This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/Wd2lOf64-KNyU0JgBnDAwVTkuqo.mft File: Wd2lOf64-KNyU0JgBnDAwVTkuqo.mft (raw, json) Hash identifier: bpj/tFWa99t+NtI3NdSOfFw/6Yzuuntyq/4USw+uPxE= Subject key identifier: 67:92:E8:A8:C3:54:99:BE:A5:9F:70:26:28:B9:CE:62:63:12:87:14 Authority key identifier: 59:DD:A5:39:FE:B8:F8:A3:72:53:42:60:06:70:C0:C1:54:E4:BA:AA Certificate issuer: /CN=59dda539feb8f8a3725342600670c0c154e4baaa Certificate serial: 019BA15898915A9DD1565F5A4D98BB646F2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wd2lOf64-KNyU0JgBnDAwVTkuqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/Wd2lOf64-KNyU0JgBnDAwVTkuqo.mft Manifest number: 15EE Signing time: Fri 09 Jan 2026 06:01:36 +0000 Manifest this update: Fri 09 Jan 2026 06:01:36 +0000 Manifest next update: Sat 10 Jan 2026 06:01:36 +0000 Files and hashes: 1: Wd2lOf64-KNyU0JgBnDAwVTkuqo.crl (hash: fuElrGxer6P55aNmojpI2ddjXW6SKNGNzkCEzwZVdEw=) 2: dNkHE3jPImN4EseW6DyqfCow5I0.roa (hash: X9y8DNM6+jX2FyF40QujMf5GG93s9rWer+VdTVcTHgU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/Wd2lOf64-KNyU0JgBnDAwVTkuqo.crl rsync://rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/Wd2lOf64-KNyU0JgBnDAwVTkuqo.mft rsync://rpki.ripe.net/repository/DEFAULT/Wd2lOf64-KNyU0JgBnDAwVTkuqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 06:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a1:58:98:91:5a:9d:d1:56:5f:5a:4d:98:bb:64:6f:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59dda539feb8f8a3725342600670c0c154e4baaa Validity Not Before: Jan 9 06:01:36 2026 GMT Not After : Jan 10 06:01:36 2026 GMT Subject: CN=6792e8a8c35499bea59f702628b9ce6263128714 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:30:80:52:0b:86:77:07:77:ce:94:33:78:e4: 08:55:11:eb:e0:9e:9e:cf:09:94:ce:26:92:7a:97: e6:87:49:eb:7b:a8:82:cf:36:14:b2:93:ec:bf:11: 62:41:ff:d7:a5:e3:84:a8:e9:87:bd:c9:77:f6:0f: bc:ff:78:5b:c1:fb:3b:68:21:a5:40:8a:42:52:d6: f4:a3:5e:22:9b:fb:6a:08:b5:f3:3c:3b:78:27:3a: 21:b5:4b:22:fc:54:fe:7b:fd:38:af:7c:b9:0a:ab: d7:d7:64:b2:32:6c:5a:f3:30:18:88:99:9f:23:74: ca:a0:ac:88:c2:78:0f:90:c2:06:f7:e9:e8:ea:22: 10:45:b6:79:1b:66:e3:83:2f:76:e1:77:7d:8f:38: 91:90:e0:fc:3f:bc:9a:ad:44:a8:6f:52:b5:a5:5a: e3:1f:0f:28:d9:26:95:01:3c:49:1c:b5:cb:2e:06: 73:80:e2:fe:87:be:7e:fc:e2:b3:07:fc:d7:71:97: e7:21:14:c7:d3:ab:49:80:d8:b5:b1:94:b7:2e:7b: 25:ba:0b:5f:68:76:f2:0c:f6:bd:cb:32:f1:33:6f: 09:32:33:66:7c:f9:39:cf:57:ef:23:d4:26:6b:9a: a8:ed:16:3f:b0:6a:4b:4b:c0:71:4e:12:83:df:b3: b1:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:92:E8:A8:C3:54:99:BE:A5:9F:70:26:28:B9:CE:62:63:12:87:14 X509v3 Authority Key Identifier: keyid:59:DD:A5:39:FE:B8:F8:A3:72:53:42:60:06:70:C0:C1:54:E4:BA:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wd2lOf64-KNyU0JgBnDAwVTkuqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/Wd2lOf64-KNyU0JgBnDAwVTkuqo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/Wd2lOf64-KNyU0JgBnDAwVTkuqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:9e:6a:b0:29:2e:5f:74:68:7a:76:ed:1b:26:4c:5d:a4:03: 21:7b:64:1f:74:e5:85:e0:6c:d4:7b:e6:a5:3e:27:7d:c3:e0: c2:fc:79:57:d9:cd:f2:09:a9:c4:46:fe:f9:ef:98:9c:7c:ba: ec:38:5b:3d:91:6d:ef:8d:1b:66:83:04:b5:a4:99:83:67:26: 38:00:df:5e:59:59:55:33:84:51:24:0d:54:53:84:fd:47:73: da:f0:7d:02:91:ff:d5:d5:24:3e:6b:12:96:b0:77:22:ce:74: 26:dc:ad:00:bc:28:39:aa:ba:5b:fd:e4:b9:11:07:28:86:cd: ac:60:0f:f6:9c:65:d5:fe:c4:ee:1e:2f:a4:02:b2:13:6e:7a: ea:8e:44:bc:52:aa:a0:c9:46:d6:eb:f3:87:36:b7:2f:f9:b0: b7:d6:36:11:74:3c:2e:07:93:94:24:cf:1e:4e:13:eb:be:bc: 33:23:ca:61:4d:1e:23:b4:f0:d1:9d:86:6b:b9:6f:12:94:79: fe:22:9d:46:09:47:bb:e4:d3:56:4b:c6:4a:41:9e:bd:b7:15: d7:dc:70:a9:fc:43:4f:e4:a8:0a:9d:e8:3c:31:1b:2b:86:0a: 82:5a:24:10:4d:8c:ec:dc:15:ca:fa:47:01:2f:c9:9a:e7:b6: 1c:b9:94:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuhWJiRWp3RVl9aTZi7ZG8uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5ZGRhNTM5ZmViOGY4YTM3MjUzNDI2MDA2NzBjMGMxNTRl NGJhYWEwHhcNMjYwMTA5MDYwMTM2WhcNMjYwMTEwMDYwMTM2WjAzMTEwLwYDVQQD Eyg2NzkyZThhOGMzNTQ5OWJlYTU5ZjcwMjYyOGI5Y2U2MjYzMTI4NzE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzCAUguGdwd3zpQzeOQIVRHr4J6e zwmUziaSepfmh0nre6iCzzYUspPsvxFiQf/XpeOEqOmHvcl39g+8/3hbwfs7aCGl QIpCUtb0o14im/tqCLXzPDt4JzohtUsi/FT+e/04r3y5CqvX12SyMmxa8zAYiJmf I3TKoKyIwngPkMIG9+no6iIQRbZ5G2bjgy924Xd9jziRkOD8P7yarUSob1K1pVrj Hw8o2SaVATxJHLXLLgZzgOL+h75+/OKzB/zXcZfnIRTH06tJgNi1sZS3Lnslugtf aHbyDPa9yzLxM28JMjNmfPk5z1fvI9Qma5qo7RY/sGpLS8BxThKD37OxbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGeS6KjDVJm+pZ9wJii5zmJjEocUMB8GA1UdIwQY MBaAFFndpTn+uPijclNCYAZwwMFU5LqqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2QybE9mNjQtS055VTBKZ0JuREF3VlRrdXFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9iZjJiYTUtZjI4MC00OWU1LTlhMzQt ZmVjMjVkMmU5MThkLzEvV2QybE9mNjQtS055VTBKZ0JuREF3VlRrdXFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9iZjJiYTUtZjI4MC00OWU1LTlhMzQtZmVjMjVkMmU5MThk LzEvV2QybE9mNjQtS055VTBKZ0JuREF3VlRrdXFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnZ5qsCku X3RoenbtGyZMXaQDIXtkH3TlheBs1HvmpT4nfcPgwvx5V9nN8gmpxEb++e+YnHy6 7DhbPZFt740bZoMEtaSZg2cmOADfXllZVTOEUSQNVFOE/Udz2vB9ApH/1dUkPmsS lrB3Is50JtytALwoOaq6W/3kuREHKIbNrGAP9pxl1f7E7h4vpAKyE2566o5EvFKq oMlG1uvzhza3L/mwt9Y2EXQ8LgeTlCTPHk4T6768MyPKYU0eI7Tw0Z2Ga7lvEpR5 /iKdRglHu+TTVkvGSkGevbcV19xwqfxDT+SoCp3oPDEbK4YKglokEE2M7NwVyvpH AS/Jmue2HLmU7w== -----END CERTIFICATE-----Generated at Fri Jan 9 16:00:48 2026 by rpki-client