This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/652bef-6f4e-4997-bb3a-4c9e49239624/1/wsej20o9La--GGqmhfRzbqfQjDg.mft File: wsej20o9La--GGqmhfRzbqfQjDg.mft (raw, json) Hash identifier: xEXVPdg2sO8THHmw63AeQosJYZo2gXMmulrO0Hmh5KI= Subject key identifier: 28:FC:57:D6:33:28:E1:16:79:54:D2:0D:0D:43:B7:5D:71:7B:E6:10 Authority key identifier: C2:C7:A3:DB:4A:3D:2D:AF:BE:18:6A:A6:85:F4:73:6E:A7:D0:8C:38 Certificate issuer: /CN=c2c7a3db4a3d2dafbe186aa685f4736ea7d08c38 Certificate serial: 019BB1023E6C4686E2C56FEFB85E4329FFA3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsej20o9La--GGqmhfRzbqfQjDg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/652bef-6f4e-4997-bb3a-4c9e49239624/1/wsej20o9La--GGqmhfRzbqfQjDg.mft Manifest number: 111B Signing time: Mon 12 Jan 2026 07:01:12 +0000 Manifest this update: Mon 12 Jan 2026 07:01:12 +0000 Manifest next update: Tue 13 Jan 2026 07:01:12 +0000 Files and hashes: 1: wsej20o9La--GGqmhfRzbqfQjDg.crl (hash: rYlrwlyFkcNvWRNpMkdDlL/Ud8s/HMjQ10yCNnm4uOc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/652bef-6f4e-4997-bb3a-4c9e49239624/1/wsej20o9La--GGqmhfRzbqfQjDg.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/652bef-6f4e-4997-bb3a-4c9e49239624/1/wsej20o9La--GGqmhfRzbqfQjDg.mft rsync://rpki.ripe.net/repository/DEFAULT/wsej20o9La--GGqmhfRzbqfQjDg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 07:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b1:02:3e:6c:46:86:e2:c5:6f:ef:b8:5e:43:29:ff:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2c7a3db4a3d2dafbe186aa685f4736ea7d08c38 Validity Not Before: Jan 12 07:01:12 2026 GMT Not After : Jan 13 07:01:12 2026 GMT Subject: CN=28fc57d63328e1167954d20d0d43b75d717be610 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:45:65:37:c4:08:72:52:b0:f4:90:c7:2a:66: ef:f4:15:6d:77:1e:71:0e:f3:5d:06:af:41:6d:79: 21:ba:14:e5:9a:9f:da:5b:4b:ee:7c:07:2f:e5:d7: 7c:89:3b:bd:78:2d:9f:30:b9:58:da:45:01:92:45: e8:47:50:00:e0:57:ee:76:53:c7:83:7d:6c:9a:a0: 10:80:d9:cd:20:c7:a2:53:0a:7c:b4:3d:5d:7c:e7: 5e:8d:30:45:d7:3e:22:54:5b:d8:98:47:68:3b:6d: f9:c7:23:f8:ce:7d:e9:36:ef:61:cb:60:fa:96:5f: 44:f0:83:93:ed:57:aa:64:16:4b:a6:35:21:bf:0d: 7a:d7:b1:69:98:98:4f:92:14:c2:3d:f4:80:e1:9a: 19:99:5c:74:99:15:cb:ec:5a:9a:56:1c:d3:e6:ef: 23:90:7c:d9:1a:48:ec:b9:39:a6:44:67:7a:72:a2: 9d:4f:dc:2a:bd:04:6e:ff:dc:02:20:a7:13:08:13: 72:60:29:be:85:e8:f3:59:0c:73:31:6f:70:8e:ec: e5:ba:01:07:ac:b6:1a:50:dd:a4:8f:4a:5c:76:d7: 0d:49:6c:21:7d:e7:0f:59:12:26:81:80:96:7a:cf: be:8f:49:f9:1c:31:6b:e2:2b:c0:ce:0c:c2:12:9c: f6:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:FC:57:D6:33:28:E1:16:79:54:D2:0D:0D:43:B7:5D:71:7B:E6:10 X509v3 Authority Key Identifier: keyid:C2:C7:A3:DB:4A:3D:2D:AF:BE:18:6A:A6:85:F4:73:6E:A7:D0:8C:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsej20o9La--GGqmhfRzbqfQjDg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/652bef-6f4e-4997-bb3a-4c9e49239624/1/wsej20o9La--GGqmhfRzbqfQjDg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/652bef-6f4e-4997-bb3a-4c9e49239624/1/wsej20o9La--GGqmhfRzbqfQjDg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:1e:f2:3c:24:e1:d6:60:81:3b:27:ef:8d:d1:5d:6a:59:97: 2e:54:a4:91:16:0a:c1:65:b7:e5:fe:f8:63:67:06:84:34:e3: 60:20:5e:95:03:e5:4e:85:ef:af:47:7f:d4:67:d4:8a:2c:a7: 1d:7d:6f:7b:4a:32:f4:de:f9:4d:c0:a4:83:2d:14:17:bb:aa: dd:48:f0:1e:d8:60:c6:d0:7d:25:04:e3:e7:90:3b:51:ad:81: 40:e5:60:30:a2:5d:de:98:a6:9b:c0:8c:ad:64:f4:49:83:45: 67:a2:b9:d9:b5:ec:bc:c3:8e:f3:62:1d:a7:28:c6:26:c2:e0: 4f:73:2d:a7:95:18:24:06:de:01:f4:ec:c0:ef:08:76:7e:98: b9:16:62:0b:73:48:60:c5:cb:78:d8:14:34:39:61:5b:98:38: 8c:7d:7e:dc:a8:1b:0b:13:4e:30:39:ad:22:2e:6e:86:54:a8: 2e:5a:ff:0a:89:fa:46:47:a4:a8:b4:fa:ed:65:15:0b:11:1b: ed:07:24:99:3f:24:bb:fb:80:37:6f:23:2c:fc:f1:fb:13:d1: c5:1f:ca:9d:57:4e:ff:17:08:60:4e:7e:3f:12:8d:a8:b0:86: a9:aa:d9:76:2d:1a:95:fa:77:c0:7f:4a:67:4c:37:fd:76:a7: 58:3c:48:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuxAj5sRobixW/vuF5DKf+jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyYzdhM2RiNGEzZDJkYWZiZTE4NmFhNjg1ZjQ3MzZlYTdk MDhjMzgwHhcNMjYwMTEyMDcwMTEyWhcNMjYwMTEzMDcwMTEyWjAzMTEwLwYDVQQD EygyOGZjNTdkNjMzMjhlMTE2Nzk1NGQyMGQwZDQzYjc1ZDcxN2JlNjEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7UVlN8QIclKw9JDHKmbv9BVtdx5x DvNdBq9BbXkhuhTlmp/aW0vufAcv5dd8iTu9eC2fMLlY2kUBkkXoR1AA4FfudlPH g31smqAQgNnNIMeiUwp8tD1dfOdejTBF1z4iVFvYmEdoO235xyP4zn3pNu9hy2D6 ll9E8IOT7VeqZBZLpjUhvw1617FpmJhPkhTCPfSA4ZoZmVx0mRXL7FqaVhzT5u8j kHzZGkjsuTmmRGd6cqKdT9wqvQRu/9wCIKcTCBNyYCm+hejzWQxzMW9wjuzlugEH rLYaUN2kj0pcdtcNSWwhfecPWRImgYCWes++j0n5HDFr4ivAzgzCEpz2SQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCj8V9YzKOEWeVTSDQ1Dt11xe+YQMB8GA1UdIwQY MBaAFMLHo9tKPS2vvhhqpoX0c26n0Iw4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3NlajIwbzlMYS0tR0dxbWhmUnpicWZRakRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi82NTJiZWYtNmY0ZS00OTk3LWJiM2Et NGM5ZTQ5MjM5NjI0LzEvd3NlajIwbzlMYS0tR0dxbWhmUnpicWZRakRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi82NTJiZWYtNmY0ZS00OTk3LWJiM2EtNGM5ZTQ5MjM5NjI0 LzEvd3NlajIwbzlMYS0tR0dxbWhmUnpicWZRakRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARh7yPCTh 1mCBOyfvjdFdalmXLlSkkRYKwWW35f74Y2cGhDTjYCBelQPlToXvr0d/1GfUiiyn HX1ve0oy9N75TcCkgy0UF7uq3UjwHthgxtB9JQTj55A7Ua2BQOVgMKJd3pimm8CM rWT0SYNFZ6K52bXsvMOO82IdpyjGJsLgT3Mtp5UYJAbeAfTswO8Idn6YuRZiC3NI YMXLeNgUNDlhW5g4jH1+3KgbCxNOMDmtIi5uhlSoLlr/Con6RkekqLT67WUVCxEb 7QckmT8ku/uAN28jLPzx+xPRxR/KnVdO/xcIYE5+PxKNqLCGqarZdi0alfp3wH9K Z0w3/XanWDxIeQ== -----END CERTIFICATE-----Generated at Mon Jan 12 15:14:48 2026 by rpki-client