This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/80393f-2bd5-4668-acbd-152b463aa3ca/1/wSYSK0zu5B-X_7jMIlUL4_oKU9w.mft File: wSYSK0zu5B-X_7jMIlUL4_oKU9w.mft (raw, json) Hash identifier: A8O63hsg7gfscRfvDxvCU9oDBiF2TmexasTwJy75mTw= Subject key identifier: 5A:F4:FF:71:FD:CF:28:6B:A4:E5:8C:19:02:01:98:8E:56:61:49:54 Authority key identifier: C1:26:12:2B:4C:EE:E4:1F:97:FF:B8:CC:22:55:0B:E3:FA:0A:53:DC Certificate issuer: /CN=c126122b4ceee41f97ffb8cc22550be3fa0a53dc Certificate serial: 019BF91B8D913E9CAC06C433C5C2D48E905C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSYSK0zu5B-X_7jMIlUL4_oKU9w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/80393f-2bd5-4668-acbd-152b463aa3ca/1/wSYSK0zu5B-X_7jMIlUL4_oKU9w.mft Manifest number: 17EC Signing time: Mon 26 Jan 2026 07:01:30 +0000 Manifest this update: Mon 26 Jan 2026 07:01:30 +0000 Manifest next update: Tue 27 Jan 2026 07:01:30 +0000 Files and hashes: 1: jsDYE34UviBew9m4vDFXo1V4oc8.roa (hash: gdIEnE0XT9mqo9eWipuUMBco0clAJ+AoSte8Ebzw+Y4=) 2: wSYSK0zu5B-X_7jMIlUL4_oKU9w.crl (hash: 2e1tcQC8CaI/iAvOuvJQW5bB0en+Pf/yNhK8lC9YutU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/80393f-2bd5-4668-acbd-152b463aa3ca/1/wSYSK0zu5B-X_7jMIlUL4_oKU9w.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/80393f-2bd5-4668-acbd-152b463aa3ca/1/wSYSK0zu5B-X_7jMIlUL4_oKU9w.mft rsync://rpki.ripe.net/repository/DEFAULT/wSYSK0zu5B-X_7jMIlUL4_oKU9w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:1b:8d:91:3e:9c:ac:06:c4:33:c5:c2:d4:8e:90:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c126122b4ceee41f97ffb8cc22550be3fa0a53dc Validity Not Before: Jan 26 07:01:30 2026 GMT Not After : Jan 27 07:01:30 2026 GMT Subject: CN=5af4ff71fdcf286ba4e58c190201988e56614954 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:eb:c2:fd:3c:d5:b3:5a:a2:07:5a:f7:e7:56: 11:3a:d4:1d:a6:f4:0f:75:7f:0d:76:2d:99:a3:6c: 54:af:6a:cb:d8:2c:17:56:14:b1:af:92:a4:5f:00: 7a:f2:1c:28:bc:df:de:e2:63:5c:96:18:76:71:05: 97:59:bc:55:e3:7c:b1:89:a2:e8:91:dd:2b:d8:d1: 83:20:6b:44:05:63:d2:a9:0c:07:f7:41:01:ec:b5: 09:7e:c6:f7:77:53:d0:f1:ae:38:b6:d7:dc:91:ea: a5:34:16:b2:e2:af:be:74:36:69:96:a9:f1:c9:d3: 05:b5:d1:24:48:c6:15:5f:e2:48:14:ed:44:bb:7d: 36:b8:7a:f9:d5:6b:c0:bc:4f:1c:bc:28:f7:2b:f8: f2:e5:76:0d:3d:ce:8a:50:e9:3b:d9:11:f6:34:0d: 79:51:ad:10:83:16:94:0f:87:a3:4b:c9:99:b5:b4: d1:da:20:4e:55:91:22:4a:14:5d:20:14:ea:86:01: 67:51:ad:03:7d:b6:ab:41:b5:6f:89:71:6c:fb:f5: fe:46:ae:cb:3c:7d:c6:f2:6a:03:37:50:66:f2:00: ba:a3:44:6a:39:88:f1:2c:27:0e:ab:fc:fd:89:a1: df:36:c2:62:02:12:da:e7:8d:43:12:62:bb:3d:b9: c7:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:F4:FF:71:FD:CF:28:6B:A4:E5:8C:19:02:01:98:8E:56:61:49:54 X509v3 Authority Key Identifier: keyid:C1:26:12:2B:4C:EE:E4:1F:97:FF:B8:CC:22:55:0B:E3:FA:0A:53:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSYSK0zu5B-X_7jMIlUL4_oKU9w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/80393f-2bd5-4668-acbd-152b463aa3ca/1/wSYSK0zu5B-X_7jMIlUL4_oKU9w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/80393f-2bd5-4668-acbd-152b463aa3ca/1/wSYSK0zu5B-X_7jMIlUL4_oKU9w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:c3:88:d6:c3:44:7a:ed:9d:f4:d9:1e:f0:3d:da:0e:5a:01: 10:b7:f1:a6:79:9a:7d:f6:7f:39:68:ab:f2:61:5c:5b:20:f0: 62:5d:79:7e:fc:f4:c7:72:05:76:56:84:69:99:2b:a6:a8:16: 84:6a:66:d5:ea:3e:59:2f:2f:ae:06:3e:1c:6a:7a:fd:68:3f: bf:48:1f:a9:0d:3b:29:72:fc:f1:44:e7:78:5f:85:38:d6:e5: 47:e1:01:69:36:59:55:98:b3:e0:2e:13:e2:c4:b7:fc:a1:dc: 7d:32:a6:f7:c0:c1:6e:83:a8:ce:b0:bb:da:36:39:cc:75:d2: 8f:bb:90:eb:68:79:67:48:c8:f0:d6:98:a7:c7:34:78:cf:95: f9:90:35:e1:b7:6e:8a:7c:54:8a:01:c4:f8:d6:b9:ff:4e:35: 51:94:74:d0:ef:f4:d3:33:b2:b5:53:84:cf:54:a8:4a:24:ed: 0e:4c:ac:35:93:e8:d0:f1:8e:b1:7e:9b:84:cb:42:84:77:68: b6:3c:7c:00:18:fe:f8:31:ab:a9:7f:b8:64:ac:0b:36:36:35: a5:74:cb:fe:30:7b:9d:1a:71:d3:54:55:32:67:f9:ca:bf:48: d9:40:35:ff:27:84:d6:27:80:3e:53:c3:62:6d:2a:0a:9a:d2: 94:f1:06:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5G42RPpysBsQzxcLUjpBcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxMjYxMjJiNGNlZWU0MWY5N2ZmYjhjYzIyNTUwYmUzZmEw YTUzZGMwHhcNMjYwMTI2MDcwMTMwWhcNMjYwMTI3MDcwMTMwWjAzMTEwLwYDVQQD Eyg1YWY0ZmY3MWZkY2YyODZiYTRlNThjMTkwMjAxOTg4ZTU2NjE0OTU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuvC/TzVs1qiB1r351YROtQdpvQP dX8Ndi2Zo2xUr2rL2CwXVhSxr5KkXwB68hwovN/e4mNclhh2cQWXWbxV43yxiaLo kd0r2NGDIGtEBWPSqQwH90EB7LUJfsb3d1PQ8a44ttfckeqlNBay4q++dDZplqnx ydMFtdEkSMYVX+JIFO1Eu302uHr51WvAvE8cvCj3K/jy5XYNPc6KUOk72RH2NA15 Ua0QgxaUD4ejS8mZtbTR2iBOVZEiShRdIBTqhgFnUa0DfbarQbVviXFs+/X+Rq7L PH3G8moDN1Bm8gC6o0RqOYjxLCcOq/z9iaHfNsJiAhLa541DEmK7PbnHowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFr0/3H9zyhrpOWMGQIBmI5WYUlUMB8GA1UdIwQY MBaAFMEmEitM7uQfl/+4zCJVC+P6ClPcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1NZU0swenU1Qi1YXzdqTUlsVUw0X29LVTl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC84MDM5M2YtMmJkNS00NjY4LWFjYmQt MTUyYjQ2M2FhM2NhLzEvd1NZU0swenU1Qi1YXzdqTUlsVUw0X29LVTl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC84MDM5M2YtMmJkNS00NjY4LWFjYmQtMTUyYjQ2M2FhM2Nh LzEvd1NZU0swenU1Qi1YXzdqTUlsVUw0X29LVTl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMsOI1sNE eu2d9Nke8D3aDloBELfxpnmaffZ/OWir8mFcWyDwYl15fvz0x3IFdlaEaZkrpqgW hGpm1eo+WS8vrgY+HGp6/Wg/v0gfqQ07KXL88UTneF+FONblR+EBaTZZVZiz4C4T 4sS3/KHcfTKm98DBboOozrC72jY5zHXSj7uQ62h5Z0jI8NaYp8c0eM+V+ZA14bdu inxUigHE+Na5/041UZR00O/00zOytVOEz1SoSiTtDkysNZPo0PGOsX6bhMtChHdo tjx8ABj++DGrqX+4ZKwLNjY1pXTL/jB7nRpx01RVMmf5yr9I2UA1/yeE1ieAPlPD Ym0qCprSlPEGZQ== -----END CERTIFICATE-----Generated at Mon Jan 26 12:59:25 2026 by rpki-client