This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/38b511-7547-4a48-8baf-7764584670fd/1/wr-Bq5UKGANGMMJYMHSeZQ605jQ.mft File: wr-Bq5UKGANGMMJYMHSeZQ605jQ.mft (raw, json) Hash identifier: VhmkU99x5Smf63eJsaem5uUI9xd78AC2Qwe89FVMX94= Subject key identifier: 3B:61:47:5A:8B:C9:D4:36:50:C8:9C:63:62:FB:56:3A:63:AB:A8:D2 Authority key identifier: C2:BF:81:AB:95:0A:18:03:46:30:C2:58:30:74:9E:65:0E:B4:E6:34 Certificate issuer: /CN=c2bf81ab950a18034630c25830749e650eb4e634 Certificate serial: 019BA64812A111D410F402806DDA3733DF2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wr-Bq5UKGANGMMJYMHSeZQ605jQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/38b511-7547-4a48-8baf-7764584670fd/1/wr-Bq5UKGANGMMJYMHSeZQ605jQ.mft Manifest number: 072E Signing time: Sat 10 Jan 2026 05:01:39 +0000 Manifest this update: Sat 10 Jan 2026 05:01:39 +0000 Manifest next update: Sun 11 Jan 2026 05:01:39 +0000 Files and hashes: 1: 2wk8UskQOSnxqw7Oo7NOQFVMdPk.roa (hash: wAiBLEjJ/qsnMqj9/B2glZy/BgEewLbuD+HKTaBdnNM=) 2: wr-Bq5UKGANGMMJYMHSeZQ605jQ.crl (hash: cRBZbbfj7sxWglcFyEedS1nkHLHJ6eZS5DQqg+8hb4M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/38b511-7547-4a48-8baf-7764584670fd/1/wr-Bq5UKGANGMMJYMHSeZQ605jQ.crl rsync://rpki.ripe.net/repository/DEFAULT/37/38b511-7547-4a48-8baf-7764584670fd/1/wr-Bq5UKGANGMMJYMHSeZQ605jQ.mft rsync://rpki.ripe.net/repository/DEFAULT/wr-Bq5UKGANGMMJYMHSeZQ605jQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 23:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a6:48:12:a1:11:d4:10:f4:02:80:6d:da:37:33:df:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2bf81ab950a18034630c25830749e650eb4e634 Validity Not Before: Jan 10 05:01:39 2026 GMT Not After : Jan 11 05:01:39 2026 GMT Subject: CN=3b61475a8bc9d43650c89c6362fb563a63aba8d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:6e:05:02:26:c1:01:d7:9d:1b:86:cc:3d:36: b4:97:d5:75:67:d5:70:ad:41:26:3f:42:9c:99:eb: a0:1b:48:b0:5a:09:8a:96:d7:1f:1b:f3:a6:5a:e4: 08:dc:a2:ef:0f:49:f3:1e:6e:82:9a:fb:ac:21:11: c7:44:00:c3:cf:ef:12:fa:88:5a:9c:81:85:f2:d5: ed:7e:27:30:30:c1:13:59:93:02:b1:95:c4:5e:48: 69:e6:b1:c2:fe:15:b3:5f:f3:6a:bd:72:4e:24:2a: 22:46:b5:06:a4:3c:c2:df:5e:e0:32:4a:4d:ec:40: bc:56:f8:3a:3c:74:24:5a:41:24:71:1b:e6:42:bc: fd:65:f6:33:57:4c:b9:cb:49:e0:55:1c:4f:bd:b1: c8:18:49:d1:77:3f:7f:ff:3f:84:34:d7:d5:4b:cd: bf:9e:cf:0c:ad:55:a4:21:6d:aa:b7:fe:4d:4c:4b: 5c:28:44:b5:e0:8b:6a:23:0e:3b:86:d2:ee:90:71: bc:1b:47:fc:61:a5:bf:09:99:ec:43:5f:04:86:2f: db:57:9f:f5:61:30:c0:66:26:77:58:c3:76:03:76: 19:fa:d3:0a:a3:bf:a5:73:97:6c:d7:f3:9b:92:26: 95:22:09:22:34:f0:52:80:73:8e:af:e1:e9:a7:00: 75:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:61:47:5A:8B:C9:D4:36:50:C8:9C:63:62:FB:56:3A:63:AB:A8:D2 X509v3 Authority Key Identifier: keyid:C2:BF:81:AB:95:0A:18:03:46:30:C2:58:30:74:9E:65:0E:B4:E6:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wr-Bq5UKGANGMMJYMHSeZQ605jQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/38b511-7547-4a48-8baf-7764584670fd/1/wr-Bq5UKGANGMMJYMHSeZQ605jQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/38b511-7547-4a48-8baf-7764584670fd/1/wr-Bq5UKGANGMMJYMHSeZQ605jQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:44:9e:21:9b:53:22:98:8d:b9:2b:26:a2:cc:5d:e4:4d:5e: 11:05:af:62:d6:7f:d5:ef:35:6c:14:5a:55:2c:93:97:36:3e: 54:f4:c8:c8:41:60:e6:4a:44:e6:b7:94:ab:05:ed:24:4d:4c: 01:84:ce:95:c0:9f:b6:ae:fe:71:83:12:d9:d4:be:db:2b:92: 52:3f:9b:8f:a0:f5:9e:c5:37:69:dc:3e:87:c0:f0:95:e5:67: 4a:38:37:7f:76:3b:62:63:97:76:47:6d:a7:b2:9a:d9:cf:12: bd:72:48:d3:a7:bf:21:55:51:8a:da:7b:cb:8b:a8:d3:00:2f: be:49:1c:0a:0d:41:6b:36:4f:65:47:42:e1:c7:b3:f2:26:f9: e3:b8:c2:e4:3a:03:7d:85:e6:2d:63:1c:f3:09:5c:ce:2c:54: ef:df:6d:a7:e0:02:22:5f:e6:a8:d5:33:2e:f9:61:83:ba:d4: 4d:48:bb:5e:53:23:14:39:ee:b5:8d:0f:ee:90:a6:9f:43:b8: 56:bd:cf:98:ea:c6:57:04:42:38:f0:31:31:5c:05:d3:f5:49: ba:b2:71:76:05:47:fe:95:4e:3d:96:23:69:07:66:30:52:7f: f3:42:30:00:55:7b:af:7e:9a:db:e0:c0:8c:de:52:7f:c2:f6: b3:37:aa:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZumSBKhEdQQ9AKAbdo3M98rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyYmY4MWFiOTUwYTE4MDM0NjMwYzI1ODMwNzQ5ZTY1MGVi NGU2MzQwHhcNMjYwMTEwMDUwMTM5WhcNMjYwMTExMDUwMTM5WjAzMTEwLwYDVQQD EygzYjYxNDc1YThiYzlkNDM2NTBjODljNjM2MmZiNTYzYTYzYWJhOGQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsG4FAibBAdedG4bMPTa0l9V1Z9Vw rUEmP0KcmeugG0iwWgmKltcfG/OmWuQI3KLvD0nzHm6CmvusIRHHRADDz+8S+oha nIGF8tXtficwMMETWZMCsZXEXkhp5rHC/hWzX/NqvXJOJCoiRrUGpDzC317gMkpN 7EC8Vvg6PHQkWkEkcRvmQrz9ZfYzV0y5y0ngVRxPvbHIGEnRdz9//z+ENNfVS82/ ns8MrVWkIW2qt/5NTEtcKES14ItqIw47htLukHG8G0f8YaW/CZnsQ18Ehi/bV5/1 YTDAZiZ3WMN2A3YZ+tMKo7+lc5ds1/ObkiaVIgkiNPBSgHOOr+HppwB1kQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDthR1qLydQ2UMicY2L7Vjpjq6jSMB8GA1UdIwQY MBaAFMK/gauVChgDRjDCWDB0nmUOtOY0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3ItQnE1VUtHQU5HTU1KWU1IU2VaUTYwNWpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8zOGI1MTEtNzU0Ny00YTQ4LThiYWYt Nzc2NDU4NDY3MGZkLzEvd3ItQnE1VUtHQU5HTU1KWU1IU2VaUTYwNWpRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy8zOGI1MTEtNzU0Ny00YTQ4LThiYWYtNzc2NDU4NDY3MGZk LzEvd3ItQnE1VUtHQU5HTU1KWU1IU2VaUTYwNWpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWESeIZtT IpiNuSsmosxd5E1eEQWvYtZ/1e81bBRaVSyTlzY+VPTIyEFg5kpE5reUqwXtJE1M AYTOlcCftq7+cYMS2dS+2yuSUj+bj6D1nsU3adw+h8DwleVnSjg3f3Y7YmOXdkdt p7Ka2c8SvXJI06e/IVVRitp7y4uo0wAvvkkcCg1BazZPZUdC4cez8ib547jC5DoD fYXmLWMc8wlczixU799tp+ACIl/mqNUzLvlhg7rUTUi7XlMjFDnutY0P7pCmn0O4 Vr3PmOrGVwRCOPAxMVwF0/VJurJxdgVH/pVOPZYjaQdmMFJ/80IwAFV7r36a2+DA jN5Sf8L2szeqng== -----END CERTIFICATE-----Generated at Sat Jan 10 09:25:45 2026 by rpki-client