This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/wN68iFC2kPEjJ5aRG_48TJqoZ9w.mft File: wN68iFC2kPEjJ5aRG_48TJqoZ9w.mft (raw, json) Hash identifier: rvE/rxgXnA1QPqQk72u05X/O7eX0lbl0h1lu6nAZ2W8= Subject key identifier: B4:E7:3B:B4:A3:86:F7:C0:92:C3:86:DE:E0:75:B6:79:EA:D7:96:9E Authority key identifier: C0:DE:BC:88:50:B6:90:F1:23:27:96:91:1B:FE:3C:4C:9A:A8:67:DC Certificate issuer: /CN=c0debc8850b690f1232796911bfe3c4c9aa867dc Certificate serial: 019B7A80EC95897D0D97D2C025DA29DECC72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wN68iFC2kPEjJ5aRG_48TJqoZ9w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/wN68iFC2kPEjJ5aRG_48TJqoZ9w.mft Manifest number: 04AE Signing time: Thu 01 Jan 2026 17:00:28 +0000 Manifest this update: Thu 01 Jan 2026 17:00:28 +0000 Manifest next update: Fri 02 Jan 2026 17:00:28 +0000 Files and hashes: 1: 0lgng2rjDy26wvLpufoJ44YGSa8.roa (hash: Sp2gMQIGghJdGnoU3YO/ErS7zVxVldScly14Bqy0M6k=) 2: wN68iFC2kPEjJ5aRG_48TJqoZ9w.crl (hash: JqV2+irwxyWicJNoTI5TDgJ/bM+U1Elel75ZVD5zEFY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/wN68iFC2kPEjJ5aRG_48TJqoZ9w.crl rsync://rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/wN68iFC2kPEjJ5aRG_48TJqoZ9w.mft rsync://rpki.ripe.net/repository/DEFAULT/wN68iFC2kPEjJ5aRG_48TJqoZ9w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 17:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:80:ec:95:89:7d:0d:97:d2:c0:25:da:29:de:cc:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0debc8850b690f1232796911bfe3c4c9aa867dc Validity Not Before: Jan 1 17:00:28 2026 GMT Not After : Jan 2 17:00:28 2026 GMT Subject: CN=b4e73bb4a386f7c092c386dee075b679ead7969e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:a1:51:ad:66:b3:5c:69:97:fd:3c:ea:22:8a: b9:2e:d2:57:70:dc:28:5c:e2:82:56:2a:08:5b:39: 59:ce:ea:eb:75:84:ae:3a:0d:ff:d7:70:d2:ea:d1: bf:46:2b:0d:c0:a8:19:d3:58:8d:a7:05:6c:9d:f8: 97:d7:80:6f:c1:51:23:32:7a:9f:bf:c2:a2:c3:4d: 0d:77:8f:ef:ff:78:7c:6b:a9:2a:18:df:97:4f:59: a9:e7:c1:a7:a4:27:f8:fe:a8:f5:10:73:17:df:51: 88:c6:d9:ab:ec:7b:5e:fa:4f:4f:7b:6e:b5:7d:4d: 79:65:81:91:fd:52:a9:09:36:d8:74:e0:de:63:a0: 1a:86:39:bf:4c:20:a0:fb:8b:ab:76:9c:82:b8:79: 2c:7b:9a:e5:e0:29:bd:25:0a:a8:25:e9:60:57:a4: 11:8e:5a:00:ce:5c:d9:55:bf:1f:67:2e:a0:3b:94: c0:5c:dd:7e:54:86:2a:56:1a:4f:64:a9:f3:3f:78: 31:94:1f:e4:aa:b8:59:ac:e1:53:ee:c8:6d:c3:26: a1:07:1c:2b:a4:04:3d:3b:b3:89:ca:f2:d0:c7:9a: 83:0e:7f:6c:2b:7c:49:82:7c:93:86:ea:b5:36:9d: 67:0d:ab:04:11:fa:c1:e7:2f:36:35:36:e9:6a:03: 1d:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:E7:3B:B4:A3:86:F7:C0:92:C3:86:DE:E0:75:B6:79:EA:D7:96:9E X509v3 Authority Key Identifier: keyid:C0:DE:BC:88:50:B6:90:F1:23:27:96:91:1B:FE:3C:4C:9A:A8:67:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wN68iFC2kPEjJ5aRG_48TJqoZ9w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/wN68iFC2kPEjJ5aRG_48TJqoZ9w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/wN68iFC2kPEjJ5aRG_48TJqoZ9w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:6d:a2:01:54:ee:e6:40:8f:06:6c:25:dc:1a:cc:28:93:fe: 42:cb:74:d2:32:38:88:5b:7d:3f:b4:08:a3:89:d5:fa:8c:f4: b3:67:23:cc:53:44:98:45:0e:2c:29:81:0b:d7:e1:cc:6e:b2: 58:de:54:90:cf:d4:3b:c7:d6:2d:ff:dd:14:3f:23:2d:4d:52: 1f:e8:67:84:48:f5:f8:2d:b3:4e:97:32:b8:aa:b9:a1:77:eb: 84:f7:cd:b5:e9:1c:b4:fc:7a:bb:ca:ce:ba:8d:38:89:30:df: 69:e0:99:b1:d9:f8:b8:f7:fb:39:76:bd:6e:48:87:e4:2b:7b: 1c:1e:0e:33:5b:4a:16:18:26:55:48:8f:98:ba:dd:75:64:eb: 4e:5c:d0:e6:17:09:9a:f5:c1:1e:63:21:5c:9a:60:9e:b4:c2: 21:58:eb:e7:96:b4:3a:cd:e6:fc:a8:e7:5c:50:61:c7:1d:e5: ae:11:27:f9:ad:1c:98:d1:ac:21:02:78:6f:c8:47:7d:12:3c: 22:08:87:fd:de:00:c3:ae:dc:19:8c:ab:5f:35:d4:69:42:4d: 4e:0d:bd:74:5f:db:19:e3:36:3a:a4:90:16:fa:53:a7:22:ca: f5:47:77:14:14:de:14:71:00:74:41:81:cb:1e:b3:88:62:0d: 02:02:fa:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt6gOyViX0Nl9LAJdop3sxyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwZGViYzg4NTBiNjkwZjEyMzI3OTY5MTFiZmUzYzRjOWFh ODY3ZGMwHhcNMjYwMTAxMTcwMDI4WhcNMjYwMTAyMTcwMDI4WjAzMTEwLwYDVQQD EyhiNGU3M2JiNGEzODZmN2MwOTJjMzg2ZGVlMDc1YjY3OWVhZDc5NjllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9aFRrWazXGmX/TzqIoq5LtJXcNwo XOKCVioIWzlZzurrdYSuOg3/13DS6tG/RisNwKgZ01iNpwVsnfiX14BvwVEjMnqf v8Kiw00Nd4/v/3h8a6kqGN+XT1mp58GnpCf4/qj1EHMX31GIxtmr7Hte+k9Pe261 fU15ZYGR/VKpCTbYdODeY6Aahjm/TCCg+4urdpyCuHkse5rl4Cm9JQqoJelgV6QR jloAzlzZVb8fZy6gO5TAXN1+VIYqVhpPZKnzP3gxlB/kqrhZrOFT7shtwyahBxwr pAQ9O7OJyvLQx5qDDn9sK3xJgnyThuq1Np1nDasEEfrB5y82NTbpagMdGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLTnO7SjhvfAksOG3uB1tnnq15aeMB8GA1UdIwQY MBaAFMDevIhQtpDxIyeWkRv+PEyaqGfcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd042OGlGQzJrUEVqSjVhUkdfNDhUSnFvWjl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9lM2NhNzEtMzZmMC00YzUyLWJjMDEt YzZhYzRkZDdjOGU0LzEvd042OGlGQzJrUEVqSjVhUkdfNDhUSnFvWjl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC9lM2NhNzEtMzZmMC00YzUyLWJjMDEtYzZhYzRkZDdjOGU0 LzEvd042OGlGQzJrUEVqSjVhUkdfNDhUSnFvWjl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR22iAVTu 5kCPBmwl3BrMKJP+Qst00jI4iFt9P7QIo4nV+oz0s2cjzFNEmEUOLCmBC9fhzG6y WN5UkM/UO8fWLf/dFD8jLU1SH+hnhEj1+C2zTpcyuKq5oXfrhPfNtekctPx6u8rO uo04iTDfaeCZsdn4uPf7OXa9bkiH5Ct7HB4OM1tKFhgmVUiPmLrddWTrTlzQ5hcJ mvXBHmMhXJpgnrTCIVjr55a0Os3m/KjnXFBhxx3lrhEn+a0cmNGsIQJ4b8hHfRI8 IgiH/d4Aw67cGYyrXzXUaUJNTg29dF/bGeM2OqSQFvpTpyLK9Ud3FBTeFHEAdEGB yx6ziGINAgL6AQ== -----END CERTIFICATE-----Generated at Thu Jan 1 19:47:30 2026 by rpki-client