This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/1f946c-3cc7-419d-b4b7-49b6651d92db/1/wzExr3-gKXnG6h3eCdjHYtiupB0.mft File: wzExr3-gKXnG6h3eCdjHYtiupB0.mft (raw, json) Hash identifier: Fij9wJryEovyNJitwgm5PokjbORlu/8fhzRxi9F9vOM= Subject key identifier: F1:1D:3C:77:C0:AD:81:7A:DC:25:41:FA:D9:FE:DC:7A:F3:88:B9:2A Authority key identifier: C3:31:31:AF:7F:A0:29:79:C6:EA:1D:DE:09:D8:C7:62:D8:AE:A4:1D Certificate issuer: /CN=c33131af7fa02979c6ea1dde09d8c762d8aea41d Certificate serial: 019BFF8A9F7EF02BF059F5FD447CDA370EC5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wzExr3-gKXnG6h3eCdjHYtiupB0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/1f946c-3cc7-419d-b4b7-49b6651d92db/1/wzExr3-gKXnG6h3eCdjHYtiupB0.mft Manifest number: 0F Signing time: Tue 27 Jan 2026 13:00:33 +0000 Manifest this update: Tue 27 Jan 2026 13:00:33 +0000 Manifest next update: Wed 28 Jan 2026 13:00:33 +0000 Files and hashes: 1: A38BrfcsQgxWnrcUUfwlwPOLep8.asa (hash: 5CbKlO4vRl7LeM/QrN8IBsyyDEAgnjsF1SDgA3maq64=) 2: wzExr3-gKXnG6h3eCdjHYtiupB0.crl (hash: aHdhfHO81N1WtWjpVJPVauLD1SAlgR67i38BTRB/tFM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/1f946c-3cc7-419d-b4b7-49b6651d92db/1/wzExr3-gKXnG6h3eCdjHYtiupB0.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/1f946c-3cc7-419d-b4b7-49b6651d92db/1/wzExr3-gKXnG6h3eCdjHYtiupB0.mft rsync://rpki.ripe.net/repository/DEFAULT/wzExr3-gKXnG6h3eCdjHYtiupB0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ff:8a:9f:7e:f0:2b:f0:59:f5:fd:44:7c:da:37:0e:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c33131af7fa02979c6ea1dde09d8c762d8aea41d Validity Not Before: Jan 27 13:00:33 2026 GMT Not After : Jan 28 13:00:33 2026 GMT Subject: CN=f11d3c77c0ad817adc2541fad9fedc7af388b92a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:2a:bf:41:41:73:52:cc:85:f8:d6:83:6c:d1: db:cc:19:1d:be:e4:9e:53:40:63:d4:8b:a7:4d:c8: 66:c8:d5:44:ea:d8:9e:0b:c3:42:20:22:d2:98:3a: 08:5f:30:b9:f3:a6:e3:d4:0d:2a:20:98:fa:27:5a: 11:17:ff:8a:a3:8f:6c:97:25:4e:cd:b0:a9:30:ce: 04:b5:0e:46:b6:7f:d8:98:5f:26:da:5a:7d:26:38: f6:01:0e:52:ad:c9:d9:77:b1:61:ef:90:09:55:a3: 58:31:5c:d7:a3:c0:d3:1f:70:ff:94:75:17:34:75: 78:ca:44:f3:03:2b:09:69:78:e4:15:b1:1a:d0:06: 8a:84:d6:eb:76:2b:58:b0:bb:df:fa:07:c1:69:f5: 89:48:57:cb:74:62:8d:5f:77:71:93:5c:c1:6b:65: b8:34:65:d1:00:ec:2c:ce:f6:5b:20:6d:c7:f6:c1: bc:a7:4e:7f:23:b6:0f:c2:20:e2:77:a2:bc:e3:a0: e8:55:af:b9:b7:02:3f:a6:a1:c9:09:38:83:a9:ae: d4:d2:a1:e3:a8:7e:17:6c:ec:dc:6a:64:c7:2d:96: 56:26:8f:16:b7:2e:42:b5:77:f5:c3:0c:bf:f6:b4: 1e:0b:90:6f:72:c1:62:29:83:0e:b9:c2:ff:bd:8f: 7a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:1D:3C:77:C0:AD:81:7A:DC:25:41:FA:D9:FE:DC:7A:F3:88:B9:2A X509v3 Authority Key Identifier: keyid:C3:31:31:AF:7F:A0:29:79:C6:EA:1D:DE:09:D8:C7:62:D8:AE:A4:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wzExr3-gKXnG6h3eCdjHYtiupB0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/1f946c-3cc7-419d-b4b7-49b6651d92db/1/wzExr3-gKXnG6h3eCdjHYtiupB0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/1f946c-3cc7-419d-b4b7-49b6651d92db/1/wzExr3-gKXnG6h3eCdjHYtiupB0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:8b:10:9c:6f:63:69:53:31:d8:45:40:fe:a4:9a:3d:93:c0: 45:4e:bc:b5:ea:fd:57:81:ed:1f:94:5f:2c:be:ce:d9:eb:a8: 7d:17:10:ab:e3:d5:2c:71:2c:f8:e1:ca:6b:b8:d4:3d:f5:5e: 57:7e:a5:96:88:25:9a:98:e5:f2:56:e3:e2:2f:da:6c:1c:fd: a0:f1:e7:fc:20:a5:03:76:95:35:42:0f:cb:58:ad:dc:ba:2f: 05:18:b2:f1:e7:a1:af:fa:fd:ad:3f:e0:71:f1:98:65:62:ee: fe:f9:31:0a:ed:eb:0b:23:bc:56:10:e1:4e:de:f8:85:dc:ff: eb:43:95:ff:70:3f:e1:6a:23:87:f1:23:a8:be:49:0e:28:fe: 96:0c:67:1f:2c:ea:fb:eb:a3:93:2e:79:d7:41:34:a6:62:19: 59:f4:55:4a:85:60:5a:f8:1d:25:15:80:86:cd:49:89:e6:99: 66:06:45:54:38:32:18:5a:6d:4b:a9:2a:cf:dc:cc:43:45:5f: 2c:e8:3f:4c:06:3e:8e:72:29:93:c0:10:eb:0e:58:a5:ac:3c: bf:eb:44:2b:12:0e:a8:cf:e9:1b:19:65:39:41:a4:97:f6:ad: 31:43:14:a5:be:55:5e:26:bc:80:78:c9:21:be:78:b5:5a:10: db:f1:df:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv/ip9+8CvwWfX9RHzaNw7FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzMzEzMWFmN2ZhMDI5NzljNmVhMWRkZTA5ZDhjNzYyZDhh ZWE0MWQwHhcNMjYwMTI3MTMwMDMzWhcNMjYwMTI4MTMwMDMzWjAzMTEwLwYDVQQD EyhmMTFkM2M3N2MwYWQ4MTdhZGMyNTQxZmFkOWZlZGM3YWYzODhiOTJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyq/QUFzUsyF+NaDbNHbzBkdvuSe U0Bj1IunTchmyNVE6tieC8NCICLSmDoIXzC586bj1A0qIJj6J1oRF/+Ko49slyVO zbCpMM4EtQ5Gtn/YmF8m2lp9Jjj2AQ5SrcnZd7Fh75AJVaNYMVzXo8DTH3D/lHUX NHV4ykTzAysJaXjkFbEa0AaKhNbrditYsLvf+gfBafWJSFfLdGKNX3dxk1zBa2W4 NGXRAOwszvZbIG3H9sG8p05/I7YPwiDid6K846DoVa+5twI/pqHJCTiDqa7U0qHj qH4XbOzcamTHLZZWJo8Wty5CtXf1wwy/9rQeC5BvcsFiKYMOucL/vY96cwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPEdPHfArYF63CVB+tn+3HrziLkqMB8GA1UdIwQY MBaAFMMxMa9/oCl5xuod3gnYx2LYrqQdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3pFeHIzLWdLWG5HNmgzZUNkakhZdGl1cEIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8xZjk0NmMtM2NjNy00MTlkLWI0Yjct NDliNjY1MWQ5MmRiLzEvd3pFeHIzLWdLWG5HNmgzZUNkakhZdGl1cEIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi8xZjk0NmMtM2NjNy00MTlkLWI0YjctNDliNjY1MWQ5MmRi LzEvd3pFeHIzLWdLWG5HNmgzZUNkakhZdGl1cEIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOIsQnG9j aVMx2EVA/qSaPZPARU68ter9V4HtH5RfLL7O2euofRcQq+PVLHEs+OHKa7jUPfVe V36lloglmpjl8lbj4i/abBz9oPHn/CClA3aVNUIPy1it3LovBRiy8eehr/r9rT/g cfGYZWLu/vkxCu3rCyO8VhDhTt74hdz/60OV/3A/4Wojh/EjqL5JDij+lgxnHyzq ++ujky5510E0pmIZWfRVSoVgWvgdJRWAhs1JieaZZgZFVDgyGFptS6kqz9zMQ0Vf LOg/TAY+jnIpk8AQ6w5Ypaw8v+tEKxIOqM/pGxllOUGkl/atMUMUpb5VXia8gHjJ Ib54tVoQ2/Hfkg== -----END CERTIFICATE-----Generated at Tue Jan 27 14:56:21 2026 by rpki-client