This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/03bd39-f9e6-4e39-baff-c2941214cb96/1/WyUo3AddUec-4NCQ4dKh9c-uj_s.mft File: WyUo3AddUec-4NCQ4dKh9c-uj_s.mft (raw, json) Hash identifier: jWFlxhSixWNI9r11lLF6LhLCNe8yjM30yjG/tHtZctU= Subject key identifier: 74:B0:ED:14:6B:6C:83:93:49:00:AE:1A:B7:A9:C0:16:C0:B3:CA:4F Authority key identifier: 5B:25:28:DC:07:5D:51:E7:3E:E0:D0:90:E1:D2:A1:F5:CF:AE:8F:FB Certificate issuer: /CN=5b2528dc075d51e73ee0d090e1d2a1f5cfae8ffb Certificate serial: 019BFB4094E7F99F411D7E1D5A52DC1FAB87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WyUo3AddUec-4NCQ4dKh9c-uj_s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/03bd39-f9e6-4e39-baff-c2941214cb96/1/WyUo3AddUec-4NCQ4dKh9c-uj_s.mft Manifest number: 02F1 Signing time: Mon 26 Jan 2026 17:01:12 +0000 Manifest this update: Mon 26 Jan 2026 17:01:12 +0000 Manifest next update: Tue 27 Jan 2026 17:01:12 +0000 Files and hashes: 1: UUMyTjiCqTOJ9RxzyslUJ28NkGE.roa (hash: LT6KzYJU9uNZJmsZb9G6zfqBp9thSTQ3sJt1lTbYuNo=) 2: WyUo3AddUec-4NCQ4dKh9c-uj_s.crl (hash: x0weNaXikTYLVWyaxhSGq5IzLDQe3zlFojcJwl9GA9s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/03bd39-f9e6-4e39-baff-c2941214cb96/1/WyUo3AddUec-4NCQ4dKh9c-uj_s.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/03bd39-f9e6-4e39-baff-c2941214cb96/1/WyUo3AddUec-4NCQ4dKh9c-uj_s.mft rsync://rpki.ripe.net/repository/DEFAULT/WyUo3AddUec-4NCQ4dKh9c-uj_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 17:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:40:94:e7:f9:9f:41:1d:7e:1d:5a:52:dc:1f:ab:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b2528dc075d51e73ee0d090e1d2a1f5cfae8ffb Validity Not Before: Jan 26 17:01:12 2026 GMT Not After : Jan 27 17:01:12 2026 GMT Subject: CN=74b0ed146b6c83934900ae1ab7a9c016c0b3ca4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ca:cc:04:5d:d4:d9:38:54:b6:a6:46:cb:67: a2:d7:b8:1a:81:12:c0:60:90:a8:4b:ec:66:6e:95: 5f:ac:e0:7c:2a:35:e2:1a:a5:7a:de:69:89:7f:6b: 90:fc:cf:ab:d8:ea:fc:4b:cd:a1:92:5e:3a:bf:05: 8b:2c:e3:c3:07:f8:a0:0e:8a:d6:b2:81:1d:72:12: 90:49:5b:1c:3f:0a:3d:e5:7b:34:70:fc:3d:af:6d: 84:fb:98:b9:cc:3c:53:dd:70:64:23:5e:c0:f0:d0: e8:0b:73:0f:fb:d6:07:6f:10:12:e0:2e:be:0b:8d: 12:98:ac:d6:ea:3d:f2:93:32:5c:d0:67:de:23:dc: fa:cf:f4:27:de:06:ae:e5:1a:a3:be:7c:db:07:d6: 17:ca:d6:c6:ad:12:1c:b0:d7:9c:68:62:04:35:37: 2f:46:d6:d1:bc:31:81:eb:e8:4e:3f:9d:6f:30:32: ad:16:bf:54:4b:f3:24:32:ec:81:05:b5:24:fd:19: 04:9f:07:eb:bb:d6:a8:b1:67:a7:18:ea:5d:b1:14: d8:bb:7e:12:4c:a1:09:61:be:bb:79:64:b6:50:fc: 7c:27:c5:16:db:6d:be:88:b6:10:72:e7:3c:6f:c6: 9e:5b:63:84:04:bc:c9:f7:1f:63:94:b9:8c:54:71: 6c:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:B0:ED:14:6B:6C:83:93:49:00:AE:1A:B7:A9:C0:16:C0:B3:CA:4F X509v3 Authority Key Identifier: keyid:5B:25:28:DC:07:5D:51:E7:3E:E0:D0:90:E1:D2:A1:F5:CF:AE:8F:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WyUo3AddUec-4NCQ4dKh9c-uj_s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/03bd39-f9e6-4e39-baff-c2941214cb96/1/WyUo3AddUec-4NCQ4dKh9c-uj_s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/03bd39-f9e6-4e39-baff-c2941214cb96/1/WyUo3AddUec-4NCQ4dKh9c-uj_s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:f6:92:f0:58:eb:cd:c5:0b:07:0f:17:28:a3:d9:6a:51:e4: 0c:51:de:ac:1b:9e:e2:78:65:3a:61:70:33:6d:8f:95:c4:a3: 19:3f:39:09:9b:95:fa:aa:fd:18:c3:d9:99:47:cf:b2:3b:78: bd:5c:c3:c0:7f:57:7a:83:0c:79:7b:a8:7e:c4:65:43:ee:4d: 08:b3:de:d9:09:19:1f:7e:61:d3:da:d8:0c:2a:96:33:83:d6: 51:70:57:82:53:b1:56:65:87:0c:6e:e1:0e:38:1d:d0:78:24: a1:a3:23:0b:93:f6:12:61:40:6b:8f:63:be:03:b6:e8:08:9e: ab:af:64:56:78:3d:ab:02:58:1f:6a:92:d7:3a:ec:c7:ae:70: 28:8b:32:cd:58:e6:bc:8c:50:07:38:93:e7:35:0a:ab:1f:02: b2:aa:64:66:cb:ec:fe:03:45:b8:1c:b0:41:82:de:51:1f:3c: 88:7b:f0:2b:f6:00:8a:e4:57:44:d7:a8:f4:52:8d:a8:1f:2a: 22:11:7f:e7:c2:9e:1b:ad:fd:ea:9b:03:1a:6e:61:48:7b:6b: 22:5d:01:7c:91:a5:eb:e5:4c:b4:41:af:ca:2d:f3:e4:85:8a: 4a:e6:d9:fc:0b:7d:4d:30:70:4f:01:6f:57:ce:e6:3a:af:a0: 7b:6d:85:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7QJTn+Z9BHX4dWlLcH6uHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViMjUyOGRjMDc1ZDUxZTczZWUwZDA5MGUxZDJhMWY1Y2Zh ZThmZmIwHhcNMjYwMTI2MTcwMTEyWhcNMjYwMTI3MTcwMTEyWjAzMTEwLwYDVQQD Eyg3NGIwZWQxNDZiNmM4MzkzNDkwMGFlMWFiN2E5YzAxNmMwYjNjYTRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1srMBF3U2ThUtqZGy2ei17gagRLA YJCoS+xmbpVfrOB8KjXiGqV63mmJf2uQ/M+r2Or8S82hkl46vwWLLOPDB/igDorW soEdchKQSVscPwo95Xs0cPw9r22E+5i5zDxT3XBkI17A8NDoC3MP+9YHbxAS4C6+ C40SmKzW6j3ykzJc0GfeI9z6z/Qn3gau5RqjvnzbB9YXytbGrRIcsNecaGIENTcv RtbRvDGB6+hOP51vMDKtFr9US/MkMuyBBbUk/RkEnwfru9aosWenGOpdsRTYu34S TKEJYb67eWS2UPx8J8UW222+iLYQcuc8b8aeW2OEBLzJ9x9jlLmMVHFs/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHSw7RRrbIOTSQCuGrepwBbAs8pPMB8GA1UdIwQY MBaAFFslKNwHXVHnPuDQkOHSofXPro/7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3lVbzNBZGRVZWMtNE5DUTRkS2g5Yy11al9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8wM2JkMzktZjllNi00ZTM5LWJhZmYt YzI5NDEyMTRjYjk2LzEvV3lVbzNBZGRVZWMtNE5DUTRkS2g5Yy11al9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS8wM2JkMzktZjllNi00ZTM5LWJhZmYtYzI5NDEyMTRjYjk2 LzEvV3lVbzNBZGRVZWMtNE5DUTRkS2g5Yy11al9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuPaS8Fjr zcULBw8XKKPZalHkDFHerBue4nhlOmFwM22PlcSjGT85CZuV+qr9GMPZmUfPsjt4 vVzDwH9XeoMMeXuofsRlQ+5NCLPe2QkZH35h09rYDCqWM4PWUXBXglOxVmWHDG7h Djgd0HgkoaMjC5P2EmFAa49jvgO26Aieq69kVng9qwJYH2qS1zrsx65wKIsyzVjm vIxQBziT5zUKqx8CsqpkZsvs/gNFuBywQYLeUR88iHvwK/YAiuRXRNeo9FKNqB8q IhF/58KeG6396psDGm5hSHtrIl0BfJGl6+VMtEGvyi3z5IWKSubZ/At9TTBwTwFv V87mOq+ge22FgA== -----END CERTIFICATE-----Generated at Tue Jan 27 02:52:30 2026 by rpki-client