This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/0e93d3-e72d-45f9-8ef5-94be8d33b9d3/1/wtwaJyuq59B3NPatRjevotLRsxI.mft File: wtwaJyuq59B3NPatRjevotLRsxI.mft (raw, json) Hash identifier: J4atLFI8wHHOvJXROTvHFB1agneJBQNetvx4XSUK/ns= Subject key identifier: 3E:B4:B7:96:DD:FF:41:87:F5:F4:6F:EE:FA:6C:2C:41:F2:EC:10:FB Authority key identifier: C2:DC:1A:27:2B:AA:E7:D0:77:34:F6:AD:46:37:AF:A2:D2:D1:B3:12 Certificate issuer: /CN=c2dc1a272baae7d07734f6ad4637afa2d2d1b312 Certificate serial: 019C014293C2C5980143DED655EF10C83800 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtwaJyuq59B3NPatRjevotLRsxI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/0e93d3-e72d-45f9-8ef5-94be8d33b9d3/1/wtwaJyuq59B3NPatRjevotLRsxI.mft Manifest number: 0BDA Signing time: Tue 27 Jan 2026 21:01:06 +0000 Manifest this update: Tue 27 Jan 2026 21:01:06 +0000 Manifest next update: Wed 28 Jan 2026 21:01:06 +0000 Files and hashes: 1: 7r4lRPQc-QTSmeOcUsrSRcjkV4c.roa (hash: OocvrP+x2oNsYStihaud30OWGNdq9vGwzjAJqLEWJFg=) 2: wtwaJyuq59B3NPatRjevotLRsxI.crl (hash: OUFdWzX7YLGJcs6dHqpN7N+WSUgM1VMIfxpRIXDvFTI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/0e93d3-e72d-45f9-8ef5-94be8d33b9d3/1/wtwaJyuq59B3NPatRjevotLRsxI.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/0e93d3-e72d-45f9-8ef5-94be8d33b9d3/1/wtwaJyuq59B3NPatRjevotLRsxI.mft rsync://rpki.ripe.net/repository/DEFAULT/wtwaJyuq59B3NPatRjevotLRsxI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 20:26:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:01:42:93:c2:c5:98:01:43:de:d6:55:ef:10:c8:38:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2dc1a272baae7d07734f6ad4637afa2d2d1b312 Validity Not Before: Jan 27 21:01:06 2026 GMT Not After : Jan 28 21:01:06 2026 GMT Subject: CN=3eb4b796ddff4187f5f46feefa6c2c41f2ec10fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a9:e4:ba:8e:9b:a0:8e:d3:81:4a:ec:ff:65: d7:b8:a3:74:cb:48:fe:c8:01:66:2d:10:ec:0b:b0: 4c:50:3b:3b:da:db:4e:da:e5:88:3e:c3:e7:96:c4: b7:75:9c:21:27:d0:d5:cf:5f:bc:8d:7c:d2:67:6d: 4e:ce:1a:6f:12:bb:8b:39:6c:4c:19:06:cd:5a:43: 0e:a1:8b:0e:92:81:7a:36:72:5e:d4:23:ad:2f:0d: 11:61:fb:73:fd:3e:be:c3:a4:76:3e:68:60:ff:e3: ff:eb:f6:63:0e:eb:23:f2:6f:2e:86:24:51:b4:20: 93:e7:bb:19:da:a0:ee:51:c9:54:20:c2:4c:bc:2a: 0a:b6:99:de:59:90:f9:85:8f:5b:93:71:fd:59:6a: 53:17:ee:50:f7:72:38:ad:2c:5a:0a:6e:d9:2b:c8: 03:22:42:e1:9c:65:aa:64:9c:fe:8a:03:48:69:44: 98:17:9c:12:9a:a0:08:f2:9a:c2:4d:4a:b9:03:ad: 7f:ac:06:1f:96:b3:1a:9c:cb:b4:48:38:ab:c7:c7: ce:0b:83:cd:d2:87:8b:95:e1:c7:f2:46:32:eb:9b: be:2e:f9:9c:11:2f:b5:80:c0:4a:f6:e6:85:ab:26: 6d:35:80:71:67:d4:a6:fe:67:a6:85:c7:b4:97:fc: 4b:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:B4:B7:96:DD:FF:41:87:F5:F4:6F:EE:FA:6C:2C:41:F2:EC:10:FB X509v3 Authority Key Identifier: keyid:C2:DC:1A:27:2B:AA:E7:D0:77:34:F6:AD:46:37:AF:A2:D2:D1:B3:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtwaJyuq59B3NPatRjevotLRsxI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/0e93d3-e72d-45f9-8ef5-94be8d33b9d3/1/wtwaJyuq59B3NPatRjevotLRsxI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/0e93d3-e72d-45f9-8ef5-94be8d33b9d3/1/wtwaJyuq59B3NPatRjevotLRsxI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:15:f4:9d:40:5c:26:b8:3d:81:0c:63:f9:50:50:b4:e3:69: 5c:75:9f:31:f3:48:cd:9a:dc:9d:5c:fe:75:d0:4b:6c:cc:f6: b4:80:49:f2:3b:01:9b:8e:2f:f9:88:ba:fa:77:2a:26:7a:9d: 51:40:2d:a9:ba:d1:e6:90:12:6c:dd:f8:dd:cc:10:22:64:aa: 2e:52:be:de:06:86:ff:e6:c3:0d:73:b6:96:ea:94:f6:fe:21: 40:e5:77:9b:43:21:da:26:62:69:83:23:98:f1:30:dd:00:32: 31:f6:3b:a7:bb:ca:1f:ad:72:af:90:28:59:16:99:db:ef:5d: 0a:24:de:99:8b:cb:ca:66:69:06:2b:bf:6e:cf:22:2e:53:83: 73:4b:f5:7c:e4:1f:55:c9:7f:ba:ee:ea:32:bc:63:b6:53:96: 4e:90:92:c4:b0:d7:44:0b:fa:35:e7:31:92:41:18:df:a5:9d: 5e:61:d3:e2:ec:43:ac:11:ca:16:c3:95:ad:cb:d9:b1:da:13: bb:93:39:05:a8:13:86:34:5a:e8:a7:88:db:45:32:39:b1:28: 6a:3c:5a:ed:d6:db:b4:36:6d:8a:80:06:09:96:1a:7c:9a:ec: d4:15:c9:74:8d:3b:f2:6a:35:db:d6:7e:2b:0c:54:d3:14:62: f1:56:67:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwBQpPCxZgBQ97WVe8QyDgAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyZGMxYTI3MmJhYWU3ZDA3NzM0ZjZhZDQ2MzdhZmEyZDJk MWIzMTIwHhcNMjYwMTI3MjEwMTA2WhcNMjYwMTI4MjEwMTA2WjAzMTEwLwYDVQQD EygzZWI0Yjc5NmRkZmY0MTg3ZjVmNDZmZWVmYTZjMmM0MWYyZWMxMGZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqnkuo6boI7TgUrs/2XXuKN0y0j+ yAFmLRDsC7BMUDs72ttO2uWIPsPnlsS3dZwhJ9DVz1+8jXzSZ21OzhpvEruLOWxM GQbNWkMOoYsOkoF6NnJe1COtLw0RYftz/T6+w6R2Pmhg/+P/6/ZjDusj8m8uhiRR tCCT57sZ2qDuUclUIMJMvCoKtpneWZD5hY9bk3H9WWpTF+5Q93I4rSxaCm7ZK8gD IkLhnGWqZJz+igNIaUSYF5wSmqAI8prCTUq5A61/rAYflrManMu0SDirx8fOC4PN 0oeLleHH8kYy65u+LvmcES+1gMBK9uaFqyZtNYBxZ9Sm/memhce0l/xLVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD60t5bd/0GH9fRv7vpsLEHy7BD7MB8GA1UdIwQY MBaAFMLcGicrqufQdzT2rUY3r6LS0bMSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3R3YUp5dXE1OUIzTlBhdFJqZXZvdExSc3hJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8wZTkzZDMtZTcyZC00NWY5LThlZjUt OTRiZThkMzNiOWQzLzEvd3R3YUp5dXE1OUIzTlBhdFJqZXZvdExSc3hJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS8wZTkzZDMtZTcyZC00NWY5LThlZjUtOTRiZThkMzNiOWQz LzEvd3R3YUp5dXE1OUIzTlBhdFJqZXZvdExSc3hJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARxX0nUBc Jrg9gQxj+VBQtONpXHWfMfNIzZrcnVz+ddBLbMz2tIBJ8jsBm44v+Yi6+ncqJnqd UUAtqbrR5pASbN343cwQImSqLlK+3gaG/+bDDXO2luqU9v4hQOV3m0Mh2iZiaYMj mPEw3QAyMfY7p7vKH61yr5AoWRaZ2+9dCiTemYvLymZpBiu/bs8iLlODc0v1fOQf Vcl/uu7qMrxjtlOWTpCSxLDXRAv6NecxkkEY36WdXmHT4uxDrBHKFsOVrcvZsdoT u5M5BagThjRa6KeI20UyObEoajxa7dbbtDZtioAGCZYafJrs1BXJdI078mo129Z+ KwxU0xRi8VZnHA== -----END CERTIFICATE-----Generated at Wed Jan 28 06:24:54 2026 by rpki-client