This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/21195c-566a-4ff0-9496-508081499be7/1/WtYtZLAg5sARSELydiZePAfT6lw.mft File: WtYtZLAg5sARSELydiZePAfT6lw.mft (raw, json) Hash identifier: 0mSi00F+Y57j0JwSdEhzDrH82Xh9pPY16/V0dmh467o= Subject key identifier: C6:99:68:27:D5:0B:E0:42:EF:76:02:E0:E0:26:9F:01:C5:1F:9D:5B Authority key identifier: 5A:D6:2D:64:B0:20:E6:C0:11:48:42:F2:76:26:5E:3C:07:D3:EA:5C Certificate issuer: /CN=5ad62d64b020e6c0114842f276265e3c07d3ea5c Certificate serial: 019BB0948430750AEF70AFA94AB3E102FD18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtYtZLAg5sARSELydiZePAfT6lw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/21195c-566a-4ff0-9496-508081499be7/1/WtYtZLAg5sARSELydiZePAfT6lw.mft Manifest number: 03D6 Signing time: Mon 12 Jan 2026 05:01:21 +0000 Manifest this update: Mon 12 Jan 2026 05:01:21 +0000 Manifest next update: Tue 13 Jan 2026 05:01:21 +0000 Files and hashes: 1: WtYtZLAg5sARSELydiZePAfT6lw.crl (hash: ZXNX/XNkTNyqUxy9UNShyWXDi8SV5l0lvFs4I13PJkk=) 2: fph5gTuLwd2OWoh3SrvtX0TJ1jU.roa (hash: SKuyO2n0G10edipOcdvCUjjKqC8VGVks6CgzeewLwB4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/21195c-566a-4ff0-9496-508081499be7/1/WtYtZLAg5sARSELydiZePAfT6lw.crl rsync://rpki.ripe.net/repository/DEFAULT/38/21195c-566a-4ff0-9496-508081499be7/1/WtYtZLAg5sARSELydiZePAfT6lw.mft rsync://rpki.ripe.net/repository/DEFAULT/WtYtZLAg5sARSELydiZePAfT6lw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b0:94:84:30:75:0a:ef:70:af:a9:4a:b3:e1:02:fd:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ad62d64b020e6c0114842f276265e3c07d3ea5c Validity Not Before: Jan 12 05:01:21 2026 GMT Not After : Jan 13 05:01:21 2026 GMT Subject: CN=c6996827d50be042ef7602e0e0269f01c51f9d5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:98:ae:c1:b6:7e:e8:93:19:34:5a:3a:17:33: 1c:ab:eb:da:ac:d0:58:87:b3:10:8b:99:e0:be:26: f9:e6:eb:8d:cc:f0:25:28:3e:54:48:aa:54:a7:62: 43:7e:b3:1f:09:be:cc:f7:9e:5f:da:f5:dc:15:02: 3b:bf:94:8e:c3:ca:ff:5d:01:bc:05:dd:48:ed:13: a6:dd:a9:ed:81:c1:89:eb:47:1f:d1:62:b0:7e:ff: e6:1d:d2:cf:d0:e2:c8:13:ee:d8:95:3d:7f:15:f9: 34:a5:9b:0f:50:ed:fa:9c:59:a7:02:cc:b7:6e:28: 00:1a:fb:b9:e9:33:1a:88:83:01:d6:a8:35:c9:9f: da:c9:46:ed:7d:eb:47:38:76:70:d2:a8:b6:07:7a: 61:90:9f:06:35:97:cd:4d:79:bd:9b:fe:7a:08:98: b2:a6:fe:c8:79:ef:94:90:d5:66:08:6a:e0:59:1f: 23:e0:87:40:0d:c7:55:a4:17:5d:50:6c:55:66:63: 32:e4:17:90:ad:91:39:4f:f9:6f:7c:d6:4b:1b:e4: 6a:2d:05:95:ec:26:0f:6f:76:81:1b:a4:4a:a5:9b: 89:79:67:4b:c0:4c:05:29:06:90:3a:5b:a3:27:48: ab:2f:8d:8b:04:3a:b5:1d:71:3c:8d:70:51:80:25: 97:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:99:68:27:D5:0B:E0:42:EF:76:02:E0:E0:26:9F:01:C5:1F:9D:5B X509v3 Authority Key Identifier: keyid:5A:D6:2D:64:B0:20:E6:C0:11:48:42:F2:76:26:5E:3C:07:D3:EA:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtYtZLAg5sARSELydiZePAfT6lw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/21195c-566a-4ff0-9496-508081499be7/1/WtYtZLAg5sARSELydiZePAfT6lw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/21195c-566a-4ff0-9496-508081499be7/1/WtYtZLAg5sARSELydiZePAfT6lw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:61:ff:3a:e7:d7:bf:3a:d4:23:6d:92:4d:ca:0d:cb:84:5c: b2:22:1d:db:4f:30:87:97:d2:fc:54:0b:9d:ba:80:3f:ee:59: 35:0c:2e:ea:42:5b:22:6c:0d:e9:6c:08:82:96:f8:6c:0e:cc: f4:05:34:62:0c:c3:59:c5:ae:0d:c1:1f:23:8f:0d:fe:cd:52: 8d:2d:49:0e:7a:49:53:2c:4b:98:d1:70:15:a1:a3:16:95:a2: e1:51:17:43:77:e6:ba:04:05:9c:b2:0a:3f:e8:af:b2:e3:b8: 7f:66:38:a0:80:05:d5:a7:6b:82:1e:6b:f3:11:12:82:d7:a4: a8:03:75:8e:1f:c2:3e:f1:d3:f5:cf:a7:ab:92:71:4e:d4:c8: 15:33:f8:e8:0e:02:f5:96:e7:10:72:ad:af:23:38:4b:6e:e8: 85:22:cb:9d:22:0f:11:37:03:26:c8:f5:04:c9:0e:5f:fb:e7: e6:69:7e:71:89:4d:f4:0a:a6:25:2f:e3:65:75:8b:14:6f:e0: 23:7c:48:79:b2:e4:91:26:d8:e7:ce:cc:9e:16:78:44:f7:6f: 27:78:84:d9:cb:43:93:38:27:81:bd:01:d9:c9:d6:c0:17:36: ee:ae:33:d9:91:35:13:12:77:ff:a8:fe:7b:dc:dd:3e:d2:72: b0:e5:f3:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuwlIQwdQrvcK+pSrPhAv0YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhZDYyZDY0YjAyMGU2YzAxMTQ4NDJmMjc2MjY1ZTNjMDdk M2VhNWMwHhcNMjYwMTEyMDUwMTIxWhcNMjYwMTEzMDUwMTIxWjAzMTEwLwYDVQQD EyhjNjk5NjgyN2Q1MGJlMDQyZWY3NjAyZTBlMDI2OWYwMWM1MWY5ZDViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJiuwbZ+6JMZNFo6FzMcq+varNBY h7MQi5ngvib55uuNzPAlKD5USKpUp2JDfrMfCb7M955f2vXcFQI7v5SOw8r/XQG8 Bd1I7ROm3antgcGJ60cf0WKwfv/mHdLP0OLIE+7YlT1/Ffk0pZsPUO36nFmnAsy3 bigAGvu56TMaiIMB1qg1yZ/ayUbtfetHOHZw0qi2B3phkJ8GNZfNTXm9m/56CJiy pv7Iee+UkNVmCGrgWR8j4IdADcdVpBddUGxVZmMy5BeQrZE5T/lvfNZLG+RqLQWV 7CYPb3aBG6RKpZuJeWdLwEwFKQaQOlujJ0irL42LBDq1HXE8jXBRgCWXBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMaZaCfVC+BC73YC4OAmnwHFH51bMB8GA1UdIwQY MBaAFFrWLWSwIObAEUhC8nYmXjwH0+pcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3RZdFpMQWc1c0FSU0VMeWRpWmVQQWZUNmx3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8yMTE5NWMtNTY2YS00ZmYwLTk0OTYt NTA4MDgxNDk5YmU3LzEvV3RZdFpMQWc1c0FSU0VMeWRpWmVQQWZUNmx3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8yMTE5NWMtNTY2YS00ZmYwLTk0OTYtNTA4MDgxNDk5YmU3 LzEvV3RZdFpMQWc1c0FSU0VMeWRpWmVQQWZUNmx3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYWH/OufX vzrUI22STcoNy4RcsiId208wh5fS/FQLnbqAP+5ZNQwu6kJbImwN6WwIgpb4bA7M 9AU0YgzDWcWuDcEfI48N/s1SjS1JDnpJUyxLmNFwFaGjFpWi4VEXQ3fmugQFnLIK P+ivsuO4f2Y4oIAF1adrgh5r8xESgtekqAN1jh/CPvHT9c+nq5JxTtTIFTP46A4C 9ZbnEHKtryM4S27ohSLLnSIPETcDJsj1BMkOX/vn5ml+cYlN9AqmJS/jZXWLFG/g I3xIebLkkSbY587MnhZ4RPdvJ3iE2ctDkzgngb0B2cnWwBc27q4z2ZE1ExJ3/6j+ e9zdPtJysOXzSg== -----END CERTIFICATE-----Generated at Mon Jan 12 10:52:48 2026 by rpki-client