This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.mft File: wQmKGQW70zgVM4KPa3_SJxcEMe8.mft (raw, json) Hash identifier: 30SIdRJbSW7D+tlZ4ZLmBbOVRWqSCuJ4dIgWFwO6Gnc= Subject key identifier: F1:8A:DA:16:93:13:1A:E6:DD:AE:BF:10:CC:2D:74:C2:90:4C:DF:D2 Authority key identifier: C1:09:8A:19:05:BB:D3:38:15:33:82:8F:6B:7F:D2:27:17:04:31:EF Certificate issuer: /CN=c1098a1905bbd3381533828f6b7fd227170431ef Certificate serial: 019BD76AD7F1C8F72797EE8422272D1E7141 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQmKGQW70zgVM4KPa3_SJxcEMe8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.mft Manifest number: 17FA Signing time: Mon 19 Jan 2026 18:01:02 +0000 Manifest this update: Mon 19 Jan 2026 18:01:02 +0000 Manifest next update: Tue 20 Jan 2026 18:01:02 +0000 Files and hashes: 1: 37DphKuZfGTR2OxLvLU4Dft8uEo.roa (hash: elUGCMfkzo3RIzRHIYBYJxXm6Hp7OUvq5N29WG1Fifg=) 2: CkKLYj92galNREO338sWbNXvtys.roa (hash: GswGrCpFRGcvwQ2BBbOurYuHd/8bVtTdmHhmb10JZX0=) 3: F8Gqk6CTN-eEo9DeMdWC6pmIKlQ.roa (hash: ZzrT3Z7vgWuSW3jqHI8wLsqKWnF6JhMXBToucZDHchY=) 4: N--cUZYdrjxvVxG6Axu1sudxu_k.roa (hash: yGw6ItscEECeNqwD+EclSGE+9ydrCUm2mkMp5K8TB9o=) 5: T6WYRwpE69f1_segiofKG18EyPU.roa (hash: 3vUaTy7e4xNC9BeIg1lJuy2BS6buPbgL42kyIYgUPsw=) 6: ew27FqwZ4h_c8GrTvURwZtxGcP4.roa (hash: PYRXWNlrDolvfrk3G3iU1JEkhR7Ij1fQE13ZjjG+yMc=) 7: h2ehCOfcqqF0IeqWvo2nn953cBo.roa (hash: YB7JVVHHykrYeDl2WcAdwEq3+YyTaiH2aC/3bBu/CY4=) 8: hKv7ysEGAlTCfDAhjd2l9ZMKCcU.roa (hash: OaUrLW1j7cxXZHPdkw2cDMBUnDWKq/yDK0dWfbCa6QY=) 9: wQmKGQW70zgVM4KPa3_SJxcEMe8.crl (hash: sekOdhiRX80zLrfRQreBo2+lAtp4kzt9kC6jCwf/ix8=) 10: yHQjI-_x_-Np_SZV8yHfpOiyvlo.roa (hash: vVw831MJdUfsxmZh+1qgUhTFi4CaWz4Dq9upza4tl1o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.crl rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.mft rsync://rpki.ripe.net/repository/DEFAULT/wQmKGQW70zgVM4KPa3_SJxcEMe8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d7:6a:d7:f1:c8:f7:27:97:ee:84:22:27:2d:1e:71:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1098a1905bbd3381533828f6b7fd227170431ef Validity Not Before: Jan 19 18:01:02 2026 GMT Not After : Jan 20 18:01:02 2026 GMT Subject: CN=f18ada1693131ae6ddaebf10cc2d74c2904cdfd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e7:95:1c:28:7d:74:9a:e3:23:f8:a2:d8:b5: 49:00:ab:24:bc:c3:ec:1c:17:47:ee:70:50:68:c7: 6e:72:e5:b3:ae:7b:ff:dd:dd:91:d0:98:3c:5e:81: a9:ec:9c:ad:ec:70:29:a3:ea:bf:9b:b3:84:46:1d: 05:b2:10:a9:c5:e9:db:ee:f1:df:04:74:50:f2:aa: c9:30:5c:39:1c:f5:96:0a:71:38:a9:b5:b0:9c:2e: 6e:1b:99:54:89:cf:3a:d6:81:66:d2:e7:b7:94:f9: 99:57:f9:ef:44:a9:f8:83:0c:98:08:14:9d:a4:dd: d1:c4:d0:87:ba:27:e0:d2:c2:f9:b8:af:83:c1:fb: aa:f4:86:33:f7:78:cf:3f:e5:d7:33:8a:26:df:36: b5:5e:66:22:4e:55:76:74:43:f2:89:e4:2c:55:04: 92:02:78:4d:c6:27:c5:ad:98:30:04:9b:01:9d:5b: 61:c4:70:86:67:70:53:14:5b:22:32:cc:3f:56:e5: 63:5b:59:8b:6c:f5:96:37:3b:69:e4:74:f0:d2:6e: 7a:d2:15:36:4e:2f:f6:ea:ec:63:b5:df:67:77:4f: 3e:b8:dd:aa:d5:9a:ec:4d:b5:59:e1:8c:61:fa:af: 10:03:d4:63:98:54:45:33:25:0d:93:55:95:ee:db: 1c:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:8A:DA:16:93:13:1A:E6:DD:AE:BF:10:CC:2D:74:C2:90:4C:DF:D2 X509v3 Authority Key Identifier: keyid:C1:09:8A:19:05:BB:D3:38:15:33:82:8F:6B:7F:D2:27:17:04:31:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQmKGQW70zgVM4KPa3_SJxcEMe8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:aa:8b:92:26:93:05:4b:c8:63:e7:fa:a0:fd:6c:81:a1:1f: cd:71:71:47:db:ee:20:46:02:1f:16:a3:74:d4:61:6e:38:41: 56:d7:e8:40:14:4a:b6:e2:4c:3c:4b:5d:77:46:e0:47:c7:c3: 49:b2:f6:f9:05:fa:19:f4:b3:1b:d6:85:5f:84:fe:a4:9f:82: c7:28:87:98:9d:e6:b7:1a:61:6b:d7:5d:19:a5:89:cc:d6:93: 1f:32:31:e1:d9:00:18:4f:c1:e6:91:12:a4:ff:89:77:8e:80: e5:aa:61:dc:0b:55:e9:12:f5:2b:fc:9d:0e:3c:7c:5b:3a:ab: db:84:13:94:46:89:c7:c5:96:4d:30:dc:f9:22:ac:c9:99:7c: f8:81:28:3d:af:54:f4:25:5a:b3:4a:df:49:60:2b:b8:92:df: 48:01:2d:3d:bd:7c:eb:6e:8b:11:d5:b5:19:e1:16:8c:18:02: c1:7b:45:a2:a5:46:9b:ad:7a:18:73:d2:95:4a:7a:b7:ea:6d: 5b:d2:0c:65:5f:ae:2a:c9:b7:75:46:18:a7:5b:7e:ae:72:f2: 2b:57:32:ca:86:c5:e7:fe:64:f5:f4:fb:7e:65:f1:97:7d:5d: da:2e:26:d1:e4:df:b1:c8:cd:f2:92:db:9f:2f:58:96:a2:c3: ae:c5:04:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvXatfxyPcnl+6EIictHnFBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxMDk4YTE5MDViYmQzMzgxNTMzODI4ZjZiN2ZkMjI3MTcw NDMxZWYwHhcNMjYwMTE5MTgwMTAyWhcNMjYwMTIwMTgwMTAyWjAzMTEwLwYDVQQD EyhmMThhZGExNjkzMTMxYWU2ZGRhZWJmMTBjYzJkNzRjMjkwNGNkZmQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzeeVHCh9dJrjI/ii2LVJAKskvMPs HBdH7nBQaMducuWzrnv/3d2R0Jg8XoGp7Jyt7HApo+q/m7OERh0FshCpxenb7vHf BHRQ8qrJMFw5HPWWCnE4qbWwnC5uG5lUic861oFm0ue3lPmZV/nvRKn4gwyYCBSd pN3RxNCHuifg0sL5uK+Dwfuq9IYz93jPP+XXM4om3za1XmYiTlV2dEPyieQsVQSS AnhNxifFrZgwBJsBnVthxHCGZ3BTFFsiMsw/VuVjW1mLbPWWNztp5HTw0m560hU2 Ti/26uxjtd9nd08+uN2q1ZrsTbVZ4Yxh+q8QA9RjmFRFMyUNk1WV7tscTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPGK2haTExrm3a6/EMwtdMKQTN/SMB8GA1UdIwQY MBaAFMEJihkFu9M4FTOCj2t/0icXBDHvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1FtS0dRVzcwemdWTTRLUGEzX1NKeGNFTWU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8yZWVkNzEtNDY2NS00OTQ4LWEzYzUt YjJhNzEzZDJlYWIyLzEvd1FtS0dRVzcwemdWTTRLUGEzX1NKeGNFTWU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi8yZWVkNzEtNDY2NS00OTQ4LWEzYzUtYjJhNzEzZDJlYWIy LzEvd1FtS0dRVzcwemdWTTRLUGEzX1NKeGNFTWU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX6qLkiaT BUvIY+f6oP1sgaEfzXFxR9vuIEYCHxajdNRhbjhBVtfoQBRKtuJMPEtdd0bgR8fD SbL2+QX6GfSzG9aFX4T+pJ+CxyiHmJ3mtxpha9ddGaWJzNaTHzIx4dkAGE/B5pES pP+Jd46A5aph3AtV6RL1K/ydDjx8Wzqr24QTlEaJx8WWTTDc+SKsyZl8+IEoPa9U 9CVas0rfSWAruJLfSAEtPb18626LEdW1GeEWjBgCwXtFoqVGm616GHPSlUp6t+pt W9IMZV+uKsm3dUYYp1t+rnLyK1cyyobF5/5k9fT7fmXxl31d2i4m0eTfscjN8pLb ny9YlqLDrsUEqg== -----END CERTIFICATE-----Generated at Tue Jan 20 03:00:47 2026 by rpki-client