This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.mft File: W0Vsn395uYcZbEaEAjlqGHwVbXw.mft (raw, json) Hash identifier: ALDGJoKoRkS5RJVcGAPMl2MXiRj/b9UcdzjIiWGnkDg= Subject key identifier: 42:85:64:21:F6:BC:3C:6C:0F:A8:B4:09:DB:29:A8:5A:75:C8:F5:57 Authority key identifier: 5B:45:6C:9F:7F:79:B9:87:19:6C:46:84:02:39:6A:18:7C:15:6D:7C Certificate issuer: /CN=5b456c9f7f79b987196c468402396a187c156d7c Certificate serial: 019BFE0A83DB669DAAA5EB953C4055811D16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W0Vsn395uYcZbEaEAjlqGHwVbXw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.mft Manifest number: 17EC Signing time: Tue 27 Jan 2026 06:01:00 +0000 Manifest this update: Tue 27 Jan 2026 06:01:00 +0000 Manifest next update: Wed 28 Jan 2026 06:01:00 +0000 Files and hashes: 1: W0Vsn395uYcZbEaEAjlqGHwVbXw.crl (hash: Xe/EBWkIDT1Vgk2uN4T2G+3KkdwbDFZMZj24BFykFD0=) 2: o-kyHNKgNIUjHSBED-Es8cwoO9E.roa (hash: lOa1Oo5w8/mV1ahZL5zKke2ZPT9sWJF3NLgPW5L4ayE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.mft rsync://rpki.ripe.net/repository/DEFAULT/W0Vsn395uYcZbEaEAjlqGHwVbXw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 06:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fe:0a:83:db:66:9d:aa:a5:eb:95:3c:40:55:81:1d:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b456c9f7f79b987196c468402396a187c156d7c Validity Not Before: Jan 27 06:01:00 2026 GMT Not After : Jan 28 06:01:00 2026 GMT Subject: CN=42856421f6bc3c6c0fa8b409db29a85a75c8f557 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:dd:e3:f6:57:da:a9:e1:4e:a4:76:f2:1a:02: b9:9c:40:df:7a:78:dd:c5:be:84:70:24:bd:44:5d: 31:19:f4:cd:08:61:9d:1c:50:7b:22:c4:9e:78:05: 71:65:73:04:a1:d9:af:a6:ab:7f:d8:2c:96:95:30: 36:7f:56:8d:20:15:8e:f8:23:15:c2:cf:6d:89:91: 4a:a8:39:81:bf:fd:60:da:05:61:60:45:8a:2c:a9: 72:08:12:3b:d6:07:d1:c3:cf:e4:6c:cc:9e:ff:ef: cf:f8:77:c2:77:22:ea:11:5f:db:0c:e7:cf:01:23: af:08:d3:b0:6f:e7:9f:85:2a:08:47:b6:ab:b1:d5: 21:19:a1:5b:42:33:2e:26:b6:99:5e:4f:3f:c2:db: 3d:4f:2c:08:9d:68:60:4d:69:41:d1:57:db:e1:a2: 14:ae:d0:dd:40:cc:a6:7a:6f:57:40:46:5b:4d:a1: 74:c3:e4:57:0e:d9:32:18:e5:84:d5:f3:16:88:c8: 4a:19:99:63:c3:59:7d:61:4e:fb:75:e3:29:8c:2c: ab:31:f7:7a:e5:37:d6:00:d2:d4:0e:f9:5f:e6:e9: d9:2a:2e:d3:ce:5e:f7:d5:6b:96:d3:40:71:a7:da: 50:c7:c0:de:81:2e:b8:33:c4:13:24:91:74:1d:ce: f1:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:85:64:21:F6:BC:3C:6C:0F:A8:B4:09:DB:29:A8:5A:75:C8:F5:57 X509v3 Authority Key Identifier: keyid:5B:45:6C:9F:7F:79:B9:87:19:6C:46:84:02:39:6A:18:7C:15:6D:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W0Vsn395uYcZbEaEAjlqGHwVbXw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:cc:9f:71:44:77:82:0f:81:05:d8:b7:ec:60:68:b8:47:07: b0:ee:95:4a:7f:b7:1c:40:34:19:55:28:18:ad:b2:3b:79:e6: 60:72:fd:2e:53:b2:4b:c9:b9:33:9f:13:d4:15:6c:3e:40:22: 8f:55:23:ee:2a:2b:56:49:c7:72:30:ee:df:a1:d8:3e:01:04: 52:bf:87:06:45:7e:12:68:f3:0b:a9:90:cd:8e:e8:9b:da:97: 6a:aa:57:38:d2:cc:37:94:a3:a3:ee:94:ea:00:54:ac:fe:ab: 34:d3:fd:dd:df:c7:ec:31:17:0e:dc:62:e7:df:02:9b:fc:03: f4:3c:6f:8b:09:be:50:45:e0:6e:2f:d5:a1:82:52:6a:3f:12: f8:f8:81:0d:20:28:c1:de:25:d1:c5:cc:d2:49:ef:a2:97:7a: aa:49:71:e6:c7:e1:d8:53:24:17:4c:df:7a:8e:3d:e3:ab:1f: ad:a9:d7:2b:e5:42:c4:7b:67:ee:f6:63:91:80:c3:c6:f7:60: 39:f2:c4:73:94:df:55:1b:30:8c:d1:59:af:c2:e6:c9:e1:5e: d5:7d:27:17:7a:1c:7f:31:5b:7e:6e:75:38:0a:c9:bc:db:5a: bc:51:54:c1:dd:01:28:d3:a2:b9:a9:b0:1d:10:f8:2a:c3:52: e6:5b:04:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv+CoPbZp2qpeuVPEBVgR0WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViNDU2YzlmN2Y3OWI5ODcxOTZjNDY4NDAyMzk2YTE4N2Mx NTZkN2MwHhcNMjYwMTI3MDYwMTAwWhcNMjYwMTI4MDYwMTAwWjAzMTEwLwYDVQQD Eyg0Mjg1NjQyMWY2YmMzYzZjMGZhOGI0MDlkYjI5YTg1YTc1YzhmNTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAld3j9lfaqeFOpHbyGgK5nEDfenjd xb6EcCS9RF0xGfTNCGGdHFB7IsSeeAVxZXMEodmvpqt/2CyWlTA2f1aNIBWO+CMV ws9tiZFKqDmBv/1g2gVhYEWKLKlyCBI71gfRw8/kbMye/+/P+HfCdyLqEV/bDOfP ASOvCNOwb+efhSoIR7arsdUhGaFbQjMuJraZXk8/wts9TywInWhgTWlB0Vfb4aIU rtDdQMymem9XQEZbTaF0w+RXDtkyGOWE1fMWiMhKGZljw1l9YU77deMpjCyrMfd6 5TfWANLUDvlf5unZKi7Tzl731WuW00Bxp9pQx8DegS64M8QTJJF0Hc7xTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEKFZCH2vDxsD6i0CdspqFp1yPVXMB8GA1UdIwQY MBaAFFtFbJ9/ebmHGWxGhAI5ahh8FW18MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzBWc24zOTV1WWNaYkVhRUFqbHFHSHdWYlh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xZGVmY2EtZTEyNS00YjAwLTkyNTIt OWZlODZkZWE4NjJhLzEvVzBWc24zOTV1WWNaYkVhRUFqbHFHSHdWYlh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC8xZGVmY2EtZTEyNS00YjAwLTkyNTItOWZlODZkZWE4NjJh LzEvVzBWc24zOTV1WWNaYkVhRUFqbHFHSHdWYlh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE8yfcUR3 gg+BBdi37GBouEcHsO6VSn+3HEA0GVUoGK2yO3nmYHL9LlOyS8m5M58T1BVsPkAi j1Uj7iorVknHcjDu36HYPgEEUr+HBkV+EmjzC6mQzY7om9qXaqpXONLMN5Sjo+6U 6gBUrP6rNNP93d/H7DEXDtxi598Cm/wD9Dxviwm+UEXgbi/VoYJSaj8S+PiBDSAo wd4l0cXM0knvopd6qklx5sfh2FMkF0zfeo4946sfranXK+VCxHtn7vZjkYDDxvdg OfLEc5TfVRswjNFZr8LmyeFe1X0nF3ocfzFbfm51OArJvNtavFFUwd0BKNOiuamw HRD4KsNS5lsEJQ== -----END CERTIFICATE-----Generated at Tue Jan 27 12:44:22 2026 by rpki-client