This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/WXhaIeLQfGj_MXVYxp7xGMx1gFo.mft File: WXhaIeLQfGj_MXVYxp7xGMx1gFo.mft (raw, json) Hash identifier: vF61I6c/GdhaTie1s7XcB2/00rnFzWHkvwmO0tUNO4w= Subject key identifier: C6:D3:18:FC:86:22:EB:99:7A:87:6F:9E:60:90:D5:04:6C:0F:A4:B6 Authority key identifier: 59:78:5A:21:E2:D0:7C:68:FF:31:75:58:C6:9E:F1:18:CC:75:80:5A Certificate issuer: /CN=59785a21e2d07c68ff317558c69ef118cc75805a Certificate serial: 019BB1A78D56F7D166A96F83B30DFE976A4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXhaIeLQfGj_MXVYxp7xGMx1gFo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/WXhaIeLQfGj_MXVYxp7xGMx1gFo.mft Manifest number: 0E69 Signing time: Mon 12 Jan 2026 10:01:46 +0000 Manifest this update: Mon 12 Jan 2026 10:01:46 +0000 Manifest next update: Tue 13 Jan 2026 10:01:46 +0000 Files and hashes: 1: 6ePIa-n2ggJpskh1MNyAjjyaLCs.roa (hash: AZboyWjW8sQjb7GYwQbshy3odhKN/mtrnuXail1eVS4=) 2: WXhaIeLQfGj_MXVYxp7xGMx1gFo.crl (hash: 8whIwGEoEUA6tVeQyxd8TuSYuo4Jtz4Q9SgfnD5SnvU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/WXhaIeLQfGj_MXVYxp7xGMx1gFo.crl rsync://rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/WXhaIeLQfGj_MXVYxp7xGMx1gFo.mft rsync://rpki.ripe.net/repository/DEFAULT/WXhaIeLQfGj_MXVYxp7xGMx1gFo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 10:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b1:a7:8d:56:f7:d1:66:a9:6f:83:b3:0d:fe:97:6a:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59785a21e2d07c68ff317558c69ef118cc75805a Validity Not Before: Jan 12 10:01:46 2026 GMT Not After : Jan 13 10:01:46 2026 GMT Subject: CN=c6d318fc8622eb997a876f9e6090d5046c0fa4b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f7:d1:91:8f:07:77:3b:07:3a:10:1d:b0:46: a1:22:ce:6b:b3:17:c3:5c:24:06:5e:35:42:8f:18: 7d:c8:a1:eb:46:8c:6a:61:a2:99:66:fd:a3:ee:b0: 58:1e:58:c1:90:d0:21:ba:c7:ae:57:c0:42:bd:5c: 9e:bd:03:23:9d:45:e8:80:7a:56:19:24:61:ae:59: b6:e3:dc:82:a1:ce:d0:c2:f2:48:99:68:1e:b5:f2: 51:e5:e3:57:98:da:1b:04:07:58:40:fb:8e:b4:92: 49:80:90:f1:c1:eb:87:49:5b:4a:a7:84:b1:28:d0: f6:70:00:0b:5b:f4:d2:dd:fa:e5:80:ba:07:8c:65: 2f:c4:ad:18:c4:09:66:84:d6:0f:20:5b:f8:53:d7: 89:0f:cc:f0:9b:dc:03:d5:31:75:8e:2e:86:a4:be: 8a:0c:2b:1f:71:58:71:e4:5d:65:6a:e0:aa:1f:3e: eb:7b:21:66:95:6b:8f:bd:94:d0:8c:84:67:7d:76: 77:1a:73:8a:32:54:17:39:ad:6a:37:04:73:0d:20: f1:c6:49:3a:bc:cc:53:4e:4c:1a:e9:c2:f5:a3:06: 2f:fa:df:41:1f:fd:9a:47:db:1a:d4:cc:07:ee:b0: 37:e6:84:22:27:d1:d8:d0:4a:0c:b5:ae:6c:f9:c5: 21:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:D3:18:FC:86:22:EB:99:7A:87:6F:9E:60:90:D5:04:6C:0F:A4:B6 X509v3 Authority Key Identifier: keyid:59:78:5A:21:E2:D0:7C:68:FF:31:75:58:C6:9E:F1:18:CC:75:80:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXhaIeLQfGj_MXVYxp7xGMx1gFo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/WXhaIeLQfGj_MXVYxp7xGMx1gFo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/WXhaIeLQfGj_MXVYxp7xGMx1gFo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:c7:3d:54:b0:23:ab:8f:b2:e5:8f:5b:dc:91:bd:56:99:d9: 2c:c2:eb:b5:c1:6a:64:84:58:49:f2:62:b7:fa:63:22:03:f4: 5c:5f:09:78:17:c1:57:f8:62:a7:71:86:9d:24:b1:0d:a6:9d: 89:88:90:3d:1d:ed:98:b0:68:15:e0:58:04:02:d0:93:8d:45: 55:0a:58:5c:f0:85:7d:08:0a:d7:78:e0:ca:f8:a6:0d:28:40: f6:f8:d6:39:13:86:14:eb:fb:34:e4:c0:0b:62:36:41:58:bc: 14:fa:77:ba:b1:ed:28:df:c1:75:0b:d9:6b:92:5c:05:a1:e7: 25:dc:de:c8:e3:dd:fc:4d:a3:83:7a:b1:f1:86:ee:3a:7c:52: 06:35:f2:9a:10:ec:5b:c6:d8:72:9e:ac:74:90:7f:ff:2b:22: 12:02:a3:70:8b:1e:0b:f7:ff:3c:f0:15:58:a3:02:bf:31:7a: 9d:20:a1:c1:bd:05:87:a9:69:31:a7:91:c7:6c:a5:1a:4a:09: 35:2d:7f:b0:4e:6a:07:f9:0c:63:f8:d2:37:22:e5:ab:67:6d: 5a:9d:b9:a1:3e:fa:50:27:5d:0c:83:f7:50:cd:d6:e0:5e:19: e9:e2:02:bc:4f:d1:4e:50:8b:e3:5c:24:dc:8e:c4:d7:9a:70: 59:1b:06:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuxp41W99FmqW+Dsw3+l2pNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5Nzg1YTIxZTJkMDdjNjhmZjMxNzU1OGM2OWVmMTE4Y2M3 NTgwNWEwHhcNMjYwMTEyMTAwMTQ2WhcNMjYwMTEzMTAwMTQ2WjAzMTEwLwYDVQQD EyhjNmQzMThmYzg2MjJlYjk5N2E4NzZmOWU2MDkwZDUwNDZjMGZhNGI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPfRkY8HdzsHOhAdsEahIs5rsxfD XCQGXjVCjxh9yKHrRoxqYaKZZv2j7rBYHljBkNAhuseuV8BCvVyevQMjnUXogHpW GSRhrlm249yCoc7QwvJImWgetfJR5eNXmNobBAdYQPuOtJJJgJDxweuHSVtKp4Sx KND2cAALW/TS3frlgLoHjGUvxK0YxAlmhNYPIFv4U9eJD8zwm9wD1TF1ji6GpL6K DCsfcVhx5F1lauCqHz7reyFmlWuPvZTQjIRnfXZ3GnOKMlQXOa1qNwRzDSDxxkk6 vMxTTkwa6cL1owYv+t9BH/2aR9sa1MwH7rA35oQiJ9HY0EoMta5s+cUhWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMbTGPyGIuuZeodvnmCQ1QRsD6S2MB8GA1UdIwQY MBaAFFl4WiHi0Hxo/zF1WMae8RjMdYBaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1hoYUllTFFmR2pfTVhWWXhwN3hHTXgxZ0ZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9lMzI2N2ItZjc4MC00MTg3LTgwNTct NzVmNGZjYTg2YWU0LzEvV1hoYUllTFFmR2pfTVhWWXhwN3hHTXgxZ0ZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC9lMzI2N2ItZjc4MC00MTg3LTgwNTctNzVmNGZjYTg2YWU0 LzEvV1hoYUllTFFmR2pfTVhWWXhwN3hHTXgxZ0ZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMMc9VLAj q4+y5Y9b3JG9VpnZLMLrtcFqZIRYSfJit/pjIgP0XF8JeBfBV/hip3GGnSSxDaad iYiQPR3tmLBoFeBYBALQk41FVQpYXPCFfQgK13jgyvimDShA9vjWOROGFOv7NOTA C2I2QVi8FPp3urHtKN/BdQvZa5JcBaHnJdzeyOPd/E2jg3qx8YbuOnxSBjXymhDs W8bYcp6sdJB//ysiEgKjcIseC/f/PPAVWKMCvzF6nSChwb0Fh6lpMaeRx2ylGkoJ NS1/sE5qB/kMY/jSNyLlq2dtWp25oT76UCddDIP3UM3W4F4Z6eICvE/RTlCL41wk 3I7E15pwWRsGdw== -----END CERTIFICATE-----Generated at Mon Jan 12 15:49:24 2026 by rpki-client