This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.mft File: WduoTN3qQ_y-QemGsfx4E33P79c.mft (raw, json) Hash identifier: TVUQXPtKFFO8WkKyuAYJA5YGM/jv2lJaN0iISHxu9Dk= Subject key identifier: 54:10:1B:73:4E:56:0D:F3:32:1F:FA:9A:86:96:46:4F:53:97:C0:DC Authority key identifier: 59:DB:A8:4C:DD:EA:43:FC:BE:41:E9:86:B1:FC:78:13:7D:CF:EF:D7 Certificate issuer: /CN=59dba84cddea43fcbe41e986b1fc78137dcfefd7 Certificate serial: 019BFA9BF1708F02383641D5374F083EB64C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WduoTN3qQ_y-QemGsfx4E33P79c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.mft Manifest number: 05CE Signing time: Mon 26 Jan 2026 14:01:22 +0000 Manifest this update: Mon 26 Jan 2026 14:01:22 +0000 Manifest next update: Tue 27 Jan 2026 14:01:22 +0000 Files and hashes: 1: H4E910mHd3NwPMuW-dbmWi2iqHk.roa (hash: 381uzl24r+uPOKXs4s9+OH+E73WZT4iQfGrl9ztHA9M=) 2: WduoTN3qQ_y-QemGsfx4E33P79c.crl (hash: oFmnwMbskEt5suChK8zfapRAP7PoX2qaGVSKzGVIX3Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.mft rsync://rpki.ripe.net/repository/DEFAULT/WduoTN3qQ_y-QemGsfx4E33P79c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:9b:f1:70:8f:02:38:36:41:d5:37:4f:08:3e:b6:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59dba84cddea43fcbe41e986b1fc78137dcfefd7 Validity Not Before: Jan 26 14:01:22 2026 GMT Not After : Jan 27 14:01:22 2026 GMT Subject: CN=54101b734e560df3321ffa9a8696464f5397c0dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:2e:d3:4a:4b:90:41:30:39:11:de:da:d7:15: 40:38:ec:71:8f:60:4c:52:68:ab:a3:0a:6b:dc:c6: ec:f7:b6:cf:09:88:50:7f:2e:61:73:92:e0:cb:2c: 5b:fd:fc:a7:30:50:cf:ba:68:6d:6d:00:57:34:47: e2:f9:f9:eb:74:1d:e7:d6:db:70:0e:fb:cf:dc:f1: c4:4b:b2:df:3c:9b:ba:50:fc:91:2a:16:66:71:89: 05:3b:b5:83:70:c0:2f:94:2d:1c:57:c7:1b:49:b1: 3f:88:67:32:ae:d2:74:55:57:29:e0:9c:6f:4e:b1: a0:f2:82:4e:e8:d6:2a:1a:57:85:3e:a7:07:32:9e: 05:e1:b9:24:88:8b:77:ff:21:e4:1c:85:2f:3c:0e: 2a:37:0c:ee:7e:c0:e9:5f:dc:10:3a:09:eb:c8:73: c2:fa:81:2a:b2:01:73:ad:b0:c9:47:4b:ce:1c:22: 7b:23:86:04:d2:db:23:5e:d1:5c:f5:d8:b6:88:9f: 63:32:35:1d:72:4d:9e:f3:0b:9d:9b:87:0e:0a:52: bc:00:6c:a9:bd:56:df:4d:af:63:c8:d6:bd:f9:d0: 5a:f7:cb:86:0d:fb:ab:4f:8d:3a:29:59:d6:3b:df: 14:32:f1:a2:45:b7:64:42:d6:60:c4:e4:78:0c:fa: 4a:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:10:1B:73:4E:56:0D:F3:32:1F:FA:9A:86:96:46:4F:53:97:C0:DC X509v3 Authority Key Identifier: keyid:59:DB:A8:4C:DD:EA:43:FC:BE:41:E9:86:B1:FC:78:13:7D:CF:EF:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WduoTN3qQ_y-QemGsfx4E33P79c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:c6:81:ba:db:62:f3:46:e9:70:42:98:ab:2e:ef:17:0d:d7: d9:0f:bf:d7:40:7f:5f:69:a7:88:78:8e:34:98:53:8b:b7:3f: 2d:81:29:10:8a:91:38:41:01:da:be:20:42:19:e5:af:b5:89: fd:fd:05:45:a9:17:9b:7b:e9:68:cd:67:8f:94:14:a5:3e:ca: d1:be:be:a5:af:e6:5f:3f:b9:04:f5:2d:ef:41:82:6e:1e:f3: a7:81:f4:18:4d:70:8f:4a:b8:cc:ce:29:0b:94:60:c9:83:c0: e8:1c:c7:5f:c8:5f:81:98:08:31:48:bd:b7:88:3e:28:36:7d: dd:f1:10:02:68:d6:b6:e8:d7:ae:44:89:de:69:0c:51:73:c3: bc:ea:e0:9d:de:25:2b:41:d0:d1:62:ce:72:67:0e:37:35:77: 49:e3:90:a8:75:f7:cc:41:48:d4:9c:4b:5b:32:a9:e3:40:1d: 5e:fe:42:35:72:e2:5d:aa:77:2f:32:24:5a:ed:32:7a:4b:3b: 20:d3:9c:8f:93:6b:26:66:75:39:7a:f4:b2:63:9e:a9:58:76: ff:46:3e:34:f1:9c:5e:0a:c6:88:94:53:a9:86:40:c2:54:8f: ce:8a:8b:d4:65:57:10:ee:b4:c3:f4:ea:6e:84:41:4c:0e:52: c9:7f:b1:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6m/FwjwI4NkHVN08IPrZMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5ZGJhODRjZGRlYTQzZmNiZTQxZTk4NmIxZmM3ODEzN2Rj ZmVmZDcwHhcNMjYwMTI2MTQwMTIyWhcNMjYwMTI3MTQwMTIyWjAzMTEwLwYDVQQD Eyg1NDEwMWI3MzRlNTYwZGYzMzIxZmZhOWE4Njk2NDY0ZjUzOTdjMGRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxC7TSkuQQTA5Ed7a1xVAOOxxj2BM Umirowpr3Mbs97bPCYhQfy5hc5Lgyyxb/fynMFDPumhtbQBXNEfi+fnrdB3n1ttw DvvP3PHES7LfPJu6UPyRKhZmcYkFO7WDcMAvlC0cV8cbSbE/iGcyrtJ0VVcp4Jxv TrGg8oJO6NYqGleFPqcHMp4F4bkkiIt3/yHkHIUvPA4qNwzufsDpX9wQOgnryHPC +oEqsgFzrbDJR0vOHCJ7I4YE0tsjXtFc9di2iJ9jMjUdck2e8wudm4cOClK8AGyp vVbfTa9jyNa9+dBa98uGDfurT406KVnWO98UMvGiRbdkQtZgxOR4DPpKvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFQQG3NOVg3zMh/6moaWRk9Tl8DcMB8GA1UdIwQY MBaAFFnbqEzd6kP8vkHphrH8eBN9z+/XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2R1b1ROM3FRX3ktUWVtR3NmeDRFMzNQNzljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8yMDNjZDEtNTk0Yy00ZTY0LTkzMzEt MDVkMDhjZWEwMmE5LzEvV2R1b1ROM3FRX3ktUWVtR3NmeDRFMzNQNzljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS8yMDNjZDEtNTk0Yy00ZTY0LTkzMzEtMDVkMDhjZWEwMmE5 LzEvV2R1b1ROM3FRX3ktUWVtR3NmeDRFMzNQNzljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAMaButti 80bpcEKYqy7vFw3X2Q+/10B/X2mniHiONJhTi7c/LYEpEIqROEEB2r4gQhnlr7WJ /f0FRakXm3vpaM1nj5QUpT7K0b6+pa/mXz+5BPUt70GCbh7zp4H0GE1wj0q4zM4p C5RgyYPA6BzHX8hfgZgIMUi9t4g+KDZ93fEQAmjWtujXrkSJ3mkMUXPDvOrgnd4l K0HQ0WLOcmcONzV3SeOQqHX3zEFI1JxLWzKp40AdXv5CNXLiXap3LzIkWu0yeks7 INOcj5NrJmZ1OXr0smOeqVh2/0Y+NPGcXgrGiJRTqYZAwlSPzoqL1GVXEO60w/Tq boRBTA5SyX+xgg== -----END CERTIFICATE-----Generated at Mon Jan 26 22:39:31 2026 by rpki-client