6:d9:c3:c3:ac:55:a6:75:8b:b6:ff:f9:88:a1:da:f7:3e: 86:b7:18:11:f8:ac:d0:02:fd:0b:aa:55:b5:75:a7:71:77:d3: 2c:ca:0d:a8:02:cb:0a:2a:96:7c:52:13:1b:a5:f6:03:26:be: 70:30:dc:49:a7:01:f4:f5:05:bd:b3:c8:ef:aa:b6:1d:28:08: 36:a7:aa:4b:ee:f6:33:86:33:e6:7d:bf:00:f5:44:71:d0:13: 2f:b9:04:7f:92:7c:bd:bd:bf:04:3f:59:2b:51:92:5b:68:1f: 2c:a6:66:45:85:3c:a1:2b:02:95:67:a1:dd:f0:8c:85:9f:0b: 34:bb:6f:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvrlf7jyFJ17zeMlQQ6NMm5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViNDRhMWIxYTA5Y2E5ZWE1MGU1YTViZDViNzc3YmRmYjVm MzU2NWIwHhcNMjYwMTIzMTYwMDM0WhcNMjYwMTI0MTYwMDM0WjAzMTEwLwYDVQQD EyhkZTUwNTVhMjkxZDYwZDI4ODViYjU2OTViNGJkN2NmNGFlMTA2ODkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6pPrLTncraFBKGLQojS/vdthM8/+ ZPTrWojRHNz8nDVqgTPCxbkkJ8lWNa1gqk4EzQ9q09oGjURge5uaKix6A46HD8Ic qHNVXnbuBJQ5kQ5C2lSKINc8ypC8Fa1xnNg2qIIRFvaIUeUVgrH26g4CFCQbwAuR /5I+nIfOO7aXi43By6BKMS4RYBG8af/tE0jsSr4PvW/LtXfz7G3PN9hnlFQrZtkq sEyUwWUWuN89XpuIrg0K9eAQJ0FdAkhAgE5L20WifG7Ywzu1tP+5NOHcQvEgLFzn gjJ8HHhwON36fOUwWJfluL+lXuDvMP2aY7+i8yhwRJrGL9g7uFR6gDprrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN5QVaKR1g0ohbtWlbS9fPSuEGiSMB8GA1UdIwQY MBaAFFtEobGgnKnqUOWlvVt3e9+181ZbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzBTaHNhQ2NxZXBRNWFXOVczZDczN1h6VmxzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9iNjNhMDEtN2U3Yi00YTVmLTk2ODMt MWNkOTkyNmM1NDk1LzEvVzBTaHNhQ2NxZXBRNWFXOVczZDczN1h6VmxzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9iNjNhMDEtN2U3Yi00YTVmLTk2ODMtMWNkOTkyNmM1NDk1 LzEvVzBTaHNhQ2NxZXBRNWFXOVczZDczN1h6VmxzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqrQ1f6JU 4ooi0NONQ5r+Yh4Xp242Uxo4db+XCGA9ncbObIsYxv5tRL+xJKPqAoNx49aIk1mz p9cGOpdYy54cxkgY1tm6gA7vD3hERFtbUeNJ0QiT1jxUGGXRRVA9hKcWf8/ZzY4K ifoX7cWfHUvFvxx//R3l7TBdrKst1q4Pn8bZw8OsVaZ1i7b/+Yih2vc+hrcYEfis 0AL9C6pVtXWncXfTLMoNqALLCiqWfFITG6X2Aya+cDDcSacB9PUFvbPI76q2HSgI NqeqS+72M4Yz5n2/APVEcdATL7kEf5J8vb2/BD9ZK1GSW2gfLKZmRYU8oSsClWeh 3fCMhZ8LNLtv2A== -----END CERTIFICATE-----Generated at Fri Jan 23 18:51:41 2026 by rpki-client