This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/a3d825-d7a7-47cc-a0ca-9666edeee1e3/1/WopS3JmPEUjAeCkL27TTzcPwPLw.mft File: WopS3JmPEUjAeCkL27TTzcPwPLw.mft (raw, json) Hash identifier: kaTNFY2LdLJU1GoNANZjio3F6TBBYgHaPSN5nUh2GNg= Subject key identifier: 1C:A1:39:FB:4A:C7:4E:DE:F4:00:4E:E7:EF:11:32:CF:83:02:91:A4 Authority key identifier: 5A:8A:52:DC:99:8F:11:48:C0:78:29:0B:DB:B4:D3:CD:C3:F0:3C:BC Certificate issuer: /CN=5a8a52dc998f1148c078290bdbb4d3cdc3f03cbc Certificate serial: 019C0444186927DDB33C51641C720A5203AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WopS3JmPEUjAeCkL27TTzcPwPLw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/a3d825-d7a7-47cc-a0ca-9666edeee1e3/1/WopS3JmPEUjAeCkL27TTzcPwPLw.mft Manifest number: 0BD8 Signing time: Wed 28 Jan 2026 11:01:37 +0000 Manifest this update: Wed 28 Jan 2026 11:01:37 +0000 Manifest next update: Thu 29 Jan 2026 11:01:37 +0000 Files and hashes: 1: FXpUcueuWBp6fQq5c2tPdjSTYm4.roa (hash: RuaY5W7lr0sJsovg6cTHvVcz5PIkzQYxHi6ype94V9k=) 2: WopS3JmPEUjAeCkL27TTzcPwPLw.crl (hash: NHMI3c4V+n0Ha8pKgOw4tufWyuX6ohNr+khv3MXstc0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/a3d825-d7a7-47cc-a0ca-9666edeee1e3/1/WopS3JmPEUjAeCkL27TTzcPwPLw.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/a3d825-d7a7-47cc-a0ca-9666edeee1e3/1/WopS3JmPEUjAeCkL27TTzcPwPLw.mft rsync://rpki.ripe.net/repository/DEFAULT/WopS3JmPEUjAeCkL27TTzcPwPLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 29 Jan 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:04:44:18:69:27:dd:b3:3c:51:64:1c:72:0a:52:03:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a8a52dc998f1148c078290bdbb4d3cdc3f03cbc Validity Not Before: Jan 28 11:01:37 2026 GMT Not After : Jan 29 11:01:37 2026 GMT Subject: CN=1ca139fb4ac74edef4004ee7ef1132cf830291a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:be:bf:6e:5c:0a:37:d5:8f:84:0e:2e:7b:88: 25:31:3e:50:dc:01:4f:1d:1f:ce:ed:4c:71:5e:60: 3f:f4:60:c2:6c:a9:78:18:0e:8e:14:98:ef:5a:e7: 43:0c:cc:38:f0:81:05:8d:11:0a:2e:ec:07:73:57: 14:c0:f5:de:a7:3a:82:e2:4e:c0:45:76:37:9f:26: 33:b3:1b:0e:17:04:96:d3:ea:21:22:18:00:1d:3e: cd:ec:62:03:74:c5:de:37:4d:e2:6c:a7:51:b8:f7: 30:2f:bd:81:fb:43:02:7c:f8:d7:37:b1:0b:21:4e: 7a:f6:f5:a9:6b:58:fd:7c:13:ff:40:73:4f:51:e0: d6:85:af:4b:e0:ae:85:fb:03:d5:63:53:7a:89:14: 0e:d9:e0:69:34:a8:5e:a7:f2:40:9c:7e:a6:8c:5c: 42:49:b4:5f:18:fe:a1:05:f7:a7:13:2b:ac:78:45: c3:3e:6e:b5:84:30:d4:a7:6e:e8:4d:77:cf:e6:c6: c7:0f:6b:ae:7c:a5:54:ed:1e:dc:51:72:72:0b:2b: 3e:89:04:44:8a:b7:7c:fe:9b:d7:4e:34:6d:dd:e0: ce:f9:8d:d9:05:2d:7b:7e:f3:b0:7c:53:6d:f4:1e: f9:15:b9:58:84:f6:82:2c:b0:ca:89:b2:8c:4f:09: 99:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:A1:39:FB:4A:C7:4E:DE:F4:00:4E:E7:EF:11:32:CF:83:02:91:A4 X509v3 Authority Key Identifier: keyid:5A:8A:52:DC:99:8F:11:48:C0:78:29:0B:DB:B4:D3:CD:C3:F0:3C:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WopS3JmPEUjAeCkL27TTzcPwPLw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a3d825-d7a7-47cc-a0ca-9666edeee1e3/1/WopS3JmPEUjAeCkL27TTzcPwPLw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a3d825-d7a7-47cc-a0ca-9666edeee1e3/1/WopS3JmPEUjAeCkL27TTzcPwPLw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:b9:33:5f:64:83:96:91:c4:80:70:6c:b0:d2:34:ac:6b:b7: 02:57:55:80:8c:b3:be:db:7d:77:0c:7f:5b:c2:3a:5c:34:8d: 18:bb:09:2e:e2:67:21:a4:0d:09:2f:96:9b:77:c3:f3:5e:bb: bf:f3:66:94:b3:eb:38:9c:d4:53:9d:57:13:a7:9c:65:a8:f6: 66:e5:48:01:c0:86:7e:e0:16:6d:97:c2:9f:c7:87:a9:a9:d6: 23:a9:50:09:64:f7:47:ab:46:4a:7b:f6:30:37:d3:ac:a4:5d: 70:3a:97:e4:5f:37:f8:e5:1e:e9:74:49:0f:4b:18:63:13:7d: 8f:de:a2:f7:7f:38:75:20:f3:f3:f1:96:b2:da:a1:7a:d3:66: 47:88:26:cb:0f:83:bc:c2:ec:88:0f:07:8f:8d:09:f3:39:83: 0d:43:5c:2f:c2:f9:21:be:6e:7d:cb:63:d8:e2:63:53:d4:f8: 2a:b5:dd:cc:8f:28:6f:5b:7a:b5:e4:83:8c:3a:f3:03:8b:cb: a6:00:10:d3:d7:46:ea:69:e6:29:fc:32:c4:2e:3d:0b:25:fe: 85:38:c8:88:4a:6a:78:e3:d9:ab:41:0e:7b:bf:b9:3f:55:e5: e0:e0:42:d9:1d:24:a0:47:73:c2:4d:6f:11:05:75:1f:ec:ac: b0:68:62:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwERBhpJ92zPFFkHHIKUgOsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhOGE1MmRjOTk4ZjExNDhjMDc4MjkwYmRiYjRkM2NkYzNm MDNjYmMwHhcNMjYwMTI4MTEwMTM3WhcNMjYwMTI5MTEwMTM3WjAzMTEwLwYDVQQD EygxY2ExMzlmYjRhYzc0ZWRlZjQwMDRlZTdlZjExMzJjZjgzMDI5MWE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoL6/blwKN9WPhA4ue4glMT5Q3AFP HR/O7UxxXmA/9GDCbKl4GA6OFJjvWudDDMw48IEFjREKLuwHc1cUwPXepzqC4k7A RXY3nyYzsxsOFwSW0+ohIhgAHT7N7GIDdMXeN03ibKdRuPcwL72B+0MCfPjXN7EL IU569vWpa1j9fBP/QHNPUeDWha9L4K6F+wPVY1N6iRQO2eBpNKhep/JAnH6mjFxC SbRfGP6hBfenEyuseEXDPm61hDDUp27oTXfP5sbHD2uufKVU7R7cUXJyCys+iQRE ird8/pvXTjRt3eDO+Y3ZBS17fvOwfFNt9B75FblYhPaCLLDKibKMTwmZQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFByhOftKx07e9ABO5+8RMs+DApGkMB8GA1UdIwQY MBaAFFqKUtyZjxFIwHgpC9u0083D8Dy8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV29wUzNKbVBFVWpBZUNrTDI3VFR6Y1B3UEx3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9hM2Q4MjUtZDdhNy00N2NjLWEwY2Et OTY2NmVkZWVlMWUzLzEvV29wUzNKbVBFVWpBZUNrTDI3VFR6Y1B3UEx3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS9hM2Q4MjUtZDdhNy00N2NjLWEwY2EtOTY2NmVkZWVlMWUz LzEvV29wUzNKbVBFVWpBZUNrTDI3VFR6Y1B3UEx3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGLkzX2SD lpHEgHBssNI0rGu3AldVgIyzvtt9dwx/W8I6XDSNGLsJLuJnIaQNCS+Wm3fD8167 v/NmlLPrOJzUU51XE6ecZaj2ZuVIAcCGfuAWbZfCn8eHqanWI6lQCWT3R6tGSnv2 MDfTrKRdcDqX5F83+OUe6XRJD0sYYxN9j96i9384dSDz8/GWstqhetNmR4gmyw+D vMLsiA8Hj40J8zmDDUNcL8L5Ib5ufctj2OJjU9T4KrXdzI8ob1t6teSDjDrzA4vL pgAQ09dG6mnmKfwyxC49CyX+hTjIiEpqeOPZq0EOe7+5P1Xl4OBC2R0koEdzwk1v EQV1H+yssGhiXA== -----END CERTIFICATE-----Generated at Wed Jan 28 17:54:44 2026 by rpki-client