This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/c90d5d-ca61-4464-899a-d1205e0c0cce/1/r1MW_EqDs9A-KXX4vsJwyw9O-x0.mft File: r1MW_EqDs9A-KXX4vsJwyw9O-x0.mft (raw, json) Hash identifier: tN3wF/b2Q1WH1xdHkOyN96/FIKr8Y6uu+9KCxTFXwuQ= Subject key identifier: 44:A1:33:EA:A1:42:58:A9:D0:F2:D5:7D:6E:3B:5A:16:E2:55:7C:8B Authority key identifier: AF:53:16:FC:4A:83:B3:D0:3E:29:75:F8:BE:C2:70:CB:0F:4E:FB:1D Certificate issuer: /CN=af5316fc4a83b3d03e2975f8bec270cb0f4efb1d Certificate serial: 019BD055D9F2DFF135BEFE9F18CAAA441C48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r1MW_EqDs9A-KXX4vsJwyw9O-x0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/c90d5d-ca61-4464-899a-d1205e0c0cce/1/r1MW_EqDs9A-KXX4vsJwyw9O-x0.mft Manifest number: 08E3 Signing time: Sun 18 Jan 2026 09:00:45 +0000 Manifest this update: Sun 18 Jan 2026 09:00:45 +0000 Manifest next update: Mon 19 Jan 2026 09:00:45 +0000 Files and hashes: 1: r1MW_EqDs9A-KXX4vsJwyw9O-x0.crl (hash: IlTTJ1x4SLZz+ZdLQ2PSGTUFKN7+ZQAu/AinQjbmiUk=) 2: vOap3lF_tFCZW-DOrcwPq0UBrm0.roa (hash: sDecGEkGDmv0nje/6thzunoswSWfLrwvt0Nww3M0Lpw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/c90d5d-ca61-4464-899a-d1205e0c0cce/1/r1MW_EqDs9A-KXX4vsJwyw9O-x0.crl rsync://rpki.ripe.net/repository/DEFAULT/04/c90d5d-ca61-4464-899a-d1205e0c0cce/1/r1MW_EqDs9A-KXX4vsJwyw9O-x0.mft rsync://rpki.ripe.net/repository/DEFAULT/r1MW_EqDs9A-KXX4vsJwyw9O-x0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d0:55:d9:f2:df:f1:35:be:fe:9f:18:ca:aa:44:1c:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af5316fc4a83b3d03e2975f8bec270cb0f4efb1d Validity Not Before: Jan 18 09:00:45 2026 GMT Not After : Jan 19 09:00:45 2026 GMT Subject: CN=44a133eaa14258a9d0f2d57d6e3b5a16e2557c8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:d9:3b:0d:ae:19:2b:f3:89:42:e3:ee:2f:98: 53:91:f9:b4:ce:4b:2d:62:bf:e1:f7:7a:af:b6:f7: 7c:fe:85:c6:e5:29:51:bc:85:83:9d:2f:45:c9:da: fd:cf:77:45:a1:e0:ec:b9:74:79:55:2b:ab:de:10: 1b:84:40:fc:90:f4:83:f2:fa:7b:cb:04:01:fc:fb: 01:f0:48:c3:4f:6e:20:77:fa:ed:f6:a5:e3:c2:3c: c2:27:9b:6e:4b:3c:ad:22:94:a3:9d:01:82:c7:ca: b2:0c:82:cd:cd:dc:77:b7:83:b0:11:3f:5f:70:38: d6:0c:ae:8d:6c:d5:9e:cf:9a:f3:0c:84:46:e8:29: c2:fd:fd:e0:a1:8e:8b:e2:50:d6:52:8a:05:0f:f1: b9:f6:e0:f5:15:1e:10:bb:13:41:25:3d:29:32:77: 5b:e1:f6:c8:8d:e4:99:5f:82:9e:d6:7b:ea:1f:95: 8e:72:0f:50:1a:4c:e3:b4:c9:db:7c:a6:1b:52:f9: 17:7f:fd:e6:93:af:9d:68:ae:f4:aa:46:22:69:50: 36:3f:fd:20:1a:34:61:7f:76:8c:fe:87:1b:05:2f: e7:6a:59:f0:b9:f0:a8:d5:0c:6b:ed:d3:79:ab:66: d5:d8:15:18:91:92:a9:26:e6:1a:47:c4:e9:46:50: a5:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:A1:33:EA:A1:42:58:A9:D0:F2:D5:7D:6E:3B:5A:16:E2:55:7C:8B X509v3 Authority Key Identifier: keyid:AF:53:16:FC:4A:83:B3:D0:3E:29:75:F8:BE:C2:70:CB:0F:4E:FB:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r1MW_EqDs9A-KXX4vsJwyw9O-x0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/c90d5d-ca61-4464-899a-d1205e0c0cce/1/r1MW_EqDs9A-KXX4vsJwyw9O-x0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/c90d5d-ca61-4464-899a-d1205e0c0cce/1/r1MW_EqDs9A-KXX4vsJwyw9O-x0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:8d:cb:06:ad:c0:76:71:07:f7:ef:df:df:87:60:fa:33:31: 41:10:03:c4:31:17:0e:a5:28:1a:16:c0:23:2d:16:d5:e5:71: 2d:42:b2:4d:dd:f1:93:fc:03:b8:b7:b7:df:c1:03:2a:48:b2: 44:58:ba:d6:27:85:11:dc:18:b7:38:ad:9a:51:91:68:57:9a: db:e8:c9:2d:8a:9e:7b:3b:41:14:0f:a9:5b:ed:a7:41:7a:70: f6:11:98:c2:2b:78:11:fd:7d:36:37:89:02:f6:02:a6:f3:7c: 3b:d4:c0:1a:cf:0d:79:f7:53:c0:47:7a:e4:41:59:71:93:93: e4:6e:0a:8a:c8:c2:62:fe:bd:d2:7e:cc:a6:2d:4a:41:a3:32: 8d:f9:bf:cb:79:a4:35:1d:82:8c:a1:bf:e5:a5:88:6f:60:f5: a4:a3:48:f6:92:9b:eb:5c:9d:08:b7:17:81:20:63:c0:f1:71: 12:37:1a:d5:49:c2:68:8f:68:4f:26:87:f3:7a:c2:9e:e5:88: 0b:af:54:48:e1:c1:ab:a4:28:a7:a5:2d:ea:77:1a:a1:56:41: 73:af:e9:26:bd:f9:da:23:f7:dc:93:d1:05:be:cb:7b:1b:70: ef:ef:df:41:fd:d6:e9:85:41:b8:58:38:9d:e0:7c:52:7b:10: 8e:50:38:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvQVdny3/E1vv6fGMqqRBxIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmNTMxNmZjNGE4M2IzZDAzZTI5NzVmOGJlYzI3MGNiMGY0 ZWZiMWQwHhcNMjYwMTE4MDkwMDQ1WhcNMjYwMTE5MDkwMDQ1WjAzMTEwLwYDVQQD Eyg0NGExMzNlYWExNDI1OGE5ZDBmMmQ1N2Q2ZTNiNWExNmUyNTU3YzhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztk7Da4ZK/OJQuPuL5hTkfm0zkst Yr/h93qvtvd8/oXG5SlRvIWDnS9Fydr9z3dFoeDsuXR5VSur3hAbhED8kPSD8vp7 ywQB/PsB8EjDT24gd/rt9qXjwjzCJ5tuSzytIpSjnQGCx8qyDILNzdx3t4OwET9f cDjWDK6NbNWez5rzDIRG6CnC/f3goY6L4lDWUooFD/G59uD1FR4QuxNBJT0pMndb 4fbIjeSZX4Ke1nvqH5WOcg9QGkzjtMnbfKYbUvkXf/3mk6+daK70qkYiaVA2P/0g GjRhf3aM/ocbBS/nalnwufCo1Qxr7dN5q2bV2BUYkZKpJuYaR8TpRlCllwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEShM+qhQlip0PLVfW47WhbiVXyLMB8GA1UdIwQY MBaAFK9TFvxKg7PQPil1+L7CcMsPTvsdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjFNV19FcURzOUEtS1hYNHZzSnd5dzlPLXgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9jOTBkNWQtY2E2MS00NDY0LTg5OWEt ZDEyMDVlMGMwY2NlLzEvcjFNV19FcURzOUEtS1hYNHZzSnd5dzlPLXgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC9jOTBkNWQtY2E2MS00NDY0LTg5OWEtZDEyMDVlMGMwY2Nl LzEvcjFNV19FcURzOUEtS1hYNHZzSnd5dzlPLXgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWI3LBq3A dnEH9+/f34dg+jMxQRADxDEXDqUoGhbAIy0W1eVxLUKyTd3xk/wDuLe338EDKkiy RFi61ieFEdwYtzitmlGRaFea2+jJLYqeeztBFA+pW+2nQXpw9hGYwit4Ef19NjeJ AvYCpvN8O9TAGs8NefdTwEd65EFZcZOT5G4KisjCYv690n7Mpi1KQaMyjfm/y3mk NR2CjKG/5aWIb2D1pKNI9pKb61ydCLcXgSBjwPFxEjca1UnCaI9oTyaH83rCnuWI C69USOHBq6Qop6Ut6ncaoVZBc6/pJr352iP33JPRBb7Lextw7+/fQf3W6YVBuFg4 neB8UnsQjlA4NQ== -----END CERTIFICATE-----Generated at Sun Jan 18 12:02:12 2026 by rpki-client