This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.mft File: WSgL6bNNnGabgCDlTdakheMX1y8.mft (raw, json) Hash identifier: W8/rcwDhmL/ELvDxs5oYjk0eQtOFAmZRYwZTuR9YrJ0= Subject key identifier: 06:BE:DF:D7:21:D4:FD:FE:0C:BA:96:52:65:D0:BA:E8:75:E0:AB:C7 Authority key identifier: 59:28:0B:E9:B3:4D:9C:66:9B:80:20:E5:4D:D6:A4:85:E3:17:D7:2F Certificate issuer: /CN=59280be9b34d9c669b8020e54dd6a485e317d72f Certificate serial: 019BAFEFB7F73844A8F805E9342973D26159 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WSgL6bNNnGabgCDlTdakheMX1y8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.mft Manifest number: 03B6 Signing time: Mon 12 Jan 2026 02:01:21 +0000 Manifest this update: Mon 12 Jan 2026 02:01:21 +0000 Manifest next update: Tue 13 Jan 2026 02:01:21 +0000 Files and hashes: 1: 7mFBGYIZTTPkUm2FZR5kpkDM7F8.roa (hash: zkNpz1MjljqP764BiUuBFikrGpXSG3hgc/lYZBakjH0=) 2: WSgL6bNNnGabgCDlTdakheMX1y8.crl (hash: U7GflN5wCKZHFK8o/U5mlusJ4FwQMak8dRFcI8D6ork=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.crl rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.mft rsync://rpki.ripe.net/repository/DEFAULT/WSgL6bNNnGabgCDlTdakheMX1y8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 02:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:af:ef:b7:f7:38:44:a8:f8:05:e9:34:29:73:d2:61:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59280be9b34d9c669b8020e54dd6a485e317d72f Validity Not Before: Jan 12 02:01:21 2026 GMT Not After : Jan 13 02:01:21 2026 GMT Subject: CN=06bedfd721d4fdfe0cba965265d0bae875e0abc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:8f:24:99:67:b1:ac:64:d6:04:a9:8e:d1:95: e7:cc:93:6a:25:8c:99:63:6e:2e:0d:27:ec:9c:1d: c2:38:8c:08:b9:ba:0a:06:42:3c:73:a2:9e:a2:76: 43:0f:c2:2e:c4:3e:53:de:c0:2b:21:19:af:7d:f2: 51:f9:88:4e:91:0f:72:6c:ff:24:76:9e:4e:85:af: 1c:cd:b3:6a:3e:0a:d1:0c:60:c4:01:62:16:32:a0: 66:10:54:df:08:75:e0:85:d2:5d:d9:fc:94:c9:56: 40:c4:ea:6a:85:65:29:30:3f:d9:23:ba:be:b2:99: fb:78:3d:19:ea:8e:f0:e4:f1:74:fb:f7:14:24:26: 3b:b1:43:c9:cf:f9:c8:66:e7:6e:8d:4d:a6:8c:52: e8:23:e8:eb:04:35:d0:9e:6a:24:c2:5e:6e:5c:7b: 28:41:dd:b5:2e:42:f2:61:c3:2b:7b:ad:40:e9:2e: 84:b5:3a:fe:52:b4:49:43:74:36:4d:7e:97:dc:e4: 57:78:40:52:55:b0:06:3c:37:36:55:44:ed:a9:50: ed:c1:53:c5:d8:dd:f8:4b:a6:d3:7a:a1:b4:13:d6: 71:08:48:20:cd:34:fb:b0:55:0f:f3:d2:be:9a:26: db:f3:e5:08:19:2b:1d:81:6f:13:49:86:43:db:8d: cc:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:BE:DF:D7:21:D4:FD:FE:0C:BA:96:52:65:D0:BA:E8:75:E0:AB:C7 X509v3 Authority Key Identifier: keyid:59:28:0B:E9:B3:4D:9C:66:9B:80:20:E5:4D:D6:A4:85:E3:17:D7:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WSgL6bNNnGabgCDlTdakheMX1y8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:bb:55:da:1e:c7:2d:41:45:5f:98:1b:5b:0c:54:f9:be:cb: 8d:0d:d6:8e:b3:06:77:fd:b1:b4:b9:75:7f:af:f1:e4:25:a9: 5f:82:39:83:e0:31:af:2d:64:00:30:f4:1b:e8:f3:c5:3c:29: 12:d3:d5:9c:39:a0:1a:15:e3:20:28:76:01:88:4f:73:d7:f5: 4f:6f:93:bb:3a:e1:0c:da:fa:1c:b2:29:b4:d4:ac:d4:c6:14: 90:23:7a:f6:eb:a9:db:e5:42:ca:aa:25:35:26:9f:d3:2d:47: a1:1c:98:34:94:b4:e3:63:cd:3f:29:0b:6a:14:b7:09:0c:5d: 95:39:1b:29:69:ae:4c:26:7d:8c:e1:4b:91:b3:05:4c:3e:c1: 57:d7:c5:18:d4:17:ed:10:84:da:9f:93:6a:f7:30:5a:ec:3c: 5e:07:8a:63:47:ce:ac:b2:19:c1:9b:26:01:79:1b:e6:5f:99: a4:fd:97:bc:54:f1:9e:c8:bc:92:18:de:3e:58:6c:dd:e1:46: 0c:61:03:33:4a:b0:34:6e:4f:cd:92:5a:1c:d2:67:a8:c7:83: b3:76:c6:02:5b:ec:e8:39:0f:a1:eb:b8:9b:4a:5d:cc:1f:0a: 61:b3:1a:a3:e4:b2:0e:40:84:8c:ba:5f:e4:a6:a8:f5:dc:4e: ce:2f:16:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuv77f3OESo+AXpNClz0mFZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5MjgwYmU5YjM0ZDljNjY5YjgwMjBlNTRkZDZhNDg1ZTMx N2Q3MmYwHhcNMjYwMTEyMDIwMTIxWhcNMjYwMTEzMDIwMTIxWjAzMTEwLwYDVQQD EygwNmJlZGZkNzIxZDRmZGZlMGNiYTk2NTI2NWQwYmFlODc1ZTBhYmM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu48kmWexrGTWBKmO0ZXnzJNqJYyZ Y24uDSfsnB3COIwIuboKBkI8c6KeonZDD8IuxD5T3sArIRmvffJR+YhOkQ9ybP8k dp5Oha8czbNqPgrRDGDEAWIWMqBmEFTfCHXghdJd2fyUyVZAxOpqhWUpMD/ZI7q+ spn7eD0Z6o7w5PF0+/cUJCY7sUPJz/nIZudujU2mjFLoI+jrBDXQnmokwl5uXHso Qd21LkLyYcMre61A6S6EtTr+UrRJQ3Q2TX6X3ORXeEBSVbAGPDc2VUTtqVDtwVPF 2N34S6bTeqG0E9ZxCEggzTT7sFUP89K+mibb8+UIGSsdgW8TSYZD243MMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAa+39ch1P3+DLqWUmXQuuh14KvHMB8GA1UdIwQY MBaAFFkoC+mzTZxmm4Ag5U3WpIXjF9cvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1NnTDZiTk5uR2FiZ0NEbFRkYWtoZU1YMXk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9lYzU4NDItNjU1OS00OGFmLTgwZTAt ZTBhMDQ1MDc1OTg0LzEvV1NnTDZiTk5uR2FiZ0NEbFRkYWtoZU1YMXk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi9lYzU4NDItNjU1OS00OGFmLTgwZTAtZTBhMDQ1MDc1OTg0 LzEvV1NnTDZiTk5uR2FiZ0NEbFRkYWtoZU1YMXk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAArtV2h7H LUFFX5gbWwxU+b7LjQ3WjrMGd/2xtLl1f6/x5CWpX4I5g+Axry1kADD0G+jzxTwp EtPVnDmgGhXjICh2AYhPc9f1T2+TuzrhDNr6HLIptNSs1MYUkCN69uup2+VCyqol NSaf0y1HoRyYNJS042PNPykLahS3CQxdlTkbKWmuTCZ9jOFLkbMFTD7BV9fFGNQX 7RCE2p+TavcwWuw8XgeKY0fOrLIZwZsmAXkb5l+ZpP2XvFTxnsi8khjePlhs3eFG DGEDM0qwNG5PzZJaHNJnqMeDs3bGAlvs6DkPoeu4m0pdzB8KYbMao+SyDkCEjLpf 5Kao9dxOzi8WQg== -----END CERTIFICATE-----Generated at Mon Jan 12 09:56:52 2026 by rpki-client