This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft File: wsErUnpdH4uLzyMOthH1LxHVK78.mft (raw, json) Hash identifier: SCbFRw043i6P1TGRgNvdsgve1vhl/BGEHbVJYjKstd4= Subject key identifier: 80:8C:C4:64:3C:94:69:37:F3:EC:C2:36:81:89:F5:15:04:E2:38:37 Authority key identifier: C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF Certificate issuer: /CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf Certificate serial: 019BE0371149633262F6FB7E7BE6CD3E218C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft Manifest number: 1801 Signing time: Wed 21 Jan 2026 11:01:03 +0000 Manifest this update: Wed 21 Jan 2026 11:01:03 +0000 Manifest next update: Thu 22 Jan 2026 11:01:03 +0000 Files and hashes: 1: 36dwh5FyPDSM8op_d8ZZrdcL01I.roa (hash: zBJo+dcQ/wi/lQorq0euuor6xcPXECgrdElGmNZ5e9s=) 2: 4Pn_FSZnfZTk9VXHR1Xnv9zvlmg.roa (hash: mKYv0VX31YHL7nx+CpQZAZbAi1C5+W08W/WVV18Ybw4=) 3: 90JSn0fwHb1_0d3-vxWlsVn8IbA.roa (hash: PaDd20f6DQE+3BhC17Q6ZW6btpc5SFFSp+fJhwPjGrk=) 4: 9BAmr2KLx35b8drl5F9gPcYuYdw.roa (hash: w/pdE/i5r9Y+VqvFxP5eT7qVeUIsrUTXnO2TSv8kGNQ=) 5: BIol1pz64JNuSZqOYYIJTPdboZ8.roa (hash: vI/awSqDC9NYaoe05qr/4lKLWQF/v8Nf8QGdmY2/4NA=) 6: ClUiuok-dBUzCINnkiX4sZly5Ag.roa (hash: urR/XZRmoTAOspeQeRzy1lOvDmf/ijiLGFwHwg4/9Tc=) 7: SR83T9ubBhWNaQBPuUQwG8MKuEo.roa (hash: SnqGgko2lD1YYhMInUIHPEE5RATLmEW2tPKU54f+6+I=) 8: UY2ZebIm0cAjm1dM5vCNvMrL_uw.roa (hash: IslHM2Y+PTrY80vNpz+SCapX87BffUxZttgW9fX45CU=) 9: ncovXb4XEQfV_mayuRHAdv3BqFA.roa (hash: 8+hNoHnBsUJ5HtbS1c0hHmwE5bpYnLwcDAPL5dXL1gM=) 10: q2w1vTonQdHooI1nec7LSR2OC8s.roa (hash: aSoN9RxvYKsof/eRJUFbsL+ygJJJAZIpiFeNp7EBLxs=) 11: vo3GvTN_cPd0-PgpSpgTVWOuQrk.roa (hash: E1ryjh6YKzJvWJpa8MXwFdyEDWc/ezMMWh6if8Ig/Bk=) 12: wsErUnpdH4uLzyMOthH1LxHVK78.crl (hash: No0mepfmF58JvRNyH5QCg8K0GfUpIirZvSXti15uE2U=) 13: yW6lZji2AHmoUjTII6xnqb3cJik.roa (hash: EL72fd/wtY/P61GadCM72VcumBUghLbEXZoZVKezOQk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e0:37:11:49:63:32:62:f6:fb:7e:7b:e6:cd:3e:21:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf Validity Not Before: Jan 21 11:01:03 2026 GMT Not After : Jan 22 11:01:03 2026 GMT Subject: CN=808cc4643c946937f3ecc2368189f51504e23837 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:83:80:d2:d4:37:1e:08:d2:d9:a0:e6:16:14: 34:78:41:e9:76:3c:5b:37:50:18:6a:df:c7:a8:1d: 98:92:98:6b:24:78:c5:53:32:c1:8f:e6:b4:e8:e2: cd:a9:72:39:c3:81:4c:35:38:01:cf:af:9d:17:7e: 00:e4:94:12:54:b9:e7:85:e9:9d:77:3f:f6:0c:38: bf:26:6b:cf:e4:e3:17:85:46:4e:11:52:15:7e:13: c1:b8:06:70:05:89:6a:b2:0b:58:8d:08:f3:ca:f8: 20:87:aa:97:4d:e0:39:2f:a4:af:14:9e:47:ec:ac: a9:ce:35:b3:e7:47:af:aa:5b:b7:ae:79:8d:9d:48: 20:88:b2:a0:cb:e5:d6:30:14:d8:b0:3a:32:5a:50: 0b:19:fc:7f:f4:fd:fe:b1:c5:96:1f:c9:99:36:88: 0b:2c:21:db:9e:f0:ea:d2:90:3f:81:55:e3:1d:a0: 61:cf:cb:22:47:df:01:31:ab:b0:9d:d8:c6:e4:6b: 85:0d:0a:cb:8c:54:c4:e6:20:e5:2c:8a:01:b2:03: b1:73:0f:8f:a9:73:f5:21:ad:b6:29:20:4f:d2:71: a7:bb:25:23:65:55:93:c8:a8:72:1f:9c:da:c7:cf: 54:82:2e:43:9a:98:aa:fc:c9:64:df:9b:85:f6:c8: ea:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:8C:C4:64:3C:94:69:37:F3:EC:C2:36:81:89:F5:15:04:E2:38:37 X509v3 Authority Key Identifier: keyid:C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:f2:ab:7a:12:dd:fa:d5:d4:e4:9b:d6:d8:68:41:df:80:60: 5c:af:97:f4:c8:80:fa:47:08:2d:a8:b8:bc:65:fb:48:12:4e: 0d:8c:ea:9a:6b:eb:47:a2:c5:cb:72:6f:75:b2:3f:b7:f1:11: bd:be:25:af:49:b3:71:88:45:14:6d:3e:60:a1:3c:ce:f8:10: ac:13:ac:f2:23:18:6e:ba:a1:21:c1:f9:1b:aa:06:c9:5a:f5: 0c:85:56:e0:f3:e4:75:d1:43:80:0a:74:0d:61:18:68:1d:31: 7b:74:8b:a5:41:89:7d:63:df:53:5b:d4:8c:07:59:65:32:ec: c0:80:46:b4:8e:14:4e:e9:67:b5:2a:9c:5f:e5:ad:9e:21:51: 1e:26:10:5f:fa:14:96:04:8d:ad:64:3c:4a:16:fe:03:cc:4e: e9:02:14:47:c7:e7:a2:92:26:75:bf:19:7d:70:64:7e:a0:35: 12:0e:84:26:bf:2e:3e:ca:ff:45:38:c1:5d:43:d6:ce:6d:c7: 1d:59:da:cc:ae:7d:66:99:44:e7:ce:aa:8d:70:87:d6:20:37: 12:98:c3:ec:e4:75:3f:8a:ae:25:d3:17:da:65:cd:1b:93:2c: 1a:b4:16:ea:b2:91:d8:e6:e7:15:0e:26:e8:50:a6:38:0f:5a: 92:6c:b8:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvgNxFJYzJi9vt+e+bNPiGMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyYzEyYjUyN2E1ZDFmOGI4YmNmMjMwZWI2MTFmNTJmMTFk NTJiYmYwHhcNMjYwMTIxMTEwMTAzWhcNMjYwMTIyMTEwMTAzWjAzMTEwLwYDVQQD Eyg4MDhjYzQ2NDNjOTQ2OTM3ZjNlY2MyMzY4MTg5ZjUxNTA0ZTIzODM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtoOA0tQ3HgjS2aDmFhQ0eEHpdjxb N1AYat/HqB2YkphrJHjFUzLBj+a06OLNqXI5w4FMNTgBz6+dF34A5JQSVLnnhemd dz/2DDi/JmvP5OMXhUZOEVIVfhPBuAZwBYlqsgtYjQjzyvggh6qXTeA5L6SvFJ5H 7KypzjWz50evqlu3rnmNnUggiLKgy+XWMBTYsDoyWlALGfx/9P3+scWWH8mZNogL LCHbnvDq0pA/gVXjHaBhz8siR98BMauwndjG5GuFDQrLjFTE5iDlLIoBsgOxcw+P qXP1Ia22KSBP0nGnuyUjZVWTyKhyH5zax89Ugi5Dmpiq/Mlk35uF9sjq7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFICMxGQ8lGk38+zCNoGJ9RUE4jg3MB8GA1UdIwQY MBaAFMLBK1J6XR+Li88jDrYR9S8R1Su/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zZWJiNDYtYjlkZC00Njk1LTgxNWMt NDZlZTU3OGEwYmZlLzEvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8zZWJiNDYtYjlkZC00Njk1LTgxNWMtNDZlZTU3OGEwYmZl LzEvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFfKrehLd +tXU5JvW2GhB34BgXK+X9MiA+kcILai4vGX7SBJODYzqmmvrR6LFy3JvdbI/t/ER vb4lr0mzcYhFFG0+YKE8zvgQrBOs8iMYbrqhIcH5G6oGyVr1DIVW4PPkddFDgAp0 DWEYaB0xe3SLpUGJfWPfU1vUjAdZZTLswIBGtI4UTulntSqcX+WtniFRHiYQX/oU lgSNrWQ8Shb+A8xO6QIUR8fnopImdb8ZfXBkfqA1Eg6EJr8uPsr/RTjBXUPWzm3H HVnazK59ZplE586qjXCH1iA3EpjD7OR1P4quJdMX2mXNG5MsGrQW6rKR2ObnFQ4m 6FCmOA9akmy4Mg== -----END CERTIFICATE-----Generated at Wed Jan 21 14:44:24 2026 by rpki-client