This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/e46168-9818-4b51-94ad-c618dec07462/1/wNBDfN98up85Z-syighobQbkfVY.mft File: wNBDfN98up85Z-syighobQbkfVY.mft (raw, json) Hash identifier: ZmTBQxSBCp6D0K3201HVgo9D1W+4b4WsVlKcL8kqzk4= Subject key identifier: 10:ED:7E:45:F8:5E:1B:0B:FD:E1:92:8A:F6:D6:92:69:E6:0B:99:FF Authority key identifier: C0:D0:43:7C:DF:7C:BA:9F:39:67:EB:32:8A:08:68:6D:06:E4:7D:56 Certificate issuer: /CN=c0d0437cdf7cba9f3967eb328a08686d06e47d56 Certificate serial: 019BFA2DE00B2F379464CB6EE19939687BF9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wNBDfN98up85Z-syighobQbkfVY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/e46168-9818-4b51-94ad-c618dec07462/1/wNBDfN98up85Z-syighobQbkfVY.mft Manifest number: 058D Signing time: Mon 26 Jan 2026 12:01:09 +0000 Manifest this update: Mon 26 Jan 2026 12:01:09 +0000 Manifest next update: Tue 27 Jan 2026 12:01:09 +0000 Files and hashes: 1: bfKp4He-qKJs_enDIJl7XQ9lPPU.roa (hash: uFXbmdwQGYD/iE9Y1EfqaH0e9iyi0snRJrn455EqNPc=) 2: wNBDfN98up85Z-syighobQbkfVY.crl (hash: +JpkG09maDh0wU8VABnwIqxIfejY76x9+CCYxJfU+WE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/e46168-9818-4b51-94ad-c618dec07462/1/wNBDfN98up85Z-syighobQbkfVY.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/e46168-9818-4b51-94ad-c618dec07462/1/wNBDfN98up85Z-syighobQbkfVY.mft rsync://rpki.ripe.net/repository/DEFAULT/wNBDfN98up85Z-syighobQbkfVY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:2d:e0:0b:2f:37:94:64:cb:6e:e1:99:39:68:7b:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0d0437cdf7cba9f3967eb328a08686d06e47d56 Validity Not Before: Jan 26 12:01:09 2026 GMT Not After : Jan 27 12:01:09 2026 GMT Subject: CN=10ed7e45f85e1b0bfde1928af6d69269e60b99ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:84:4b:b8:c5:6c:54:79:31:f1:40:0e:1c:b5: 1a:a6:c6:40:17:0e:21:83:80:fa:c0:d3:f2:78:d4: d8:ed:c2:67:a9:69:eb:ce:d0:8a:54:df:49:4d:3a: ba:4b:de:01:4d:d3:30:eb:1d:3e:9e:53:22:eb:05: d2:bf:99:0b:67:42:9f:6d:55:cf:58:dc:19:5a:ef: 45:40:16:f8:21:15:d6:e3:2b:a0:95:7c:6b:71:20: a4:c4:67:e8:e1:a5:cb:27:84:4d:42:f9:b7:57:59: aa:ff:5a:fc:96:f9:8b:38:fc:0e:d7:bf:0f:66:d1: 2f:93:7e:ef:b9:50:89:3b:d5:e7:07:2f:a4:21:1c: 79:81:b5:ca:d4:dd:a5:e3:ce:d7:88:1c:a9:47:fe: b6:94:a5:fd:28:1c:e0:78:cd:f1:70:51:de:fa:35: c3:38:92:6c:1a:c5:72:b5:57:d3:8a:61:f1:27:ac: 2b:98:55:c6:2a:04:0a:2a:03:bd:f9:9d:c4:c6:b1: 2a:a0:21:46:96:e5:75:6d:b4:6b:31:a3:16:4e:23: 6a:42:48:be:96:cb:0f:8e:55:0f:6d:2a:4f:ec:3b: 8e:5d:8b:fc:39:45:c9:56:4f:f9:86:38:84:84:da: ca:b9:4f:98:9c:ff:f5:f5:76:ee:96:b1:5c:a8:39: 45:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:ED:7E:45:F8:5E:1B:0B:FD:E1:92:8A:F6:D6:92:69:E6:0B:99:FF X509v3 Authority Key Identifier: keyid:C0:D0:43:7C:DF:7C:BA:9F:39:67:EB:32:8A:08:68:6D:06:E4:7D:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wNBDfN98up85Z-syighobQbkfVY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/e46168-9818-4b51-94ad-c618dec07462/1/wNBDfN98up85Z-syighobQbkfVY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/e46168-9818-4b51-94ad-c618dec07462/1/wNBDfN98up85Z-syighobQbkfVY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:59:5b:ef:38:e8:50:3d:70:36:e0:f8:4b:37:06:b0:ce:eb: 8d:e3:f2:71:30:d0:a3:04:30:d0:ea:6d:e9:86:05:de:a2:67: 93:61:d9:de:f2:a1:87:90:41:98:29:ba:f9:ab:2a:10:b7:5f: b9:07:bc:d3:5e:1a:78:6e:69:1a:f0:42:0f:59:9a:33:9e:59: b2:a2:33:55:21:32:e8:6f:b1:0c:e8:3c:75:50:89:b7:85:4f: 97:55:db:f7:37:76:f0:55:08:a0:11:a5:18:c8:67:35:f8:02: a6:98:28:08:49:40:ed:19:53:a5:b5:fd:2e:a5:ad:47:97:35: 7d:16:85:2f:1d:f4:88:87:3c:e7:76:70:ef:10:e2:ac:7e:ff: 49:d3:2a:64:64:25:e8:43:66:43:9e:c7:b4:75:4e:44:5e:39: e2:68:6c:a0:c4:e9:e6:74:8f:fd:1a:58:30:8f:81:c2:b6:53: 1d:3b:f3:a4:94:24:d3:3b:90:9f:3a:6c:e6:bf:78:31:d1:f9: bf:de:d9:d2:d5:cf:12:ab:26:b7:27:80:15:47:5a:a2:05:ca: 20:63:8f:3f:72:0d:71:72:60:e7:0f:44:4e:3e:9a:c3:d7:9f: e0:bd:3c:95:5f:2f:02:ec:22:37:a8:bd:98:de:96:c7:ab:0c: 36:92:2c:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6LeALLzeUZMtu4Zk5aHv5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwZDA0MzdjZGY3Y2JhOWYzOTY3ZWIzMjhhMDg2ODZkMDZl NDdkNTYwHhcNMjYwMTI2MTIwMTA5WhcNMjYwMTI3MTIwMTA5WjAzMTEwLwYDVQQD EygxMGVkN2U0NWY4NWUxYjBiZmRlMTkyOGFmNmQ2OTI2OWU2MGI5OWZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnoRLuMVsVHkx8UAOHLUapsZAFw4h g4D6wNPyeNTY7cJnqWnrztCKVN9JTTq6S94BTdMw6x0+nlMi6wXSv5kLZ0KfbVXP WNwZWu9FQBb4IRXW4yuglXxrcSCkxGfo4aXLJ4RNQvm3V1mq/1r8lvmLOPwO178P ZtEvk37vuVCJO9XnBy+kIRx5gbXK1N2l487XiBypR/62lKX9KBzgeM3xcFHe+jXD OJJsGsVytVfTimHxJ6wrmFXGKgQKKgO9+Z3ExrEqoCFGluV1bbRrMaMWTiNqQki+ lssPjlUPbSpP7DuOXYv8OUXJVk/5hjiEhNrKuU+YnP/19XbulrFcqDlFqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBDtfkX4XhsL/eGSivbWkmnmC5n/MB8GA1UdIwQY MBaAFMDQQ3zffLqfOWfrMooIaG0G5H1WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd05CRGZOOTh1cDg1Wi1zeWlnaG9iUWJrZlZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9lNDYxNjgtOTgxOC00YjUxLTk0YWQt YzYxOGRlYzA3NDYyLzEvd05CRGZOOTh1cDg1Wi1zeWlnaG9iUWJrZlZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9lNDYxNjgtOTgxOC00YjUxLTk0YWQtYzYxOGRlYzA3NDYy LzEvd05CRGZOOTh1cDg1Wi1zeWlnaG9iUWJrZlZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXVlb7zjo UD1wNuD4SzcGsM7rjePycTDQowQw0Opt6YYF3qJnk2HZ3vKhh5BBmCm6+asqELdf uQe8014aeG5pGvBCD1maM55ZsqIzVSEy6G+xDOg8dVCJt4VPl1Xb9zd28FUIoBGl GMhnNfgCppgoCElA7RlTpbX9LqWtR5c1fRaFLx30iIc853Zw7xDirH7/SdMqZGQl 6ENmQ57HtHVORF454mhsoMTp5nSP/RpYMI+BwrZTHTvzpJQk0zuQnzps5r94MdH5 v97Z0tXPEqsmtyeAFUdaogXKIGOPP3INcXJg5w9ETj6aw9ef4L08lV8vAuwiN6i9 mN6Wx6sMNpIszw== -----END CERTIFICATE-----Generated at Mon Jan 26 18:14:26 2026 by rpki-client