This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.mft File: wiEliXTujgVFYMcXb4NH1DVbmoc.mft (raw, json) Hash identifier: 6R7HL64rZZjjE8gXWKglLG4ylxuRL4YzrD0hVvc+mpQ= Subject key identifier: 07:89:43:2F:48:D0:BB:D8:5C:DA:2B:06:88:25:D8:09:54:0F:4A:60 Authority key identifier: C2:21:25:89:74:EE:8E:05:45:60:C7:17:6F:83:47:D4:35:5B:9A:87 Certificate issuer: /CN=c221258974ee8e054560c7176f8347d4355b9a87 Certificate serial: 019BF8E3C8084211FD805D28A3D15809174B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wiEliXTujgVFYMcXb4NH1DVbmoc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.mft Manifest number: 0A24 Signing time: Mon 26 Jan 2026 06:00:35 +0000 Manifest this update: Mon 26 Jan 2026 06:00:35 +0000 Manifest next update: Tue 27 Jan 2026 06:00:35 +0000 Files and hashes: 1: aw-WNjpmhXowt4HLmn9oWTfYk6A.roa (hash: /fTiwwaRSLZvsQsUTep5wCR0cEXV9emopBx2DPmAxcM=) 2: wiEliXTujgVFYMcXb4NH1DVbmoc.crl (hash: hA28n6HF1cZOVSj6Er7IInN4l2GNEIvfbRSdTFborM8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.crl rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.mft rsync://rpki.ripe.net/repository/DEFAULT/wiEliXTujgVFYMcXb4NH1DVbmoc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 06:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:e3:c8:08:42:11:fd:80:5d:28:a3:d1:58:09:17:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c221258974ee8e054560c7176f8347d4355b9a87 Validity Not Before: Jan 26 06:00:35 2026 GMT Not After : Jan 27 06:00:35 2026 GMT Subject: CN=0789432f48d0bbd85cda2b068825d809540f4a60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b3:4f:3c:91:6b:19:14:fe:39:bb:18:2f:d2: a1:8d:31:52:08:c0:f5:5f:e4:89:d9:4f:0d:f1:aa: d1:f5:4b:ca:9b:83:e7:88:94:f5:95:c8:f3:1f:53: f3:d7:6f:8c:ce:b1:9d:1c:95:d2:24:14:04:1d:2d: 72:2f:87:33:82:79:66:5f:d3:60:69:c6:12:d3:3b: 9f:df:e9:40:51:bf:bc:1b:55:57:96:e9:eb:59:07: 07:85:27:6b:22:ce:66:b1:ad:e7:bb:f9:d5:df:67: 6a:14:58:a4:34:f1:c7:13:90:a9:ac:e6:1a:86:20: 8f:d6:5c:d5:b0:80:da:33:4d:ee:a7:9f:74:80:70: 5a:54:7a:42:41:f2:6b:45:de:68:82:83:1a:6d:fe: 4f:d9:e9:22:51:9a:c3:48:34:ce:b4:80:05:81:f1: 53:0d:b3:4e:7b:c1:f7:85:fc:84:cc:d3:3c:96:6b: 07:01:71:21:09:28:6b:36:a2:cb:c3:be:59:67:dd: ef:c8:0f:04:29:eb:f5:6b:3f:1c:8d:e7:3d:bb:52: c9:37:26:e6:52:f0:cb:bd:6b:5f:1b:84:66:1b:f0: ed:ca:7c:96:34:f5:2b:b5:c0:46:8b:61:d6:cd:ba: 32:f0:bd:dd:c4:4b:ca:5e:d2:f8:82:6b:c1:c1:d9: a5:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:89:43:2F:48:D0:BB:D8:5C:DA:2B:06:88:25:D8:09:54:0F:4A:60 X509v3 Authority Key Identifier: keyid:C2:21:25:89:74:EE:8E:05:45:60:C7:17:6F:83:47:D4:35:5B:9A:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wiEliXTujgVFYMcXb4NH1DVbmoc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:b8:fc:f4:87:83:e0:8d:c9:9b:1f:79:26:ec:0e:80:c6:17: a9:01:1d:a4:dd:b9:39:fb:5d:41:2b:6b:96:e4:c5:1e:1e:e1: cb:03:fd:7b:d6:6d:42:8d:96:25:a7:87:5c:87:e3:d3:6f:16: f7:a4:2b:77:57:f2:c7:8c:8a:71:a7:de:36:d3:fe:83:6d:3a: a4:ee:04:32:52:6f:6b:47:7e:2c:e5:cc:ec:df:30:56:92:3d: 02:61:50:ce:26:fa:8f:8c:40:37:3d:7d:6d:8b:67:7e:71:0f: 55:d5:36:61:32:66:bc:04:10:e0:6b:bd:06:fe:77:75:8c:64: c5:e5:13:8d:ae:0e:36:4d:3c:da:f9:1c:26:f1:fd:3e:9c:d0: 66:15:fb:0c:3c:03:7b:ec:7e:48:fa:d8:d5:fa:02:ed:2c:11: c3:d4:04:e0:00:dd:85:27:48:24:3b:ce:8e:90:5c:0d:7b:ff: eb:4b:9f:d0:24:99:82:f5:94:35:7e:11:0e:3a:70:40:80:5d: f2:6f:3c:eb:14:e5:d2:f5:73:cb:cd:67:41:5b:1c:99:c1:33: 39:f6:e9:4f:a5:e1:15:c0:cb:98:e0:3d:93:cb:a8:7e:44:0e: bc:a5:29:15:3b:14:fd:8a:b4:cc:cb:b3:18:93:67:5c:9f:80: f2:bd:5b:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv448gIQhH9gF0oo9FYCRdLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyMjEyNTg5NzRlZThlMDU0NTYwYzcxNzZmODM0N2Q0MzU1 YjlhODcwHhcNMjYwMTI2MDYwMDM1WhcNMjYwMTI3MDYwMDM1WjAzMTEwLwYDVQQD EygwNzg5NDMyZjQ4ZDBiYmQ4NWNkYTJiMDY4ODI1ZDgwOTU0MGY0YTYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0rNPPJFrGRT+ObsYL9KhjTFSCMD1 X+SJ2U8N8arR9UvKm4PniJT1lcjzH1Pz12+MzrGdHJXSJBQEHS1yL4czgnlmX9Ng acYS0zuf3+lAUb+8G1VXlunrWQcHhSdrIs5msa3nu/nV32dqFFikNPHHE5CprOYa hiCP1lzVsIDaM03up590gHBaVHpCQfJrRd5ogoMabf5P2ekiUZrDSDTOtIAFgfFT DbNOe8H3hfyEzNM8lmsHAXEhCShrNqLLw75ZZ93vyA8EKev1az8cjec9u1LJNybm UvDLvWtfG4RmG/DtynyWNPUrtcBGi2HWzboy8L3dxEvKXtL4gmvBwdmlNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAeJQy9I0LvYXNorBogl2AlUD0pgMB8GA1UdIwQY MBaAFMIhJYl07o4FRWDHF2+DR9Q1W5qHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2lFbGlYVHVqZ1ZGWU1jWGI0TkgxRFZibW9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8wODQ4MmYtYTdjNS00NjI3LWEwNjgt MjVmNzlkMmQ4YzE3LzEvd2lFbGlYVHVqZ1ZGWU1jWGI0TkgxRFZibW9jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi8wODQ4MmYtYTdjNS00NjI3LWEwNjgtMjVmNzlkMmQ4YzE3 LzEvd2lFbGlYVHVqZ1ZGWU1jWGI0TkgxRFZibW9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt7j89IeD 4I3Jmx95JuwOgMYXqQEdpN25OftdQStrluTFHh7hywP9e9ZtQo2WJaeHXIfj028W 96Qrd1fyx4yKcafeNtP+g206pO4EMlJva0d+LOXM7N8wVpI9AmFQzib6j4xANz19 bYtnfnEPVdU2YTJmvAQQ4Gu9Bv53dYxkxeUTja4ONk082vkcJvH9PpzQZhX7DDwD e+x+SPrY1foC7SwRw9QE4ADdhSdIJDvOjpBcDXv/60uf0CSZgvWUNX4RDjpwQIBd 8m886xTl0vVzy81nQVscmcEzOfbpT6XhFcDLmOA9k8uofkQOvKUpFTsU/Yq0zMuz GJNnXJ+A8r1bZA== -----END CERTIFICATE-----Generated at Mon Jan 26 12:59:51 2026 by rpki-client