This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/92bcf4-d0f2-4f9e-874d-c2c6f6a4097f/1/W0lMbhb0nQi-dhyowOqnEihy-oI.mft File: W0lMbhb0nQi-dhyowOqnEihy-oI.mft (raw, json) Hash identifier: RnD2z9sykPO53Qb5DZL1ubUBX1fKn+/PAYnueqX7JZU= Subject key identifier: B3:CF:EC:93:5D:BA:91:C8:8C:20:50:D9:60:A2:FE:54:3D:10:A3:09 Authority key identifier: 5B:49:4C:6E:16:F4:9D:08:BE:76:1C:A8:C0:EA:A7:12:28:72:FA:82 Certificate issuer: /CN=5b494c6e16f49d08be761ca8c0eaa7122872fa82 Certificate serial: 019BF9C0A8F99806583E010750C847F78E29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W0lMbhb0nQi-dhyowOqnEihy-oI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/92bcf4-d0f2-4f9e-874d-c2c6f6a4097f/1/W0lMbhb0nQi-dhyowOqnEihy-oI.mft Manifest number: 17EB Signing time: Mon 26 Jan 2026 10:01:51 +0000 Manifest this update: Mon 26 Jan 2026 10:01:51 +0000 Manifest next update: Tue 27 Jan 2026 10:01:51 +0000 Files and hashes: 1: W0lMbhb0nQi-dhyowOqnEihy-oI.crl (hash: IqSRcwoGjWKv+kMaqMuDCJBo13HwjKPeUUAWQ0P/ob8=) 2: y5dSGThy3CbU6qNsZJXz6GjosIQ.roa (hash: 1sAH2jAfu08ukseLTG+XyL0AYKo9iWcn/0uV+h9Djr8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/92bcf4-d0f2-4f9e-874d-c2c6f6a4097f/1/W0lMbhb0nQi-dhyowOqnEihy-oI.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/92bcf4-d0f2-4f9e-874d-c2c6f6a4097f/1/W0lMbhb0nQi-dhyowOqnEihy-oI.mft rsync://rpki.ripe.net/repository/DEFAULT/W0lMbhb0nQi-dhyowOqnEihy-oI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:01:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:c0:a8:f9:98:06:58:3e:01:07:50:c8:47:f7:8e:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b494c6e16f49d08be761ca8c0eaa7122872fa82 Validity Not Before: Jan 26 10:01:51 2026 GMT Not After : Jan 27 10:01:51 2026 GMT Subject: CN=b3cfec935dba91c88c2050d960a2fe543d10a309 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:00:8e:e1:3b:81:ae:a3:a0:69:1e:74:7b:cb: c0:f8:0c:2b:ab:94:02:66:3d:94:62:72:df:75:be: 6c:91:4e:29:bf:3f:f5:d7:5e:f2:14:9c:cf:80:72: c5:ae:55:f6:17:87:fd:59:df:60:95:6a:d0:c3:c7: 9f:c5:e8:38:c4:40:e2:9a:7d:50:50:05:8b:fd:21: 15:10:54:46:5f:20:68:9c:1c:ff:4a:b1:b7:8e:d7: 95:7a:37:00:33:fd:16:77:3e:92:0a:94:d3:a4:00: a3:32:7c:e1:a2:9e:80:9b:a8:f1:56:08:02:d9:d0: 76:1f:1f:9d:6f:95:34:a3:a7:9f:64:88:fc:40:35: 51:c2:d9:47:af:9e:64:7d:a4:f6:21:95:0b:b7:de: 2d:cf:fd:73:8d:73:64:de:9e:73:a8:cc:cb:95:c7: 2a:ee:07:ba:de:0d:5d:93:a4:d1:4f:db:1c:c1:26: 3e:2e:cd:f7:6b:78:3d:e1:13:e6:eb:ff:ab:47:fb: 13:4d:3d:a5:02:b6:71:53:5f:c7:c3:54:e0:29:77: 53:83:db:fd:02:c1:35:93:f9:90:09:49:04:0c:fe: dd:ac:5f:c4:69:56:7e:88:0d:7d:88:25:f0:39:32: 15:95:c9:ac:0f:6e:d0:92:b5:fa:7d:ff:8e:61:cf: 3b:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:CF:EC:93:5D:BA:91:C8:8C:20:50:D9:60:A2:FE:54:3D:10:A3:09 X509v3 Authority Key Identifier: keyid:5B:49:4C:6E:16:F4:9D:08:BE:76:1C:A8:C0:EA:A7:12:28:72:FA:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W0lMbhb0nQi-dhyowOqnEihy-oI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/92bcf4-d0f2-4f9e-874d-c2c6f6a4097f/1/W0lMbhb0nQi-dhyowOqnEihy-oI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/92bcf4-d0f2-4f9e-874d-c2c6f6a4097f/1/W0lMbhb0nQi-dhyowOqnEihy-oI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:76:c9:31:f4:34:0b:b2:34:b7:49:9a:18:58:b8:42:c8:99: d5:20:fb:39:db:24:28:25:33:2e:9d:15:3e:2e:a1:c3:bc:12: 25:a4:41:e5:e2:74:fd:97:e1:96:cc:c3:49:3f:51:33:dc:cf: 04:66:ea:39:88:02:a8:d0:d7:8f:99:88:a6:ad:bd:2d:a7:4d: 94:15:ec:14:83:27:56:9d:e7:e6:0b:7f:f0:17:6d:53:14:5c: 1b:a8:a9:ae:c5:4b:c7:dd:96:3d:94:5e:6a:26:03:c5:13:0b: d6:92:9e:8e:03:0b:1e:f3:cf:80:7b:3c:42:dd:99:8f:15:11: d4:66:2e:19:52:88:7b:f9:cb:eb:8a:47:cc:c5:a1:ee:5b:6a: 24:1c:a1:bd:8d:97:5e:7f:e9:8c:10:1b:2e:cf:7b:60:4a:c9: 79:49:10:89:f9:ac:1e:32:09:e8:ef:47:31:85:52:b3:76:b5: 56:76:00:84:ed:5e:1e:36:73:cd:0f:8f:26:a7:2d:3a:54:16: e9:2d:9a:e1:1b:bb:a5:5e:f6:44:03:bd:8b:28:e9:1a:3f:65: 97:95:8d:60:1b:fc:d6:67:8a:c6:3e:5d:58:0f:f0:b8:c1:39: 69:f8:3b:37:2e:59:70:c3:a4:b5:3e:00:f7:eb:a9:4e:ac:be: b9:45:38:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5wKj5mAZYPgEHUMhH944pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViNDk0YzZlMTZmNDlkMDhiZTc2MWNhOGMwZWFhNzEyMjg3 MmZhODIwHhcNMjYwMTI2MTAwMTUxWhcNMjYwMTI3MTAwMTUxWjAzMTEwLwYDVQQD EyhiM2NmZWM5MzVkYmE5MWM4OGMyMDUwZDk2MGEyZmU1NDNkMTBhMzA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuACO4TuBrqOgaR50e8vA+Awrq5QC Zj2UYnLfdb5skU4pvz/1117yFJzPgHLFrlX2F4f9Wd9glWrQw8efxeg4xEDimn1Q UAWL/SEVEFRGXyBonBz/SrG3jteVejcAM/0Wdz6SCpTTpACjMnzhop6Am6jxVggC 2dB2Hx+db5U0o6efZIj8QDVRwtlHr55kfaT2IZULt94tz/1zjXNk3p5zqMzLlccq 7ge63g1dk6TRT9scwSY+Ls33a3g94RPm6/+rR/sTTT2lArZxU1/Hw1TgKXdTg9v9 AsE1k/mQCUkEDP7drF/EaVZ+iA19iCXwOTIVlcmsD27QkrX6ff+OYc87ZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLPP7JNdupHIjCBQ2WCi/lQ9EKMJMB8GA1UdIwQY MBaAFFtJTG4W9J0IvnYcqMDqpxIocvqCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzBsTWJoYjBuUWktZGh5b3dPcW5FaWh5LW9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy85MmJjZjQtZDBmMi00ZjllLTg3NGQt YzJjNmY2YTQwOTdmLzEvVzBsTWJoYjBuUWktZGh5b3dPcW5FaWh5LW9JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy85MmJjZjQtZDBmMi00ZjllLTg3NGQtYzJjNmY2YTQwOTdm LzEvVzBsTWJoYjBuUWktZGh5b3dPcW5FaWh5LW9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfnbJMfQ0 C7I0t0maGFi4QsiZ1SD7OdskKCUzLp0VPi6hw7wSJaRB5eJ0/ZfhlszDST9RM9zP BGbqOYgCqNDXj5mIpq29LadNlBXsFIMnVp3n5gt/8BdtUxRcG6iprsVLx92WPZRe aiYDxRML1pKejgMLHvPPgHs8Qt2ZjxUR1GYuGVKIe/nL64pHzMWh7ltqJByhvY2X Xn/pjBAbLs97YErJeUkQifmsHjIJ6O9HMYVSs3a1VnYAhO1eHjZzzQ+PJqctOlQW 6S2a4Ru7pV72RAO9iyjpGj9ll5WNYBv81meKxj5dWA/wuME5afg7Ny5ZcMOktT4A 9+upTqy+uUU4jw== -----END CERTIFICATE-----Generated at Mon Jan 26 18:41:57 2026 by rpki-client