This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f8b1bb-c747-4158-8792-8641415ebc82/1/wPCr5oh1RRC8lsfxsVlJJGn9pqc.mft File: wPCr5oh1RRC8lsfxsVlJJGn9pqc.mft (raw, json) Hash identifier: yNiwpFVRhzH46xMli+cxKmiAN7IEmVblUH0fhBLVED0= Subject key identifier: 0A:FC:F6:08:AD:6E:A4:FD:AA:CE:5A:E4:BB:C2:6B:2A:90:BC:B7:FE Authority key identifier: C0:F0:AB:E6:88:75:45:10:BC:96:C7:F1:B1:59:49:24:69:FD:A6:A7 Certificate issuer: /CN=c0f0abe688754510bc96c7f1b159492469fda6a7 Certificate serial: 019BAF81BAE2010025EA7C0028D301E1D651 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wPCr5oh1RRC8lsfxsVlJJGn9pqc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f8b1bb-c747-4158-8792-8641415ebc82/1/wPCr5oh1RRC8lsfxsVlJJGn9pqc.mft Manifest number: 0739 Signing time: Mon 12 Jan 2026 00:01:13 +0000 Manifest this update: Mon 12 Jan 2026 00:01:13 +0000 Manifest next update: Tue 13 Jan 2026 00:01:13 +0000 Files and hashes: 1: 5HeMO4zDu-Aw5hUDH_h00aWRAfU.roa (hash: rvSp2TE3yHxwYyM7Q6koLSjsHsuVLORSAbQms57XIPo=) 2: wPCr5oh1RRC8lsfxsVlJJGn9pqc.crl (hash: hjaM3ZcYI4kX23yJf2dochwbNKAuOFqv7BIYAaqe5+0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f8b1bb-c747-4158-8792-8641415ebc82/1/wPCr5oh1RRC8lsfxsVlJJGn9pqc.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/f8b1bb-c747-4158-8792-8641415ebc82/1/wPCr5oh1RRC8lsfxsVlJJGn9pqc.mft rsync://rpki.ripe.net/repository/DEFAULT/wPCr5oh1RRC8lsfxsVlJJGn9pqc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 00:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:af:81:ba:e2:01:00:25:ea:7c:00:28:d3:01:e1:d6:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0f0abe688754510bc96c7f1b159492469fda6a7 Validity Not Before: Jan 12 00:01:13 2026 GMT Not After : Jan 13 00:01:13 2026 GMT Subject: CN=0afcf608ad6ea4fdaace5ae4bbc26b2a90bcb7fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:fb:91:20:7e:42:fe:cc:c9:df:67:36:c0:3b: 1d:4e:58:9a:f8:d9:d3:a1:a4:07:c8:54:f7:3e:e4: cb:67:22:85:1e:e3:cf:14:36:19:36:f7:a2:72:32: bb:1d:cb:a3:6c:55:01:d1:cb:c2:81:a4:8d:6e:49: 31:3e:bd:8c:53:5c:13:1a:39:f6:28:fe:72:b1:68: 99:e0:80:2c:4a:e9:16:2d:cf:dd:00:25:a3:f4:ac: c7:cf:c2:b5:b5:f6:f6:44:06:89:58:89:ac:ef:7b: 28:6f:32:a9:40:0a:f3:65:0e:eb:24:19:c9:52:59: ca:a7:79:5b:17:2c:88:f9:77:51:27:c2:d2:b6:0d: 41:77:2d:bb:7e:60:38:0d:97:53:58:a4:31:39:3e: 5e:76:28:48:46:ab:b9:c6:bb:a2:79:00:9b:33:aa: 0b:f0:46:df:ef:93:66:e6:42:07:1c:42:39:89:db: 77:8e:73:01:4d:27:21:cc:3e:9e:a0:b7:a5:08:08: ee:b1:ad:c3:64:8b:40:f5:4d:13:90:84:e5:4e:c1: a0:f5:0f:24:d1:ed:69:73:7e:5a:fc:12:8b:56:4d: 96:bf:96:0d:f2:23:c6:3c:1a:38:d3:55:f1:9e:51: 0e:af:ce:2a:e2:e1:6f:89:07:1d:a1:17:7c:d2:cb: 78:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:FC:F6:08:AD:6E:A4:FD:AA:CE:5A:E4:BB:C2:6B:2A:90:BC:B7:FE X509v3 Authority Key Identifier: keyid:C0:F0:AB:E6:88:75:45:10:BC:96:C7:F1:B1:59:49:24:69:FD:A6:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPCr5oh1RRC8lsfxsVlJJGn9pqc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f8b1bb-c747-4158-8792-8641415ebc82/1/wPCr5oh1RRC8lsfxsVlJJGn9pqc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f8b1bb-c747-4158-8792-8641415ebc82/1/wPCr5oh1RRC8lsfxsVlJJGn9pqc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:f3:2c:6f:cd:07:2d:6c:08:8c:0d:77:6d:2a:64:02:39:02: 3b:41:b4:3a:86:4c:bd:64:7b:20:9b:72:82:89:01:72:38:b2: 40:2f:15:5d:a8:38:61:f5:ec:21:27:28:25:f8:58:9a:7f:a4: 53:bd:ff:b2:17:71:7e:35:61:3e:36:15:13:f0:00:84:68:ff: 4a:23:de:b0:3a:6b:b8:4b:da:eb:3c:1e:9d:cf:28:97:92:14: 32:06:7e:1e:20:ff:f2:b6:8e:bd:8b:9d:be:ac:df:ef:0b:af: ca:f9:6c:e5:62:c3:47:0f:52:09:2e:f9:26:fc:d4:c8:de:c7: 51:73:5e:65:cf:aa:fe:ef:05:c7:9a:42:41:18:61:8c:d4:5b: 0d:c0:ec:b3:ec:39:40:c7:7b:09:39:be:56:68:50:2a:4d:c5: 1d:5a:b6:c5:a5:02:a9:ec:32:90:c1:65:6a:9d:e7:41:33:0d: d9:94:36:f4:0c:b1:26:03:ef:d3:b6:27:8a:d1:6a:63:6b:10: 6f:68:5b:36:0a:02:ca:0e:99:32:9f:10:74:8c:ed:95:68:bb: 5f:fd:e8:ad:1b:41:5a:bf:8f:11:85:b5:f8:f1:8d:33:11:e4: db:b0:22:19:bc:7a:18:4b:5b:ff:88:bf:67:43:72:78:9a:5e: 1b:ca:67:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuvgbriAQAl6nwAKNMB4dZRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwZjBhYmU2ODg3NTQ1MTBiYzk2YzdmMWIxNTk0OTI0Njlm ZGE2YTcwHhcNMjYwMTEyMDAwMTEzWhcNMjYwMTEzMDAwMTEzWjAzMTEwLwYDVQQD EygwYWZjZjYwOGFkNmVhNGZkYWFjZTVhZTRiYmMyNmIyYTkwYmNiN2ZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofuRIH5C/szJ32c2wDsdTlia+NnT oaQHyFT3PuTLZyKFHuPPFDYZNveicjK7HcujbFUB0cvCgaSNbkkxPr2MU1wTGjn2 KP5ysWiZ4IAsSukWLc/dACWj9KzHz8K1tfb2RAaJWIms73sobzKpQArzZQ7rJBnJ UlnKp3lbFyyI+XdRJ8LStg1Bdy27fmA4DZdTWKQxOT5edihIRqu5xruieQCbM6oL 8Ebf75Nm5kIHHEI5idt3jnMBTSchzD6eoLelCAjusa3DZItA9U0TkITlTsGg9Q8k 0e1pc35a/BKLVk2Wv5YN8iPGPBo401XxnlEOr84q4uFviQcdoRd80st4QwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAr89gitbqT9qs5a5LvCayqQvLf+MB8GA1UdIwQY MBaAFMDwq+aIdUUQvJbH8bFZSSRp/aanMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1BDcjVvaDFSUkM4bHNmeHNWbEpKR245cHFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9mOGIxYmItYzc0Ny00MTU4LTg3OTIt ODY0MTQxNWViYzgyLzEvd1BDcjVvaDFSUkM4bHNmeHNWbEpKR245cHFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS9mOGIxYmItYzc0Ny00MTU4LTg3OTItODY0MTQxNWViYzgy LzEvd1BDcjVvaDFSUkM4bHNmeHNWbEpKR245cHFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo/Msb80H LWwIjA13bSpkAjkCO0G0OoZMvWR7IJtygokBcjiyQC8VXag4YfXsIScoJfhYmn+k U73/shdxfjVhPjYVE/AAhGj/SiPesDpruEva6zwenc8ol5IUMgZ+HiD/8raOvYud vqzf7wuvyvls5WLDRw9SCS75JvzUyN7HUXNeZc+q/u8Fx5pCQRhhjNRbDcDss+w5 QMd7CTm+VmhQKk3FHVq2xaUCqewykMFlap3nQTMN2ZQ29AyxJgPv07YnitFqY2sQ b2hbNgoCyg6ZMp8QdIztlWi7X/3orRtBWr+PEYW1+PGNMxHk27AiGbx6GEtb/4i/ Z0NyeJpeG8pnHg== -----END CERTIFICATE-----Generated at Mon Jan 12 07:55:45 2026 by rpki-client