This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/179bd8-fc68-4f76-86ff-68f316607376/1/Wjsd3asz5FUGrZdwQJJHIEF9Vog.mft File: Wjsd3asz5FUGrZdwQJJHIEF9Vog.mft (raw, json) Hash identifier: vX49e9BZFrTq2zM+SqEBk2aK4JCtWXeBOPX1iVmrYq8= Subject key identifier: 49:EE:F4:44:E0:12:40:98:F6:16:56:FD:08:80:D2:F6:7D:DB:0F:DF Authority key identifier: 5A:3B:1D:DD:AB:33:E4:55:06:AD:97:70:40:92:47:20:41:7D:56:88 Certificate issuer: /CN=5a3b1dddab33e45506ad977040924720417d5688 Certificate serial: 019BB215109DA5930F84D4FCEBD7A379E023 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wjsd3asz5FUGrZdwQJJHIEF9Vog.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/179bd8-fc68-4f76-86ff-68f316607376/1/Wjsd3asz5FUGrZdwQJJHIEF9Vog.mft Manifest number: 0D0E Signing time: Mon 12 Jan 2026 12:01:23 +0000 Manifest this update: Mon 12 Jan 2026 12:01:23 +0000 Manifest next update: Tue 13 Jan 2026 12:01:23 +0000 Files and hashes: 1: Wjsd3asz5FUGrZdwQJJHIEF9Vog.crl (hash: H9H2e0tp4xSF3xgmcYf6pYJnRshjBsU8JKs/LSOw8Hw=) 2: b-_n2W3tKk55AZ6OfLhjhQmjHQM.roa (hash: o8XoU14Iw4MJitDTGOKpTt9lHXFFyCkBas20Hr7/Z5o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/179bd8-fc68-4f76-86ff-68f316607376/1/Wjsd3asz5FUGrZdwQJJHIEF9Vog.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/179bd8-fc68-4f76-86ff-68f316607376/1/Wjsd3asz5FUGrZdwQJJHIEF9Vog.mft rsync://rpki.ripe.net/repository/DEFAULT/Wjsd3asz5FUGrZdwQJJHIEF9Vog.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 12:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b2:15:10:9d:a5:93:0f:84:d4:fc:eb:d7:a3:79:e0:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a3b1dddab33e45506ad977040924720417d5688 Validity Not Before: Jan 12 12:01:23 2026 GMT Not After : Jan 13 12:01:23 2026 GMT Subject: CN=49eef444e0124098f61656fd0880d2f67ddb0fdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:15:ca:87:44:38:be:5b:e4:de:4f:c2:e9:db: 5d:bf:06:ac:31:d3:ef:52:5a:16:4b:63:77:06:37: 7c:62:44:2d:f7:42:6c:9e:0f:28:47:5e:df:f0:50: 11:9d:b9:d4:13:97:b0:83:dd:5f:b7:8b:95:90:bf: 00:03:79:41:e2:cd:85:6f:e8:d2:3d:33:07:ff:fe: 75:e7:77:0d:3f:5a:14:da:c9:a6:4d:0e:47:3e:85: 4b:f2:bc:8e:da:16:0b:b5:a9:a2:6d:a4:9b:2c:f2: 55:8c:54:4b:1d:ae:4e:c8:67:dd:34:7f:84:08:f5: 55:c2:2a:de:4d:12:62:5b:b0:95:f0:08:51:ba:6e: f3:47:c9:7b:05:05:79:1e:b5:8c:81:02:fd:56:c6: 96:dd:3b:8c:fa:3b:23:2b:e2:ee:83:a6:81:f5:42: 0d:de:99:be:f7:22:71:53:61:1b:38:45:7e:d8:6e: e0:c5:5c:a3:20:95:51:e2:9e:59:3e:ed:90:aa:cb: b8:d7:84:72:a1:57:7b:06:52:e6:33:28:ac:15:59: 2b:45:8b:30:bc:9d:1b:48:8f:b4:a8:54:7e:9d:47: eb:6f:50:f6:08:4c:57:df:d3:c8:f1:41:c2:82:f1: 57:02:aa:f8:35:46:74:e3:e5:67:93:49:3d:25:69: 70:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:EE:F4:44:E0:12:40:98:F6:16:56:FD:08:80:D2:F6:7D:DB:0F:DF X509v3 Authority Key Identifier: keyid:5A:3B:1D:DD:AB:33:E4:55:06:AD:97:70:40:92:47:20:41:7D:56:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wjsd3asz5FUGrZdwQJJHIEF9Vog.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/179bd8-fc68-4f76-86ff-68f316607376/1/Wjsd3asz5FUGrZdwQJJHIEF9Vog.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/179bd8-fc68-4f76-86ff-68f316607376/1/Wjsd3asz5FUGrZdwQJJHIEF9Vog.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:59:9b:bf:b1:dc:a3:36:6a:55:ea:3c:13:d9:b3:50:ef:ad: 87:a7:c8:b6:41:99:f3:b0:84:95:bd:ea:f0:c5:e8:6b:38:a0: 19:bb:86:3c:0f:c0:35:3d:b9:1f:39:58:21:74:a0:b8:22:9d: 02:7f:4c:0a:43:53:6f:0d:b4:dd:d1:5d:01:e8:e8:f7:91:03: 6e:f4:c4:0a:04:ac:86:5f:b5:df:ce:de:51:cb:f8:ca:d8:9f: ee:66:54:b5:fd:33:83:4f:88:2a:c7:d1:ab:22:24:4c:52:2e: 58:e8:cb:10:84:7c:ad:cb:26:14:c0:9d:9f:dd:2a:e9:e9:ae: 5f:77:6c:d2:4a:04:f0:ce:7e:1a:ef:dd:c3:f3:c4:6c:f0:2a: 6c:94:f7:3c:8c:11:8e:4c:9c:d8:ed:cf:84:26:64:23:de:67: 55:c0:a8:c3:b8:3a:ad:67:fe:e4:9c:e8:2e:be:4b:cc:6b:20: e6:d3:b8:4e:c1:87:63:36:f5:16:77:47:a1:69:6d:bd:12:70: 17:68:46:82:54:16:3d:b5:3e:d3:5d:f0:2e:72:46:0d:30:1f: d8:79:2a:97:8d:f3:ad:b8:91:f9:54:8e:5f:0b:db:d1:7d:83: d3:2c:a3:93:ef:41:db:b5:97:9c:f2:e4:1a:9b:b2:97:93:63: 5f:3f:89:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuyFRCdpZMPhNT869ejeeAjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhM2IxZGRkYWIzM2U0NTUwNmFkOTc3MDQwOTI0NzIwNDE3 ZDU2ODgwHhcNMjYwMTEyMTIwMTIzWhcNMjYwMTEzMTIwMTIzWjAzMTEwLwYDVQQD Eyg0OWVlZjQ0NGUwMTI0MDk4ZjYxNjU2ZmQwODgwZDJmNjdkZGIwZmRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRXKh0Q4vlvk3k/C6dtdvwasMdPv UloWS2N3Bjd8YkQt90Jsng8oR17f8FARnbnUE5ewg91ft4uVkL8AA3lB4s2Fb+jS PTMH//5153cNP1oU2smmTQ5HPoVL8ryO2hYLtamibaSbLPJVjFRLHa5OyGfdNH+E CPVVwireTRJiW7CV8AhRum7zR8l7BQV5HrWMgQL9VsaW3TuM+jsjK+Lug6aB9UIN 3pm+9yJxU2EbOEV+2G7gxVyjIJVR4p5ZPu2Qqsu414RyoVd7BlLmMyisFVkrRYsw vJ0bSI+0qFR+nUfrb1D2CExX39PI8UHCgvFXAqr4NUZ04+Vnk0k9JWlw+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEnu9ETgEkCY9hZW/QiA0vZ92w/fMB8GA1UdIwQY MBaAFFo7Hd2rM+RVBq2XcECSRyBBfVaIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2pzZDNhc3o1RlVHclpkd1FKSkhJRUY5Vm9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8xNzliZDgtZmM2OC00Zjc2LTg2ZmYt NjhmMzE2NjA3Mzc2LzEvV2pzZDNhc3o1RlVHclpkd1FKSkhJRUY5Vm9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy8xNzliZDgtZmM2OC00Zjc2LTg2ZmYtNjhmMzE2NjA3Mzc2 LzEvV2pzZDNhc3o1RlVHclpkd1FKSkhJRUY5Vm9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUlmbv7Hc ozZqVeo8E9mzUO+th6fItkGZ87CElb3q8MXoazigGbuGPA/ANT25HzlYIXSguCKd An9MCkNTbw203dFdAejo95EDbvTECgSshl+1387eUcv4ytif7mZUtf0zg0+IKsfR qyIkTFIuWOjLEIR8rcsmFMCdn90q6emuX3ds0koE8M5+Gu/dw/PEbPAqbJT3PIwR jkyc2O3PhCZkI95nVcCow7g6rWf+5JzoLr5LzGsg5tO4TsGHYzb1FndHoWltvRJw F2hGglQWPbU+013wLnJGDTAf2Hkql43zrbiR+VSOXwvb0X2D0yyjk+9B27WXnPLk Gpuyl5NjXz+JNA== -----END CERTIFICATE-----Generated at Mon Jan 12 22:18:21 2026 by rpki-client