This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.mft File: WhsazyJvPC_8McHrK2pRlLULUvQ.mft (raw, json) Hash identifier: /td1IpEMEu6WbM5sceF7KeNV0aPafSjx/PwHwSYCYKc= Subject key identifier: 9A:69:3D:0A:35:5D:3C:0F:E9:A3:97:C1:D1:F2:62:A0:03:FE:85:31 Authority key identifier: 5A:1B:1A:CF:22:6F:3C:2F:FC:31:C1:EB:2B:6A:51:94:B5:0B:52:F4 Certificate issuer: /CN=5a1b1acf226f3c2ffc31c1eb2b6a5194b50b52f4 Certificate serial: 019BFC1C256CBE574B7C5989B3E5B2EC39E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WhsazyJvPC_8McHrK2pRlLULUvQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.mft Manifest number: 177E Signing time: Mon 26 Jan 2026 21:01:01 +0000 Manifest this update: Mon 26 Jan 2026 21:01:01 +0000 Manifest next update: Tue 27 Jan 2026 21:01:01 +0000 Files and hashes: 1: A-mJzajm6R6rc_fte01cBrdlwGQ.roa (hash: 2mDVxsRPuzcsX8IUNaU5b3fh5ELHeC7iXnOXAAz5DwA=) 2: WhsazyJvPC_8McHrK2pRlLULUvQ.crl (hash: ZhLprU6b8P2AAhZyQ0/0bXmvMCzt4s7fK1AJpmO2T9c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.mft rsync://rpki.ripe.net/repository/DEFAULT/WhsazyJvPC_8McHrK2pRlLULUvQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:1c:25:6c:be:57:4b:7c:59:89:b3:e5:b2:ec:39:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a1b1acf226f3c2ffc31c1eb2b6a5194b50b52f4 Validity Not Before: Jan 26 21:01:01 2026 GMT Not After : Jan 27 21:01:01 2026 GMT Subject: CN=9a693d0a355d3c0fe9a397c1d1f262a003fe8531 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:0f:12:19:b0:1a:63:0c:07:8c:28:bd:31:3e: 43:fb:5c:01:71:09:ea:28:b5:9e:dc:74:90:8a:b6: 43:21:c8:9b:17:85:e6:18:e6:74:6f:bd:39:3d:d0: a0:f1:31:63:fd:1f:d8:2d:ce:ab:2f:6d:7d:c7:3c: 75:e0:6f:d7:0a:d3:60:22:c5:00:f5:39:d4:f1:9d: 43:2e:9e:13:9b:90:59:f2:88:72:ba:20:a8:32:47: d3:d8:93:fd:59:e1:af:bf:33:76:cc:d4:70:68:e7: 2e:3e:6b:1d:24:b9:0f:eb:a3:cf:1c:c4:68:73:31: df:dc:4b:ca:b0:27:26:0a:ae:e8:11:14:4a:be:5f: fe:ed:af:d3:b2:40:26:2e:ff:7d:04:78:af:24:8a: 84:f1:eb:33:c1:69:5d:ed:c4:50:ff:85:66:2e:f7: 4e:2d:e6:77:53:e4:5a:b2:1c:39:af:8f:e8:f3:46: 7b:d0:6e:0e:ba:18:9c:d6:d0:06:e1:08:35:a0:6b: 37:46:1a:fb:a2:10:a3:43:95:bf:85:d4:74:08:37: 1f:20:78:8b:72:65:53:c0:fa:ee:c7:a8:1f:04:b1: 81:33:6f:00:6b:84:7f:0d:d7:a8:5e:16:53:fc:e2: de:05:84:d1:ce:3e:7d:35:4a:9a:83:fe:fb:a3:1c: 85:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:69:3D:0A:35:5D:3C:0F:E9:A3:97:C1:D1:F2:62:A0:03:FE:85:31 X509v3 Authority Key Identifier: keyid:5A:1B:1A:CF:22:6F:3C:2F:FC:31:C1:EB:2B:6A:51:94:B5:0B:52:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhsazyJvPC_8McHrK2pRlLULUvQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:a0:0e:f7:21:b0:e3:4d:88:ca:ef:b3:d8:29:bb:0d:60:d9: 4a:f8:4b:88:2d:44:42:4f:94:c8:b2:9b:73:3c:4b:7b:f9:2f: cb:3c:02:4c:57:f3:a0:f8:4d:ac:02:73:08:c7:ec:b2:8b:54: b5:62:4c:9d:00:cf:ed:72:95:de:56:33:2b:5f:8d:bd:1c:eb: 19:08:c7:a8:7b:5f:ec:2e:38:06:24:02:9b:7b:f9:3b:b4:ad: 12:6a:63:c3:ee:0f:52:d4:6e:7b:03:f4:b6:a3:03:ce:e0:c2: d9:ff:56:a1:f8:9c:68:9d:f1:82:76:fc:c8:7b:a3:75:a8:62: 74:e2:ca:98:2c:9e:78:ba:58:23:8c:0d:f1:f7:3e:56:2e:06: 3f:31:f9:09:7f:20:83:5b:ad:9d:5c:13:6f:04:7a:22:b2:ea: 63:1e:87:00:04:75:b6:28:b9:0c:96:37:60:b8:43:1f:3e:54: 80:1c:b8:3a:6d:9b:78:87:bf:7d:24:2b:9b:73:03:64:c2:0c: 0a:ab:4e:6e:de:73:22:d6:41:56:c4:9d:fa:01:b8:4a:61:18: c3:35:23:01:1f:60:63:ea:1f:d4:86:db:bd:fb:00:94:aa:67: 64:aa:43:6c:af:b6:94:fa:7c:d3:d3:41:6d:46:10:e2:47:9a: 92:a9:9f:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8HCVsvldLfFmJs+Wy7DnlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhMWIxYWNmMjI2ZjNjMmZmYzMxYzFlYjJiNmE1MTk0YjUw YjUyZjQwHhcNMjYwMTI2MjEwMTAxWhcNMjYwMTI3MjEwMTAxWjAzMTEwLwYDVQQD Eyg5YTY5M2QwYTM1NWQzYzBmZTlhMzk3YzFkMWYyNjJhMDAzZmU4NTMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQ8SGbAaYwwHjCi9MT5D+1wBcQnq KLWe3HSQirZDIcibF4XmGOZ0b705PdCg8TFj/R/YLc6rL219xzx14G/XCtNgIsUA 9TnU8Z1DLp4Tm5BZ8ohyuiCoMkfT2JP9WeGvvzN2zNRwaOcuPmsdJLkP66PPHMRo czHf3EvKsCcmCq7oERRKvl/+7a/TskAmLv99BHivJIqE8eszwWld7cRQ/4VmLvdO LeZ3U+Rashw5r4/o80Z70G4Ouhic1tAG4Qg1oGs3Rhr7ohCjQ5W/hdR0CDcfIHiL cmVTwPrux6gfBLGBM28Aa4R/DdeoXhZT/OLeBYTRzj59NUqag/77oxyFLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJppPQo1XTwP6aOXwdHyYqAD/oUxMB8GA1UdIwQY MBaAFFobGs8ibzwv/DHB6ytqUZS1C1L0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2hzYXp5SnZQQ184TWNIcksycFJsTFVMVXZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8yM2I1ZjktODg4MC00YjU0LWFkMDgt NzMxZGRiMWMwN2VkLzEvV2hzYXp5SnZQQ184TWNIcksycFJsTFVMVXZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS8yM2I1ZjktODg4MC00YjU0LWFkMDgtNzMxZGRiMWMwN2Vk LzEvV2hzYXp5SnZQQ184TWNIcksycFJsTFVMVXZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnKAO9yGw 402Iyu+z2Cm7DWDZSvhLiC1EQk+UyLKbczxLe/kvyzwCTFfzoPhNrAJzCMfssotU tWJMnQDP7XKV3lYzK1+NvRzrGQjHqHtf7C44BiQCm3v5O7StEmpjw+4PUtRuewP0 tqMDzuDC2f9WoficaJ3xgnb8yHujdahidOLKmCyeeLpYI4wN8fc+Vi4GPzH5CX8g g1utnVwTbwR6IrLqYx6HAAR1tii5DJY3YLhDHz5UgBy4Om2beIe/fSQrm3MDZMIM CqtObt5zItZBVsSd+gG4SmEYwzUjAR9gY+of1IbbvfsAlKpnZKpDbK+2lPp809NB bUYQ4keakqmf9Q== -----END CERTIFICATE-----Generated at Tue Jan 27 02:12:39 2026 by rpki-client