This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/34b48f-70c0-4004-ba0f-de3c8d953ec5/1/wAqI1-WlZepxnPxA2Ltj7hZxhWo.mft File: wAqI1-WlZepxnPxA2Ltj7hZxhWo.mft (raw, json) Hash identifier: c9LVzOKCVmDFHKaiKO/PhFFtOCsqBbss4SsCK83DEjo= Subject key identifier: 97:B6:E6:6C:DB:0C:E9:82:BA:E6:6E:D2:7D:31:B2:0E:74:18:CB:3B Authority key identifier: C0:0A:88:D7:E5:A5:65:EA:71:9C:FC:40:D8:BB:63:EE:16:71:85:6A Certificate issuer: /CN=c00a88d7e5a565ea719cfc40d8bb63ee1671856a Certificate serial: 019B9441295E612947A3A4106F4764CB5216 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wAqI1-WlZepxnPxA2Ltj7hZxhWo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/34b48f-70c0-4004-ba0f-de3c8d953ec5/1/wAqI1-WlZepxnPxA2Ltj7hZxhWo.mft Manifest number: 06B9 Signing time: Tue 06 Jan 2026 17:00:56 +0000 Manifest this update: Tue 06 Jan 2026 17:00:56 +0000 Manifest next update: Wed 07 Jan 2026 17:00:56 +0000 Files and hashes: 1: IJ2P19IcEVD5TXJ_fPVhgYBm_qY.roa (hash: N2VSLUJTgIas4vbaZK4n5fSPJQ+7roJjvsDns30p6Kc=) 2: wAqI1-WlZepxnPxA2Ltj7hZxhWo.crl (hash: ek9ti72tIl/mon/l2RdYaoIIU6zlUX516yG5uWWLpok=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/34b48f-70c0-4004-ba0f-de3c8d953ec5/1/wAqI1-WlZepxnPxA2Ltj7hZxhWo.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/34b48f-70c0-4004-ba0f-de3c8d953ec5/1/wAqI1-WlZepxnPxA2Ltj7hZxhWo.mft rsync://rpki.ripe.net/repository/DEFAULT/wAqI1-WlZepxnPxA2Ltj7hZxhWo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 14:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:94:41:29:5e:61:29:47:a3:a4:10:6f:47:64:cb:52:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c00a88d7e5a565ea719cfc40d8bb63ee1671856a Validity Not Before: Jan 6 17:00:56 2026 GMT Not After : Jan 7 17:00:56 2026 GMT Subject: CN=97b6e66cdb0ce982bae66ed27d31b20e7418cb3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ac:7b:78:32:8e:84:11:30:ea:14:4f:be:cd: 71:21:c9:e9:8c:7b:fa:84:8e:8b:2b:6f:7b:3e:35: a0:49:7d:04:ff:da:a1:01:f7:b5:b1:af:2a:fc:98: ad:3c:98:b8:b8:ec:df:1a:96:06:53:e8:9d:f1:1f: 8b:78:29:10:19:28:76:f3:93:46:6a:fd:33:0f:f7: 12:d2:7c:37:2a:d9:66:d9:e9:55:62:b2:64:d3:41: 4f:50:42:58:c8:48:ac:5a:1a:68:6e:cb:cd:ba:9d: 19:de:c9:cb:b6:2b:e5:95:01:56:0c:11:b8:c9:4c: ed:a3:a2:3a:98:f0:1e:2c:2b:94:fe:04:c8:64:09: b1:3e:93:b5:c4:fb:a5:b7:e1:26:ca:f5:6f:fe:a9: 7b:24:b4:f8:34:8f:6d:91:3b:13:d7:23:c5:ef:43: 52:1c:86:b3:98:30:bc:c4:14:38:54:a1:91:c4:e3: 71:16:aa:7f:a9:f7:f5:1b:a2:bc:9d:d7:2b:45:47: 96:ca:5c:8a:fb:f5:b1:e2:04:7d:45:3f:5c:3e:c4: 64:27:41:77:7d:09:90:17:3b:ce:88:62:19:a0:d7: 41:43:33:27:83:fe:8a:fc:49:b3:3d:98:e9:22:b0: 05:d0:1f:78:45:ae:56:dc:28:4e:2b:1e:15:da:45: dc:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:B6:E6:6C:DB:0C:E9:82:BA:E6:6E:D2:7D:31:B2:0E:74:18:CB:3B X509v3 Authority Key Identifier: keyid:C0:0A:88:D7:E5:A5:65:EA:71:9C:FC:40:D8:BB:63:EE:16:71:85:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wAqI1-WlZepxnPxA2Ltj7hZxhWo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/34b48f-70c0-4004-ba0f-de3c8d953ec5/1/wAqI1-WlZepxnPxA2Ltj7hZxhWo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/34b48f-70c0-4004-ba0f-de3c8d953ec5/1/wAqI1-WlZepxnPxA2Ltj7hZxhWo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:6c:e9:62:9d:de:78:52:7f:cb:47:dd:fe:e9:8c:f7:3f:ea: c9:cf:25:ef:94:9c:24:6a:ca:a6:d5:14:9d:31:63:64:cc:73: 3b:1f:12:1b:8e:43:30:ef:59:47:e1:24:29:03:5a:f0:84:63: f5:d4:2a:6f:e0:0a:ba:8c:98:b8:93:71:7f:1a:33:38:aa:48: 02:ba:d1:67:4d:1c:4c:0c:2c:4b:1c:fd:71:af:88:25:94:5c: 7d:e4:04:f4:9a:cf:6a:1a:c0:34:89:82:89:18:c5:21:d4:e4: 0f:0c:ca:46:11:e1:e8:78:6d:ec:72:27:9b:fd:11:30:40:a4: fd:9f:ad:6d:07:c8:34:61:9e:35:2d:42:ea:09:05:a5:65:53: 77:a3:4a:d2:f0:59:ad:3f:f5:a3:ce:ad:7b:91:f7:bb:ba:b1: 92:2e:1a:88:04:bb:d3:b1:ac:db:9f:7d:fe:33:56:01:b9:e8: 79:91:2d:9f:d1:15:bd:b7:35:e8:16:cd:d9:21:de:58:7b:d6: a0:c0:f7:11:40:ab:c7:23:0e:ad:fc:ac:2c:a4:12:b0:d5:7a: 54:16:0d:d4:e9:e2:32:b9:84:c6:ba:ae:fe:09:ae:2b:2a:ce: 8d:cb:98:97:1e:8a:66:0b:52:4e:1e:64:30:68:ed:a9:e1:98: fd:7c:f4:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuUQSleYSlHo6QQb0dky1IWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwMGE4OGQ3ZTVhNTY1ZWE3MTljZmM0MGQ4YmI2M2VlMTY3 MTg1NmEwHhcNMjYwMTA2MTcwMDU2WhcNMjYwMTA3MTcwMDU2WjAzMTEwLwYDVQQD Eyg5N2I2ZTY2Y2RiMGNlOTgyYmFlNjZlZDI3ZDMxYjIwZTc0MThjYjNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6x7eDKOhBEw6hRPvs1xIcnpjHv6 hI6LK297PjWgSX0E/9qhAfe1sa8q/JitPJi4uOzfGpYGU+id8R+LeCkQGSh285NG av0zD/cS0nw3Ktlm2elVYrJk00FPUEJYyEisWhpobsvNup0Z3snLtivllQFWDBG4 yUzto6I6mPAeLCuU/gTIZAmxPpO1xPult+EmyvVv/ql7JLT4NI9tkTsT1yPF70NS HIazmDC8xBQ4VKGRxONxFqp/qff1G6K8ndcrRUeWylyK+/Wx4gR9RT9cPsRkJ0F3 fQmQFzvOiGIZoNdBQzMng/6K/EmzPZjpIrAF0B94Ra5W3ChOKx4V2kXciwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJe25mzbDOmCuuZu0n0xsg50GMs7MB8GA1UdIwQY MBaAFMAKiNflpWXqcZz8QNi7Y+4WcYVqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0FxSTEtV2xaZXB4blB4QTJMdGo3aFp4aFdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8zNGI0OGYtNzBjMC00MDA0LWJhMGYt ZGUzYzhkOTUzZWM1LzEvd0FxSTEtV2xaZXB4blB4QTJMdGo3aFp4aFdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy8zNGI0OGYtNzBjMC00MDA0LWJhMGYtZGUzYzhkOTUzZWM1 LzEvd0FxSTEtV2xaZXB4blB4QTJMdGo3aFp4aFdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATWzpYp3e eFJ/y0fd/umM9z/qyc8l75ScJGrKptUUnTFjZMxzOx8SG45DMO9ZR+EkKQNa8IRj 9dQqb+AKuoyYuJNxfxozOKpIArrRZ00cTAwsSxz9ca+IJZRcfeQE9JrPahrANImC iRjFIdTkDwzKRhHh6Hht7HInm/0RMECk/Z+tbQfINGGeNS1C6gkFpWVTd6NK0vBZ rT/1o86te5H3u7qxki4aiAS707Gs2599/jNWAbnoeZEtn9EVvbc16BbN2SHeWHvW oMD3EUCrxyMOrfysLKQSsNV6VBYN1OniMrmExrqu/gmuKyrOjcuYlx6KZgtSTh5k MGjtqeGY/Xz0XQ== -----END CERTIFICATE-----Generated at Tue Jan 6 21:10:56 2026 by rpki-client