This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.mft File: wBZuIWw2DDbg91sNORI9utQiZOk.mft (raw, json) Hash identifier: yc7TNF37klqgnhQAsKcEeyN40aXBNPRDGed75un1S+c= Subject key identifier: CC:24:F8:44:76:BB:38:94:4C:84:D2:65:89:A9:C5:51:3C:91:E3:3D Authority key identifier: C0:16:6E:21:6C:36:0C:36:E0:F7:5B:0D:39:12:3D:BA:D4:22:64:E9 Certificate issuer: /CN=c0166e216c360c36e0f75b0d39123dbad42264e9 Certificate serial: 019BDC912726A6AC6CC574C46F4981428011 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wBZuIWw2DDbg91sNORI9utQiZOk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.mft Manifest number: 17DD Signing time: Tue 20 Jan 2026 18:00:58 +0000 Manifest this update: Tue 20 Jan 2026 18:00:58 +0000 Manifest next update: Wed 21 Jan 2026 18:00:58 +0000 Files and hashes: 1: YdRg4yf9cjuwuiQv9XNn1C6-SeA.roa (hash: AXj/DmVnvMPz/1ZS/FoiCnGyPKbRmaal3SHlNsa6FDg=) 2: wBZuIWw2DDbg91sNORI9utQiZOk.crl (hash: 6O5S3f/30nGWkeQiaqqLo5k7BZAwxSxkx2jeNnU+yb0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.mft rsync://rpki.ripe.net/repository/DEFAULT/wBZuIWw2DDbg91sNORI9utQiZOk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 18:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:dc:91:27:26:a6:ac:6c:c5:74:c4:6f:49:81:42:80:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0166e216c360c36e0f75b0d39123dbad42264e9 Validity Not Before: Jan 20 18:00:58 2026 GMT Not After : Jan 21 18:00:58 2026 GMT Subject: CN=cc24f84476bb38944c84d26589a9c5513c91e33d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:79:cd:2f:95:0d:6b:83:c2:ae:2c:32:fd:93: 5a:82:b4:d1:c7:95:4d:f3:bd:82:b4:4d:63:b1:47: 14:b4:3e:07:e7:9c:9a:06:3a:50:41:36:28:99:2a: 30:04:ab:53:9f:8b:0d:66:82:62:c2:7b:ea:74:3d: 80:82:d9:86:32:9f:3f:4e:1b:ab:16:a5:b4:fe:dc: 22:2e:97:26:e1:40:16:15:f2:0c:0f:a7:53:52:c0: d2:ab:d4:07:ee:e5:e9:94:3d:a8:a5:76:39:95:12: 67:5e:6d:15:b8:7b:43:a6:b8:93:61:0f:a8:dd:3e: 96:6b:b6:8f:db:b0:10:d9:c8:d3:46:bd:2e:e3:a1: 4e:e4:f4:57:38:18:b9:9c:de:7e:4d:92:54:1b:60: 1c:01:59:89:97:35:93:fa:df:26:b9:d9:06:26:17: de:a6:f6:cb:21:6c:2c:e4:a3:d5:cc:86:99:b1:5f: 6c:46:2c:bc:9a:1a:c6:36:fb:6a:8c:bc:b4:7e:4a: 22:68:0c:bb:74:1a:22:b1:08:f9:a2:50:8d:b1:c0: 5e:6c:c5:88:ae:4f:6c:5c:03:3b:2e:93:f5:dd:17: 33:09:f8:99:41:53:14:77:5b:95:2f:32:bc:8b:f8: 24:c8:be:a1:ea:07:4b:e4:bf:36:e7:de:a4:fb:9c: 22:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:24:F8:44:76:BB:38:94:4C:84:D2:65:89:A9:C5:51:3C:91:E3:3D X509v3 Authority Key Identifier: keyid:C0:16:6E:21:6C:36:0C:36:E0:F7:5B:0D:39:12:3D:BA:D4:22:64:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBZuIWw2DDbg91sNORI9utQiZOk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:c3:16:ea:8c:4e:ee:7d:a4:ab:9a:61:9f:76:50:12:e2:30: 05:1d:ce:3c:8d:26:73:10:21:b8:a7:36:6a:be:a0:b3:4f:5e: cb:22:75:a7:40:2b:fd:6a:ae:cb:cd:ab:3c:1d:03:7b:70:62: 28:c1:9b:74:a0:70:4d:30:a1:cd:4e:ea:df:72:6b:aa:62:b5: 4f:85:24:10:a8:14:d0:14:b9:82:40:d1:9e:4b:98:84:b0:12: 3f:11:5f:2f:60:33:e8:35:7c:18:ef:f5:f4:73:02:ed:d1:e2: aa:24:c0:b3:a7:46:78:22:91:df:2f:54:6f:b7:10:15:9f:d3: ae:77:2c:89:1f:68:bc:e5:75:00:69:bf:79:16:52:7a:1b:63: 4c:d7:ac:89:d0:94:85:d3:73:f5:54:1a:10:44:59:98:b0:62: 2b:49:12:03:e2:07:16:20:9b:2b:bf:db:43:68:70:d0:be:f7: 8e:4b:2b:4b:5c:67:20:04:b2:24:82:aa:78:4e:a0:35:9b:e8: 03:8d:d1:84:84:4b:b2:14:36:e7:97:4b:3f:5f:4e:04:7f:c0: 9e:f5:94:b7:49:e1:4c:24:b8:75:ed:0e:c9:80:b6:3c:e7:2a: f6:c3:17:b5:90:15:d5:72:da:9b:20:59:08:f9:a2:7d:5f:5f: 95:8a:06:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvckScmpqxsxXTEb0mBQoARMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwMTY2ZTIxNmMzNjBjMzZlMGY3NWIwZDM5MTIzZGJhZDQy MjY0ZTkwHhcNMjYwMTIwMTgwMDU4WhcNMjYwMTIxMTgwMDU4WjAzMTEwLwYDVQQD EyhjYzI0Zjg0NDc2YmIzODk0NGM4NGQyNjU4OWE5YzU1MTNjOTFlMzNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAznnNL5UNa4PCriwy/ZNagrTRx5VN 872CtE1jsUcUtD4H55yaBjpQQTYomSowBKtTn4sNZoJiwnvqdD2AgtmGMp8/Thur FqW0/twiLpcm4UAWFfIMD6dTUsDSq9QH7uXplD2opXY5lRJnXm0VuHtDpriTYQ+o 3T6Wa7aP27AQ2cjTRr0u46FO5PRXOBi5nN5+TZJUG2AcAVmJlzWT+t8mudkGJhfe pvbLIWws5KPVzIaZsV9sRiy8mhrGNvtqjLy0fkoiaAy7dBoisQj5olCNscBebMWI rk9sXAM7LpP13RczCfiZQVMUd1uVLzK8i/gkyL6h6gdL5L82596k+5wi8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMwk+ER2uziUTITSZYmpxVE8keM9MB8GA1UdIwQY MBaAFMAWbiFsNgw24PdbDTkSPbrUImTpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0JadUlXdzJERGJnOTFzTk9SSTl1dFFpWk9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9iYjE5YmMtOGRhMS00NzI5LTg2ODYt ZmNjZTE0N2MzMjdhLzEvd0JadUlXdzJERGJnOTFzTk9SSTl1dFFpWk9rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9iYjE5YmMtOGRhMS00NzI5LTg2ODYtZmNjZTE0N2MzMjdh LzEvd0JadUlXdzJERGJnOTFzTk9SSTl1dFFpWk9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgMMW6oxO 7n2kq5phn3ZQEuIwBR3OPI0mcxAhuKc2ar6gs09eyyJ1p0Ar/Wquy82rPB0De3Bi KMGbdKBwTTChzU7q33JrqmK1T4UkEKgU0BS5gkDRnkuYhLASPxFfL2Az6DV8GO/1 9HMC7dHiqiTAs6dGeCKR3y9Ub7cQFZ/TrncsiR9ovOV1AGm/eRZSehtjTNesidCU hdNz9VQaEERZmLBiK0kSA+IHFiCbK7/bQ2hw0L73jksrS1xnIASyJIKqeE6gNZvo A43RhIRLshQ255dLP19OBH/AnvWUt0nhTCS4de0OyYC2POcq9sMXtZAV1XLamyBZ CPmifV9flYoGSQ== -----END CERTIFICATE-----Generated at Wed Jan 21 03:11:12 2026 by rpki-client