This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/d74420-6425-4272-93a2-3586164a7f44/1/WBMej5pIUEDZ_K5xZ6QouKEvSeo.mft File: WBMej5pIUEDZ_K5xZ6QouKEvSeo.mft (raw, json) Hash identifier: b6e716+ll4UliXG6DgOVNKS6zT+BWnLHmj/jcDX3VZU= Subject key identifier: F8:81:C9:07:5B:22:63:DB:E7:E0:C2:0D:61:EC:19:95:2B:64:28:E1 Authority key identifier: 58:13:1E:8F:9A:48:50:40:D9:FC:AE:71:67:A4:28:B8:A1:2F:49:EA Certificate issuer: /CN=58131e8f9a485040d9fcae7167a428b8a12f49ea Certificate serial: 019C0CD87EB7246AF25EF55B3A7F735638C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WBMej5pIUEDZ_K5xZ6QouKEvSeo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/d74420-6425-4272-93a2-3586164a7f44/1/WBMej5pIUEDZ_K5xZ6QouKEvSeo.mft Manifest number: 0AB8 Signing time: Fri 30 Jan 2026 03:00:40 +0000 Manifest this update: Fri 30 Jan 2026 03:00:40 +0000 Manifest next update: Sat 31 Jan 2026 03:00:40 +0000 Files and hashes: 1: HTiPrEB_ddl16rQ6ltRGw4XbaY4.roa (hash: 5Elms3noOpNLriRD+IFQ3F+D2wWRU/uDDSPyaot68Sk=) 2: WBMej5pIUEDZ_K5xZ6QouKEvSeo.crl (hash: t2DN+cbt5U5FaED34W1p9AXvl4ZKXFJAS6R8WspQruM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/d74420-6425-4272-93a2-3586164a7f44/1/WBMej5pIUEDZ_K5xZ6QouKEvSeo.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/d74420-6425-4272-93a2-3586164a7f44/1/WBMej5pIUEDZ_K5xZ6QouKEvSeo.mft rsync://rpki.ripe.net/repository/DEFAULT/WBMej5pIUEDZ_K5xZ6QouKEvSeo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 30 Jan 2026 20:45:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:0c:d8:7e:b7:24:6a:f2:5e:f5:5b:3a:7f:73:56:38:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58131e8f9a485040d9fcae7167a428b8a12f49ea Validity Not Before: Jan 30 03:00:40 2026 GMT Not After : Jan 31 03:00:40 2026 GMT Subject: CN=f881c9075b2263dbe7e0c20d61ec19952b6428e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:34:95:60:67:fb:da:df:72:c4:75:b2:fd:d0: ab:2c:69:13:b3:30:d2:33:27:af:a0:fc:52:9d:af: bc:d6:eb:64:1e:e1:38:36:0e:94:12:2c:db:92:9f: 88:39:32:e4:f8:3b:70:c3:24:21:b5:6c:73:7a:0f: 30:6c:7f:5e:98:e2:a9:57:b8:e2:91:30:ec:23:87: 0b:14:b7:19:09:fb:72:c0:73:ba:c4:ad:d2:a5:6e: be:90:64:9c:a3:72:64:bb:6c:a6:16:52:53:42:d7: f9:4d:32:bf:d4:21:c9:b8:bb:36:e3:89:ab:eb:3e: 17:a3:38:29:53:f4:16:2f:73:fe:fa:e2:fb:46:6d: cc:ee:73:e5:57:81:3d:d6:80:db:a7:9a:ea:6f:4b: db:41:55:1c:63:a2:70:cc:bc:5e:d2:fb:4a:40:47: 07:94:40:17:2c:c5:a8:db:73:f8:75:4f:52:e7:50: 2d:cd:08:b5:3f:74:54:e2:7a:03:de:ec:2f:08:f9: fd:ba:cf:aa:6d:c9:1d:7e:8c:8d:3e:5a:cb:18:0c: 13:e2:04:61:a1:fb:f3:53:3a:14:fd:bd:70:7d:4e: 9b:0e:cb:da:b5:04:e4:8d:7c:b5:92:af:ff:2c:42: 6e:c4:e6:22:73:e7:5e:3c:2c:75:3f:e2:a9:d4:50: 65:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:81:C9:07:5B:22:63:DB:E7:E0:C2:0D:61:EC:19:95:2B:64:28:E1 X509v3 Authority Key Identifier: keyid:58:13:1E:8F:9A:48:50:40:D9:FC:AE:71:67:A4:28:B8:A1:2F:49:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WBMej5pIUEDZ_K5xZ6QouKEvSeo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d74420-6425-4272-93a2-3586164a7f44/1/WBMej5pIUEDZ_K5xZ6QouKEvSeo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d74420-6425-4272-93a2-3586164a7f44/1/WBMej5pIUEDZ_K5xZ6QouKEvSeo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:b9:8c:06:13:d0:31:d1:1d:57:db:2f:82:2d:fc:ae:83:89: 23:e8:42:25:20:ed:1a:96:35:65:5c:9a:55:d1:81:31:bd:1d: a1:ca:44:45:ed:47:21:68:ea:97:04:26:69:5a:7d:9c:59:12: fa:0d:63:09:93:6c:cd:62:30:0a:50:8c:f5:ef:2f:59:52:d8: 8d:66:2f:53:3a:1c:fb:3f:94:96:2a:7c:e2:b2:2b:aa:78:64: 93:fb:f9:6a:4f:73:d1:78:c0:ba:51:9f:b9:6e:d5:3e:64:55: 7d:39:a6:d5:f0:8c:98:8e:6f:56:2c:ce:7b:fb:b3:93:22:23: 84:8f:2e:bf:d4:8f:47:28:76:23:c4:64:53:bb:16:b0:c3:e1: 37:b0:17:2b:37:01:c5:89:f2:9a:4c:87:c1:2c:eb:18:15:3d: ce:ae:0b:89:a5:90:6b:3f:8c:24:f0:1f:0e:b8:d2:2b:2f:e5: fe:07:73:5b:78:66:43:2c:1a:f1:78:67:24:de:d8:df:88:77: b6:26:b0:71:01:bd:0e:ed:4c:19:d7:79:02:a5:98:c2:84:a9: 3c:10:55:29:3f:ba:41:6f:93:c1:54:ed:ea:90:6e:f2:db:d1: 4c:ed:9b:a6:d1:8a:c9:8a:ae:32:7a:9c:a3:5b:59:fd:94:0b: 5e:ab:38:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwM2H63JGryXvVbOn9zVjjJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4MTMxZThmOWE0ODUwNDBkOWZjYWU3MTY3YTQyOGI4YTEy ZjQ5ZWEwHhcNMjYwMTMwMDMwMDQwWhcNMjYwMTMxMDMwMDQwWjAzMTEwLwYDVQQD EyhmODgxYzkwNzViMjI2M2RiZTdlMGMyMGQ2MWVjMTk5NTJiNjQyOGUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3TSVYGf72t9yxHWy/dCrLGkTszDS MyevoPxSna+81utkHuE4Ng6UEizbkp+IOTLk+DtwwyQhtWxzeg8wbH9emOKpV7ji kTDsI4cLFLcZCftywHO6xK3SpW6+kGSco3Jku2ymFlJTQtf5TTK/1CHJuLs244mr 6z4XozgpU/QWL3P++uL7Rm3M7nPlV4E91oDbp5rqb0vbQVUcY6JwzLxe0vtKQEcH lEAXLMWo23P4dU9S51AtzQi1P3RU4noD3uwvCPn9us+qbckdfoyNPlrLGAwT4gRh ofvzUzoU/b1wfU6bDsvatQTkjXy1kq//LEJuxOYic+dePCx1P+Kp1FBlOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPiByQdbImPb5+DCDWHsGZUrZCjhMB8GA1UdIwQY MBaAFFgTHo+aSFBA2fyucWekKLihL0nqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0JNZWo1cElVRURaX0s1eFo2UW91S0V2U2VvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9kNzQ0MjAtNjQyNS00MjcyLTkzYTIt MzU4NjE2NGE3ZjQ0LzEvV0JNZWo1cElVRURaX0s1eFo2UW91S0V2U2VvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS9kNzQ0MjAtNjQyNS00MjcyLTkzYTItMzU4NjE2NGE3ZjQ0 LzEvV0JNZWo1cElVRURaX0s1eFo2UW91S0V2U2VvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARLmMBhPQ MdEdV9svgi38roOJI+hCJSDtGpY1ZVyaVdGBMb0docpERe1HIWjqlwQmaVp9nFkS +g1jCZNszWIwClCM9e8vWVLYjWYvUzoc+z+Ulip84rIrqnhkk/v5ak9z0XjAulGf uW7VPmRVfTmm1fCMmI5vVizOe/uzkyIjhI8uv9SPRyh2I8RkU7sWsMPhN7AXKzcB xYnymkyHwSzrGBU9zq4LiaWQaz+MJPAfDrjSKy/l/gdzW3hmQywa8XhnJN7Y34h3 tiawcQG9Du1MGdd5AqWYwoSpPBBVKT+6QW+TwVTt6pBu8tvRTO2bptGKyYquMnqc o1tZ/ZQLXqs4XA== -----END CERTIFICATE-----Generated at Fri Jan 30 07:13:31 2026 by rpki-client