This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/147ae4-775b-4c48-b0da-c379f8c23fc1/1/WyxHDbJENILhlSOVOnjB7woWlHk.mft File: WyxHDbJENILhlSOVOnjB7woWlHk.mft (raw, json) Hash identifier: b5JQW9IvDyvRtSqsdQsbxxsKHureX6wLvelR4Uk5Qbg= Subject key identifier: 7E:54:78:99:8C:D8:2B:53:7D:83:75:5F:4C:4E:64:7B:03:0E:28:48 Authority key identifier: 5B:2C:47:0D:B2:44:34:82:E1:95:23:95:3A:78:C1:EF:0A:16:94:79 Certificate issuer: /CN=5b2c470db2443482e19523953a78c1ef0a169479 Certificate serial: 019BFB094D469D9015DF6CD82F27D7E0F775 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WyxHDbJENILhlSOVOnjB7woWlHk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/147ae4-775b-4c48-b0da-c379f8c23fc1/1/WyxHDbJENILhlSOVOnjB7woWlHk.mft Manifest number: 0F8A Signing time: Mon 26 Jan 2026 16:00:49 +0000 Manifest this update: Mon 26 Jan 2026 16:00:49 +0000 Manifest next update: Tue 27 Jan 2026 16:00:49 +0000 Files and hashes: 1: WyxHDbJENILhlSOVOnjB7woWlHk.crl (hash: f8WEoWSbeImHomAPQ4HLtFTlsz0z4Vms0jpDbrjbM5Y=) 2: dvCkvDBDkisBFfiqFitIcDZquoE.roa (hash: /5uIwtsG5LnmznzMvv+3skWlE++Th/QPM6kzRwf6Luo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/147ae4-775b-4c48-b0da-c379f8c23fc1/1/WyxHDbJENILhlSOVOnjB7woWlHk.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/147ae4-775b-4c48-b0da-c379f8c23fc1/1/WyxHDbJENILhlSOVOnjB7woWlHk.mft rsync://rpki.ripe.net/repository/DEFAULT/WyxHDbJENILhlSOVOnjB7woWlHk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:09:4d:46:9d:90:15:df:6c:d8:2f:27:d7:e0:f7:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b2c470db2443482e19523953a78c1ef0a169479 Validity Not Before: Jan 26 16:00:49 2026 GMT Not After : Jan 27 16:00:49 2026 GMT Subject: CN=7e5478998cd82b537d83755f4c4e647b030e2848 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:96:5b:ea:9e:c2:1a:a5:d0:d9:ad:f9:c9:51: a6:2f:2e:42:14:1d:e0:42:87:ac:32:ec:df:ab:70: 0c:93:2b:69:2a:98:62:e5:24:a7:5f:e2:9a:c8:9c: a4:9c:c3:12:f1:9c:32:5b:7e:83:42:33:13:f1:53: 51:50:fa:e9:0c:3f:f1:18:ef:74:c9:dd:2b:e1:30: 35:15:ac:cb:0c:ce:bd:82:85:1c:6f:5e:b9:c0:1c: c5:57:7e:83:8e:fc:03:f2:c1:4c:4a:c7:0f:b7:3d: ca:be:f6:70:bd:a7:97:bb:d7:76:e0:04:41:fd:53: e7:95:c7:cc:bc:53:27:27:19:bf:6d:85:87:bd:ee: 55:f3:45:33:94:55:80:db:2a:64:dd:c7:55:92:68: 2f:de:b9:1c:01:b9:51:fd:57:67:da:72:ac:92:44: f0:17:f5:18:52:c7:b8:72:80:4a:41:48:18:fd:04: e5:08:24:98:52:21:83:bf:8a:91:ea:18:4e:f2:38: 73:9d:c7:dd:f2:76:0c:84:e8:60:b6:66:e2:ae:c6: aa:08:f8:41:94:09:e6:a1:41:4e:e6:b8:5b:f6:ca: c3:fc:e8:77:e5:3c:9d:7e:2c:b8:c9:f7:e2:6d:ef: fe:50:3b:eb:5a:c3:d7:f7:13:d0:49:ab:e0:39:f0: 9c:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:54:78:99:8C:D8:2B:53:7D:83:75:5F:4C:4E:64:7B:03:0E:28:48 X509v3 Authority Key Identifier: keyid:5B:2C:47:0D:B2:44:34:82:E1:95:23:95:3A:78:C1:EF:0A:16:94:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WyxHDbJENILhlSOVOnjB7woWlHk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/147ae4-775b-4c48-b0da-c379f8c23fc1/1/WyxHDbJENILhlSOVOnjB7woWlHk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/147ae4-775b-4c48-b0da-c379f8c23fc1/1/WyxHDbJENILhlSOVOnjB7woWlHk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:a6:b7:40:ab:1f:dc:e5:62:84:e9:06:50:cb:3d:1f:e0:58: 35:29:a9:90:c5:e5:19:2e:20:93:b0:80:7a:7b:77:55:04:96: b8:55:9e:a8:7e:40:37:d6:65:03:2f:09:05:2c:3e:b5:e8:d7: b9:20:ed:4f:f6:1a:ae:c4:68:48:e9:69:dc:f8:5f:d1:d7:86: b9:d4:27:2d:84:fd:89:5e:e1:99:07:d5:15:31:47:8a:d6:09: 3d:22:7a:ad:04:66:61:39:35:7c:cb:d9:9f:bc:70:b5:90:42: 64:30:de:3f:8c:43:91:72:e9:e8:e0:10:1c:2d:f7:96:90:17: dd:60:d0:dc:8b:43:da:05:94:93:f3:46:f7:56:48:77:87:40: b6:1e:e3:0e:4f:5c:5b:d8:9b:0a:6f:96:70:46:a0:90:dd:26: 7d:fe:92:1f:b8:55:08:81:e3:ef:e4:a3:95:a7:e0:a9:24:ba: 58:27:9c:dc:db:c7:45:6b:d3:14:6f:a0:f0:34:91:52:af:bd: d0:cb:78:87:bf:74:52:d5:e5:f0:9d:c8:16:c6:89:94:2d:71: 1e:12:43:b9:74:61:4d:5b:5c:4f:49:3e:5c:09:2c:07:cd:a6: df:43:db:03:6e:01:9f:04:9a:4f:ae:91:80:53:ba:73:50:a3: 3f:55:ac:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7CU1GnZAV32zYLyfX4Pd1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViMmM0NzBkYjI0NDM0ODJlMTk1MjM5NTNhNzhjMWVmMGEx Njk0NzkwHhcNMjYwMTI2MTYwMDQ5WhcNMjYwMTI3MTYwMDQ5WjAzMTEwLwYDVQQD Eyg3ZTU0Nzg5OThjZDgyYjUzN2Q4Mzc1NWY0YzRlNjQ3YjAzMGUyODQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ZZb6p7CGqXQ2a35yVGmLy5CFB3g QoesMuzfq3AMkytpKphi5SSnX+KayJyknMMS8ZwyW36DQjMT8VNRUPrpDD/xGO90 yd0r4TA1FazLDM69goUcb165wBzFV36DjvwD8sFMSscPtz3KvvZwvaeXu9d24ARB /VPnlcfMvFMnJxm/bYWHve5V80UzlFWA2ypk3cdVkmgv3rkcAblR/Vdn2nKskkTw F/UYUse4coBKQUgY/QTlCCSYUiGDv4qR6hhO8jhzncfd8nYMhOhgtmbirsaqCPhB lAnmoUFO5rhb9srD/Oh35Tydfiy4yffibe/+UDvrWsPX9xPQSavgOfCc/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH5UeJmM2CtTfYN1X0xOZHsDDihIMB8GA1UdIwQY MBaAFFssRw2yRDSC4ZUjlTp4we8KFpR5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3l4SERiSkVOSUxobFNPVk9uakI3d29XbEhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8xNDdhZTQtNzc1Yi00YzQ4LWIwZGEt YzM3OWY4YzIzZmMxLzEvV3l4SERiSkVOSUxobFNPVk9uakI3d29XbEhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS8xNDdhZTQtNzc1Yi00YzQ4LWIwZGEtYzM3OWY4YzIzZmMx LzEvV3l4SERiSkVOSUxobFNPVk9uakI3d29XbEhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIKa3QKsf 3OVihOkGUMs9H+BYNSmpkMXlGS4gk7CAent3VQSWuFWeqH5AN9ZlAy8JBSw+tejX uSDtT/YarsRoSOlp3Phf0deGudQnLYT9iV7hmQfVFTFHitYJPSJ6rQRmYTk1fMvZ n7xwtZBCZDDeP4xDkXLp6OAQHC33lpAX3WDQ3ItD2gWUk/NG91ZId4dAth7jDk9c W9ibCm+WcEagkN0mff6SH7hVCIHj7+SjlafgqSS6WCec3NvHRWvTFG+g8DSRUq+9 0Mt4h790UtXl8J3IFsaJlC1xHhJDuXRhTVtcT0k+XAksB82m30PbA24BnwSaT66R gFO6c1CjP1WsLg== -----END CERTIFICATE-----Generated at Mon Jan 26 19:39:01 2026 by rpki-client