This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/434f81-b98a-4fc2-bc7e-484cc528ee04/1/Wv3o2epkMYCMIEAdKHXEd-TcWSg.mft File: Wv3o2epkMYCMIEAdKHXEd-TcWSg.mft (raw, json) Hash identifier: TOphdjfnCtRUy3Osm2cEgn2k1ClAaHXKml9GoIgS1AE= Subject key identifier: E5:D0:B0:59:18:75:2B:E6:4E:70:C7:A7:63:03:BD:0F:9F:A6:DF:C1 Authority key identifier: 5A:FD:E8:D9:EA:64:31:80:8C:20:40:1D:28:75:C4:77:E4:DC:59:28 Certificate issuer: /CN=5afde8d9ea6431808c20401d2875c477e4dc5928 Certificate serial: 019BFBE4E9C37BFEBD89046CD0092A18573E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wv3o2epkMYCMIEAdKHXEd-TcWSg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/434f81-b98a-4fc2-bc7e-484cc528ee04/1/Wv3o2epkMYCMIEAdKHXEd-TcWSg.mft Manifest number: 03 Signing time: Mon 26 Jan 2026 20:00:41 +0000 Manifest this update: Mon 26 Jan 2026 20:00:41 +0000 Manifest next update: Tue 27 Jan 2026 20:00:41 +0000 Files and hashes: 1: Wv3o2epkMYCMIEAdKHXEd-TcWSg.crl (hash: ewu2Tn5dI2Enwx+zkKhAm0h7y1mnG95GvOKojORzOZo=) 2: t1-vFkCnh7mi57Y9qLg057uqJ5E.roa (hash: RWPEiX8Zv6h5QYL5UZv+eOJ31e8i3TXjuYrity9H4xM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/434f81-b98a-4fc2-bc7e-484cc528ee04/1/Wv3o2epkMYCMIEAdKHXEd-TcWSg.crl rsync://rpki.ripe.net/repository/DEFAULT/16/434f81-b98a-4fc2-bc7e-484cc528ee04/1/Wv3o2epkMYCMIEAdKHXEd-TcWSg.mft rsync://rpki.ripe.net/repository/DEFAULT/Wv3o2epkMYCMIEAdKHXEd-TcWSg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:e4:e9:c3:7b:fe:bd:89:04:6c:d0:09:2a:18:57:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5afde8d9ea6431808c20401d2875c477e4dc5928 Validity Not Before: Jan 26 20:00:41 2026 GMT Not After : Jan 27 20:00:41 2026 GMT Subject: CN=e5d0b05918752be64e70c7a76303bd0f9fa6dfc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:50:30:6d:9d:71:ee:2f:82:3a:31:2d:a6:b8: 9f:57:a8:a8:2f:9e:b9:7e:36:4c:ff:24:c6:d3:71: 67:25:3e:7d:1d:e3:c4:d4:5f:c1:c4:84:47:88:8c: cf:bb:9a:da:2a:4c:2a:f6:80:1f:13:ad:6f:dd:39: 1d:ab:f3:7e:5f:ed:fb:d9:f3:95:7c:fc:46:c3:1c: bf:3f:7c:ae:6e:aa:5d:40:10:db:0a:4a:bf:db:1a: 41:0e:51:6b:6c:3c:d6:e1:d2:24:c7:8a:7d:22:22: d3:86:8e:92:9e:a1:5b:f4:10:76:3b:0c:a2:19:9d: 01:70:c2:d5:f5:bf:df:8e:cd:d9:d5:d1:c4:31:2b: 15:58:64:ce:dd:17:0a:db:40:22:e7:37:62:84:db: c1:29:75:ac:02:84:73:48:02:6e:2c:7d:ee:41:16: 89:38:d7:17:75:9b:f8:48:a2:09:85:54:4a:fe:3a: db:4c:e3:2e:f9:f0:4a:8e:49:9a:cf:f4:3c:ae:6e: 6d:d9:6c:8e:51:02:f0:ff:5e:d4:8b:27:8f:38:8e: c9:18:a1:02:79:a7:3e:a5:9e:8b:0e:98:6a:8c:c6: d0:5f:ce:58:8e:38:78:ee:9f:08:9c:3a:d5:67:6d: 97:46:cc:26:25:1c:56:9b:dd:18:1f:35:4d:3e:2e: db:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:D0:B0:59:18:75:2B:E6:4E:70:C7:A7:63:03:BD:0F:9F:A6:DF:C1 X509v3 Authority Key Identifier: keyid:5A:FD:E8:D9:EA:64:31:80:8C:20:40:1D:28:75:C4:77:E4:DC:59:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wv3o2epkMYCMIEAdKHXEd-TcWSg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/434f81-b98a-4fc2-bc7e-484cc528ee04/1/Wv3o2epkMYCMIEAdKHXEd-TcWSg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/434f81-b98a-4fc2-bc7e-484cc528ee04/1/Wv3o2epkMYCMIEAdKHXEd-TcWSg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:1e:fc:c6:5c:b1:01:55:32:4c:b6:84:9c:85:ce:69:54:70: 04:16:ed:39:76:66:d1:9d:be:cf:ae:00:c4:ec:5f:6b:33:2b: ff:02:5f:a3:43:36:41:fb:fc:7a:91:cd:a4:67:36:84:3f:e3: 52:c1:e7:e5:09:13:c6:2e:73:3b:0f:d1:69:fc:53:6e:9c:3c: 5e:10:0c:55:3a:1c:82:ea:45:a0:9e:c6:0f:b7:9a:14:d2:9f: 8c:99:0e:4e:cb:7f:da:c4:9d:33:a1:de:20:1d:68:59:ec:80: 08:72:2d:8d:30:a9:1c:d5:35:1b:da:9a:45:48:6d:d6:68:f5: da:5c:f7:c7:a9:73:c0:7c:6c:5c:a3:da:9c:bb:37:52:38:78: 83:c4:8b:3e:d5:4e:9a:f2:6a:8a:ad:b8:a3:44:82:4b:93:bc: 96:bc:86:28:40:b8:a5:c1:74:ce:51:3d:88:f0:89:ba:e3:d3: 15:d8:e9:ce:f1:5d:55:50:c3:40:e5:ee:e0:17:df:fe:c8:9d: 40:47:e6:72:5f:20:d4:84:e1:47:4c:46:9b:cf:a4:32:70:4d: 4c:3c:d3:05:85:77:d5:07:9b:6f:8e:b5:9f:17:c7:db:d0:b2: 27:a8:4d:36:c8:9a:e2:e2:24:8d:03:65:6b:bc:1b:49:cf:c6: b5:93:25:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv75OnDe/69iQRs0AkqGFc+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhZmRlOGQ5ZWE2NDMxODA4YzIwNDAxZDI4NzVjNDc3ZTRk YzU5MjgwHhcNMjYwMTI2MjAwMDQxWhcNMjYwMTI3MjAwMDQxWjAzMTEwLwYDVQQD EyhlNWQwYjA1OTE4NzUyYmU2NGU3MGM3YTc2MzAzYmQwZjlmYTZkZmMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVAwbZ1x7i+COjEtprifV6ioL565 fjZM/yTG03FnJT59HePE1F/BxIRHiIzPu5raKkwq9oAfE61v3Tkdq/N+X+372fOV fPxGwxy/P3yubqpdQBDbCkq/2xpBDlFrbDzW4dIkx4p9IiLTho6SnqFb9BB2Owyi GZ0BcMLV9b/fjs3Z1dHEMSsVWGTO3RcK20Ai5zdihNvBKXWsAoRzSAJuLH3uQRaJ ONcXdZv4SKIJhVRK/jrbTOMu+fBKjkmaz/Q8rm5t2WyOUQLw/17UiyePOI7JGKEC eac+pZ6LDphqjMbQX85Yjjh47p8InDrVZ22XRswmJRxWm90YHzVNPi7bdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOXQsFkYdSvmTnDHp2MDvQ+fpt/BMB8GA1UdIwQY MBaAFFr96NnqZDGAjCBAHSh1xHfk3FkoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3YzbzJlcGtNWUNNSUVBZEtIWEVkLVRjV1NnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi80MzRmODEtYjk4YS00ZmMyLWJjN2Ut NDg0Y2M1MjhlZTA0LzEvV3YzbzJlcGtNWUNNSUVBZEtIWEVkLVRjV1NnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi80MzRmODEtYjk4YS00ZmMyLWJjN2UtNDg0Y2M1MjhlZTA0 LzEvV3YzbzJlcGtNWUNNSUVBZEtIWEVkLVRjV1NnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmh78xlyx AVUyTLaEnIXOaVRwBBbtOXZm0Z2+z64AxOxfazMr/wJfo0M2Qfv8epHNpGc2hD/j UsHn5QkTxi5zOw/RafxTbpw8XhAMVTocgupFoJ7GD7eaFNKfjJkOTst/2sSdM6He IB1oWeyACHItjTCpHNU1G9qaRUht1mj12lz3x6lzwHxsXKPanLs3Ujh4g8SLPtVO mvJqiq24o0SCS5O8lryGKEC4pcF0zlE9iPCJuuPTFdjpzvFdVVDDQOXu4Bff/sid QEfmcl8g1IThR0xGm8+kMnBNTDzTBYV31Qebb461nxfH29CyJ6hNNsia4uIkjQNl a7wbSc/GtZMlhA== -----END CERTIFICATE-----Generated at Mon Jan 26 22:57:26 2026 by rpki-client