This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.mft File: WGFXm4dePgk9RzJblzXtv-eAn7o.mft (raw, json) Hash identifier: g6EgUH5s63nQi2lmuG1MyZfB/obkbRbcYG5xaYPUPvU= Subject key identifier: 94:C5:50:34:36:BB:4E:46:D6:EA:3D:0B:3B:20:9F:65:6D:C7:CB:E9 Authority key identifier: 58:61:57:9B:87:5E:3E:09:3D:47:32:5B:97:35:ED:BF:E7:80:9F:BA Certificate issuer: /CN=5861579b875e3e093d47325b9735edbfe7809fba Certificate serial: 019C028BA48BAD1BB70D017DCA8711AE4765 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WGFXm4dePgk9RzJblzXtv-eAn7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.mft Manifest number: 02A4 Signing time: Wed 28 Jan 2026 03:00:31 +0000 Manifest this update: Wed 28 Jan 2026 03:00:31 +0000 Manifest next update: Thu 29 Jan 2026 03:00:31 +0000 Files and hashes: 1: WGFXm4dePgk9RzJblzXtv-eAn7o.crl (hash: nwoZdjuVm2RYFaKEWdO17NC180PhuhQs6zadWUdHnB0=) 2: y1g11tYTDokd6mXm4VJ7V893n3k.roa (hash: qDs37qTd+XjJVvV0SepC+107boLsXO+bbbpglZWksdY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.crl rsync://rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.mft rsync://rpki.ripe.net/repository/DEFAULT/WGFXm4dePgk9RzJblzXtv-eAn7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 20:26:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:02:8b:a4:8b:ad:1b:b7:0d:01:7d:ca:87:11:ae:47:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5861579b875e3e093d47325b9735edbfe7809fba Validity Not Before: Jan 28 03:00:31 2026 GMT Not After : Jan 29 03:00:31 2026 GMT Subject: CN=94c5503436bb4e46d6ea3d0b3b209f656dc7cbe9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:fe:eb:9c:30:be:6c:0e:b5:92:bf:ff:7f:a5: 8d:78:6c:9f:f3:4b:e5:f0:85:63:f3:49:4b:f5:b2: 62:50:2b:f6:03:7a:37:ca:9a:f8:34:2a:68:8e:ce: cc:a2:ef:35:86:5e:0f:73:eb:66:4d:ca:2d:4a:45: 2b:44:ee:bd:a7:4f:ae:35:a3:42:f1:0c:20:f7:c6: ea:2e:f7:d2:d8:99:e8:c1:93:b6:b6:67:f4:c0:d0: c4:a7:81:47:86:14:65:fa:d4:06:d8:c4:f7:6f:38: 3a:ba:87:ce:62:42:54:53:d4:b5:9c:ef:d7:57:66: b0:dc:51:35:aa:e8:e3:c9:88:8b:53:4a:9d:b4:eb: 5a:7c:d3:f1:70:54:8c:89:e2:62:7a:08:3e:11:27: b8:cf:21:bd:46:e5:80:9b:1e:db:c6:94:d1:64:38: 4d:98:76:cd:71:35:aa:9b:03:42:58:f5:7b:e9:30: 97:77:e6:e8:84:89:d6:2e:88:d6:db:2d:08:01:6e: da:11:44:dc:c1:5f:44:bd:b0:b8:d2:5d:00:54:56: 57:b5:95:df:8c:b9:e8:43:1b:24:4b:f7:3f:dc:5c: 08:bf:42:42:bc:ab:a7:bc:09:04:71:bc:b8:c6:68: e5:14:ab:14:7e:0f:84:cd:1c:10:f6:0f:9f:a2:8a: ed:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:C5:50:34:36:BB:4E:46:D6:EA:3D:0B:3B:20:9F:65:6D:C7:CB:E9 X509v3 Authority Key Identifier: keyid:58:61:57:9B:87:5E:3E:09:3D:47:32:5B:97:35:ED:BF:E7:80:9F:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGFXm4dePgk9RzJblzXtv-eAn7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:5d:bb:7c:cd:e7:71:88:03:24:07:87:d4:db:ff:69:3a:e2: 2b:a1:29:e8:1c:b5:9e:0d:28:36:cd:82:bb:39:e6:af:e2:8f: a2:dc:28:d1:1a:6c:be:af:66:24:bc:44:68:1c:51:a7:da:03: 3e:bd:10:c7:d9:50:03:b1:5c:e4:aa:af:11:01:02:48:c1:7f: 79:66:d1:47:83:b4:31:0a:28:39:58:ad:be:ab:2e:8e:66:8a: d9:33:b6:f7:03:73:0f:50:c1:1d:55:b7:20:68:76:c0:35:f2: 8e:46:68:ba:c0:19:d8:39:29:38:be:36:19:74:d0:8c:1c:d1: 05:51:ed:cd:b7:10:74:08:46:7c:0c:84:ca:81:1b:25:2f:4e: ba:05:88:a0:5c:ba:9c:26:e2:fe:cf:ea:aa:e5:e8:38:05:ca: 17:40:e7:53:fc:76:22:6a:8b:bf:38:f6:30:f4:24:42:5f:48: e4:b4:3b:6a:57:b5:3f:ba:03:8f:10:57:15:90:46:19:ae:6a: 09:b9:60:09:b9:75:8c:be:2f:2e:04:8e:f1:45:6e:6c:17:84: 04:20:d3:45:57:fc:27:88:34:b4:ab:fe:0a:3f:2f:96:ca:b2: 69:26:ce:0b:14:eb:89:e4:4e:08:94:1e:27:f9:aa:51:72:61: 64:39:16:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwCi6SLrRu3DQF9yocRrkdlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4NjE1NzliODc1ZTNlMDkzZDQ3MzI1Yjk3MzVlZGJmZTc4 MDlmYmEwHhcNMjYwMTI4MDMwMDMxWhcNMjYwMTI5MDMwMDMxWjAzMTEwLwYDVQQD Eyg5NGM1NTAzNDM2YmI0ZTQ2ZDZlYTNkMGIzYjIwOWY2NTZkYzdjYmU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/7rnDC+bA61kr//f6WNeGyf80vl 8IVj80lL9bJiUCv2A3o3ypr4NCpojs7Mou81hl4Pc+tmTcotSkUrRO69p0+uNaNC 8Qwg98bqLvfS2JnowZO2tmf0wNDEp4FHhhRl+tQG2MT3bzg6uofOYkJUU9S1nO/X V2aw3FE1qujjyYiLU0qdtOtafNPxcFSMieJiegg+ESe4zyG9RuWAmx7bxpTRZDhN mHbNcTWqmwNCWPV76TCXd+bohInWLojW2y0IAW7aEUTcwV9EvbC40l0AVFZXtZXf jLnoQxskS/c/3FwIv0JCvKunvAkEcby4xmjlFKsUfg+EzRwQ9g+foort+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJTFUDQ2u05G1uo9Czsgn2Vtx8vpMB8GA1UdIwQY MBaAFFhhV5uHXj4JPUcyW5c17b/ngJ+6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0dGWG00ZGVQZ2s5UnpKYmx6WHR2LWVBbjdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8zN2I5YTgtNTE4Ni00M2YzLTkwNjQt ZjUzMzYzMjdiODgxLzEvV0dGWG00ZGVQZ2s5UnpKYmx6WHR2LWVBbjdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny8zN2I5YTgtNTE4Ni00M2YzLTkwNjQtZjUzMzYzMjdiODgx LzEvV0dGWG00ZGVQZ2s5UnpKYmx6WHR2LWVBbjdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIl27fM3n cYgDJAeH1Nv/aTriK6Ep6By1ng0oNs2Cuznmr+KPotwo0Rpsvq9mJLxEaBxRp9oD Pr0Qx9lQA7Fc5KqvEQECSMF/eWbRR4O0MQooOVitvqsujmaK2TO29wNzD1DBHVW3 IGh2wDXyjkZousAZ2DkpOL42GXTQjBzRBVHtzbcQdAhGfAyEyoEbJS9OugWIoFy6 nCbi/s/qquXoOAXKF0DnU/x2ImqLvzj2MPQkQl9I5LQ7ale1P7oDjxBXFZBGGa5q CblgCbl1jL4vLgSO8UVubBeEBCDTRVf8J4g0tKv+Cj8vlsqyaSbOCxTrieROCJQe J/mqUXJhZDkWaA== -----END CERTIFICATE-----Generated at Wed Jan 28 06:26:23 2026 by rpki-client