This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/f5e26b-787a-4013-b635-8582810208c6/1/wBgy1Ug13BTpEp4LprJRSzlLydM.mft File: wBgy1Ug13BTpEp4LprJRSzlLydM.mft (raw, json) Hash identifier: e/Yt3yoO/o+ka1ZFjyPqh4weL7NOJfJ+L51LimtbgM8= Subject key identifier: C2:7A:1F:C6:60:46:CB:4A:BC:6D:3E:96:42:72:D9:94:4C:F3:7B:24 Authority key identifier: C0:18:32:D5:48:35:DC:14:E9:12:9E:0B:A6:B2:51:4B:39:4B:C9:D3 Certificate issuer: /CN=c01832d54835dc14e9129e0ba6b2514b394bc9d3 Certificate serial: 019B89BCEF8A73F80BE1301D5C34D04C720C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wBgy1Ug13BTpEp4LprJRSzlLydM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/f5e26b-787a-4013-b635-8582810208c6/1/wBgy1Ug13BTpEp4LprJRSzlLydM.mft Manifest number: 17AD Signing time: Sun 04 Jan 2026 16:00:19 +0000 Manifest this update: Sun 04 Jan 2026 16:00:19 +0000 Manifest next update: Mon 05 Jan 2026 16:00:19 +0000 Files and hashes: 1: wBgy1Ug13BTpEp4LprJRSzlLydM.crl (hash: be9qLZGWay+Rzi3UD5DLAIlB8Erp46KLSkX0DWt76bc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/f5e26b-787a-4013-b635-8582810208c6/1/wBgy1Ug13BTpEp4LprJRSzlLydM.crl rsync://rpki.ripe.net/repository/DEFAULT/15/f5e26b-787a-4013-b635-8582810208c6/1/wBgy1Ug13BTpEp4LprJRSzlLydM.mft rsync://rpki.ripe.net/repository/DEFAULT/wBgy1Ug13BTpEp4LprJRSzlLydM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 05 Jan 2026 16:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:89:bc:ef:8a:73:f8:0b:e1:30:1d:5c:34:d0:4c:72:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c01832d54835dc14e9129e0ba6b2514b394bc9d3 Validity Not Before: Jan 4 16:00:19 2026 GMT Not After : Jan 5 16:00:19 2026 GMT Subject: CN=c27a1fc66046cb4abc6d3e964272d9944cf37b24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:03:a5:b7:a8:07:ee:f1:cd:9b:de:14:2d:06: 96:b5:f2:96:0b:0c:56:ef:b5:3d:b9:fa:8f:5b:b6: 4e:0c:41:c4:ab:7c:28:96:e5:c5:ef:0d:f6:c6:ff: 04:0d:cc:ed:55:0d:1d:5b:41:f8:77:fb:26:27:99: 9f:1e:28:ea:db:3e:b9:ff:66:e0:67:ef:10:d7:23: 39:3a:47:74:0b:d7:af:a2:b8:27:b5:bd:b7:52:09: 53:fa:97:f6:77:5b:72:78:38:4c:d0:66:b0:66:6b: de:d3:d1:e0:ac:a3:b1:d8:92:61:f1:69:ed:1a:25: c2:a6:d9:28:26:89:b8:70:6a:9d:5a:88:7f:ff:f1: d9:20:a3:60:8d:e6:e5:df:0c:77:38:4d:c3:5e:88: c2:45:9b:a7:b7:eb:45:14:09:09:24:94:ae:e2:1d: 2a:f4:a5:48:c4:a5:ab:c2:71:94:a5:41:1a:f6:d5: 7a:20:43:53:e5:9b:40:76:7b:77:e0:b8:7f:4f:b0: 69:0a:bd:63:44:c3:08:ca:77:a5:cd:b7:40:46:6e: f8:8d:73:f9:94:71:19:7e:45:fe:f2:69:36:e5:d9: 5b:6f:5b:ff:35:2b:9c:79:67:d8:1b:0d:79:9b:e3: 3b:13:e3:3a:41:72:29:bc:50:8c:d5:ff:43:a3:9a: 90:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:7A:1F:C6:60:46:CB:4A:BC:6D:3E:96:42:72:D9:94:4C:F3:7B:24 X509v3 Authority Key Identifier: keyid:C0:18:32:D5:48:35:DC:14:E9:12:9E:0B:A6:B2:51:4B:39:4B:C9:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBgy1Ug13BTpEp4LprJRSzlLydM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/f5e26b-787a-4013-b635-8582810208c6/1/wBgy1Ug13BTpEp4LprJRSzlLydM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/f5e26b-787a-4013-b635-8582810208c6/1/wBgy1Ug13BTpEp4LprJRSzlLydM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:e2:ac:b1:bb:c9:97:4a:0e:85:b5:33:1f:91:1f:9a:2b:a0: bc:30:9d:63:0a:79:38:3c:75:3c:98:f6:40:ce:29:38:22:20: e1:d5:84:48:03:36:d3:b7:c6:d4:e5:18:05:c9:03:a0:60:d6: dc:86:00:8e:e6:4c:31:50:28:fd:97:99:9b:8e:08:3d:35:63: b6:f7:3a:fd:72:00:94:02:ab:df:1c:39:fe:03:87:fe:a7:7c: 54:dd:f9:50:da:48:5b:74:0b:f5:e3:4e:8c:7d:b8:30:6b:c7: ad:4a:06:1b:1c:9e:f5:3f:96:56:0e:87:b1:fc:60:55:cc:7d: dc:b1:3b:39:8f:41:58:b8:d6:6d:45:5f:3a:23:de:01:69:3e: fe:c8:01:e2:26:eb:9f:b4:8b:1c:1a:a9:71:35:73:72:ed:5a: e1:50:52:b0:59:13:d5:c0:12:67:83:e8:1b:91:cc:85:80:08: f6:2d:55:bd:dc:bd:74:28:37:76:93:ee:2e:c6:13:2b:40:4c: 35:8e:6e:fe:1a:91:54:dc:4e:04:0d:bd:55:50:39:85:fb:cc: e8:28:89:c4:c5:b2:ea:e2:f8:c3:46:ac:14:49:ef:26:14:ea: c6:c6:86:fb:48:18:40:61:d2:bf:b8:9c:16:44:0a:00:bd:59: b3:8d:52:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuJvO+Kc/gL4TAdXDTQTHIMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwMTgzMmQ1NDgzNWRjMTRlOTEyOWUwYmE2YjI1MTRiMzk0 YmM5ZDMwHhcNMjYwMTA0MTYwMDE5WhcNMjYwMTA1MTYwMDE5WjAzMTEwLwYDVQQD EyhjMjdhMWZjNjYwNDZjYjRhYmM2ZDNlOTY0MjcyZDk5NDRjZjM3YjI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQOlt6gH7vHNm94ULQaWtfKWCwxW 77U9ufqPW7ZODEHEq3woluXF7w32xv8EDcztVQ0dW0H4d/smJ5mfHijq2z65/2bg Z+8Q1yM5Okd0C9evorgntb23UglT+pf2d1tyeDhM0GawZmve09HgrKOx2JJh8Wnt GiXCptkoJom4cGqdWoh///HZIKNgjebl3wx3OE3DXojCRZunt+tFFAkJJJSu4h0q 9KVIxKWrwnGUpUEa9tV6IENT5ZtAdnt34Lh/T7BpCr1jRMMIynelzbdARm74jXP5 lHEZfkX+8mk25dlbb1v/NSuceWfYGw15m+M7E+M6QXIpvFCM1f9Do5qQ9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMJ6H8ZgRstKvG0+lkJy2ZRM83skMB8GA1UdIwQY MBaAFMAYMtVINdwU6RKeC6ayUUs5S8nTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0JneTFVZzEzQlRwRXA0THBySlJTemxMeWRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9mNWUyNmItNzg3YS00MDEzLWI2MzUt ODU4MjgxMDIwOGM2LzEvd0JneTFVZzEzQlRwRXA0THBySlJTemxMeWRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS9mNWUyNmItNzg3YS00MDEzLWI2MzUtODU4MjgxMDIwOGM2 LzEvd0JneTFVZzEzQlRwRXA0THBySlJTemxMeWRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA+KssbvJ l0oOhbUzH5EfmiugvDCdYwp5ODx1PJj2QM4pOCIg4dWESAM207fG1OUYBckDoGDW 3IYAjuZMMVAo/ZeZm44IPTVjtvc6/XIAlAKr3xw5/gOH/qd8VN35UNpIW3QL9eNO jH24MGvHrUoGGxye9T+WVg6HsfxgVcx93LE7OY9BWLjWbUVfOiPeAWk+/sgB4ibr n7SLHBqpcTVzcu1a4VBSsFkT1cASZ4PoG5HMhYAI9i1Vvdy9dCg3dpPuLsYTK0BM NY5u/hqRVNxOBA29VVA5hfvM6CiJxMWy6uL4w0asFEnvJhTqxsaG+0gYQGHSv7ic FkQKAL1Zs41Svg== -----END CERTIFICATE-----Generated at Mon Jan 5 01:49:13 2026 by rpki-client