This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.mft File: WHO1mFUN9b_byZp6HjlsNJW9qDs.mft (raw, json) Hash identifier: wnam1uVofOwFn0gdzWdweGy6Ok/hLu7fcnPaAi2hqNE= Subject key identifier: C3:79:EA:E4:BB:F1:C4:D0:EE:05:87:3E:4B:08:09:AC:1D:AC:F0:95 Authority key identifier: 58:73:B5:98:55:0D:F5:BF:DB:C9:9A:7A:1E:39:6C:34:95:BD:A8:3B Certificate issuer: /CN=5873b598550df5bfdbc99a7a1e396c3495bda83b Certificate serial: 019BFC537909CEF4A9AFCF092A15A7475E4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WHO1mFUN9b_byZp6HjlsNJW9qDs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.mft Manifest number: 17EF Signing time: Mon 26 Jan 2026 22:01:27 +0000 Manifest this update: Mon 26 Jan 2026 22:01:27 +0000 Manifest next update: Tue 27 Jan 2026 22:01:27 +0000 Files and hashes: 1: MbmOe617Beb8ehTTf8MQ_smqn_o.roa (hash: 1oDwnPrpmz2JYgXg/Xbn/cWn31YRvP1U3oEbkfTev+U=) 2: WHO1mFUN9b_byZp6HjlsNJW9qDs.crl (hash: GcBRfolZGDR2IHUkIhdRHpRcdGwJSgPApv1/wqzUZV0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.mft rsync://rpki.ripe.net/repository/DEFAULT/WHO1mFUN9b_byZp6HjlsNJW9qDs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 22:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:53:79:09:ce:f4:a9:af:cf:09:2a:15:a7:47:5e:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5873b598550df5bfdbc99a7a1e396c3495bda83b Validity Not Before: Jan 26 22:01:27 2026 GMT Not After : Jan 27 22:01:27 2026 GMT Subject: CN=c379eae4bbf1c4d0ee05873e4b0809ac1dacf095 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:95:04:0a:dd:cd:b3:ff:77:0e:0e:10:b4:1a: 6e:59:7b:60:30:2a:ef:28:a7:34:5e:97:5c:79:7f: f0:c7:9d:c0:45:ed:c2:c6:37:f1:0e:e2:d4:bd:f9: a0:78:6c:fb:b9:63:68:69:9d:7f:58:08:28:41:f0: bd:80:9b:88:cd:ec:9d:51:ea:da:d4:cd:ff:90:38: 32:1a:3d:a0:d2:a6:c9:47:90:d1:99:3d:88:50:fc: f2:ff:f3:ed:84:1b:11:97:36:f8:16:a2:90:b4:fb: 67:90:f7:e9:ca:e5:01:94:6a:76:d6:00:b1:a1:2f: 49:5b:b1:30:04:e9:5c:53:4e:37:a4:99:ed:3d:52: 73:5f:1d:d1:33:f1:3e:f9:b0:0a:7e:86:86:4a:29: 20:05:ab:48:3a:98:16:eb:66:12:b8:05:02:b2:57: e1:33:14:15:d2:09:8a:0f:21:70:47:7b:7a:6b:fd: 8e:29:03:88:3f:11:f6:ca:c3:5e:54:e4:cb:37:50: d0:07:0d:a2:5b:50:15:00:ed:32:6a:cd:9e:96:fd: ec:ad:50:84:e5:44:55:b9:e6:75:0e:bf:e6:95:85: 11:10:9a:b0:6c:92:b5:b8:18:e7:ea:bc:5b:fd:b5: bd:6a:cf:d7:ff:3c:97:33:b0:88:35:d7:7f:06:58: ed:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:79:EA:E4:BB:F1:C4:D0:EE:05:87:3E:4B:08:09:AC:1D:AC:F0:95 X509v3 Authority Key Identifier: keyid:58:73:B5:98:55:0D:F5:BF:DB:C9:9A:7A:1E:39:6C:34:95:BD:A8:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WHO1mFUN9b_byZp6HjlsNJW9qDs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:09:86:65:62:d2:2e:f8:e2:c9:b8:55:18:3a:c1:56:86:91: 4c:9d:5d:fe:92:43:70:2e:02:bd:53:8f:25:93:00:6e:14:19: e3:57:4c:bf:34:76:4c:1a:7f:08:aa:fd:ca:b4:44:74:3f:8d: 6b:0a:6c:e7:4f:15:ec:59:82:09:85:7d:ab:48:07:02:d0:9c: e1:08:cb:d3:a1:9d:bc:29:da:6f:ab:2a:dd:c0:7b:ac:36:b5: 49:ed:2e:6f:ea:20:40:23:5a:2b:e5:51:bb:0d:47:d8:bd:a0: 60:79:89:bc:10:51:ce:97:20:1f:07:99:07:04:75:55:0a:21: 20:6e:27:2f:7c:10:93:1d:9d:af:98:6b:25:1b:cc:ad:e4:c0: bf:82:23:a8:79:da:54:33:95:54:81:09:fc:47:76:df:ef:52: 80:50:30:f0:0b:18:f5:c6:db:38:98:78:8b:f8:d6:67:f8:f7: 72:cd:2f:bd:87:84:f2:09:9c:65:ab:3c:e3:63:71:1d:e4:3e: a2:a2:8b:bb:89:b7:4f:9b:35:88:cc:01:66:44:0a:fd:f9:51: c6:7f:38:b6:00:24:75:1f:9a:f9:1f:49:a7:33:57:f4:e9:56: ee:a0:37:fd:3e:e9:d4:e4:ac:3c:a1:3d:fb:69:9c:cc:15:ed: 03:0f:9c:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8U3kJzvSpr88JKhWnR15KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4NzNiNTk4NTUwZGY1YmZkYmM5OWE3YTFlMzk2YzM0OTVi ZGE4M2IwHhcNMjYwMTI2MjIwMTI3WhcNMjYwMTI3MjIwMTI3WjAzMTEwLwYDVQQD EyhjMzc5ZWFlNGJiZjFjNGQwZWUwNTg3M2U0YjA4MDlhYzFkYWNmMDk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5UECt3Ns/93Dg4QtBpuWXtgMCrv KKc0XpdceX/wx53ARe3CxjfxDuLUvfmgeGz7uWNoaZ1/WAgoQfC9gJuIzeydUera 1M3/kDgyGj2g0qbJR5DRmT2IUPzy//PthBsRlzb4FqKQtPtnkPfpyuUBlGp21gCx oS9JW7EwBOlcU043pJntPVJzXx3RM/E++bAKfoaGSikgBatIOpgW62YSuAUCslfh MxQV0gmKDyFwR3t6a/2OKQOIPxH2ysNeVOTLN1DQBw2iW1AVAO0yas2elv3srVCE 5URVueZ1Dr/mlYUREJqwbJK1uBjn6rxb/bW9as/X/zyXM7CINdd/BljtQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMN56uS78cTQ7gWHPksICawdrPCVMB8GA1UdIwQY MBaAFFhztZhVDfW/28maeh45bDSVvag7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0hPMW1GVU45Yl9ieVpwNkhqbHNOSlc5cURzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8xNDIzOGQtODU5MS00NzFmLTg5NWIt MTc2OWQxOTk0ZGY2LzEvV0hPMW1GVU45Yl9ieVpwNkhqbHNOSlc5cURzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy8xNDIzOGQtODU5MS00NzFmLTg5NWItMTc2OWQxOTk0ZGY2 LzEvV0hPMW1GVU45Yl9ieVpwNkhqbHNOSlc5cURzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdAmGZWLS LvjiybhVGDrBVoaRTJ1d/pJDcC4CvVOPJZMAbhQZ41dMvzR2TBp/CKr9yrREdD+N awps508V7FmCCYV9q0gHAtCc4QjL06GdvCnab6sq3cB7rDa1Se0ub+ogQCNaK+VR uw1H2L2gYHmJvBBRzpcgHweZBwR1VQohIG4nL3wQkx2dr5hrJRvMreTAv4IjqHna VDOVVIEJ/Ed23+9SgFAw8AsY9cbbOJh4i/jWZ/j3cs0vvYeE8gmcZas842NxHeQ+ oqKLu4m3T5s1iMwBZkQK/flRxn84tgAkdR+a+R9JpzNX9OlW7qA3/T7p1OSsPKE9 +2mczBXtAw+cpA== -----END CERTIFICATE-----Generated at Tue Jan 27 08:29:40 2026 by rpki-client