This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/11cc2a-ad66-4d2a-9e30-1f59bc7287cd/1/Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.mft File: Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.mft (raw, json) Hash identifier: OIlnTgHbVzgIjo4HN2nSIrVxphO4TrIpSfO0wE0jTSs= Subject key identifier: 39:49:38:8B:82:01:BC:92:63:CB:20:A9:B1:E4:16:B2:B1:F5:93:DC Authority key identifier: 5A:0E:48:8B:B0:9D:28:73:D6:62:E2:84:6A:22:88:A4:25:DE:D9:46 Certificate issuer: /CN=5a0e488bb09d2873d662e2846a2288a425ded946 Certificate serial: 019B7C3908562AEE4A644F708B44F4804ED1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/11cc2a-ad66-4d2a-9e30-1f59bc7287cd/1/Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.mft Manifest number: 03BF Signing time: Fri 02 Jan 2026 01:01:11 +0000 Manifest this update: Fri 02 Jan 2026 01:01:11 +0000 Manifest next update: Sat 03 Jan 2026 01:01:11 +0000 Files and hashes: 1: Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.crl (hash: lYUo7YEjCBUgYLIRskxqSXmfa0DhYW2fFhfhSuKEW7s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/11cc2a-ad66-4d2a-9e30-1f59bc7287cd/1/Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.crl rsync://rpki.ripe.net/repository/DEFAULT/21/11cc2a-ad66-4d2a-9e30-1f59bc7287cd/1/Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.mft rsync://rpki.ripe.net/repository/DEFAULT/Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 01:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:39:08:56:2a:ee:4a:64:4f:70:8b:44:f4:80:4e:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a0e488bb09d2873d662e2846a2288a425ded946 Validity Not Before: Jan 2 01:01:11 2026 GMT Not After : Jan 3 01:01:11 2026 GMT Subject: CN=3949388b8201bc9263cb20a9b1e416b2b1f593dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:5c:87:d5:77:1e:2e:04:ae:28:0a:cf:3a:ac: 08:ac:48:94:d9:0f:67:f0:5a:a9:3f:c6:1d:bd:40: 44:97:b0:20:ac:9c:36:bb:a5:90:98:c7:38:12:07: 43:dd:98:28:32:2b:87:dd:ed:dc:b0:a4:a9:3f:52: 75:12:db:2e:bd:d3:4e:8c:0a:cc:f7:34:c8:88:15: 11:da:95:46:6f:04:fc:50:bf:39:8a:8c:7b:b2:2d: 20:d3:8e:bb:94:e2:ec:c7:7b:08:dd:9b:16:52:b6: fa:66:38:33:97:36:d4:cd:20:75:f1:1b:66:00:69: 7e:4b:ea:fa:5e:39:82:33:5a:f0:52:3f:6d:f0:fe: ae:48:0d:42:10:65:80:96:4d:98:2c:44:b8:37:ee: e7:d4:a1:a4:37:bb:6d:36:68:a9:ff:18:aa:8c:94: 15:fb:f0:39:47:2b:41:bc:40:91:e2:43:9f:a5:e4: 06:c3:dd:2d:1a:b0:a8:e4:93:8e:17:b0:1c:3a:cd: cf:87:60:f1:d7:eb:2d:28:d2:69:b7:fb:1f:16:3c: 90:6d:c5:56:91:3b:26:2c:0f:61:df:d1:89:81:4f: a6:4d:62:6c:3c:a6:fb:72:60:df:72:9e:0a:b3:50: b9:6e:b8:06:f1:a8:cf:9d:93:ca:01:ce:70:fe:6a: 3a:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:49:38:8B:82:01:BC:92:63:CB:20:A9:B1:E4:16:B2:B1:F5:93:DC X509v3 Authority Key Identifier: keyid:5A:0E:48:8B:B0:9D:28:73:D6:62:E2:84:6A:22:88:A4:25:DE:D9:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/11cc2a-ad66-4d2a-9e30-1f59bc7287cd/1/Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/11cc2a-ad66-4d2a-9e30-1f59bc7287cd/1/Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:90:56:b5:31:ae:d5:85:6f:d8:6e:a6:9d:9f:81:70:12:d3: 1e:d1:4e:61:86:c0:60:15:19:85:90:b9:81:f0:1a:4e:83:9d: 03:c6:c5:ed:85:67:7c:16:78:ee:53:a3:01:fb:85:cd:89:ee: 45:72:26:51:3f:16:75:18:ee:6f:89:d6:8b:f4:97:2c:9a:15: 40:72:63:15:eb:dd:d1:84:94:05:b4:03:3c:7b:26:fa:c2:3c: cf:e8:a5:6a:76:c8:94:1a:c7:27:94:e2:47:1a:2f:6d:3d:09: e7:da:82:92:ee:58:52:0c:58:b5:75:18:b1:51:74:33:25:9f: 5e:f3:3f:72:09:4f:14:e8:2d:f3:aa:e6:a0:2c:8d:77:dd:18: e4:3c:ff:a6:01:11:dc:c6:28:c5:af:4c:a7:11:1b:5c:b6:53: 51:c8:a1:69:d1:60:96:e6:97:25:a6:9b:56:d5:75:d8:0f:d8: a0:84:2d:7e:37:87:fc:81:7d:19:f5:92:6a:0c:74:ae:75:1e: 1c:c7:9b:33:7f:30:cb:89:f6:1c:b9:b9:6d:3a:97:35:fc:ab: 74:51:76:07:11:d3:ca:a1:4d:cf:17:fc:38:4b:2d:34:1b:c3: 98:ea:ad:22:cc:05:c2:bb:70:fe:9d:98:95:b6:fd:14:3b:6a: d6:37:32:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt8OQhWKu5KZE9wi0T0gE7RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhMGU0ODhiYjA5ZDI4NzNkNjYyZTI4NDZhMjI4OGE0MjVk ZWQ5NDYwHhcNMjYwMTAyMDEwMTExWhcNMjYwMTAzMDEwMTExWjAzMTEwLwYDVQQD EygzOTQ5Mzg4YjgyMDFiYzkyNjNjYjIwYTliMWU0MTZiMmIxZjU5M2RjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1yH1XceLgSuKArPOqwIrEiU2Q9n 8FqpP8YdvUBEl7AgrJw2u6WQmMc4EgdD3ZgoMiuH3e3csKSpP1J1EtsuvdNOjArM 9zTIiBUR2pVGbwT8UL85iox7si0g0467lOLsx3sI3ZsWUrb6ZjgzlzbUzSB18Rtm AGl+S+r6XjmCM1rwUj9t8P6uSA1CEGWAlk2YLES4N+7n1KGkN7ttNmip/xiqjJQV +/A5RytBvECR4kOfpeQGw90tGrCo5JOOF7AcOs3Ph2Dx1+stKNJpt/sfFjyQbcVW kTsmLA9h39GJgU+mTWJsPKb7cmDfcp4Ks1C5brgG8ajPnZPKAc5w/mo63QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDlJOIuCAbySY8sgqbHkFrKx9ZPcMB8GA1UdIwQY MBaAFFoOSIuwnShz1mLihGoiiKQl3tlGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2c1SWk3Q2RLSFBXWXVLRWFpS0lwQ1hlMlVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8xMWNjMmEtYWQ2Ni00ZDJhLTllMzAt MWY1OWJjNzI4N2NkLzEvV2c1SWk3Q2RLSFBXWXVLRWFpS0lwQ1hlMlVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS8xMWNjMmEtYWQ2Ni00ZDJhLTllMzAtMWY1OWJjNzI4N2Nk LzEvV2c1SWk3Q2RLSFBXWXVLRWFpS0lwQ1hlMlVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAopBWtTGu 1YVv2G6mnZ+BcBLTHtFOYYbAYBUZhZC5gfAaToOdA8bF7YVnfBZ47lOjAfuFzYnu RXImUT8WdRjub4nWi/SXLJoVQHJjFevd0YSUBbQDPHsm+sI8z+ilanbIlBrHJ5Ti RxovbT0J59qCku5YUgxYtXUYsVF0MyWfXvM/cglPFOgt86rmoCyNd90Y5Dz/pgER 3MYoxa9MpxEbXLZTUcihadFgluaXJaabVtV12A/YoIQtfjeH/IF9GfWSagx0rnUe HMebM38wy4n2HLm5bTqXNfyrdFF2BxHTyqFNzxf8OEstNBvDmOqtIswFwrtw/p2Y lbb9FDtq1jcyYA== -----END CERTIFICATE-----Generated at Fri Jan 2 09:51:06 2026 by rpki-client