This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/9a97f0-50b6-4844-89d4-23a276a428ab/1/w98u83AH1U-Gu6J1c9M61pXJ7lw.mft File: w98u83AH1U-Gu6J1c9M61pXJ7lw.mft (raw, json) Hash identifier: 5YoIqo2z9nxJtRUcn4aloYgawwOjKT66HH+KMOagHvQ= Subject key identifier: 3E:FC:17:D6:25:D4:EE:2E:01:5F:93:E8:54:48:4C:D5:97:24:93:15 Authority key identifier: C3:DF:2E:F3:70:07:D5:4F:86:BB:A2:75:73:D3:3A:D6:95:C9:EE:5C Certificate issuer: /CN=c3df2ef37007d54f86bba27573d33ad695c9ee5c Certificate serial: 019BFD65FBE529D8001E9448CDD4B4C3EA07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w98u83AH1U-Gu6J1c9M61pXJ7lw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/9a97f0-50b6-4844-89d4-23a276a428ab/1/w98u83AH1U-Gu6J1c9M61pXJ7lw.mft Manifest number: 0C9D Signing time: Tue 27 Jan 2026 03:01:17 +0000 Manifest this update: Tue 27 Jan 2026 03:01:17 +0000 Manifest next update: Wed 28 Jan 2026 03:01:17 +0000 Files and hashes: 1: 9jeDYK_knLWdWNHtP5D0cVO31qY.roa (hash: 6Wo1Gq7cJQHP7npXhJpTMr2r87iqorsL+3UpSfgjQL8=) 2: w98u83AH1U-Gu6J1c9M61pXJ7lw.crl (hash: +nqtGBnvf49nC+tK4YhmggmjWAL+A95FdYyAYfB3U9o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/9a97f0-50b6-4844-89d4-23a276a428ab/1/w98u83AH1U-Gu6J1c9M61pXJ7lw.crl rsync://rpki.ripe.net/repository/DEFAULT/52/9a97f0-50b6-4844-89d4-23a276a428ab/1/w98u83AH1U-Gu6J1c9M61pXJ7lw.mft rsync://rpki.ripe.net/repository/DEFAULT/w98u83AH1U-Gu6J1c9M61pXJ7lw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fd:65:fb:e5:29:d8:00:1e:94:48:cd:d4:b4:c3:ea:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3df2ef37007d54f86bba27573d33ad695c9ee5c Validity Not Before: Jan 27 03:01:17 2026 GMT Not After : Jan 28 03:01:17 2026 GMT Subject: CN=3efc17d625d4ee2e015f93e854484cd597249315 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:54:4d:32:81:0b:22:63:37:24:1d:b7:43:05: 9e:d8:10:2b:ce:8e:7b:3e:12:87:68:12:7c:4b:68: 42:2a:2b:02:38:86:21:ac:55:a7:3a:cd:c1:82:1f: c9:41:1d:c1:4d:88:c8:cf:e2:eb:6c:52:b2:8c:fb: 11:f1:ec:0f:27:60:a8:05:f9:b6:b1:a1:1c:7f:b0: 5d:4d:92:97:52:77:bc:2e:88:a6:f0:9e:44:2a:ee: 60:53:2c:25:b0:3a:88:e4:a7:f2:52:3e:b5:e9:52: 90:4d:d2:a1:a6:28:2e:f1:20:f4:5c:e6:ed:9c:cc: 3b:2b:5b:80:71:9b:bd:21:3c:b2:9e:43:dd:b8:b5: 2f:e1:e9:62:7b:5d:12:8b:5d:22:fb:5f:c9:b0:62: 46:ba:ca:de:6c:31:81:ad:90:fb:12:e2:28:74:53: da:88:bc:cc:10:ba:a1:74:e4:5a:db:55:37:14:09: d2:88:f5:f9:c1:65:fe:a1:9c:76:c2:3a:4b:04:24: e3:c4:8b:6e:68:1a:fc:54:6c:69:a4:49:36:dc:45: f3:65:14:ac:62:82:15:33:57:55:82:f1:75:c0:04: c2:1f:ea:65:d5:f8:8f:08:66:5c:0c:ae:05:5f:f4: 1d:f5:89:77:19:9c:87:7c:b6:95:89:d7:65:df:dc: ae:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:FC:17:D6:25:D4:EE:2E:01:5F:93:E8:54:48:4C:D5:97:24:93:15 X509v3 Authority Key Identifier: keyid:C3:DF:2E:F3:70:07:D5:4F:86:BB:A2:75:73:D3:3A:D6:95:C9:EE:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w98u83AH1U-Gu6J1c9M61pXJ7lw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/9a97f0-50b6-4844-89d4-23a276a428ab/1/w98u83AH1U-Gu6J1c9M61pXJ7lw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/9a97f0-50b6-4844-89d4-23a276a428ab/1/w98u83AH1U-Gu6J1c9M61pXJ7lw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:ff:99:2c:b3:0f:45:63:43:5e:c0:72:80:75:b5:17:ee:4a: ea:7e:a2:00:da:19:a6:74:07:e0:1a:0c:ae:a6:f4:83:f7:2a: be:78:f6:f5:b1:d7:da:11:54:6d:8e:84:0b:5a:83:27:16:bc: 97:95:ff:be:c4:5a:a4:b2:80:2d:6c:99:6f:bf:07:0d:42:59: c7:10:2f:df:7d:c4:9f:02:8f:7d:4e:4d:8a:16:84:d9:45:26: 30:d2:fe:ff:47:e5:6c:51:fd:27:c3:8e:24:61:9c:ca:ce:50: 10:08:0a:7c:89:b8:5c:df:dc:44:0e:3b:33:e7:6d:aa:5b:5a: 68:4b:d2:0b:d9:09:d0:ca:27:b7:b0:1d:94:87:d8:56:32:70: 0e:5e:90:31:a7:1a:38:dc:95:58:02:b8:83:c0:b6:f0:68:c2: 21:52:98:1b:31:6d:07:0d:b5:e0:2f:80:66:47:60:68:f2:02: 43:15:7e:c0:08:7e:86:8f:b4:8b:07:2f:45:c6:5d:ab:c6:ed: 51:65:90:27:4f:43:e4:d7:c6:75:a2:56:0d:06:dc:0d:32:f2: 5e:cb:a7:f2:93:01:d9:e2:50:84:b0:3c:0e:db:2c:81:31:1b: b8:c1:19:0b:b0:2e:13:75:16:b7:40:96:c5:f6:c0:b4:3f:f0: dd:71:a6:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv9ZfvlKdgAHpRIzdS0w+oHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzZGYyZWYzNzAwN2Q1NGY4NmJiYTI3NTczZDMzYWQ2OTVj OWVlNWMwHhcNMjYwMTI3MDMwMTE3WhcNMjYwMTI4MDMwMTE3WjAzMTEwLwYDVQQD EygzZWZjMTdkNjI1ZDRlZTJlMDE1ZjkzZTg1NDQ4NGNkNTk3MjQ5MzE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlRNMoELImM3JB23QwWe2BArzo57 PhKHaBJ8S2hCKisCOIYhrFWnOs3Bgh/JQR3BTYjIz+LrbFKyjPsR8ewPJ2CoBfm2 saEcf7BdTZKXUne8Loim8J5EKu5gUywlsDqI5KfyUj616VKQTdKhpigu8SD0XObt nMw7K1uAcZu9ITyynkPduLUv4elie10Si10i+1/JsGJGusrebDGBrZD7EuIodFPa iLzMELqhdORa21U3FAnSiPX5wWX+oZx2wjpLBCTjxItuaBr8VGxppEk23EXzZRSs YoIVM1dVgvF1wATCH+pl1fiPCGZcDK4FX/Qd9Yl3GZyHfLaViddl39yuZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD78F9Yl1O4uAV+T6FRITNWXJJMVMB8GA1UdIwQY MBaAFMPfLvNwB9VPhruidXPTOtaVye5cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzk4dTgzQUgxVS1HdTZKMWM5TTYxcFhKN2x3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi85YTk3ZjAtNTBiNi00ODQ0LTg5ZDQt MjNhMjc2YTQyOGFiLzEvdzk4dTgzQUgxVS1HdTZKMWM5TTYxcFhKN2x3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi85YTk3ZjAtNTBiNi00ODQ0LTg5ZDQtMjNhMjc2YTQyOGFi LzEvdzk4dTgzQUgxVS1HdTZKMWM5TTYxcFhKN2x3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVP+ZLLMP RWNDXsBygHW1F+5K6n6iANoZpnQH4BoMrqb0g/cqvnj29bHX2hFUbY6EC1qDJxa8 l5X/vsRapLKALWyZb78HDUJZxxAv333EnwKPfU5NihaE2UUmMNL+/0flbFH9J8OO JGGcys5QEAgKfIm4XN/cRA47M+dtqltaaEvSC9kJ0Mont7AdlIfYVjJwDl6QMaca ONyVWAK4g8C28GjCIVKYGzFtBw214C+AZkdgaPICQxV+wAh+ho+0iwcvRcZdq8bt UWWQJ09D5NfGdaJWDQbcDTLyXsun8pMB2eJQhLA8DtssgTEbuMEZC7AuE3UWt0CW xfbAtD/w3XGmOw== -----END CERTIFICATE-----Generated at Tue Jan 27 06:09:15 2026 by rpki-client