This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/88a55d-5163-433e-b478-d8a1c3295e89/1/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.mft File: wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.mft (raw, json) Hash identifier: 5Bzh/q5GjBwRohrO0tnaqkdF+8xXAUGGXvrl/+8jlWQ= Subject key identifier: 09:0A:05:44:69:38:6B:F7:7A:91:2E:1B:52:A0:FB:DB:AF:59:4E:F5 Authority key identifier: C1:3F:17:54:17:32:F5:7A:BF:F1:29:4C:71:B5:33:EB:56:74:6F:D6 Certificate issuer: /CN=c13f17541732f57abff1294c71b533eb56746fd6 Certificate serial: 019BFAD225ADA417E966532614162B187407 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/88a55d-5163-433e-b478-d8a1c3295e89/1/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.mft Manifest number: 17ED Signing time: Mon 26 Jan 2026 15:00:34 +0000 Manifest this update: Mon 26 Jan 2026 15:00:34 +0000 Manifest next update: Tue 27 Jan 2026 15:00:34 +0000 Files and hashes: 1: vHJ3_tVkd2GdWkqS4nCb67yzeNU.roa (hash: F8siYYIOWBqcJc18xZZBvTPob2dHLHgiU0/yM3ixtco=) 2: wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.crl (hash: hmAf2N6pqM/sJigzsF+VsIg3GubDS3p8KBz5Oh2CcWo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/88a55d-5163-433e-b478-d8a1c3295e89/1/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/88a55d-5163-433e-b478-d8a1c3295e89/1/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.mft rsync://rpki.ripe.net/repository/DEFAULT/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:d2:25:ad:a4:17:e9:66:53:26:14:16:2b:18:74:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c13f17541732f57abff1294c71b533eb56746fd6 Validity Not Before: Jan 26 15:00:34 2026 GMT Not After : Jan 27 15:00:34 2026 GMT Subject: CN=090a054469386bf77a912e1b52a0fbdbaf594ef5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:03:5a:ef:17:2b:9a:4a:09:fb:bf:f2:4f:66: 83:b8:5e:ad:c0:92:c3:a3:af:bd:3c:9e:3c:cf:cd: 6b:4f:88:2a:32:dc:c0:41:32:ae:ae:f3:c2:23:64: b2:98:47:90:c0:f7:1b:83:3c:f2:e4:ca:02:0f:e7: ef:40:ea:8d:74:ac:2a:59:32:00:e5:10:b7:5f:f9: c0:f9:5f:de:83:95:f7:8c:c2:da:40:db:5f:c0:ec: 74:d7:33:7d:c1:4e:91:33:06:e5:0c:08:13:52:83: 1a:33:8a:71:a4:83:1e:ae:73:ed:6b:ed:a6:c8:8e: 46:58:7a:7b:f1:94:66:c6:16:04:69:90:ec:25:24: c8:ae:70:76:a8:23:02:63:67:d2:97:0e:77:62:20: ac:bc:55:4f:0b:17:1e:6c:94:06:a0:29:cd:b3:a3: 69:3e:52:6f:23:54:6d:e5:16:1d:91:cc:23:ab:8a: 88:5a:19:19:1e:0e:06:aa:02:f4:fe:87:9d:83:8f: 2d:3b:9d:10:c3:eb:f5:76:a8:74:9c:91:55:14:04: b1:06:fd:14:47:0c:68:43:13:5b:da:24:cd:60:b5: de:0c:a2:a4:26:3e:da:12:9d:93:bd:76:3c:81:dd: 1a:f8:81:5d:7c:a1:cd:6e:9b:e9:7f:b8:37:c0:7a: 66:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:0A:05:44:69:38:6B:F7:7A:91:2E:1B:52:A0:FB:DB:AF:59:4E:F5 X509v3 Authority Key Identifier: keyid:C1:3F:17:54:17:32:F5:7A:BF:F1:29:4C:71:B5:33:EB:56:74:6F:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/88a55d-5163-433e-b478-d8a1c3295e89/1/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/88a55d-5163-433e-b478-d8a1c3295e89/1/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:77:07:ef:3f:1d:0b:79:aa:04:62:58:d8:0f:40:23:e2:43: 07:3b:fe:e2:80:97:de:78:2b:bf:9e:a1:6d:2d:f0:99:71:1e: d1:2e:fe:c5:aa:dc:77:b5:99:ca:f1:7b:3b:dd:86:ef:ea:16: 6b:de:e9:20:0f:f6:ac:51:d7:8c:3d:90:71:00:c5:1d:50:cd: 5e:b2:1f:7f:85:e1:71:fe:45:fc:0d:ee:75:6a:eb:15:52:38: 26:33:13:5b:6c:7a:9b:a1:f4:23:29:83:43:a3:06:1b:b6:0b: 2f:a8:be:25:ea:72:66:dd:59:1d:07:3a:28:3d:65:61:ff:72: f6:e4:90:5a:ec:34:80:8e:36:14:a0:d5:58:68:03:71:12:08: 0a:8f:38:92:af:b0:7b:26:5e:fa:89:05:17:c0:dd:59:e3:eb: 17:59:48:5a:14:05:08:8e:3a:3a:a5:88:24:64:73:3e:77:9e: 1a:32:55:48:2f:10:3e:5b:d7:4b:20:ca:ee:e9:53:6b:99:bc: 23:9b:0d:69:2a:11:ab:2a:21:71:57:39:a5:93:ea:95:4e:9a: bd:dc:7d:37:cb:69:87:c8:a7:6e:8e:73:a0:54:c6:54:2f:c4: 9a:c0:cd:01:95:96:46:50:cc:9e:df:ea:09:45:bd:58:c4:3b: 65:01:96:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv60iWtpBfpZlMmFBYrGHQHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxM2YxNzU0MTczMmY1N2FiZmYxMjk0YzcxYjUzM2ViNTY3 NDZmZDYwHhcNMjYwMTI2MTUwMDM0WhcNMjYwMTI3MTUwMDM0WjAzMTEwLwYDVQQD EygwOTBhMDU0NDY5Mzg2YmY3N2E5MTJlMWI1MmEwZmJkYmFmNTk0ZWY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwNa7xcrmkoJ+7/yT2aDuF6twJLD o6+9PJ48z81rT4gqMtzAQTKurvPCI2SymEeQwPcbgzzy5MoCD+fvQOqNdKwqWTIA 5RC3X/nA+V/eg5X3jMLaQNtfwOx01zN9wU6RMwblDAgTUoMaM4pxpIMernPta+2m yI5GWHp78ZRmxhYEaZDsJSTIrnB2qCMCY2fSlw53YiCsvFVPCxcebJQGoCnNs6Np PlJvI1Rt5RYdkcwjq4qIWhkZHg4GqgL0/oedg48tO50Qw+v1dqh0nJFVFASxBv0U RwxoQxNb2iTNYLXeDKKkJj7aEp2TvXY8gd0a+IFdfKHNbpvpf7g3wHpm6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAkKBURpOGv3epEuG1Kg+9uvWU71MB8GA1UdIwQY MBaAFME/F1QXMvV6v/EpTHG1M+tWdG/WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1Q4WFZCY3k5WHFfOFNsTWNiVXo2MVowYjlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS84OGE1NWQtNTE2My00MzNlLWI0Nzgt ZDhhMWMzMjk1ZTg5LzEvd1Q4WFZCY3k5WHFfOFNsTWNiVXo2MVowYjlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS84OGE1NWQtNTE2My00MzNlLWI0NzgtZDhhMWMzMjk1ZTg5 LzEvd1Q4WFZCY3k5WHFfOFNsTWNiVXo2MVowYjlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcncH7z8d C3mqBGJY2A9AI+JDBzv+4oCX3ngrv56hbS3wmXEe0S7+xarcd7WZyvF7O92G7+oW a97pIA/2rFHXjD2QcQDFHVDNXrIff4Xhcf5F/A3udWrrFVI4JjMTW2x6m6H0IymD Q6MGG7YLL6i+JepyZt1ZHQc6KD1lYf9y9uSQWuw0gI42FKDVWGgDcRIICo84kq+w eyZe+okFF8DdWePrF1lIWhQFCI46OqWIJGRzPneeGjJVSC8QPlvXSyDK7ulTa5m8 I5sNaSoRqyohcVc5pZPqlU6avdx9N8tph8inbo5zoFTGVC/EmsDNAZWWRlDMnt/q CUW9WMQ7ZQGWrg== -----END CERTIFICATE-----Generated at Mon Jan 26 18:22:54 2026 by rpki-client