This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.mft File: WSgL6bNNnGabgCDlTdakheMX1y8.mft (raw, json) Hash identifier: Ek310wwRhTVuY/wsNTTPQGPsxWM0qpEDSB0+DvUDhvY= Subject key identifier: 09:C5:30:A6:AD:95:B9:3B:3F:D3:4D:4B:16:F4:7C:3C:18:10:8D:67 Authority key identifier: 59:28:0B:E9:B3:4D:9C:66:9B:80:20:E5:4D:D6:A4:85:E3:17:D7:2F Certificate issuer: /CN=59280be9b34d9c669b8020e54dd6a485e317d72f Certificate serial: 019C107E4E67D07C225938C001BDF6E20EB0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WSgL6bNNnGabgCDlTdakheMX1y8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.mft Manifest number: 03E8 Signing time: Fri 30 Jan 2026 20:00:38 +0000 Manifest this update: Fri 30 Jan 2026 20:00:38 +0000 Manifest next update: Sat 31 Jan 2026 20:00:38 +0000 Files and hashes: 1: 7mFBGYIZTTPkUm2FZR5kpkDM7F8.roa (hash: zkNpz1MjljqP764BiUuBFikrGpXSG3hgc/lYZBakjH0=) 2: WSgL6bNNnGabgCDlTdakheMX1y8.crl (hash: wRXYBdX6AJr9ouy2WQ+RGAENBmHuRJ1rVeFA8TQvlK0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.crl rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.mft rsync://rpki.ripe.net/repository/DEFAULT/WSgL6bNNnGabgCDlTdakheMX1y8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 31 Jan 2026 15:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:10:7e:4e:67:d0:7c:22:59:38:c0:01:bd:f6:e2:0e:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59280be9b34d9c669b8020e54dd6a485e317d72f Validity Not Before: Jan 30 20:00:38 2026 GMT Not After : Jan 31 20:00:38 2026 GMT Subject: CN=09c530a6ad95b93b3fd34d4b16f47c3c18108d67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:47:34:04:e7:8a:7a:c5:86:b1:40:d3:95:b2: 52:68:9c:20:cd:3b:23:5b:2f:e8:e1:23:de:67:b2: 2b:7b:cc:2d:49:91:22:8a:17:92:fb:65:44:55:dc: bf:b8:f2:6a:f6:ce:11:e6:f9:07:4c:34:fa:6e:ed: 3f:76:f7:f0:c8:88:1a:2a:13:f5:8d:de:d9:4d:87: 8e:fb:71:5a:46:e4:93:d9:f8:8b:78:15:c7:7b:3b: b3:36:86:c1:ea:78:df:18:53:d6:fe:67:61:d3:db: a9:72:a3:40:2c:82:ab:ba:8d:cb:cc:30:7a:ac:1f: bd:3d:50:22:3b:e2:cc:38:de:39:ae:79:77:1f:9c: f7:cf:ee:83:d4:fc:4b:02:be:f9:cd:4c:f1:00:8e: e3:73:05:a8:84:29:f3:81:86:a5:09:7f:e7:5f:0e: 5a:f1:65:b9:d2:2b:55:ed:16:65:ae:dd:0d:e1:4c: 40:51:0d:7c:e9:5d:b6:81:69:b8:8c:f7:87:66:08: e3:12:9e:4e:be:cb:22:c9:a7:b6:9e:15:54:df:9d: 5b:bd:42:8d:bc:f9:93:c9:98:57:7f:4c:ee:f2:32: bd:9b:1b:e5:63:80:83:84:11:6f:22:b4:5f:0b:ec: dd:9d:bf:42:a4:85:bf:98:66:9e:38:ff:c9:cc:c7: c9:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:C5:30:A6:AD:95:B9:3B:3F:D3:4D:4B:16:F4:7C:3C:18:10:8D:67 X509v3 Authority Key Identifier: keyid:59:28:0B:E9:B3:4D:9C:66:9B:80:20:E5:4D:D6:A4:85:E3:17:D7:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WSgL6bNNnGabgCDlTdakheMX1y8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:01:4f:02:a1:f5:b4:a9:95:c3:54:3f:a0:0a:71:66:47:4f: b3:cf:18:2a:f7:c2:57:00:6e:10:02:21:9f:8f:92:2d:c6:71: c5:57:1a:88:91:b2:a4:c4:8a:23:da:e3:ce:01:bd:fb:89:cc: 02:3e:04:af:a3:3f:56:07:fd:bf:50:ad:82:9e:21:7f:dc:88: 05:1e:39:00:b4:40:37:65:fb:9b:59:c7:f0:2c:a7:9d:ba:7e: 00:5c:a6:d9:bf:46:55:1c:5b:84:db:cb:8b:59:6d:ab:5b:f1: c2:67:61:01:52:d7:ff:96:0f:d5:81:fe:8d:55:12:91:0e:3f: a6:d4:8e:f7:5d:08:fd:99:80:eb:21:46:ac:8b:5b:a0:81:9e: 75:4e:96:51:f5:14:31:6e:4d:87:6c:9d:99:1c:f9:eb:55:03: 0d:82:f7:a9:0c:ac:eb:66:4a:a0:18:62:73:f4:2d:89:95:be: 6a:9b:a3:ed:5e:b8:16:80:fe:d1:b9:73:cb:1a:ed:88:4f:6f: 37:fd:05:cc:9e:b2:bb:4a:b6:c8:df:16:8e:70:1a:5d:e2:36: 5d:91:96:9a:2b:f6:2c:34:48:a1:91:19:e7:3c:7d:7a:80:18: 24:ae:91:07:5a:04:0e:52:03:f4:4b:f5:db:c7:c7:74:3d:a9: 77:76:ac:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwQfk5n0HwiWTjAAb324g6wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5MjgwYmU5YjM0ZDljNjY5YjgwMjBlNTRkZDZhNDg1ZTMx N2Q3MmYwHhcNMjYwMTMwMjAwMDM4WhcNMjYwMTMxMjAwMDM4WjAzMTEwLwYDVQQD EygwOWM1MzBhNmFkOTViOTNiM2ZkMzRkNGIxNmY0N2MzYzE4MTA4ZDY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0c0BOeKesWGsUDTlbJSaJwgzTsj Wy/o4SPeZ7Ire8wtSZEiiheS+2VEVdy/uPJq9s4R5vkHTDT6bu0/dvfwyIgaKhP1 jd7ZTYeO+3FaRuST2fiLeBXHezuzNobB6njfGFPW/mdh09upcqNALIKruo3LzDB6 rB+9PVAiO+LMON45rnl3H5z3z+6D1PxLAr75zUzxAI7jcwWohCnzgYalCX/nXw5a 8WW50itV7RZlrt0N4UxAUQ186V22gWm4jPeHZgjjEp5Ovssiyae2nhVU351bvUKN vPmTyZhXf0zu8jK9mxvlY4CDhBFvIrRfC+zdnb9CpIW/mGaeOP/JzMfJpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAnFMKatlbk7P9NNSxb0fDwYEI1nMB8GA1UdIwQY MBaAFFkoC+mzTZxmm4Ag5U3WpIXjF9cvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1NnTDZiTk5uR2FiZ0NEbFRkYWtoZU1YMXk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9lYzU4NDItNjU1OS00OGFmLTgwZTAt ZTBhMDQ1MDc1OTg0LzEvV1NnTDZiTk5uR2FiZ0NEbFRkYWtoZU1YMXk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi9lYzU4NDItNjU1OS00OGFmLTgwZTAtZTBhMDQ1MDc1OTg0 LzEvV1NnTDZiTk5uR2FiZ0NEbFRkYWtoZU1YMXk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIQFPAqH1 tKmVw1Q/oApxZkdPs88YKvfCVwBuEAIhn4+SLcZxxVcaiJGypMSKI9rjzgG9+4nM Aj4Er6M/Vgf9v1Ctgp4hf9yIBR45ALRAN2X7m1nH8Cynnbp+AFym2b9GVRxbhNvL i1ltq1vxwmdhAVLX/5YP1YH+jVUSkQ4/ptSO910I/ZmA6yFGrItboIGedU6WUfUU MW5Nh2ydmRz561UDDYL3qQys62ZKoBhic/QtiZW+apuj7V64FoD+0blzyxrtiE9v N/0FzJ6yu0q2yN8WjnAaXeI2XZGWmiv2LDRIoZEZ5zx9eoAYJK6RB1oEDlID9Ev1 28fHdD2pd3asbg== -----END CERTIFICATE-----Generated at Fri Jan 30 21:31:04 2026 by rpki-client