This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.mft File: WYd3IMAUaISU6mkQyDR03hPpmAI.mft (raw, json) Hash identifier: l8wE47IeApOOIy9oKI75I5Z9rqmjw05D+GN5l5Z0sPs= Subject key identifier: 34:20:D5:1E:B5:2E:00:BD:6C:D1:8C:C9:52:4B:58:31:C4:58:02:4F Authority key identifier: 59:87:77:20:C0:14:68:84:94:EA:69:10:C8:34:74:DE:13:E9:98:02 Certificate issuer: /CN=59877720c014688494ea6910c83474de13e99802 Certificate serial: 019BD76ADB63FF1869C42797360B8FD53EBE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WYd3IMAUaISU6mkQyDR03hPpmAI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.mft Manifest number: 1239 Signing time: Mon 19 Jan 2026 18:01:02 +0000 Manifest this update: Mon 19 Jan 2026 18:01:02 +0000 Manifest next update: Tue 20 Jan 2026 18:01:02 +0000 Files and hashes: 1: 5_NsVpM8FaeSqhKOf8w72GF6QhI.roa (hash: 2zny0xGyvTx1/9rtQ7mwoKTteA97Jpuq2EaV8f4cXH4=) 2: WYd3IMAUaISU6mkQyDR03hPpmAI.crl (hash: VazB/q5tB9o3Gr5/YzGugXY7+ouzHS2L+yO9FvnX6nc=) 3: n-BI18OVOCYVCWmvlFdBExaokcM.roa (hash: H/oid2beJi/kKojW4iShxbqe/dsM2DxDZgWF5jFUBkM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.mft rsync://rpki.ripe.net/repository/DEFAULT/WYd3IMAUaISU6mkQyDR03hPpmAI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d7:6a:db:63:ff:18:69:c4:27:97:36:0b:8f:d5:3e:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59877720c014688494ea6910c83474de13e99802 Validity Not Before: Jan 19 18:01:02 2026 GMT Not After : Jan 20 18:01:02 2026 GMT Subject: CN=3420d51eb52e00bd6cd18cc9524b5831c458024f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:52:60:e9:4d:33:f4:14:1f:2e:1c:63:aa:40: 8c:23:3a:bf:85:fb:dc:83:4c:99:17:86:45:25:46: a2:47:f0:e2:40:ad:7d:e7:44:77:bf:e6:af:01:5a: 52:ea:a2:97:72:fb:41:70:ef:b9:1e:bb:3c:ba:1a: fa:f7:24:86:91:0c:61:5c:b8:b0:00:39:6c:83:d1: 04:06:ab:da:e0:02:6c:9d:44:6b:de:6e:aa:1a:e0: 48:78:62:80:51:8e:fc:d5:94:8e:fc:2e:42:14:d1: 5c:27:d0:88:f1:6f:18:80:23:c7:fe:3c:3c:30:da: 4d:21:57:15:b2:5f:7b:00:c5:3c:30:1f:80:11:04: 25:60:ac:e5:d4:4d:8d:64:48:e0:ab:ef:ed:5f:7c: cc:3a:41:dc:b8:80:69:08:4f:e9:01:e6:fd:7d:2b: da:22:93:e1:27:4d:f4:bf:07:e6:b0:81:d4:78:b0: 6f:3d:b9:b1:08:53:90:e0:f3:e0:35:d1:14:65:27: 04:c3:67:7d:53:ec:0f:d7:32:05:ea:f9:56:e1:3e: 8d:9c:e9:0c:d1:ae:8a:c6:38:f6:6e:8e:72:17:a5: ad:ef:a3:c6:0e:c5:a7:42:b1:90:b7:2d:8b:35:ca: f4:97:61:37:9c:9e:76:2b:b5:2d:ce:40:90:8e:36: a2:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:20:D5:1E:B5:2E:00:BD:6C:D1:8C:C9:52:4B:58:31:C4:58:02:4F X509v3 Authority Key Identifier: keyid:59:87:77:20:C0:14:68:84:94:EA:69:10:C8:34:74:DE:13:E9:98:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WYd3IMAUaISU6mkQyDR03hPpmAI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:fa:f1:a5:cc:b3:2a:92:62:1c:b1:cb:a3:59:f5:eb:9f:19: 40:8b:0e:32:39:8b:8b:b6:24:7f:f0:43:c7:a8:8c:06:15:de: c6:65:0e:90:34:f8:01:87:e7:cb:ee:c9:1f:5d:3f:7b:e5:98: 44:6f:35:6e:83:3d:f8:43:d7:7e:33:97:dc:9e:97:33:27:fc: e6:e8:de:5f:a7:ce:15:c6:49:7f:5e:31:9d:5f:d6:0e:3b:a3: e5:62:ff:68:cd:4c:87:32:70:42:37:c9:f2:5f:84:c9:86:0e: 26:55:2e:66:8c:4b:30:3c:29:2d:ae:2d:d1:9f:a1:33:a6:1a: 00:5a:6b:c0:f8:6c:14:37:41:e2:3a:89:79:1f:ec:60:4e:c3: 10:86:d2:6d:f9:12:fc:9b:79:6b:6a:83:c4:59:b9:08:89:c6: 79:26:7d:e3:8d:84:57:d8:f3:39:20:3d:70:39:88:0b:0a:fa: 15:dc:41:d1:10:f5:d0:a9:b4:5d:f3:5d:22:0a:28:5a:24:81: 1c:77:60:5d:17:8a:e7:54:68:b9:64:7c:0f:83:67:c7:fa:99: c7:de:3d:f0:be:e3:70:26:74:e6:60:6b:ce:7a:14:11:1c:7c: 05:1f:fe:e4:bf:92:eb:69:68:1b:a4:5c:c4:9f:bc:52:3c:76: 4a:bf:e8:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvXattj/xhpxCeXNguP1T6+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5ODc3NzIwYzAxNDY4ODQ5NGVhNjkxMGM4MzQ3NGRlMTNl OTk4MDIwHhcNMjYwMTE5MTgwMTAyWhcNMjYwMTIwMTgwMTAyWjAzMTEwLwYDVQQD EygzNDIwZDUxZWI1MmUwMGJkNmNkMThjYzk1MjRiNTgzMWM0NTgwMjRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8VJg6U0z9BQfLhxjqkCMIzq/hfvc g0yZF4ZFJUaiR/DiQK1950R3v+avAVpS6qKXcvtBcO+5Hrs8uhr69ySGkQxhXLiw ADlsg9EEBqva4AJsnURr3m6qGuBIeGKAUY781ZSO/C5CFNFcJ9CI8W8YgCPH/jw8 MNpNIVcVsl97AMU8MB+AEQQlYKzl1E2NZEjgq+/tX3zMOkHcuIBpCE/pAeb9fSva IpPhJ030vwfmsIHUeLBvPbmxCFOQ4PPgNdEUZScEw2d9U+wP1zIF6vlW4T6NnOkM 0a6Kxjj2bo5yF6Wt76PGDsWnQrGQty2LNcr0l2E3nJ52K7UtzkCQjjaiHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDQg1R61LgC9bNGMyVJLWDHEWAJPMB8GA1UdIwQY MBaAFFmHdyDAFGiElOppEMg0dN4T6ZgCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1lkM0lNQVVhSVNVNm1rUXlEUjAzaFBwbUFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8yYTA4MDgtN2U5Ny00N2UwLWFmYmIt NzRjY2Q4MjQwYmFkLzEvV1lkM0lNQVVhSVNVNm1rUXlEUjAzaFBwbUFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy8yYTA4MDgtN2U5Ny00N2UwLWFmYmItNzRjY2Q4MjQwYmFk LzEvV1lkM0lNQVVhSVNVNm1rUXlEUjAzaFBwbUFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASfrxpcyz KpJiHLHLo1n1658ZQIsOMjmLi7Ykf/BDx6iMBhXexmUOkDT4AYfny+7JH10/e+WY RG81boM9+EPXfjOX3J6XMyf85ujeX6fOFcZJf14xnV/WDjuj5WL/aM1MhzJwQjfJ 8l+EyYYOJlUuZoxLMDwpLa4t0Z+hM6YaAFprwPhsFDdB4jqJeR/sYE7DEIbSbfkS /Jt5a2qDxFm5CInGeSZ9442EV9jzOSA9cDmICwr6FdxB0RD10Km0XfNdIgooWiSB HHdgXReK51RouWR8D4Nnx/qZx9498L7jcCZ05mBrznoUERx8BR/+5L+S62loG6Rc xJ+8Ujx2Sr/ouA== -----END CERTIFICATE-----Generated at Tue Jan 20 03:00:41 2026 by rpki-client