This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.mft File: WXSHRy03y9cmGB-fOiA4bwObO6g.mft (raw, json) Hash identifier: jj0+UZkcA7Wqk7NYgjqbtKk/8FMwFSXLp6+9yvQY30o= Subject key identifier: 09:33:4B:F4:6E:2A:6C:8D:DC:C5:38:52:48:D9:01:78:96:57:48:32 Authority key identifier: 59:74:87:47:2D:37:CB:D7:26:18:1F:9F:3A:20:38:6F:03:9B:3B:A8 Certificate issuer: /CN=597487472d37cbd726181f9f3a20386f039b3ba8 Certificate serial: 019BDEED8ADBB396253FCA88F332C794ADB0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXSHRy03y9cmGB-fOiA4bwObO6g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.mft Manifest number: 15AD Signing time: Wed 21 Jan 2026 05:01:08 +0000 Manifest this update: Wed 21 Jan 2026 05:01:08 +0000 Manifest next update: Thu 22 Jan 2026 05:01:08 +0000 Files and hashes: 1: 0NoPiisJbpwmvBUWEe2px9KfACQ.roa (hash: fADYU9aKvqcndQu+aoL/npU6GSJIZV+Rd4qVL1uAf08=) 2: GCkGsS1uz9XBVQQhijBaSLbxwTE.roa (hash: 0L/zbSf1D/vPMlQYoADMvJgS8Ov/BldeGq2klZOZFUA=) 3: WXSHRy03y9cmGB-fOiA4bwObO6g.crl (hash: Lg/pJzNHOm+RH4BRjR5GII9vorUTT3dbYGSFaWBPM4M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.crl rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.mft rsync://rpki.ripe.net/repository/DEFAULT/WXSHRy03y9cmGB-fOiA4bwObO6g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 05:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:de:ed:8a:db:b3:96:25:3f:ca:88:f3:32:c7:94:ad:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=597487472d37cbd726181f9f3a20386f039b3ba8 Validity Not Before: Jan 21 05:01:08 2026 GMT Not After : Jan 22 05:01:08 2026 GMT Subject: CN=09334bf46e2a6c8ddcc5385248d9017896574832 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c1:c0:a4:77:4b:e0:d7:92:b2:fc:92:22:96: 7a:37:e1:35:b8:be:c7:09:8e:f5:b1:52:05:28:bd: 39:a6:90:e6:9c:2e:96:d8:31:32:dd:04:3d:c4:a9: a2:fb:86:7c:a7:90:2a:f7:46:b9:98:de:65:0a:ee: 67:37:07:97:ab:b7:d2:12:83:5a:18:1c:38:92:68: 4d:1f:29:c9:f4:34:71:de:d1:96:d3:ab:a2:d8:26: 46:08:11:98:de:8d:bd:88:8d:75:f4:c8:a3:70:94: 19:4e:e7:17:1b:d0:50:84:b3:42:48:f9:c3:61:9d: 73:53:df:26:5e:78:62:7c:07:e3:0a:cd:e6:d6:05: 47:98:07:69:46:96:e9:91:80:91:cd:6f:14:ea:c8: 4d:92:32:73:bd:ff:d1:4a:03:4f:8e:54:34:ae:23: 5c:db:d0:a7:97:86:0a:e0:67:6c:ba:e3:df:30:f7: 4f:81:e5:2d:af:3c:e0:04:d3:18:c2:84:97:be:31: b3:73:4d:14:2a:6f:bc:27:13:7d:70:51:3a:e3:4e: a2:75:5d:81:ca:9d:4a:67:a7:24:6c:70:4a:d6:fe: d7:b2:2c:72:9d:8a:22:cf:01:07:33:d8:bd:fc:a8: ee:e0:39:18:b0:aa:65:6c:e4:09:df:e8:c6:b4:d8: 2b:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:33:4B:F4:6E:2A:6C:8D:DC:C5:38:52:48:D9:01:78:96:57:48:32 X509v3 Authority Key Identifier: keyid:59:74:87:47:2D:37:CB:D7:26:18:1F:9F:3A:20:38:6F:03:9B:3B:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXSHRy03y9cmGB-fOiA4bwObO6g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:c1:0b:6e:20:8b:21:7e:9e:0b:12:dd:a4:65:2f:f4:95:ba: ae:d3:df:54:d1:72:2a:a4:f6:b3:51:7c:ce:ba:d6:52:48:0b: 9f:43:5e:0e:e4:51:17:2c:2e:9d:58:03:3a:83:5b:6a:9e:fa: cc:21:9f:08:01:80:f6:05:b2:ef:7f:2b:38:be:ed:82:1d:86: 16:bc:7f:75:65:97:a3:f1:f9:ee:1d:91:ee:da:a8:8c:b6:7b: 2b:db:dd:80:d1:11:de:3e:e2:1f:25:69:9e:77:7a:49:cb:ed: c8:a7:30:53:23:ec:a3:66:05:09:83:25:e8:e0:48:ab:71:e9: 34:e2:78:87:5c:71:76:7a:68:2e:7a:7c:23:f5:91:01:d1:49: 34:c3:0a:e9:f1:41:5b:34:9e:b6:9a:e9:0e:45:ff:9f:5a:32: 11:22:42:19:8e:81:75:b5:d5:c4:6c:eb:34:d4:4e:ff:74:ac: 92:49:a5:b1:a4:91:76:2e:ec:44:d5:78:5e:be:c4:3c:7f:48: 6c:5a:ab:1d:57:46:6c:cc:c6:71:9c:24:f6:29:b1:3e:34:9a: 2a:73:f5:67:fa:f8:12:ef:a7:c9:af:54:e6:10:b7:38:f0:3b: c2:a6:24:86:82:af:e8:6b:ba:00:67:d3:34:c3:f3:1b:5c:14: 00:e1:20:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZve7Yrbs5YlP8qI8zLHlK2wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5NzQ4NzQ3MmQzN2NiZDcyNjE4MWY5ZjNhMjAzODZmMDM5 YjNiYTgwHhcNMjYwMTIxMDUwMTA4WhcNMjYwMTIyMDUwMTA4WjAzMTEwLwYDVQQD EygwOTMzNGJmNDZlMmE2YzhkZGNjNTM4NTI0OGQ5MDE3ODk2NTc0ODMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcHApHdL4NeSsvySIpZ6N+E1uL7H CY71sVIFKL05ppDmnC6W2DEy3QQ9xKmi+4Z8p5Aq90a5mN5lCu5nNweXq7fSEoNa GBw4kmhNHynJ9DRx3tGW06ui2CZGCBGY3o29iI119MijcJQZTucXG9BQhLNCSPnD YZ1zU98mXnhifAfjCs3m1gVHmAdpRpbpkYCRzW8U6shNkjJzvf/RSgNPjlQ0riNc 29Cnl4YK4GdsuuPfMPdPgeUtrzzgBNMYwoSXvjGzc00UKm+8JxN9cFE6406idV2B yp1KZ6ckbHBK1v7XsixynYoizwEHM9i9/Kju4DkYsKplbOQJ3+jGtNgr4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAkzS/RuKmyN3MU4UkjZAXiWV0gyMB8GA1UdIwQY MBaAFFl0h0ctN8vXJhgfnzogOG8DmzuoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1hTSFJ5MDN5OWNtR0ItZk9pQTRid09iTzZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9lYTI3ZjMtZGI3NC00OTYzLWExOGMt MDM1MjgxMjg5YmIwLzEvV1hTSFJ5MDN5OWNtR0ItZk9pQTRid09iTzZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC9lYTI3ZjMtZGI3NC00OTYzLWExOGMtMDM1MjgxMjg5YmIw LzEvV1hTSFJ5MDN5OWNtR0ItZk9pQTRid09iTzZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbsELbiCL IX6eCxLdpGUv9JW6rtPfVNFyKqT2s1F8zrrWUkgLn0NeDuRRFywunVgDOoNbap76 zCGfCAGA9gWy738rOL7tgh2GFrx/dWWXo/H57h2R7tqojLZ7K9vdgNER3j7iHyVp nnd6ScvtyKcwUyPso2YFCYMl6OBIq3HpNOJ4h1xxdnpoLnp8I/WRAdFJNMMK6fFB WzSetprpDkX/n1oyESJCGY6BdbXVxGzrNNRO/3SskkmlsaSRdi7sRNV4Xr7EPH9I bFqrHVdGbMzGcZwk9imxPjSaKnP1Z/r4Eu+nya9U5hC3OPA7wqYkhoKv6Gu6AGfT NMPzG1wUAOEgdQ== -----END CERTIFICATE-----Generated at Wed Jan 21 13:53:51 2026 by rpki-client