This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/2c6590-ab29-46b4-a6ae-da388bc34efb/1/wMfxuj-ucTZOkysFYNYCxXJd2o4.mft File: wMfxuj-ucTZOkysFYNYCxXJd2o4.mft (raw, json) Hash identifier: PDZblepGQ7zDyCVwsZE98VGJr2h/wuw8pzNR3oEB6go= Subject key identifier: 1E:15:F2:A9:C1:2D:5B:D4:23:07:5E:D5:13:DE:5C:EE:6C:AD:A2:90 Authority key identifier: C0:C7:F1:BA:3F:AE:71:36:4E:93:2B:05:60:D6:02:C5:72:5D:DA:8E Certificate issuer: /CN=c0c7f1ba3fae71364e932b0560d602c5725dda8e Certificate serial: 019BD5EAB63AC360E9D8F143C48FD8979B23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wMfxuj-ucTZOkysFYNYCxXJd2o4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/2c6590-ab29-46b4-a6ae-da388bc34efb/1/wMfxuj-ucTZOkysFYNYCxXJd2o4.mft Manifest number: 0C50 Signing time: Mon 19 Jan 2026 11:01:27 +0000 Manifest this update: Mon 19 Jan 2026 11:01:27 +0000 Manifest next update: Tue 20 Jan 2026 11:01:27 +0000 Files and hashes: 1: uRKhnVnG5ahcONCLHxTMtWvrhtc.roa (hash: UA0ILSRoJWCUIQSmovc4YSm+7GF2eZguJHjrv0XpnQU=) 2: wMfxuj-ucTZOkysFYNYCxXJd2o4.crl (hash: prQndtlPa+95zUe5Wk3oBbktRbSYNtw/FPjGOxMNfpQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/2c6590-ab29-46b4-a6ae-da388bc34efb/1/wMfxuj-ucTZOkysFYNYCxXJd2o4.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/2c6590-ab29-46b4-a6ae-da388bc34efb/1/wMfxuj-ucTZOkysFYNYCxXJd2o4.mft rsync://rpki.ripe.net/repository/DEFAULT/wMfxuj-ucTZOkysFYNYCxXJd2o4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 11:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d5:ea:b6:3a:c3:60:e9:d8:f1:43:c4:8f:d8:97:9b:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0c7f1ba3fae71364e932b0560d602c5725dda8e Validity Not Before: Jan 19 11:01:27 2026 GMT Not After : Jan 20 11:01:27 2026 GMT Subject: CN=1e15f2a9c12d5bd423075ed513de5cee6cada290 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:5a:7d:6b:67:2d:02:4c:a8:ad:67:97:01:9c: 87:d2:8e:66:05:bd:27:6e:89:0c:f7:66:82:7b:65: c5:ef:10:56:73:07:03:ab:f6:a5:7b:0d:56:21:38: bf:aa:6e:9c:b0:b1:86:46:b0:b1:ab:26:79:20:4b: c4:a0:f8:c0:f2:75:be:6f:cf:eb:52:2d:6c:8f:c8: 16:c9:61:a0:55:d6:e2:27:d1:d6:d2:6f:0c:d0:8e: b3:62:95:cc:c9:a7:9f:5d:9c:4b:b8:aa:ef:60:ef: 51:21:08:48:c4:7b:c8:7a:62:5d:0e:bc:b6:fe:b1: 32:ca:9d:60:37:e4:bb:e6:e9:b5:91:48:a1:69:5b: 94:ec:52:73:ed:20:6d:55:b8:9a:c8:67:c5:74:4a: c4:1e:63:2a:86:e2:47:38:5e:82:7a:51:45:db:9d: f3:a2:91:56:04:e1:8c:74:fb:9a:5c:27:e5:f1:18: 05:6c:b2:7b:41:78:98:7d:17:73:0f:ff:ee:97:68: a3:58:71:2b:9b:0f:0b:4b:c9:e9:11:d8:aa:2d:7c: d4:56:2e:ec:2a:32:0f:39:26:5d:bd:da:11:4d:cc: ea:dd:27:7b:6e:47:e7:e2:44:80:30:00:6a:1a:ee: 0e:e4:9a:07:c6:87:5c:e2:fc:08:54:7d:0f:bf:97: e1:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:15:F2:A9:C1:2D:5B:D4:23:07:5E:D5:13:DE:5C:EE:6C:AD:A2:90 X509v3 Authority Key Identifier: keyid:C0:C7:F1:BA:3F:AE:71:36:4E:93:2B:05:60:D6:02:C5:72:5D:DA:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wMfxuj-ucTZOkysFYNYCxXJd2o4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2c6590-ab29-46b4-a6ae-da388bc34efb/1/wMfxuj-ucTZOkysFYNYCxXJd2o4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2c6590-ab29-46b4-a6ae-da388bc34efb/1/wMfxuj-ucTZOkysFYNYCxXJd2o4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:29:9e:21:82:ae:b1:e0:1d:f1:a4:6e:38:ee:2e:31:71:5b: a3:61:c1:51:39:71:02:f5:00:87:2c:5e:15:68:89:23:49:ef: 8b:4f:4e:7e:3f:e3:94:bf:7a:20:99:b4:d8:07:0f:ca:38:b6: d4:76:8d:30:48:c4:dc:7a:da:3f:44:0a:cf:c1:dc:4e:62:51: 1a:0d:0d:e3:19:b2:18:04:51:d3:3d:6d:0f:be:17:f0:df:a2: 69:81:e4:e5:4b:a7:b5:af:c7:ff:8e:13:38:85:e9:44:60:f9: db:d4:0d:8d:8b:3a:3f:de:83:94:51:29:3f:d2:36:f4:d1:9b: 7e:0b:e3:1b:1d:2f:87:12:85:77:8b:72:9d:62:d3:72:33:df: 21:c7:e3:00:29:ad:f2:ad:3c:29:bc:4f:5b:56:95:2a:7e:c4: c8:f6:3d:bb:d8:8c:05:55:8b:1a:6c:05:1a:ab:07:ee:26:f5: f4:58:3e:27:97:62:f3:c4:13:98:13:7f:ff:51:42:8a:4e:ca: d9:93:da:37:f7:1c:ca:79:63:7e:5e:16:ed:86:8a:b5:c7:ca: b9:00:ef:d0:06:45:cd:86:54:4a:94:76:47:65:ba:9b:32:a6: f8:87:79:ad:e6:17:43:44:2e:2d:7e:0a:d0:8c:81:35:0f:98: 3d:bb:de:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvV6rY6w2Dp2PFDxI/Yl5sjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwYzdmMWJhM2ZhZTcxMzY0ZTkzMmIwNTYwZDYwMmM1NzI1 ZGRhOGUwHhcNMjYwMTE5MTEwMTI3WhcNMjYwMTIwMTEwMTI3WjAzMTEwLwYDVQQD EygxZTE1ZjJhOWMxMmQ1YmQ0MjMwNzVlZDUxM2RlNWNlZTZjYWRhMjkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3lp9a2ctAkyorWeXAZyH0o5mBb0n bokM92aCe2XF7xBWcwcDq/alew1WITi/qm6csLGGRrCxqyZ5IEvEoPjA8nW+b8/r Ui1sj8gWyWGgVdbiJ9HW0m8M0I6zYpXMyaefXZxLuKrvYO9RIQhIxHvIemJdDry2 /rEyyp1gN+S75um1kUihaVuU7FJz7SBtVbiayGfFdErEHmMqhuJHOF6CelFF253z opFWBOGMdPuaXCfl8RgFbLJ7QXiYfRdzD//ul2ijWHErmw8LS8npEdiqLXzUVi7s KjIPOSZdvdoRTczq3Sd7bkfn4kSAMABqGu4O5JoHxodc4vwIVH0Pv5fhDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB4V8qnBLVvUIwde1RPeXO5sraKQMB8GA1UdIwQY MBaAFMDH8bo/rnE2TpMrBWDWAsVyXdqOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd01meHVqLXVjVFpPa3lzRllOWUN4WEpkMm80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8yYzY1OTAtYWIyOS00NmI0LWE2YWUt ZGEzODhiYzM0ZWZiLzEvd01meHVqLXVjVFpPa3lzRllOWUN4WEpkMm80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8yYzY1OTAtYWIyOS00NmI0LWE2YWUtZGEzODhiYzM0ZWZi LzEvd01meHVqLXVjVFpPa3lzRllOWUN4WEpkMm80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjimeIYKu seAd8aRuOO4uMXFbo2HBUTlxAvUAhyxeFWiJI0nvi09Ofj/jlL96IJm02AcPyji2 1HaNMEjE3HraP0QKz8HcTmJRGg0N4xmyGARR0z1tD74X8N+iaYHk5Uunta/H/44T OIXpRGD529QNjYs6P96DlFEpP9I29NGbfgvjGx0vhxKFd4tynWLTcjPfIcfjACmt 8q08KbxPW1aVKn7EyPY9u9iMBVWLGmwFGqsH7ib19Fg+J5di88QTmBN//1FCik7K 2ZPaN/ccynljfl4W7YaKtcfKuQDv0AZFzYZUSpR2R2W6mzKm+Id5reYXQ0QuLX4K 0IyBNQ+YPbveAA== -----END CERTIFICATE-----Generated at Mon Jan 19 19:18:15 2026 by rpki-client