This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/WKaBxxvrRk4B1baOGcpWbamTDiM.mft File: WKaBxxvrRk4B1baOGcpWbamTDiM.mft (raw, json) Hash identifier: J809HuRUGEvl/AC3LI+TNaKRpzb7haEgWrKv1kbdNbE= Subject key identifier: 88:47:D6:8E:16:39:DC:F4:BA:0A:D8:AD:6F:D4:B8:30:62:F2:91:06 Authority key identifier: 58:A6:81:C7:1B:EB:46:4E:01:D5:B6:8E:19:CA:56:6D:A9:93:0E:23 Certificate issuer: /CN=58a681c71beb464e01d5b68e19ca566da9930e23 Certificate serial: 019BD80F7062ABF39FB23CE35EEEEE6470B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WKaBxxvrRk4B1baOGcpWbamTDiM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/WKaBxxvrRk4B1baOGcpWbamTDiM.mft Manifest number: DC Signing time: Mon 19 Jan 2026 21:00:49 +0000 Manifest this update: Mon 19 Jan 2026 21:00:49 +0000 Manifest next update: Tue 20 Jan 2026 21:00:49 +0000 Files and hashes: 1: WKaBxxvrRk4B1baOGcpWbamTDiM.crl (hash: oWzRGgEUO/QVaKsbXDo2R5gJv8jmYZNtQXBzGtVg2sE=) 2: vMZqgMzqEK5HgHT5CixfO5oYHPk.roa (hash: gyk7SL3iZafTIM/ILifXHzHIX/W4W0WvsljG33BR5D4=) 3: wI-ypASrJ7m0N79u1RJq_k57AIc.roa (hash: U4IOvrmrguD6t/ZtF0LoNyn+uQVk4Bj7HsVFQCe+6FI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/WKaBxxvrRk4B1baOGcpWbamTDiM.crl rsync://rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/WKaBxxvrRk4B1baOGcpWbamTDiM.mft rsync://rpki.ripe.net/repository/DEFAULT/WKaBxxvrRk4B1baOGcpWbamTDiM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d8:0f:70:62:ab:f3:9f:b2:3c:e3:5e:ee:ee:64:70:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58a681c71beb464e01d5b68e19ca566da9930e23 Validity Not Before: Jan 19 21:00:49 2026 GMT Not After : Jan 20 21:00:49 2026 GMT Subject: CN=8847d68e1639dcf4ba0ad8ad6fd4b83062f29106 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:9b:22:bb:c6:d3:b2:71:9a:a4:dd:88:26:a9: 3f:35:42:87:02:14:a9:4e:e3:75:12:b1:3d:bb:fb: fd:9e:42:f1:b8:0f:02:5e:2f:85:3e:3a:35:e8:0c: 83:ac:fa:94:1f:60:f8:56:79:ba:81:53:64:3a:a6: 1b:a6:03:11:a6:c6:63:85:16:b3:d2:3c:3e:15:37: 83:9d:d9:a5:08:1d:c7:02:3c:9f:f3:71:72:a4:7a: bc:2b:14:01:12:21:1d:d9:73:0b:70:9a:bb:02:51: ab:41:78:1d:60:fa:92:3e:5a:c6:bd:3d:db:9b:9c: ee:53:c6:51:14:c0:99:2c:a7:fe:44:35:b1:07:33: 50:83:af:eb:ae:e4:4e:23:71:75:d7:be:38:84:30: 84:a3:9a:b5:24:84:3a:c2:93:a3:e2:f2:fc:a4:35: 70:05:31:02:76:0b:90:9a:10:f9:35:71:ff:57:8b: 31:a2:a2:9d:54:59:8f:7d:c1:a9:4c:7b:14:bb:0a: 85:36:c9:0a:81:61:dd:7b:4a:de:72:ce:ed:3f:b2: ca:e6:2d:5f:60:9c:12:8e:22:28:62:33:ca:15:0b: bd:bb:b8:c5:1f:6d:ef:dc:e8:e1:39:79:7c:b2:69: f0:3d:ec:9e:c0:66:a3:4a:63:ae:4f:95:ea:5f:40: db:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:47:D6:8E:16:39:DC:F4:BA:0A:D8:AD:6F:D4:B8:30:62:F2:91:06 X509v3 Authority Key Identifier: keyid:58:A6:81:C7:1B:EB:46:4E:01:D5:B6:8E:19:CA:56:6D:A9:93:0E:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKaBxxvrRk4B1baOGcpWbamTDiM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/WKaBxxvrRk4B1baOGcpWbamTDiM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/WKaBxxvrRk4B1baOGcpWbamTDiM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:73:7f:a5:96:37:35:07:e5:94:3c:4b:7c:22:d5:f0:34:a8: bf:44:e9:12:7b:b3:49:35:4e:b9:ae:a8:5d:d0:77:7b:ba:59: a9:38:3a:49:2d:7c:5b:02:17:29:19:39:47:de:51:b9:6e:7a: 98:31:93:4c:b1:e5:01:b2:8a:31:38:92:26:44:e4:e5:1f:ca: 0a:99:3b:34:89:1e:06:27:c6:fe:50:16:3f:1c:07:26:68:f3: ef:ec:9a:e8:e9:34:ea:81:c3:12:98:16:c6:22:51:8e:d9:14: 9b:cb:59:93:90:a9:e3:45:85:b1:e8:95:4f:48:be:62:37:58: 56:ff:db:0f:5a:68:88:67:bf:ad:ce:c3:b0:d3:50:c1:af:14: a9:c7:80:c5:d2:2a:7a:8a:ee:67:75:d6:98:21:d0:1a:b0:3f: 04:9a:e7:98:e2:95:6d:f5:53:c9:ca:7b:7e:71:41:9c:a2:28: 86:5a:9b:88:46:20:ed:32:da:0a:bf:cc:87:d8:9d:89:d1:2f: bc:05:6c:f0:23:5a:3d:38:bf:27:79:c3:9f:97:6d:06:21:c6: c2:5a:d4:b5:32:b9:30:89:7b:b1:c7:3c:c3:ec:f0:be:85:eb: 65:46:8a:75:0a:76:1a:b5:cf:95:f6:7a:9d:4b:5d:73:81:ca: 4a:97:a9:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvYD3Biq/OfsjzjXu7uZHC3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4YTY4MWM3MWJlYjQ2NGUwMWQ1YjY4ZTE5Y2E1NjZkYTk5 MzBlMjMwHhcNMjYwMTE5MjEwMDQ5WhcNMjYwMTIwMjEwMDQ5WjAzMTEwLwYDVQQD Eyg4ODQ3ZDY4ZTE2MzlkY2Y0YmEwYWQ4YWQ2ZmQ0YjgzMDYyZjI5MTA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5siu8bTsnGapN2IJqk/NUKHAhSp TuN1ErE9u/v9nkLxuA8CXi+FPjo16AyDrPqUH2D4Vnm6gVNkOqYbpgMRpsZjhRaz 0jw+FTeDndmlCB3HAjyf83FypHq8KxQBEiEd2XMLcJq7AlGrQXgdYPqSPlrGvT3b m5zuU8ZRFMCZLKf+RDWxBzNQg6/rruROI3F11744hDCEo5q1JIQ6wpOj4vL8pDVw BTECdguQmhD5NXH/V4sxoqKdVFmPfcGpTHsUuwqFNskKgWHde0recs7tP7LK5i1f YJwSjiIoYjPKFQu9u7jFH23v3OjhOXl8smnwPeyewGajSmOuT5XqX0DbfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIhH1o4WOdz0ugrYrW/UuDBi8pEGMB8GA1UdIwQY MBaAFFimgccb60ZOAdW2jhnKVm2pkw4jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0thQnh4dnJSazRCMWJhT0djcFdiYW1URGlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9mNTFkMmUtZDE3NC00ZWY1LTgwYzEt OTdmOTFiYzk3YTQyLzEvV0thQnh4dnJSazRCMWJhT0djcFdiYW1URGlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi9mNTFkMmUtZDE3NC00ZWY1LTgwYzEtOTdmOTFiYzk3YTQy LzEvV0thQnh4dnJSazRCMWJhT0djcFdiYW1URGlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEnN/pZY3 NQfllDxLfCLV8DSov0TpEnuzSTVOua6oXdB3e7pZqTg6SS18WwIXKRk5R95RuW56 mDGTTLHlAbKKMTiSJkTk5R/KCpk7NIkeBifG/lAWPxwHJmjz7+ya6Ok06oHDEpgW xiJRjtkUm8tZk5Cp40WFseiVT0i+YjdYVv/bD1poiGe/rc7DsNNQwa8UqceAxdIq eoruZ3XWmCHQGrA/BJrnmOKVbfVTycp7fnFBnKIohlqbiEYg7TLaCr/Mh9ididEv vAVs8CNaPTi/J3nDn5dtBiHGwlrUtTK5MIl7scc8w+zwvoXrZUaKdQp2GrXPlfZ6 nUtdc4HKSpep4Q== -----END CERTIFICATE-----Generated at Tue Jan 20 01:00:16 2026 by rpki-client