This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.mft File: WA3dtRFgPkHCt6u6PSSdXvXtTRE.mft (raw, json) Hash identifier: 4eWBoo24dkYyvWlarkSkpN3ZJKlzCkEBzxHN/fC0LNg= Subject key identifier: D2:1B:2B:C6:B9:57:95:F1:13:D3:33:CE:B5:77:57:43:98:1B:36:B6 Authority key identifier: 58:0D:DD:B5:11:60:3E:41:C2:B7:AB:BA:3D:24:9D:5E:F5:ED:4D:11 Certificate issuer: /CN=580dddb511603e41c2b7abba3d249d5ef5ed4d11 Certificate serial: 019BF989167F24F9195B170B27C92B7F4838 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WA3dtRFgPkHCt6u6PSSdXvXtTRE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.mft Manifest number: 0553 Signing time: Mon 26 Jan 2026 09:01:09 +0000 Manifest this update: Mon 26 Jan 2026 09:01:09 +0000 Manifest next update: Tue 27 Jan 2026 09:01:09 +0000 Files and hashes: 1: WA3dtRFgPkHCt6u6PSSdXvXtTRE.crl (hash: J4yTV/ybBvFszI9t+JBpQciEnsB9OP14xeuIN2Lprlg=) 2: oqNjVEEZfgF_pXpWc6CrASntmYs.roa (hash: jOJJEomQIaI7d5om0st81IDIJu3E4sOZ9MO04rQCsvw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.crl rsync://rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.mft rsync://rpki.ripe.net/repository/DEFAULT/WA3dtRFgPkHCt6u6PSSdXvXtTRE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:89:16:7f:24:f9:19:5b:17:0b:27:c9:2b:7f:48:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=580dddb511603e41c2b7abba3d249d5ef5ed4d11 Validity Not Before: Jan 26 09:01:09 2026 GMT Not After : Jan 27 09:01:09 2026 GMT Subject: CN=d21b2bc6b95795f113d333ceb5775743981b36b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:12:f7:49:80:4e:00:73:6a:bd:1f:d6:35:60: 03:44:e4:84:07:d7:2f:21:ea:38:1c:6b:4c:5a:02: 25:7c:15:3f:35:ba:1b:6c:da:35:63:ca:50:3d:3f: f8:97:cc:5c:ee:3c:86:de:52:17:a8:8a:92:0f:fd: 97:de:93:21:ce:d8:b4:a5:63:81:11:97:58:04:43: 88:c2:99:60:a0:a2:9c:98:14:a2:e5:2a:c1:ad:a1: 33:2d:da:5a:42:f1:26:cd:f8:b5:6b:a6:b9:eb:5e: 7d:64:b1:07:ec:3f:ef:9d:24:d1:ed:79:49:e9:fb: 9e:04:84:31:ed:bf:a0:5d:b5:6a:a1:48:4a:1d:f8: f6:22:63:1c:d8:b5:36:d5:92:05:d5:98:59:50:18: ff:5d:4e:8e:84:50:7d:8c:ba:10:ab:56:1b:9d:c6: a6:89:90:b5:3f:d0:b2:9d:b7:d3:c2:1d:56:6c:6f: 7a:8e:3c:1d:f2:b4:44:7d:f6:bb:3a:a2:fe:cf:ff: f2:f0:b1:33:22:d5:b4:57:81:7f:67:30:65:2f:8a: 9d:8c:71:03:a3:69:96:6e:de:3f:c8:e1:1b:e9:29: 84:61:5c:62:7f:1b:60:1b:8b:e8:98:91:62:65:b6: 9a:ec:c8:f7:95:b7:6d:c4:37:18:e9:40:55:d7:e4: 81:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:1B:2B:C6:B9:57:95:F1:13:D3:33:CE:B5:77:57:43:98:1B:36:B6 X509v3 Authority Key Identifier: keyid:58:0D:DD:B5:11:60:3E:41:C2:B7:AB:BA:3D:24:9D:5E:F5:ED:4D:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WA3dtRFgPkHCt6u6PSSdXvXtTRE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:88:63:f0:09:0e:59:64:6b:0e:82:2d:5a:92:95:b0:6b:fd: d9:4a:b0:31:cd:83:07:da:f1:f6:df:1c:f8:b5:24:5e:f2:b1: 66:f6:a3:d8:70:1a:67:2f:4c:5e:65:e4:28:fa:76:db:ca:5b: bb:cb:11:4e:be:11:30:2a:84:17:5c:9f:4f:bf:ce:29:8a:7c: 1c:70:ea:e2:8b:df:74:a5:35:b8:b2:3b:05:08:59:4d:9f:99: 67:40:8f:f5:6a:eb:99:b0:12:76:b5:8b:7c:5b:ba:cf:4f:6e: 38:db:9b:86:59:61:94:63:03:ec:0e:e9:02:d5:7f:4f:73:f1: e8:a2:00:7b:e0:03:b6:68:34:bb:a8:93:85:22:dd:42:4f:71: d1:33:57:c1:0e:37:9f:26:fc:ba:81:76:aa:d0:51:18:ac:f6: 9a:f6:4c:df:6b:90:68:04:af:52:f1:53:e8:ff:0b:29:4c:87: a0:de:af:48:bd:b4:c2:98:e0:a1:3e:2a:7a:08:f2:67:ff:75: b0:b3:70:89:7e:68:0a:af:2c:0e:30:88:74:58:12:cc:ce:c6: c0:42:20:c2:83:72:ac:16:4a:38:84:47:9a:52:c3:eb:5b:f7: 65:a3:69:b4:d3:fa:db:9d:1e:64:7e:a4:9b:51:f8:b9:75:80: 7c:26:d2:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5iRZ/JPkZWxcLJ8krf0g4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4MGRkZGI1MTE2MDNlNDFjMmI3YWJiYTNkMjQ5ZDVlZjVl ZDRkMTEwHhcNMjYwMTI2MDkwMTA5WhcNMjYwMTI3MDkwMTA5WjAzMTEwLwYDVQQD EyhkMjFiMmJjNmI5NTc5NWYxMTNkMzMzY2ViNTc3NTc0Mzk4MWIzNmI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhL3SYBOAHNqvR/WNWADROSEB9cv Ieo4HGtMWgIlfBU/NbobbNo1Y8pQPT/4l8xc7jyG3lIXqIqSD/2X3pMhzti0pWOB EZdYBEOIwplgoKKcmBSi5SrBraEzLdpaQvEmzfi1a6a56159ZLEH7D/vnSTR7XlJ 6fueBIQx7b+gXbVqoUhKHfj2ImMc2LU21ZIF1ZhZUBj/XU6OhFB9jLoQq1Ybncam iZC1P9CynbfTwh1WbG96jjwd8rREffa7OqL+z//y8LEzItW0V4F/ZzBlL4qdjHED o2mWbt4/yOEb6SmEYVxifxtgG4vomJFiZbaa7Mj3lbdtxDcY6UBV1+SBnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNIbK8a5V5XxE9MzzrV3V0OYGza2MB8GA1UdIwQY MBaAFFgN3bURYD5Bwreruj0knV717U0RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0EzZHRSRmdQa0hDdDZ1NlBTU2RYdlh0VFJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9mYzk2YTQtMzZkMS00YzNkLTg1MGIt M2NkNDE3YWVlOWNlLzEvV0EzZHRSRmdQa0hDdDZ1NlBTU2RYdlh0VFJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi9mYzk2YTQtMzZkMS00YzNkLTg1MGItM2NkNDE3YWVlOWNl LzEvV0EzZHRSRmdQa0hDdDZ1NlBTU2RYdlh0VFJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ4hj8AkO WWRrDoItWpKVsGv92UqwMc2DB9rx9t8c+LUkXvKxZvaj2HAaZy9MXmXkKPp228pb u8sRTr4RMCqEF1yfT7/OKYp8HHDq4ovfdKU1uLI7BQhZTZ+ZZ0CP9WrrmbASdrWL fFu6z09uONubhllhlGMD7A7pAtV/T3Px6KIAe+ADtmg0u6iThSLdQk9x0TNXwQ43 nyb8uoF2qtBRGKz2mvZM32uQaASvUvFT6P8LKUyHoN6vSL20wpjgoT4qegjyZ/91 sLNwiX5oCq8sDjCIdFgSzM7GwEIgwoNyrBZKOIRHmlLD61v3ZaNptNP6250eZH6k m1H4uXWAfCbSDQ== -----END CERTIFICATE-----Generated at Mon Jan 26 16:27:11 2026 by rpki-client