This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft File: w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft (raw, json) Hash identifier: 2mhI2SbWQ8ODBszUI1Ebz0p+qLE8pAd9by3IttKANp4= Subject key identifier: 38:8B:5B:9F:7C:22:FF:1D:89:70:AC:DA:BF:0F:79:5C:D4:0C:80:C9 Authority key identifier: C3:5F:03:94:9E:66:1E:24:BE:0F:1E:08:C6:4D:AD:05:E3:1C:4E:AF Certificate issuer: /CN=c35f03949e661e24be0f1e08c64dad05e31c4eaf Certificate serial: 019BFD6575099582BD6BE0C4EB21D6E40102 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft Manifest number: 17F7 Signing time: Tue 27 Jan 2026 03:00:43 +0000 Manifest this update: Tue 27 Jan 2026 03:00:43 +0000 Manifest next update: Wed 28 Jan 2026 03:00:43 +0000 Files and hashes: 1: 77h1Q6qUz5qlMm7h_AznswYtOZ0.roa (hash: sRXxLopp6/463zgP26zWNJzhuSr+AeItnoxYVZGJazU=) 2: HN1urgNHkidDzjrtQwQt8embI9M.roa (hash: EeB/nRcF8dH+A2iZTqxjbaTiyibP5r0zfqmmI1yddPU=) 3: w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.crl (hash: +b6jzY64aCdZDOm8pOWNP9HMfpe2BFUfe8oTxnz31Ao=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft rsync://rpki.ripe.net/repository/DEFAULT/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fd:65:75:09:95:82:bd:6b:e0:c4:eb:21:d6:e4:01:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c35f03949e661e24be0f1e08c64dad05e31c4eaf Validity Not Before: Jan 27 03:00:43 2026 GMT Not After : Jan 28 03:00:43 2026 GMT Subject: CN=388b5b9f7c22ff1d8970acdabf0f795cd40c80c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e4:c4:ae:3e:50:36:05:d2:f2:6e:fa:0d:31: aa:2a:fb:6c:72:13:47:79:30:ab:bd:c8:23:55:03: ec:df:b0:a5:62:f8:cb:94:09:81:d5:65:39:ec:72: 19:e7:05:f1:df:d3:8a:b0:1f:25:a2:ce:d7:3f:45: 1a:f3:97:2c:b4:62:89:e5:7d:88:30:d7:5e:43:ae: 8d:1b:ff:65:97:f6:d7:48:02:36:02:e6:b3:89:1c: 30:a9:38:57:7c:87:b4:37:6e:91:84:7d:fd:39:e8: 85:77:45:10:2f:3a:4f:be:13:35:b6:e5:95:58:85: a5:42:6c:ae:19:aa:83:38:f9:aa:c3:6a:f8:88:19: 45:d0:e9:1b:32:68:e6:ff:fb:c6:95:e2:30:36:60: ea:b4:cf:5a:04:1c:f4:04:f2:0c:fc:e5:91:70:a4: 4b:aa:8e:f0:35:84:02:a7:a1:0a:68:4a:70:8d:4c: 7a:b0:a9:95:38:1d:d7:36:9e:05:8b:e7:ff:10:46: 20:00:81:c9:de:83:77:03:e2:22:b7:77:22:e2:e8: b6:d4:fb:a2:35:ce:86:a8:05:d9:1a:82:37:a5:69: 4d:6f:b9:ea:05:1c:c5:20:a2:9f:77:4e:3f:e8:3a: 86:31:7e:c0:32:b6:a2:3c:c4:ba:74:a6:77:23:24: 6c:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:8B:5B:9F:7C:22:FF:1D:89:70:AC:DA:BF:0F:79:5C:D4:0C:80:C9 X509v3 Authority Key Identifier: keyid:C3:5F:03:94:9E:66:1E:24:BE:0F:1E:08:C6:4D:AD:05:E3:1C:4E:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:61:d4:c4:3e:a9:6a:43:ec:c7:62:d7:6d:59:40:e7:53:c8: bb:ed:44:59:7a:76:c1:d6:5a:50:95:5b:71:ae:4e:01:aa:64: 90:72:48:23:57:e1:2c:77:4e:34:ab:c0:18:46:35:b6:ab:b6: 86:ce:ce:2a:77:14:e4:1e:c2:11:98:c6:68:b1:bd:2e:0b:6c: e5:7c:0a:b4:ec:cd:3a:80:24:f0:b2:08:1f:a2:6a:52:a8:50: ce:75:d1:20:d1:21:42:db:b7:3e:68:70:21:4a:4b:36:a6:1a: 51:66:78:22:ee:5b:8a:36:e1:71:d3:0c:a9:f1:18:69:b7:4b: e6:e5:f2:9b:5e:cd:27:df:a1:07:7b:ec:1c:e0:4d:da:bb:7d: 63:32:a9:b1:2f:72:41:82:ae:3a:dd:3f:1f:34:76:32:73:a8: 67:63:e1:38:8d:5f:21:45:35:87:8f:2d:3f:3a:7f:27:87:21: 79:9a:0a:99:7c:88:df:64:e8:2a:44:e4:a8:19:5b:1c:3e:3a: f0:1a:58:7c:2c:de:3b:d7:72:02:88:8f:8c:4f:71:e7:6e:c0: eb:4c:31:b6:0b:d2:59:75:e6:a6:27:c0:9b:cf:9f:14:8f:7e: 30:c9:16:90:f7:a5:c7:df:7c:57:16:79:e7:ef:a7:6b:e7:ed: 94:2a:15:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv9ZXUJlYK9a+DE6yHW5AECMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzNWYwMzk0OWU2NjFlMjRiZTBmMWUwOGM2NGRhZDA1ZTMx YzRlYWYwHhcNMjYwMTI3MDMwMDQzWhcNMjYwMTI4MDMwMDQzWjAzMTEwLwYDVQQD EygzODhiNWI5ZjdjMjJmZjFkODk3MGFjZGFiZjBmNzk1Y2Q0MGM4MGM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOTErj5QNgXS8m76DTGqKvtschNH eTCrvcgjVQPs37ClYvjLlAmB1WU57HIZ5wXx39OKsB8los7XP0Ua85cstGKJ5X2I MNdeQ66NG/9ll/bXSAI2AuaziRwwqThXfIe0N26RhH39OeiFd0UQLzpPvhM1tuWV WIWlQmyuGaqDOPmqw2r4iBlF0OkbMmjm//vGleIwNmDqtM9aBBz0BPIM/OWRcKRL qo7wNYQCp6EKaEpwjUx6sKmVOB3XNp4Fi+f/EEYgAIHJ3oN3A+Iit3ci4ui21Pui Nc6GqAXZGoI3pWlNb7nqBRzFIKKfd04/6DqGMX7AMraiPMS6dKZ3IyRs/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDiLW598Iv8diXCs2r8PeVzUDIDJMB8GA1UdIwQY MBaAFMNfA5SeZh4kvg8eCMZNrQXjHE6vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzE4RGxKNW1IaVMtRHg0SXhrMnRCZU1jVHE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8yODlmYzItZjI3OC00ZjY2LWI4ZWMt Yzc0M2NiNmQyZmMzLzEvdzE4RGxKNW1IaVMtRHg0SXhrMnRCZU1jVHE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8yODlmYzItZjI3OC00ZjY2LWI4ZWMtYzc0M2NiNmQyZmMz LzEvdzE4RGxKNW1IaVMtRHg0SXhrMnRCZU1jVHE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqWHUxD6p akPsx2LXbVlA51PIu+1EWXp2wdZaUJVbca5OAapkkHJII1fhLHdONKvAGEY1tqu2 hs7OKncU5B7CEZjGaLG9Lgts5XwKtOzNOoAk8LIIH6JqUqhQznXRINEhQtu3Pmhw IUpLNqYaUWZ4Iu5bijbhcdMMqfEYabdL5uXym17NJ9+hB3vsHOBN2rt9YzKpsS9y QYKuOt0/HzR2MnOoZ2PhOI1fIUU1h48tPzp/J4cheZoKmXyI32ToKkTkqBlbHD46 8BpYfCzeO9dyAoiPjE9x527A60wxtgvSWXXmpifAm8+fFI9+MMkWkPelx998VxZ5 5++na+ftlCoVSg== -----END CERTIFICATE-----Generated at Tue Jan 27 04:46:22 2026 by rpki-client