This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/cc02e1-8b36-42a3-b756-be3485706a7f/1/wvX9MCMFUknyE9FcugAMoCa7b6M.mft File: wvX9MCMFUknyE9FcugAMoCa7b6M.mft (raw, json) Hash identifier: dpTrkjaDmqKEmAgv1atnWocs6MZ1R2ws8NrRGD/47Nw= Subject key identifier: A6:3F:88:3E:07:34:F1:FA:24:B1:DE:8D:8A:E4:B5:DF:46:8D:8A:F7 Authority key identifier: C2:F5:FD:30:23:05:52:49:F2:13:D1:5C:BA:00:0C:A0:26:BB:6F:A3 Certificate issuer: /CN=c2f5fd3023055249f213d15cba000ca026bb6fa3 Certificate serial: 019BFC529B9638CE05F6CEB0B9A84A928ADD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wvX9MCMFUknyE9FcugAMoCa7b6M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/cc02e1-8b36-42a3-b756-be3485706a7f/1/wvX9MCMFUknyE9FcugAMoCa7b6M.mft Manifest number: 17EF Signing time: Mon 26 Jan 2026 22:00:30 +0000 Manifest this update: Mon 26 Jan 2026 22:00:30 +0000 Manifest next update: Tue 27 Jan 2026 22:00:30 +0000 Files and hashes: 1: GNET8erU57mgyDh7ImpYc6fkvwM.roa (hash: DXXzixavqJF8Gp9K7MXm73N5IWVM9uhvEAJhF4isZ+w=) 2: wvX9MCMFUknyE9FcugAMoCa7b6M.crl (hash: g/msOnpV7vW4hPGyA7zZVSvR88XZ0XLWlzFhB1jAcFM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/cc02e1-8b36-42a3-b756-be3485706a7f/1/wvX9MCMFUknyE9FcugAMoCa7b6M.crl rsync://rpki.ripe.net/repository/DEFAULT/88/cc02e1-8b36-42a3-b756-be3485706a7f/1/wvX9MCMFUknyE9FcugAMoCa7b6M.mft rsync://rpki.ripe.net/repository/DEFAULT/wvX9MCMFUknyE9FcugAMoCa7b6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:52:9b:96:38:ce:05:f6:ce:b0:b9:a8:4a:92:8a:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2f5fd3023055249f213d15cba000ca026bb6fa3 Validity Not Before: Jan 26 22:00:30 2026 GMT Not After : Jan 27 22:00:30 2026 GMT Subject: CN=a63f883e0734f1fa24b1de8d8ae4b5df468d8af7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:25:c7:cb:33:f8:0e:96:85:b0:b9:19:7a:30: 42:a2:cf:1f:31:ca:11:68:04:ca:93:e3:69:9d:11: 1e:bc:7b:e3:05:5f:91:51:ee:bd:13:4a:00:e5:92: 6d:45:b1:15:8e:02:5e:4e:dd:51:17:f1:34:68:8b: 06:ac:31:d6:2d:46:8b:6c:e3:de:12:2f:2b:3f:f2: ab:d8:ef:d8:c3:07:ae:24:77:27:74:3a:13:c9:28: 06:54:6c:8f:95:4f:c5:ef:f7:63:41:31:a2:14:95: d4:8f:39:ba:27:42:3b:f2:2d:bc:b5:b9:53:d6:36: fd:7a:90:16:9a:04:56:4f:d1:ca:7d:64:77:b6:57: 30:c4:1f:62:be:62:bf:56:cd:b7:d6:f6:95:99:73: de:c8:c2:26:0c:99:e8:c6:e5:3b:f3:72:ad:f1:a8: bf:9b:92:42:1c:96:98:c8:ee:6d:f7:5c:bf:b4:01: cf:6f:5d:bc:21:b5:97:38:c2:88:eb:23:77:37:c7: 0d:5b:50:1c:59:ea:e2:07:d2:c3:51:68:01:c1:04: 35:82:a5:6f:8d:42:21:f1:86:2e:bf:fe:24:12:71: de:44:ed:07:78:61:9c:b6:04:be:64:02:82:6e:48: 05:54:e2:cf:0c:27:3e:62:1f:46:22:ec:0f:c9:6a: ca:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:3F:88:3E:07:34:F1:FA:24:B1:DE:8D:8A:E4:B5:DF:46:8D:8A:F7 X509v3 Authority Key Identifier: keyid:C2:F5:FD:30:23:05:52:49:F2:13:D1:5C:BA:00:0C:A0:26:BB:6F:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wvX9MCMFUknyE9FcugAMoCa7b6M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/cc02e1-8b36-42a3-b756-be3485706a7f/1/wvX9MCMFUknyE9FcugAMoCa7b6M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/cc02e1-8b36-42a3-b756-be3485706a7f/1/wvX9MCMFUknyE9FcugAMoCa7b6M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:07:cb:af:cc:38:5c:b3:7e:10:82:38:6e:55:7a:9f:94:a7: 2a:7b:f6:f6:3b:c7:17:90:6c:28:d2:9e:2f:ae:e4:f1:33:3d: 49:ed:45:db:4d:40:5d:90:bb:2e:4f:85:33:e5:98:62:7d:46: 13:f7:17:df:03:df:0b:40:b4:6a:40:30:91:e0:64:be:91:0b: 48:9e:23:21:82:ce:e9:5f:61:74:f5:fb:e0:43:59:88:b6:0a: f5:fa:f5:57:db:4d:1f:89:cb:02:67:71:e1:b2:fb:c1:f8:80: 28:6d:0c:43:68:f5:72:b9:19:3e:00:d9:bb:a1:f5:be:da:53: 31:c2:7c:47:cf:1c:e8:65:a0:ae:72:bd:ed:e0:27:75:c2:38: eb:64:88:fd:0f:83:34:a7:6c:1e:a3:af:1e:57:00:a9:d1:9e: 8b:5d:b6:1f:1a:f3:cb:21:3b:c6:84:e5:91:a9:4c:98:fb:6d: 82:16:fc:3f:27:5f:18:b0:63:6e:93:e8:75:71:a5:4c:48:ef: a2:c5:9f:04:96:98:56:7e:c2:c8:23:1c:d7:35:a1:68:a7:35: 99:d9:93:9b:7c:35:39:a6:28:a3:72:ac:ee:0b:6a:b0:8d:ba: d5:07:19:6f:a0:53:d7:c8:7b:84:44:6e:5a:87:12:2c:ab:6c: 77:43:f1:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8UpuWOM4F9s6wuahKkordMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyZjVmZDMwMjMwNTUyNDlmMjEzZDE1Y2JhMDAwY2EwMjZi YjZmYTMwHhcNMjYwMTI2MjIwMDMwWhcNMjYwMTI3MjIwMDMwWjAzMTEwLwYDVQQD EyhhNjNmODgzZTA3MzRmMWZhMjRiMWRlOGQ4YWU0YjVkZjQ2OGQ4YWY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyXHyzP4DpaFsLkZejBCos8fMcoR aATKk+NpnREevHvjBV+RUe69E0oA5ZJtRbEVjgJeTt1RF/E0aIsGrDHWLUaLbOPe Ei8rP/Kr2O/YwweuJHcndDoTySgGVGyPlU/F7/djQTGiFJXUjzm6J0I78i28tblT 1jb9epAWmgRWT9HKfWR3tlcwxB9ivmK/Vs231vaVmXPeyMImDJnoxuU783Kt8ai/ m5JCHJaYyO5t91y/tAHPb128IbWXOMKI6yN3N8cNW1AcWeriB9LDUWgBwQQ1gqVv jUIh8YYuv/4kEnHeRO0HeGGctgS+ZAKCbkgFVOLPDCc+Yh9GIuwPyWrK1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKY/iD4HNPH6JLHejYrktd9GjYr3MB8GA1UdIwQY MBaAFML1/TAjBVJJ8hPRXLoADKAmu2+jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3ZYOU1DTUZVa255RTlGY3VnQU1vQ2E3YjZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9jYzAyZTEtOGIzNi00MmEzLWI3NTYt YmUzNDg1NzA2YTdmLzEvd3ZYOU1DTUZVa255RTlGY3VnQU1vQ2E3YjZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC9jYzAyZTEtOGIzNi00MmEzLWI3NTYtYmUzNDg1NzA2YTdm LzEvd3ZYOU1DTUZVa255RTlGY3VnQU1vQ2E3YjZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAQfLr8w4 XLN+EII4blV6n5SnKnv29jvHF5BsKNKeL67k8TM9Se1F201AXZC7Lk+FM+WYYn1G E/cX3wPfC0C0akAwkeBkvpELSJ4jIYLO6V9hdPX74ENZiLYK9fr1V9tNH4nLAmdx 4bL7wfiAKG0MQ2j1crkZPgDZu6H1vtpTMcJ8R88c6GWgrnK97eAndcI462SI/Q+D NKdsHqOvHlcAqdGei122HxrzyyE7xoTlkalMmPttghb8PydfGLBjbpPodXGlTEjv osWfBJaYVn7CyCMc1zWhaKc1mdmTm3w1OaYoo3Ks7gtqsI261QcZb6BT18h7hERu WocSLKtsd0PxRA== -----END CERTIFICATE-----Generated at Tue Jan 27 07:16:53 2026 by rpki-client