This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.mft File: WM7bpnpFtzfYrQ96eEw1DYbWcRg.mft (raw, json) Hash identifier: xhk0yK2OYM5gyVc/1uGacGadaKGwlVqTcW1VPuwl2Cw= Subject key identifier: 7D:4B:52:5D:B2:21:0D:CA:A5:E7:B6:15:3A:8D:80:CA:EC:D0:CE:79 Authority key identifier: 58:CE:DB:A6:7A:45:B7:37:D8:AD:0F:7A:78:4C:35:0D:86:D6:71:18 Certificate issuer: /CN=58cedba67a45b737d8ad0f7a784c350d86d67118 Certificate serial: 019C21E03DF60C14AE7B1E75B3498D4239F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WM7bpnpFtzfYrQ96eEw1DYbWcRg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.mft Manifest number: 0402 Signing time: Tue 03 Feb 2026 05:01:09 +0000 Manifest this update: Tue 03 Feb 2026 05:01:09 +0000 Manifest next update: Wed 04 Feb 2026 05:01:09 +0000 Files and hashes: 1: WM7bpnpFtzfYrQ96eEw1DYbWcRg.crl (hash: osxNp5BPVAKlUXbCa4uGA9EpUOi/m9hjzpeaNeCkw08=) 2: m5v93tUMRlQaxfIjzpbnrJ9Lohk.roa (hash: 1uqxOdkBAdrXDzt6+/f4JBRjuvDt70ncNU0kmF4G9OY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.mft rsync://rpki.ripe.net/repository/DEFAULT/WM7bpnpFtzfYrQ96eEw1DYbWcRg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 04 Feb 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:21:e0:3d:f6:0c:14:ae:7b:1e:75:b3:49:8d:42:39:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58cedba67a45b737d8ad0f7a784c350d86d67118 Validity Not Before: Feb 3 05:01:09 2026 GMT Not After : Feb 4 05:01:09 2026 GMT Subject: CN=7d4b525db2210dcaa5e7b6153a8d80caecd0ce79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:3e:77:57:7e:df:a3:eb:e4:bd:b6:61:26:88: 02:63:83:5e:83:02:46:7c:70:f6:a8:db:66:f8:ef: 79:66:ee:3f:5e:70:8c:11:9f:f4:9b:56:e1:7f:7c: 54:6c:8f:89:d6:a4:7d:58:02:24:f6:59:c0:e6:e0: 20:8d:22:87:aa:7b:15:60:85:61:1c:19:23:f7:2e: 44:a1:c4:54:fe:30:77:d7:1b:63:5f:18:e4:17:46: 3e:10:f0:25:94:d0:8f:15:71:18:bb:78:dd:06:9c: d6:a0:28:d0:67:4c:ba:38:cf:37:3a:24:a9:d0:8e: 16:0d:6f:5d:3b:a9:03:2c:b6:a5:7b:4c:2d:27:67: 98:2a:7b:89:1b:2b:fe:74:fc:86:90:30:6f:ec:cc: e1:e6:7e:d6:f9:a8:64:44:01:92:b7:e0:f8:38:22: ec:5a:9d:52:98:07:8a:25:86:1d:fc:31:8a:c3:7b: 15:56:21:7e:af:21:b5:f9:b8:d5:c5:c7:be:ae:0c: 38:6e:16:86:fb:af:21:cf:09:87:0d:ff:2b:16:2e: f4:4a:45:00:54:9f:82:c3:b4:2e:63:83:e2:a0:e9: e3:8c:c0:8f:0b:ad:4a:b5:72:95:77:7a:d2:e5:d3: 36:12:c6:d3:d8:7c:38:20:1a:49:5c:e0:f8:fb:36: aa:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:4B:52:5D:B2:21:0D:CA:A5:E7:B6:15:3A:8D:80:CA:EC:D0:CE:79 X509v3 Authority Key Identifier: keyid:58:CE:DB:A6:7A:45:B7:37:D8:AD:0F:7A:78:4C:35:0D:86:D6:71:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WM7bpnpFtzfYrQ96eEw1DYbWcRg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:ca:c7:f3:94:47:b5:7d:5d:46:5a:05:d0:c3:c6:75:ce:24: 94:42:67:1e:69:28:6e:7a:0f:cd:1e:c6:e7:41:80:5b:e7:59: 5d:3d:c2:ed:12:26:d8:40:fc:b3:cd:7f:cc:e1:1d:55:67:ae: e8:65:07:05:4b:d8:dc:2e:fb:d2:cd:4a:88:15:9f:fa:93:59: d8:fa:31:42:67:18:13:13:0c:95:c2:a1:7a:06:03:ec:89:7d: ef:3e:49:05:f9:6b:72:42:23:b1:2f:e7:28:63:0a:ca:85:3f: 44:7e:09:67:af:4d:0d:b1:c4:6d:d3:34:5a:ab:b5:4e:46:14: 5b:c1:17:76:21:b0:f1:82:5d:cb:35:d7:b5:ec:07:d7:49:33: cd:1d:18:48:d6:0c:65:a6:e2:8c:f3:f2:21:be:b9:9c:6a:cb: 75:1f:c1:53:78:78:5b:e0:e0:f6:78:d8:32:fb:dd:29:02:e7: e5:30:74:48:9e:3c:20:6f:cc:0e:92:bc:cd:9a:71:38:09:54: a8:af:a6:7e:e4:35:60:be:7b:56:c2:cc:51:b3:58:e7:f4:c2: d0:22:2a:01:1b:bb:e3:2f:80:4a:fe:dd:32:59:79:9f:32:88: 7d:3f:ed:ff:fd:9e:73:42:8a:fe:c2:0b:b9:b0:7f:14:e4:ec: 09:0c:9a:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwh4D32DBSuex51s0mNQjnyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4Y2VkYmE2N2E0NWI3MzdkOGFkMGY3YTc4NGMzNTBkODZk NjcxMTgwHhcNMjYwMjAzMDUwMTA5WhcNMjYwMjA0MDUwMTA5WjAzMTEwLwYDVQQD Eyg3ZDRiNTI1ZGIyMjEwZGNhYTVlN2I2MTUzYThkODBjYWVjZDBjZTc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwT53V37fo+vkvbZhJogCY4NegwJG fHD2qNtm+O95Zu4/XnCMEZ/0m1bhf3xUbI+J1qR9WAIk9lnA5uAgjSKHqnsVYIVh HBkj9y5EocRU/jB31xtjXxjkF0Y+EPAllNCPFXEYu3jdBpzWoCjQZ0y6OM83OiSp 0I4WDW9dO6kDLLale0wtJ2eYKnuJGyv+dPyGkDBv7Mzh5n7W+ahkRAGSt+D4OCLs Wp1SmAeKJYYd/DGKw3sVViF+ryG1+bjVxce+rgw4bhaG+68hzwmHDf8rFi70SkUA VJ+Cw7QuY4PioOnjjMCPC61KtXKVd3rS5dM2EsbT2Hw4IBpJXOD4+zaqzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH1LUl2yIQ3Kpee2FTqNgMrs0M55MB8GA1UdIwQY MBaAFFjO26Z6Rbc32K0PenhMNQ2G1nEYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV003YnBucEZ0emZZclE5NmVFdzFEWWJXY1JnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9lMmZiZmQtMDVmOS00OGVjLTgzNWIt NzBjNzcwYjEwODdiLzEvV003YnBucEZ0emZZclE5NmVFdzFEWWJXY1JnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9lMmZiZmQtMDVmOS00OGVjLTgzNWItNzBjNzcwYjEwODdi LzEvV003YnBucEZ0emZZclE5NmVFdzFEWWJXY1JnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo8rH85RH tX1dRloF0MPGdc4klEJnHmkobnoPzR7G50GAW+dZXT3C7RIm2ED8s81/zOEdVWeu 6GUHBUvY3C770s1KiBWf+pNZ2PoxQmcYExMMlcKhegYD7Il97z5JBflrckIjsS/n KGMKyoU/RH4JZ69NDbHEbdM0Wqu1TkYUW8EXdiGw8YJdyzXXtewH10kzzR0YSNYM ZabijPPyIb65nGrLdR/BU3h4W+Dg9njYMvvdKQLn5TB0SJ48IG/MDpK8zZpxOAlU qK+mfuQ1YL57VsLMUbNY5/TC0CIqARu74y+ASv7dMll5nzKIfT/t//2ec0KK/sIL ubB/FOTsCQyaHw== -----END CERTIFICATE-----Generated at Tue Feb 3 08:14:23 2026 by rpki-client