This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.mft File: wtKsHXyezPVli4jxb2E9ez6OjHI.mft (raw, json) Hash identifier: LHCs52q9+kPm9jCicwGaFdrV0O1GORPyjd9Zg4Iyef4= Subject key identifier: 95:2D:97:F8:5E:43:88:27:52:53:DD:AA:19:C5:A4:27:0B:73:DE:F1 Authority key identifier: C2:D2:AC:1D:7C:9E:CC:F5:65:8B:88:F1:6F:61:3D:7B:3E:8E:8C:72 Certificate issuer: /CN=c2d2ac1d7c9eccf5658b88f16f613d7b3e8e8c72 Certificate serial: 019BFA2D4A61C5505C163AD7421A734BFEB8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtKsHXyezPVli4jxb2E9ez6OjHI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.mft Manifest number: 0EC3 Signing time: Mon 26 Jan 2026 12:00:30 +0000 Manifest this update: Mon 26 Jan 2026 12:00:30 +0000 Manifest next update: Tue 27 Jan 2026 12:00:30 +0000 Files and hashes: 1: 9NEEsIaoOSxV4C68oWD-8q01-s4.roa (hash: Yeh595qgzPBaen9pZBMaBJZ2g7PUtXo9qE04VFTndRI=) 2: owXJBHpnE_pu52wzEvYbFXAGAAM.roa (hash: wFpSi4A2S+i91fC051hXq5mn24CHrss9+Y9bNRQMfGc=) 3: vyMxx-DxucftXKH_GRW_7fsKph8.roa (hash: dJp/0a1qL5xrMcZ/YvnuzbIOkNcbmVQskj9Xt5cN/Wg=) 4: wtKsHXyezPVli4jxb2E9ez6OjHI.crl (hash: hThJt+H18i22sV3gFEPazbEf4GChr72ApI7FZNKenbs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.crl rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.mft rsync://rpki.ripe.net/repository/DEFAULT/wtKsHXyezPVli4jxb2E9ez6OjHI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:2d:4a:61:c5:50:5c:16:3a:d7:42:1a:73:4b:fe:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2d2ac1d7c9eccf5658b88f16f613d7b3e8e8c72 Validity Not Before: Jan 26 12:00:30 2026 GMT Not After : Jan 27 12:00:30 2026 GMT Subject: CN=952d97f85e4388275253ddaa19c5a4270b73def1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:9b:31:63:23:40:cf:cb:6c:ac:b9:a1:cc:4a: 15:d4:1c:e4:54:a7:a7:26:d1:f0:27:04:fc:b1:69: 46:2c:7b:ca:f1:35:ce:c9:d2:f0:3e:be:6d:72:68: 2a:11:8e:73:88:94:50:24:d3:a1:93:78:be:60:57: c6:83:66:dd:c4:79:2e:bf:0b:8a:09:c8:73:0f:7e: d4:b8:02:13:c3:f0:6d:57:94:c3:7d:68:c9:eb:1a: ba:5f:72:70:7f:a3:7f:67:b9:fa:c5:f9:5a:bf:38: b4:c5:95:ea:63:da:06:34:e1:e7:95:6f:5c:a4:52: 48:0a:a6:79:a7:0d:d4:0b:4e:83:08:3d:00:23:97: fd:11:27:a2:a8:b1:40:57:2c:1b:95:f6:88:41:fb: aa:b2:09:a6:98:6e:43:17:19:1f:41:49:bc:77:2f: 79:b7:66:b3:8c:39:1f:93:ae:7f:5f:7c:32:a4:3e: 8c:69:a7:42:fb:cb:91:49:08:5d:b4:89:56:5c:7e: ee:45:ef:4d:ac:5f:9c:b9:6b:1a:7a:29:29:26:57: c1:52:7e:c1:17:4d:0a:99:ef:40:fa:9f:04:ee:1a: 2b:57:e3:17:f2:50:e1:f7:18:c1:5b:82:be:b1:59: 6d:62:1c:09:ea:5d:19:0c:f8:f1:0f:bb:61:1c:8d: 5b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:2D:97:F8:5E:43:88:27:52:53:DD:AA:19:C5:A4:27:0B:73:DE:F1 X509v3 Authority Key Identifier: keyid:C2:D2:AC:1D:7C:9E:CC:F5:65:8B:88:F1:6F:61:3D:7B:3E:8E:8C:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtKsHXyezPVli4jxb2E9ez6OjHI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:77:cd:b7:bc:00:34:f8:61:41:72:a7:ed:25:46:e9:24:94: 0b:98:d1:74:2c:48:23:18:a7:0c:7c:13:bd:1a:03:6c:04:ea: d6:05:67:3f:e6:8c:3b:33:68:d7:9e:45:9f:93:58:aa:33:6b: a3:18:85:c2:9f:ed:2b:b3:11:9e:1c:15:f3:62:ac:9d:4e:b7: 6a:e9:60:43:55:f0:29:cd:ee:ec:bf:86:d6:b3:43:25:c2:bd: 87:25:54:fb:14:da:f1:9f:95:17:a3:f8:91:a2:8d:01:b6:fd: 95:0f:ec:c1:ad:0f:09:d4:d6:66:90:3e:23:87:ed:d1:06:7a: 85:12:5c:22:15:61:41:e3:da:db:de:35:47:e0:58:b9:ff:54: de:f0:a3:0b:80:22:94:c3:8a:f5:1f:60:58:e4:40:66:a4:b5: 30:2d:d4:51:53:d4:a5:fb:7b:7e:14:e4:5e:59:b2:9b:68:8a: 1d:85:d8:3a:f9:72:e8:85:6a:1c:80:fa:b2:fa:61:3b:e2:48: f7:9d:8a:2d:b2:2a:b2:74:a3:6c:b5:32:96:c3:fc:3c:24:cc: 0c:76:c2:55:de:a3:48:c1:27:c6:06:ad:90:32:18:54:85:3d: a3:9b:ad:47:70:7d:9e:62:7a:11:1b:72:4a:50:72:5c:15:83: e6:15:61:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6LUphxVBcFjrXQhpzS/64MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyZDJhYzFkN2M5ZWNjZjU2NThiODhmMTZmNjEzZDdiM2U4 ZThjNzIwHhcNMjYwMTI2MTIwMDMwWhcNMjYwMTI3MTIwMDMwWjAzMTEwLwYDVQQD Eyg5NTJkOTdmODVlNDM4ODI3NTI1M2RkYWExOWM1YTQyNzBiNzNkZWYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5sxYyNAz8tsrLmhzEoV1BzkVKen JtHwJwT8sWlGLHvK8TXOydLwPr5tcmgqEY5ziJRQJNOhk3i+YFfGg2bdxHkuvwuK CchzD37UuAITw/BtV5TDfWjJ6xq6X3Jwf6N/Z7n6xflavzi0xZXqY9oGNOHnlW9c pFJICqZ5pw3UC06DCD0AI5f9ESeiqLFAVywblfaIQfuqsgmmmG5DFxkfQUm8dy95 t2azjDkfk65/X3wypD6MaadC+8uRSQhdtIlWXH7uRe9NrF+cuWsaeikpJlfBUn7B F00Kme9A+p8E7horV+MX8lDh9xjBW4K+sVltYhwJ6l0ZDPjxD7thHI1b9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJUtl/heQ4gnUlPdqhnFpCcLc97xMB8GA1UdIwQY MBaAFMLSrB18nsz1ZYuI8W9hPXs+joxyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3RLc0hYeWV6UFZsaTRqeGIyRTllejZPakhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC84YjFiYzItNTkyNi00YWNlLWIxNmYt MTk3ZmU4MzY1NjQzLzEvd3RLc0hYeWV6UFZsaTRqeGIyRTllejZPakhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC84YjFiYzItNTkyNi00YWNlLWIxNmYtMTk3ZmU4MzY1NjQz LzEvd3RLc0hYeWV6UFZsaTRqeGIyRTllejZPakhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbHfNt7wA NPhhQXKn7SVG6SSUC5jRdCxIIxinDHwTvRoDbATq1gVnP+aMOzNo155Fn5NYqjNr oxiFwp/tK7MRnhwV82KsnU63aulgQ1XwKc3u7L+G1rNDJcK9hyVU+xTa8Z+VF6P4 kaKNAbb9lQ/swa0PCdTWZpA+I4ft0QZ6hRJcIhVhQePa2941R+BYuf9U3vCjC4Ai lMOK9R9gWORAZqS1MC3UUVPUpft7fhTkXlmym2iKHYXYOvly6IVqHID6svphO+JI 952KLbIqsnSjbLUylsP8PCTMDHbCVd6jSMEnxgatkDIYVIU9o5utR3B9nmJ6ERty SlByXBWD5hVhnw== -----END CERTIFICATE-----Generated at Mon Jan 26 18:38:40 2026 by rpki-client