This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/a40066-05ea-403e-b8e7-07cf0b33a849/1/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.mft File: wGy1ZC6H1OTgMJCEIo4p5pme0Lc.mft (raw, json) Hash identifier: virW7zconOll0pkqtzB/furoSImAMgfmgjt6evt1A+M= Subject key identifier: 30:5B:A5:5D:01:B2:1B:4A:36:E0:1D:45:C7:EB:1D:FD:9F:C1:74:9B Authority key identifier: C0:6C:B5:64:2E:87:D4:E4:E0:30:90:84:22:8E:29:E6:99:9E:D0:B7 Certificate issuer: /CN=c06cb5642e87d4e4e0309084228e29e6999ed0b7 Certificate serial: 019C040CB4B4DD61BD829BD29B0159912571 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/a40066-05ea-403e-b8e7-07cf0b33a849/1/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.mft Manifest number: 0A68 Signing time: Wed 28 Jan 2026 10:01:06 +0000 Manifest this update: Wed 28 Jan 2026 10:01:06 +0000 Manifest next update: Thu 29 Jan 2026 10:01:06 +0000 Files and hashes: 1: eQRk02-rqRsoVMzAY3_UPFAuAlo.roa (hash: 7f1oukrkE94Uqo0kLbpw4xRpMp5ggZCo2gEHz8zdJ4w=) 2: wGy1ZC6H1OTgMJCEIo4p5pme0Lc.crl (hash: E9iViUHTtOV0ZjrXZVyAm3y52Lwlz4bloeK9wCFdKpk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/a40066-05ea-403e-b8e7-07cf0b33a849/1/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/a40066-05ea-403e-b8e7-07cf0b33a849/1/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.mft rsync://rpki.ripe.net/repository/DEFAULT/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 29 Jan 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:04:0c:b4:b4:dd:61:bd:82:9b:d2:9b:01:59:91:25:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c06cb5642e87d4e4e0309084228e29e6999ed0b7 Validity Not Before: Jan 28 10:01:06 2026 GMT Not After : Jan 29 10:01:06 2026 GMT Subject: CN=305ba55d01b21b4a36e01d45c7eb1dfd9fc1749b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:00:0d:49:9d:82:b9:b0:70:e3:04:5d:ca:c5: a7:04:1c:94:af:92:b6:3f:4f:3b:72:f9:9e:23:de: 2b:13:d9:e6:77:4e:71:a6:57:dd:f2:12:af:44:50: 95:62:68:e9:a9:f6:51:79:da:f6:c1:2a:0b:6b:1a: d2:d4:c8:da:c1:f4:e2:43:4a:2a:21:6c:23:4b:d0: 97:20:1a:35:36:83:2c:2d:5e:0d:89:36:83:36:6c: 06:15:c6:0f:42:95:1a:4b:14:98:45:ac:e6:c5:0b: f7:ce:37:55:9e:ba:c3:ba:89:05:59:71:73:8d:77: 10:25:55:dc:22:c6:72:56:29:0b:e3:a7:a2:4f:ec: 56:c7:58:f9:06:de:4d:02:8b:a5:a7:b3:a2:ff:5a: e3:ed:ea:a2:e1:ab:a3:c5:48:b0:6a:d9:88:ba:53: 84:cf:90:e4:69:e6:db:36:ef:21:44:8b:5e:a5:0c: ce:7f:7f:53:17:07:b4:c2:ea:69:ad:fa:5a:13:76: be:d4:3d:26:98:58:66:3b:0d:9c:68:49:90:ba:ec: fb:8e:18:a1:e3:33:e1:75:77:60:2c:0d:99:27:b6: a3:72:26:9c:0f:32:25:67:c7:4b:91:0c:6a:95:e0: ea:35:c0:de:a8:db:e6:ac:0d:a4:62:e8:13:7f:4b: 31:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:5B:A5:5D:01:B2:1B:4A:36:E0:1D:45:C7:EB:1D:FD:9F:C1:74:9B X509v3 Authority Key Identifier: keyid:C0:6C:B5:64:2E:87:D4:E4:E0:30:90:84:22:8E:29:E6:99:9E:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a40066-05ea-403e-b8e7-07cf0b33a849/1/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a40066-05ea-403e-b8e7-07cf0b33a849/1/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:7e:3b:6f:26:ff:99:2e:07:d5:ac:34:58:7a:8b:9c:1e:9b: f4:d4:77:21:b4:38:2a:13:4d:16:00:0e:c3:8c:18:02:8e:4a: 59:0a:79:6c:af:ea:3d:44:19:b8:b8:a1:b6:19:d1:33:2a:9e: b7:f1:87:5e:97:a1:25:f6:d7:b4:b8:6a:a8:c8:b5:e9:37:d1: 2b:c3:79:71:a8:f6:5f:17:ab:c7:6d:a6:ab:7f:b5:15:40:3f: a4:5a:23:0e:c1:2d:22:64:7e:38:11:a9:5c:92:4d:a0:ca:87: 93:bd:53:8a:46:ce:37:2f:f0:1a:12:71:e9:41:d1:96:d7:a8: de:08:af:a0:af:e1:25:f6:4d:a8:3d:f8:64:2f:34:14:b5:23: 3c:5c:07:64:57:7a:3e:22:8b:92:4d:4f:59:98:14:4f:c2:a4: 74:bd:ec:b7:5b:28:f8:bd:99:39:84:e7:45:63:a7:98:6a:26: e1:19:5b:49:b7:0f:15:f0:2b:71:a8:91:97:b9:0c:af:6b:55: a5:76:f8:7d:26:77:c1:8a:18:1d:7f:ae:5d:b6:4f:da:d4:d6: 56:2f:94:48:65:f9:fa:a4:57:0f:24:48:ee:c0:b9:ca:a2:38: 4c:45:c3:a2:b5:ab:90:04:44:d0:cb:05:68:7a:03:5f:b5:84: 37:d2:61:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwEDLS03WG9gpvSmwFZkSVxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwNmNiNTY0MmU4N2Q0ZTRlMDMwOTA4NDIyOGUyOWU2OTk5 ZWQwYjcwHhcNMjYwMTI4MTAwMTA2WhcNMjYwMTI5MTAwMTA2WjAzMTEwLwYDVQQD EygzMDViYTU1ZDAxYjIxYjRhMzZlMDFkNDVjN2ViMWRmZDlmYzE3NDliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQANSZ2CubBw4wRdysWnBByUr5K2 P087cvmeI94rE9nmd05xplfd8hKvRFCVYmjpqfZRedr2wSoLaxrS1MjawfTiQ0oq IWwjS9CXIBo1NoMsLV4NiTaDNmwGFcYPQpUaSxSYRazmxQv3zjdVnrrDuokFWXFz jXcQJVXcIsZyVikL46eiT+xWx1j5Bt5NAoulp7Oi/1rj7eqi4aujxUiwatmIulOE z5DkaebbNu8hRItepQzOf39TFwe0wupprfpaE3a+1D0mmFhmOw2caEmQuuz7jhih 4zPhdXdgLA2ZJ7ajciacDzIlZ8dLkQxqleDqNcDeqNvmrA2kYugTf0sxfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDBbpV0BshtKNuAdRcfrHf2fwXSbMB8GA1UdIwQY MBaAFMBstWQuh9Tk4DCQhCKOKeaZntC3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0d5MVpDNkgxT1RnTUpDRUlvNHA1cG1lMExjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9hNDAwNjYtMDVlYS00MDNlLWI4ZTct MDdjZjBiMzNhODQ5LzEvd0d5MVpDNkgxT1RnTUpDRUlvNHA1cG1lMExjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9hNDAwNjYtMDVlYS00MDNlLWI4ZTctMDdjZjBiMzNhODQ5 LzEvd0d5MVpDNkgxT1RnTUpDRUlvNHA1cG1lMExjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsH47byb/ mS4H1aw0WHqLnB6b9NR3IbQ4KhNNFgAOw4wYAo5KWQp5bK/qPUQZuLihthnRMyqe t/GHXpehJfbXtLhqqMi16TfRK8N5caj2Xxerx22mq3+1FUA/pFojDsEtImR+OBGp XJJNoMqHk71TikbONy/wGhJx6UHRlteo3givoK/hJfZNqD34ZC80FLUjPFwHZFd6 PiKLkk1PWZgUT8KkdL3st1so+L2ZOYTnRWOnmGom4RlbSbcPFfArcaiRl7kMr2tV pXb4fSZ3wYoYHX+uXbZP2tTWVi+USGX5+qRXDyRI7sC5yqI4TEXDorWrkARE0MsF aHoDX7WEN9JhEA== -----END CERTIFICATE-----Generated at Wed Jan 28 17:54:44 2026 by rpki-client