This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/256fab-de97-4679-a465-b96d6714a174/1/weJGTdbQQjCVFffltk6mXAibRhY.mft File: weJGTdbQQjCVFffltk6mXAibRhY.mft (raw, json) Hash identifier: yfkjCfelKW2DFWCRgJwKGJC6a+NeEbPD/3+Zw9Mxmpg= Subject key identifier: 17:DB:7F:F5:C0:EA:6D:B9:05:A4:2B:D5:E3:77:EE:EC:98:B7:03:06 Authority key identifier: C1:E2:46:4D:D6:D0:42:30:95:15:F7:E5:B6:4E:A6:5C:08:9B:46:16 Certificate issuer: /CN=c1e2464dd6d042309515f7e5b64ea65c089b4616 Certificate serial: 019BA18FA9F079D814E046D8142101208768 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/weJGTdbQQjCVFffltk6mXAibRhY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/256fab-de97-4679-a465-b96d6714a174/1/weJGTdbQQjCVFffltk6mXAibRhY.mft Manifest number: 17BD Signing time: Fri 09 Jan 2026 07:01:45 +0000 Manifest this update: Fri 09 Jan 2026 07:01:45 +0000 Manifest next update: Sat 10 Jan 2026 07:01:45 +0000 Files and hashes: 1: gHtegaN7OLgHtHHu51zbCeqQFDA.roa (hash: EPs8IaltzukwrBtIywNQ/0TYt3CUA+5rJ4ySK++dqCU=) 2: weJGTdbQQjCVFffltk6mXAibRhY.crl (hash: 4rszY8huAKqqo+SojnZUQSqkil4xHN/XS7ejafRHJMI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/256fab-de97-4679-a465-b96d6714a174/1/weJGTdbQQjCVFffltk6mXAibRhY.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/256fab-de97-4679-a465-b96d6714a174/1/weJGTdbQQjCVFffltk6mXAibRhY.mft rsync://rpki.ripe.net/repository/DEFAULT/weJGTdbQQjCVFffltk6mXAibRhY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 07:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a1:8f:a9:f0:79:d8:14:e0:46:d8:14:21:01:20:87:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1e2464dd6d042309515f7e5b64ea65c089b4616 Validity Not Before: Jan 9 07:01:45 2026 GMT Not After : Jan 10 07:01:45 2026 GMT Subject: CN=17db7ff5c0ea6db905a42bd5e377eeec98b70306 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d0:83:72:2b:4c:97:99:65:01:23:7c:20:8a: 5f:35:c9:0b:77:47:74:e2:f9:1c:00:2b:bd:ed:38: df:c9:fb:b0:14:e9:ee:2f:fc:9d:0d:19:7b:2e:94: 1a:15:74:78:29:f2:2d:7b:6b:c7:20:b2:3b:98:4d: c5:c7:f8:91:90:ec:42:c4:ea:c3:4b:5b:ce:d7:cf: 69:44:74:b4:13:af:59:32:0e:59:fd:fa:cd:71:3c: d4:49:c1:5c:20:a1:f9:88:55:70:ff:93:8e:1b:7d: aa:69:d0:a1:6c:56:07:12:33:4a:48:a5:df:9d:df: 0a:97:19:a0:1b:f9:b0:5a:00:9a:e5:a1:38:29:4a: 02:e6:a3:71:2e:55:cd:31:4a:91:38:2b:de:11:99: 21:f4:84:f0:ea:15:49:e9:d2:af:a7:a6:4b:2b:b5: e4:df:cb:7a:c4:73:0b:77:32:0a:65:10:81:77:84: 19:64:9f:b6:2f:5e:03:7b:df:f9:3c:13:e6:94:0c: 4a:7f:6b:eb:3e:90:a7:20:ab:4e:76:60:33:15:56: 3e:7c:a0:58:a8:ae:4d:da:4b:22:9e:9a:08:c2:75: b8:ea:67:77:39:7f:6a:f9:57:cd:18:f9:f5:81:15: 86:85:d5:6e:19:6c:15:04:6e:dc:e0:df:c7:6b:c5: 2a:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:DB:7F:F5:C0:EA:6D:B9:05:A4:2B:D5:E3:77:EE:EC:98:B7:03:06 X509v3 Authority Key Identifier: keyid:C1:E2:46:4D:D6:D0:42:30:95:15:F7:E5:B6:4E:A6:5C:08:9B:46:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/weJGTdbQQjCVFffltk6mXAibRhY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/256fab-de97-4679-a465-b96d6714a174/1/weJGTdbQQjCVFffltk6mXAibRhY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/256fab-de97-4679-a465-b96d6714a174/1/weJGTdbQQjCVFffltk6mXAibRhY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:60:f1:17:dd:d5:7c:81:fa:86:a0:63:35:e9:6a:e9:61:7b: 7d:f6:91:bf:32:5c:5e:da:77:82:c1:2e:b9:22:e3:d8:e5:59: 3b:e1:38:dd:46:c1:ed:23:d1:cb:57:0e:fe:e0:e3:df:b9:98: ec:b4:49:6c:de:74:80:53:54:3a:b8:4e:33:66:e5:66:7d:ee: b0:0f:c1:aa:4e:f6:f2:06:1a:a0:1a:2f:ec:49:26:67:12:8e: 8b:60:a1:9b:77:1e:4c:a7:79:dd:38:4c:57:97:95:ca:1f:ca: 28:21:3d:f5:a3:78:09:8f:89:e0:3a:a1:4f:5b:50:bb:16:e6: c8:35:34:b1:00:5c:b7:33:20:26:b6:c2:ce:77:97:7e:22:69: 9c:67:16:75:13:3a:f1:34:3f:45:31:cd:55:76:87:70:32:86: 8c:f2:28:61:27:64:ae:31:ef:35:60:65:20:c8:0a:bf:c3:16: 8f:45:e3:a7:9a:b6:ad:79:3e:86:32:19:9f:61:89:81:c5:5c: a3:bd:49:82:9f:52:68:75:ac:39:a6:2b:50:14:b2:3b:78:42: 0b:38:a2:62:bd:f4:b0:85:5c:94:47:dd:f7:6f:79:fe:9a:5e: 7e:31:37:a6:2b:ed:9e:d2:a6:7c:ef:08:54:28:4a:a7:0b:19: b4:1a:1e:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuhj6nwedgU4EbYFCEBIIdoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxZTI0NjRkZDZkMDQyMzA5NTE1ZjdlNWI2NGVhNjVjMDg5 YjQ2MTYwHhcNMjYwMTA5MDcwMTQ1WhcNMjYwMTEwMDcwMTQ1WjAzMTEwLwYDVQQD EygxN2RiN2ZmNWMwZWE2ZGI5MDVhNDJiZDVlMzc3ZWVlYzk4YjcwMzA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNCDcitMl5llASN8IIpfNckLd0d0 4vkcACu97TjfyfuwFOnuL/ydDRl7LpQaFXR4KfIte2vHILI7mE3Fx/iRkOxCxOrD S1vO189pRHS0E69ZMg5Z/frNcTzUScFcIKH5iFVw/5OOG32qadChbFYHEjNKSKXf nd8KlxmgG/mwWgCa5aE4KUoC5qNxLlXNMUqROCveEZkh9ITw6hVJ6dKvp6ZLK7Xk 38t6xHMLdzIKZRCBd4QZZJ+2L14De9/5PBPmlAxKf2vrPpCnIKtOdmAzFVY+fKBY qK5N2ksinpoIwnW46md3OX9q+VfNGPn1gRWGhdVuGWwVBG7c4N/Ha8UqgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBfbf/XA6m25BaQr1eN37uyYtwMGMB8GA1UdIwQY MBaAFMHiRk3W0EIwlRX35bZOplwIm0YWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2VKR1RkYlFRakNWRmZmbHRrNm1YQWliUmhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8yNTZmYWItZGU5Ny00Njc5LWE0NjUt Yjk2ZDY3MTRhMTc0LzEvd2VKR1RkYlFRakNWRmZmbHRrNm1YQWliUmhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC8yNTZmYWItZGU5Ny00Njc5LWE0NjUtYjk2ZDY3MTRhMTc0 LzEvd2VKR1RkYlFRakNWRmZmbHRrNm1YQWliUmhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbGDxF93V fIH6hqBjNelq6WF7ffaRvzJcXtp3gsEuuSLj2OVZO+E43UbB7SPRy1cO/uDj37mY 7LRJbN50gFNUOrhOM2blZn3usA/Bqk728gYaoBov7EkmZxKOi2Chm3ceTKd53ThM V5eVyh/KKCE99aN4CY+J4DqhT1tQuxbmyDU0sQBctzMgJrbCzneXfiJpnGcWdRM6 8TQ/RTHNVXaHcDKGjPIoYSdkrjHvNWBlIMgKv8MWj0Xjp5q2rXk+hjIZn2GJgcVc o71Jgp9SaHWsOaYrUBSyO3hCCziiYr30sIVclEfd9295/ppefjE3pivtntKmfO8I VChKpwsZtBoe0A== -----END CERTIFICATE-----Generated at Fri Jan 9 17:08:34 2026 by rpki-client