This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/wYXXJDrphs3khBTmrYHyIpwKV9g.mft File: wYXXJDrphs3khBTmrYHyIpwKV9g.mft (raw, json) Hash identifier: A1YlBjsFTOCmBvuT0A4/paY0CuLRjF1nemExCUPtY/U= Subject key identifier: CE:37:2B:15:18:6B:2C:A4:D3:B2:34:3D:9E:4C:38:5B:09:6B:DB:CF Authority key identifier: C1:85:D7:24:3A:E9:86:CD:E4:84:14:E6:AD:81:F2:22:9C:0A:57:D8 Certificate issuer: /CN=c185d7243ae986cde48414e6ad81f2229c0a57d8 Certificate serial: 019BFA2DF2760A8A2ED04AC17F4D92FC7B1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wYXXJDrphs3khBTmrYHyIpwKV9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/wYXXJDrphs3khBTmrYHyIpwKV9g.mft Manifest number: 1741 Signing time: Mon 26 Jan 2026 12:01:13 +0000 Manifest this update: Mon 26 Jan 2026 12:01:13 +0000 Manifest next update: Tue 27 Jan 2026 12:01:13 +0000 Files and hashes: 1: 8WXQxs7BfgUV2QrBN0b_sOFbe1k.roa (hash: t4kbmcJ+5L6lxyTeqkC36Es5ovqBT600hloF270F10g=) 2: wYXXJDrphs3khBTmrYHyIpwKV9g.crl (hash: 8G+l2NiOHoIoKvFeTNc6CTR+xZb/fOReN0YIwstY278=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/wYXXJDrphs3khBTmrYHyIpwKV9g.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/wYXXJDrphs3khBTmrYHyIpwKV9g.mft rsync://rpki.ripe.net/repository/DEFAULT/wYXXJDrphs3khBTmrYHyIpwKV9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:2d:f2:76:0a:8a:2e:d0:4a:c1:7f:4d:92:fc:7b:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c185d7243ae986cde48414e6ad81f2229c0a57d8 Validity Not Before: Jan 26 12:01:13 2026 GMT Not After : Jan 27 12:01:13 2026 GMT Subject: CN=ce372b15186b2ca4d3b2343d9e4c385b096bdbcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:46:8b:11:a5:a7:1e:30:ed:68:cc:32:40:bd: 00:af:19:e0:a8:6f:b6:26:27:da:b7:65:e6:d1:a6: ac:48:7e:72:75:d3:0c:af:6d:94:c4:fa:24:00:b7: 95:ca:04:bf:63:63:7d:0f:28:00:1e:0f:ed:17:e1: b1:67:7b:a4:0f:47:41:36:a8:1d:5c:8c:29:5e:55: c5:c4:de:8d:b5:66:ae:d8:4d:04:38:d3:70:03:54: 84:a5:07:97:ba:7f:1a:b4:7a:99:93:7e:28:ec:95: 5f:b4:b5:07:3f:f9:d5:b4:fc:3d:87:dc:b0:59:98: 7e:cc:35:32:76:d9:ae:38:f9:29:16:29:42:a1:d3: 21:89:a3:d5:4f:06:76:35:b1:19:78:1c:3d:50:69: c2:44:3c:a4:cf:b3:4e:4f:a4:12:f5:ff:cc:80:7d: d0:4a:80:4d:3a:46:62:5c:6f:e4:a1:fb:a1:c0:87: 95:1a:46:f1:6c:c1:6f:07:7f:04:d5:a3:81:fb:cb: 15:4f:1a:2d:0e:09:1d:21:53:30:89:22:5a:93:0b: d9:fe:28:d3:8a:3c:29:58:f4:80:49:6f:3a:58:84: e1:14:dd:4d:e8:81:b8:e3:8c:e8:2a:31:99:07:e7: 04:8f:1e:fa:df:4b:c2:d6:4f:d9:a1:c0:d6:9e:3f: e5:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:37:2B:15:18:6B:2C:A4:D3:B2:34:3D:9E:4C:38:5B:09:6B:DB:CF X509v3 Authority Key Identifier: keyid:C1:85:D7:24:3A:E9:86:CD:E4:84:14:E6:AD:81:F2:22:9C:0A:57:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wYXXJDrphs3khBTmrYHyIpwKV9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/wYXXJDrphs3khBTmrYHyIpwKV9g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/wYXXJDrphs3khBTmrYHyIpwKV9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:9d:5e:52:f2:2b:4f:73:87:43:1c:f0:f5:84:66:0d:11:79: cd:f4:03:38:87:89:ac:c4:a8:a4:c7:3a:72:0a:96:7e:9a:eb: 9b:3d:e0:57:3f:91:59:3f:57:ec:c8:34:b5:11:bb:a7:06:cb: b7:5a:e3:b6:3c:e4:5f:c5:ce:b5:93:6b:27:9e:c2:c0:f6:11: 8b:96:3c:32:aa:13:be:26:53:a9:07:ab:2f:a8:dc:49:db:39: 9b:4b:39:9c:ef:af:9a:ce:83:14:cf:9d:60:04:52:d1:35:4a: 89:6a:52:65:40:10:5d:9f:e1:e9:c3:9a:83:a9:c9:fd:48:fd: 82:3a:f7:7c:e1:ca:fe:7d:40:1d:b2:ca:cc:56:aa:79:93:98: 20:40:09:3a:f3:e6:6f:b3:0c:2f:84:00:ea:db:f9:90:c2:9e: db:fc:d3:6c:38:d3:3d:4a:25:3a:e7:89:94:91:44:dc:90:54: 58:70:74:b1:95:4d:1b:46:9a:a7:7f:2b:6b:9c:ac:72:0f:37: 94:d9:7d:31:e8:2b:ad:d4:61:a3:eb:b0:f4:4c:1c:a3:07:af: c2:72:d4:c6:35:51:20:e9:b3:9c:36:1a:ed:12:1a:1b:12:b0: 6c:65:3b:f4:31:c5:d5:1b:64:00:e4:4f:52:f4:01:6c:7e:76: a0:28:67:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6LfJ2Coou0ErBf02S/HseMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxODVkNzI0M2FlOTg2Y2RlNDg0MTRlNmFkODFmMjIyOWMw YTU3ZDgwHhcNMjYwMTI2MTIwMTEzWhcNMjYwMTI3MTIwMTEzWjAzMTEwLwYDVQQD EyhjZTM3MmIxNTE4NmIyY2E0ZDNiMjM0M2Q5ZTRjMzg1YjA5NmJkYmNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEaLEaWnHjDtaMwyQL0ArxngqG+2 Jifat2Xm0aasSH5yddMMr22UxPokALeVygS/Y2N9DygAHg/tF+GxZ3ukD0dBNqgd XIwpXlXFxN6NtWau2E0EONNwA1SEpQeXun8atHqZk34o7JVftLUHP/nVtPw9h9yw WZh+zDUydtmuOPkpFilCodMhiaPVTwZ2NbEZeBw9UGnCRDykz7NOT6QS9f/MgH3Q SoBNOkZiXG/kofuhwIeVGkbxbMFvB38E1aOB+8sVTxotDgkdIVMwiSJakwvZ/ijT ijwpWPSASW86WIThFN1N6IG444zoKjGZB+cEjx7630vC1k/ZocDWnj/lRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM43KxUYayyk07I0PZ5MOFsJa9vPMB8GA1UdIwQY MBaAFMGF1yQ66YbN5IQU5q2B8iKcClfYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1lYWEpEcnBoczNraEJUbXJZSHlJcHdLVjlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9mYzM5MmEtNmEzZS00ZGE1LWI3Yjkt YTdlZGI3ZDNmNTM3LzEvd1lYWEpEcnBoczNraEJUbXJZSHlJcHdLVjlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9mYzM5MmEtNmEzZS00ZGE1LWI3YjktYTdlZGI3ZDNmNTM3 LzEvd1lYWEpEcnBoczNraEJUbXJZSHlJcHdLVjlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZZ1eUvIr T3OHQxzw9YRmDRF5zfQDOIeJrMSopMc6cgqWfprrmz3gVz+RWT9X7Mg0tRG7pwbL t1rjtjzkX8XOtZNrJ57CwPYRi5Y8MqoTviZTqQerL6jcSds5m0s5nO+vms6DFM+d YARS0TVKiWpSZUAQXZ/h6cOag6nJ/Uj9gjr3fOHK/n1AHbLKzFaqeZOYIEAJOvPm b7MML4QA6tv5kMKe2/zTbDjTPUolOueJlJFE3JBUWHB0sZVNG0aap38ra5yscg83 lNl9MegrrdRho+uw9EwcowevwnLUxjVRIOmznDYa7RIaGxKwbGU79DHF1RtkAORP UvQBbH52oChneA== -----END CERTIFICATE-----Generated at Mon Jan 26 20:49:43 2026 by rpki-client