This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/WqWNXycSzMAES1nvp8vD6Yxfwlw.mft File: WqWNXycSzMAES1nvp8vD6Yxfwlw.mft (raw, json) Hash identifier: /dkacLFq4cM8TjzFw46meTJNXNnih7MLson0i03ZlKg= Subject key identifier: 2D:79:07:6C:C4:DE:E4:0E:C4:B6:A8:3C:7D:76:37:6E:B1:FA:B4:07 Authority key identifier: 5A:A5:8D:5F:27:12:CC:C0:04:4B:59:EF:A7:CB:C3:E9:8C:5F:C2:5C Certificate issuer: /CN=5aa58d5f2712ccc0044b59efa7cbc3e98c5fc25c Certificate serial: 019B7A4A5D04C7113A694473D3E45E6A867E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WqWNXycSzMAES1nvp8vD6Yxfwlw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/WqWNXycSzMAES1nvp8vD6Yxfwlw.mft Manifest number: 0ABE Signing time: Thu 01 Jan 2026 16:00:52 +0000 Manifest this update: Thu 01 Jan 2026 16:00:52 +0000 Manifest next update: Fri 02 Jan 2026 16:00:52 +0000 Files and hashes: 1: OXwNzP8LjbH6TWcdoNaukflgQIw.roa (hash: 7FOkQ2B0o6NyuacIE5IJomlXcGtJ1C+uqMpIt2z5/74=) 2: WqWNXycSzMAES1nvp8vD6Yxfwlw.crl (hash: zvVImCFeNf987abMWxrfQ1MmSz2QLu2S5QyMIpRfCnU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/WqWNXycSzMAES1nvp8vD6Yxfwlw.crl rsync://rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/WqWNXycSzMAES1nvp8vD6Yxfwlw.mft rsync://rpki.ripe.net/repository/DEFAULT/WqWNXycSzMAES1nvp8vD6Yxfwlw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:4a:5d:04:c7:11:3a:69:44:73:d3:e4:5e:6a:86:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5aa58d5f2712ccc0044b59efa7cbc3e98c5fc25c Validity Not Before: Jan 1 16:00:52 2026 GMT Not After : Jan 2 16:00:52 2026 GMT Subject: CN=2d79076cc4dee40ec4b6a83c7d76376eb1fab407 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c4:7d:c8:1a:bb:88:4e:2f:af:d2:a2:76:ad: 75:c3:5c:4d:a0:dd:01:e3:fd:a0:af:97:af:61:8e: c3:f5:6e:05:1c:96:7f:75:36:f9:14:3e:63:d9:f1: a2:66:e1:e2:af:f1:97:c7:9f:5f:65:77:5e:4a:14: 1b:08:94:95:79:fe:e5:b8:7f:5f:af:d5:8d:35:66: 47:f0:46:82:a7:cf:5c:d6:7a:21:80:76:e7:20:d2: b7:ce:a4:10:58:40:90:3e:03:24:50:0e:4a:7e:55: a5:9c:d6:f7:ae:3b:bc:e1:64:ad:f0:d2:6f:36:71: 2c:7a:00:7d:6d:e3:74:50:b6:e3:a6:8a:a7:7d:8c: e4:d6:f3:34:e2:90:b5:29:ea:67:29:53:fc:a9:36: ac:19:b1:8f:b1:c0:d9:9e:99:fd:d8:72:f0:dd:79: ce:3e:05:96:f8:0e:31:04:11:0b:b0:31:af:50:78: f6:12:8b:65:e6:94:d1:1e:f9:7b:15:be:de:43:08: 71:aa:31:65:8e:58:ee:d5:ba:39:11:76:e8:2f:52: 12:3e:6e:80:cc:14:d2:ce:aa:4e:61:f2:b1:ec:7b: 07:d3:f6:9f:04:94:6c:f2:2b:8e:90:ce:9a:49:5a: d2:2b:61:bf:05:16:30:9c:df:71:27:50:20:5a:a9: 36:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:79:07:6C:C4:DE:E4:0E:C4:B6:A8:3C:7D:76:37:6E:B1:FA:B4:07 X509v3 Authority Key Identifier: keyid:5A:A5:8D:5F:27:12:CC:C0:04:4B:59:EF:A7:CB:C3:E9:8C:5F:C2:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WqWNXycSzMAES1nvp8vD6Yxfwlw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/WqWNXycSzMAES1nvp8vD6Yxfwlw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/WqWNXycSzMAES1nvp8vD6Yxfwlw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:46:7b:a6:96:51:39:ba:d2:15:c1:ed:54:3d:43:89:a6:55: f0:43:58:63:68:97:f4:64:e1:dd:03:8f:e0:46:87:b6:3f:7f: 41:f9:bf:c0:b9:b2:14:10:a4:f9:33:e6:2f:96:4b:9d:bd:9a: 30:bc:58:28:2c:55:08:65:3b:12:e1:b4:f4:6b:3a:c4:ef:0b: 70:ed:0b:10:ba:b2:86:b0:a9:90:e4:e1:c6:62:e4:3a:40:3d: ca:d6:e8:3b:da:1b:1c:86:bc:8f:29:f5:f7:4b:56:3b:a5:86: 8c:79:63:5e:32:46:ec:b5:8b:30:8a:40:4b:ef:5f:8d:c0:44: b4:8a:84:a5:bc:16:6d:20:7c:74:79:b4:f3:06:d1:1f:f0:96: 83:a9:58:c7:e0:04:45:b4:1d:68:03:e4:ca:0b:b3:c7:91:19: 18:98:1f:33:68:b9:47:c2:b9:28:12:c2:73:37:1f:7a:cc:53: 16:24:72:b8:fa:13:7b:b9:c8:8d:31:2c:89:d0:9c:7c:d6:8e: 1b:87:4f:f7:a3:86:db:04:89:e4:74:ed:65:3e:6b:41:4d:03: 92:96:6f:d4:d8:73:5f:94:0a:47:b5:5b:a6:6b:87:e8:8f:f8: 34:c3:6c:c3:b2:5d:05:a1:e9:9c:5c:d6:e5:37:b8:10:48:dd: 00:99:e9:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt6Sl0ExxE6aURz0+ReaoZ+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhYTU4ZDVmMjcxMmNjYzAwNDRiNTllZmE3Y2JjM2U5OGM1 ZmMyNWMwHhcNMjYwMTAxMTYwMDUyWhcNMjYwMTAyMTYwMDUyWjAzMTEwLwYDVQQD EygyZDc5MDc2Y2M0ZGVlNDBlYzRiNmE4M2M3ZDc2Mzc2ZWIxZmFiNDA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8R9yBq7iE4vr9Kidq11w1xNoN0B 4/2gr5evYY7D9W4FHJZ/dTb5FD5j2fGiZuHir/GXx59fZXdeShQbCJSVef7luH9f r9WNNWZH8EaCp89c1nohgHbnINK3zqQQWECQPgMkUA5KflWlnNb3rju84WSt8NJv NnEsegB9beN0ULbjpoqnfYzk1vM04pC1KepnKVP8qTasGbGPscDZnpn92HLw3XnO PgWW+A4xBBELsDGvUHj2Eotl5pTRHvl7Fb7eQwhxqjFljlju1bo5EXboL1ISPm6A zBTSzqpOYfKx7HsH0/afBJRs8iuOkM6aSVrSK2G/BRYwnN9xJ1AgWqk2uQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC15B2zE3uQOxLaoPH12N26x+rQHMB8GA1UdIwQY MBaAFFqljV8nEszABEtZ76fLw+mMX8JcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3FXTlh5Y1N6TUFFUzFudnA4dkQ2WXhmd2x3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8yN2E3NDgtODg0ZC00ZjE5LWIyODUt NTkxOTkzMzFlZTA5LzEvV3FXTlh5Y1N6TUFFUzFudnA4dkQ2WXhmd2x3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS8yN2E3NDgtODg0ZC00ZjE5LWIyODUtNTkxOTkzMzFlZTA5 LzEvV3FXTlh5Y1N6TUFFUzFudnA4dkQ2WXhmd2x3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaEZ7ppZR ObrSFcHtVD1DiaZV8ENYY2iX9GTh3QOP4EaHtj9/Qfm/wLmyFBCk+TPmL5ZLnb2a MLxYKCxVCGU7EuG09Gs6xO8LcO0LELqyhrCpkOThxmLkOkA9ytboO9obHIa8jyn1 90tWO6WGjHljXjJG7LWLMIpAS+9fjcBEtIqEpbwWbSB8dHm08wbRH/CWg6lYx+AE RbQdaAPkyguzx5EZGJgfM2i5R8K5KBLCczcfesxTFiRyuPoTe7nIjTEsidCcfNaO G4dP96OG2wSJ5HTtZT5rQU0DkpZv1NhzX5QKR7VbpmuH6I/4NMNsw7JdBaHpnFzW 5Te4EEjdAJnpIQ== -----END CERTIFICATE-----Generated at Thu Jan 1 18:03:29 2026 by rpki-client