This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.mft File: wSM4YSB6IwVk7zbxHgFXNEcx4_k.mft (raw, json) Hash identifier: clEY1hKL2ULYn4w4+S1nK52vURZNjiotGL/QS1e6GAw= Subject key identifier: B8:A2:DE:20:CE:94:19:1A:B6:96:15:0A:02:FE:CF:91:AC:08:C4:6E Authority key identifier: C1:23:38:61:20:7A:23:05:64:EF:36:F1:1E:01:57:34:47:31:E3:F9 Certificate issuer: /CN=c1233861207a230564ef36f11e0157344731e3f9 Certificate serial: 019B7DEFF6FA449C636093033BC84A6C294B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSM4YSB6IwVk7zbxHgFXNEcx4_k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.mft Manifest number: 17B3 Signing time: Fri 02 Jan 2026 09:00:36 +0000 Manifest this update: Fri 02 Jan 2026 09:00:36 +0000 Manifest next update: Sat 03 Jan 2026 09:00:36 +0000 Files and hashes: 1: U4zW5QS2curvW1WWlXvfaZ-FFgE.roa (hash: urvPIf0emVxN+h0vEZuEnLmYIlJrl/akSOeGv1xVrhA=) 2: ctn8OcjHsscIiuWYKmIzKXk2VTM.roa (hash: MIK/LTNuaSONUvFAQ4mc503oI5bKuGPz3d2eDJ+oDhw=) 3: nqeAxh-Zvj9N-HZ0Z_oqfMzPECY.roa (hash: EA0w8mnUHsfVGiJBXY9XWwK4qgczfc6YuAq1VlWZzqM=) 4: vpaPc9gcyQc1zzzbJkF9n75zDFw.roa (hash: 8O4KfD0Ddn9u3Kh4fXZU6pj1hG4jVkxChi5IINDrduI=) 5: wSM4YSB6IwVk7zbxHgFXNEcx4_k.crl (hash: 0oXv82AG7f4hsWHJfYClWDGQsueytlYDR4Wrso9tOYM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.mft rsync://rpki.ripe.net/repository/DEFAULT/wSM4YSB6IwVk7zbxHgFXNEcx4_k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ef:f6:fa:44:9c:63:60:93:03:3b:c8:4a:6c:29:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1233861207a230564ef36f11e0157344731e3f9 Validity Not Before: Jan 2 09:00:36 2026 GMT Not After : Jan 3 09:00:36 2026 GMT Subject: CN=b8a2de20ce94191ab696150a02fecf91ac08c46e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:4a:56:55:8b:f0:2a:c7:e3:7b:6b:d5:00:32: b0:d9:40:f9:dc:12:3d:22:b6:13:b4:f5:4e:8b:92: 68:28:60:fd:cd:9d:43:17:44:2d:20:21:c3:31:6e: d8:d7:a0:3e:6a:4a:ec:18:83:94:ab:ad:f6:f7:9b: 31:dd:e2:9d:ce:02:9e:4c:92:88:b0:a9:23:7d:59: 52:00:8b:c7:fa:12:43:5e:4b:23:6e:ec:fa:62:1c: ce:94:69:d2:85:fe:7c:f9:5b:b2:7c:94:ae:b2:2e: c4:cc:b1:bc:b2:68:9a:79:54:fe:ee:73:57:be:c6: 66:19:11:e2:bc:91:03:47:25:77:c7:8f:ad:6b:c8: 23:16:b8:9e:83:a1:e7:45:e3:8a:fb:55:81:76:44: 80:95:e6:32:5e:fc:a7:b3:5e:7f:27:31:ed:15:d7: 6b:ac:eb:a1:94:a0:1f:91:5d:a4:f6:47:0a:e8:f9: 54:eb:77:18:78:0a:db:c8:95:63:8d:24:d9:59:9b: 93:f7:9e:4d:81:10:82:68:e8:94:0b:fe:4d:d8:ce: 32:d1:cf:94:89:5a:0f:57:fc:31:e6:12:13:60:8c: dc:38:18:be:0e:80:f9:f9:fe:1b:e3:97:03:5e:d3: 6f:32:d9:cd:a4:df:c1:e9:a5:2f:b9:cd:21:22:da: b3:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:A2:DE:20:CE:94:19:1A:B6:96:15:0A:02:FE:CF:91:AC:08:C4:6E X509v3 Authority Key Identifier: keyid:C1:23:38:61:20:7A:23:05:64:EF:36:F1:1E:01:57:34:47:31:E3:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSM4YSB6IwVk7zbxHgFXNEcx4_k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:9f:90:d8:5c:3d:b5:11:d4:92:c3:ee:0c:29:7e:de:2b:53: a2:92:3a:a0:da:c2:0c:82:b7:8e:26:ff:92:57:25:af:f3:03: 3f:94:1a:00:93:f5:c0:fc:03:a2:54:38:61:63:4b:5e:4c:30: 67:28:28:76:98:fa:f7:c8:0a:34:ce:85:13:78:ca:bd:be:a3: 64:5f:7a:96:ae:ed:eb:54:14:77:d6:6a:05:92:2d:e6:14:4d: 92:64:5c:9f:e4:5b:d1:2b:28:17:6a:e6:dd:f3:43:82:53:33: 0d:74:08:f3:c0:3e:fc:59:e0:03:f0:d7:77:61:0a:f9:b2:fd: 0a:68:72:38:2c:11:f5:11:2a:c4:d0:ea:3b:5f:16:a2:9e:a4: 08:c9:5f:2a:bf:13:92:a8:49:9d:d1:fb:49:08:0a:af:5d:e7: 37:6b:15:bd:d2:bd:ed:da:a2:4c:24:17:87:1e:44:7d:7e:dd: e2:f7:13:21:a9:3d:9e:d1:a4:a6:de:52:cc:c7:af:47:bc:13: c0:84:2c:35:1e:3d:db:51:7c:a9:31:87:ed:84:61:e8:10:e5: 23:b9:16:e1:63:4f:5b:4e:23:23:2e:71:2d:04:5c:dc:19:71: f3:3e:46:93:7b:65:80:f0:c1:a9:a2:0f:84:34:12:1a:7a:9c: 97:6a:f5:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt97/b6RJxjYJMDO8hKbClLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxMjMzODYxMjA3YTIzMDU2NGVmMzZmMTFlMDE1NzM0NDcz MWUzZjkwHhcNMjYwMTAyMDkwMDM2WhcNMjYwMTAzMDkwMDM2WjAzMTEwLwYDVQQD EyhiOGEyZGUyMGNlOTQxOTFhYjY5NjE1MGEwMmZlY2Y5MWFjMDhjNDZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEpWVYvwKsfje2vVADKw2UD53BI9 IrYTtPVOi5JoKGD9zZ1DF0QtICHDMW7Y16A+akrsGIOUq63295sx3eKdzgKeTJKI sKkjfVlSAIvH+hJDXksjbuz6YhzOlGnShf58+VuyfJSusi7EzLG8smiaeVT+7nNX vsZmGRHivJEDRyV3x4+ta8gjFrieg6HnReOK+1WBdkSAleYyXvyns15/JzHtFddr rOuhlKAfkV2k9kcK6PlU63cYeArbyJVjjSTZWZuT955NgRCCaOiUC/5N2M4y0c+U iVoPV/wx5hITYIzcOBi+DoD5+f4b45cDXtNvMtnNpN/B6aUvuc0hItqzmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLii3iDOlBkatpYVCgL+z5GsCMRuMB8GA1UdIwQY MBaAFMEjOGEgeiMFZO828R4BVzRHMeP5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1NNNFlTQjZJd1ZrN3pieEhnRlhORWN4NF9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC8yYzkzMjAtMzhkOS00NjA0LWFkOTIt MWM3YjJiOTFkMzA4LzEvd1NNNFlTQjZJd1ZrN3pieEhnRlhORWN4NF9rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC8yYzkzMjAtMzhkOS00NjA0LWFkOTItMWM3YjJiOTFkMzA4 LzEvd1NNNFlTQjZJd1ZrN3pieEhnRlhORWN4NF9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANZ+Q2Fw9 tRHUksPuDCl+3itTopI6oNrCDIK3jib/klclr/MDP5QaAJP1wPwDolQ4YWNLXkww Zygodpj698gKNM6FE3jKvb6jZF96lq7t61QUd9ZqBZIt5hRNkmRcn+Rb0SsoF2rm 3fNDglMzDXQI88A+/FngA/DXd2EK+bL9CmhyOCwR9REqxNDqO18Wop6kCMlfKr8T kqhJndH7SQgKr13nN2sVvdK97dqiTCQXhx5EfX7d4vcTIak9ntGkpt5SzMevR7wT wIQsNR4921F8qTGH7YRh6BDlI7kW4WNPW04jIy5xLQRc3Blx8z5Gk3tlgPDBqaIP hDQSGnqcl2r1zA== -----END CERTIFICATE-----Generated at Fri Jan 2 12:52:09 2026 by rpki-client