This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/420a13-f0a5-4db0-9048-15958a89a012/1/wOOV6sUDfy5HhZVvjai4aeu-_OA.mft File: wOOV6sUDfy5HhZVvjai4aeu-_OA.mft (raw, json) Hash identifier: OBidLxMRKAQ/+hRjB1Hh13VnhNafU1vegb5X1cA+ZXA= Subject key identifier: 5B:EF:88:4D:6F:84:04:79:49:FE:A6:9C:70:44:F1:B1:AA:23:27:45 Authority key identifier: C0:E3:95:EA:C5:03:7F:2E:47:85:95:6F:8D:A8:B8:69:EB:BE:FC:E0 Certificate issuer: /CN=c0e395eac5037f2e4785956f8da8b869ebbefce0 Certificate serial: 019B8BAB7E94E69CCD6AF516F29EDE87FA91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wOOV6sUDfy5HhZVvjai4aeu-_OA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/420a13-f0a5-4db0-9048-15958a89a012/1/wOOV6sUDfy5HhZVvjai4aeu-_OA.mft Manifest number: 0EA5 Signing time: Mon 05 Jan 2026 01:00:30 +0000 Manifest this update: Mon 05 Jan 2026 01:00:30 +0000 Manifest next update: Tue 06 Jan 2026 01:00:30 +0000 Files and hashes: 1: wOOV6sUDfy5HhZVvjai4aeu-_OA.crl (hash: s8KRockfrr5dQpeW8ZN4aZEZHZKnMzIedaP3trEQ6vw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/420a13-f0a5-4db0-9048-15958a89a012/1/wOOV6sUDfy5HhZVvjai4aeu-_OA.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/420a13-f0a5-4db0-9048-15958a89a012/1/wOOV6sUDfy5HhZVvjai4aeu-_OA.mft rsync://rpki.ripe.net/repository/DEFAULT/wOOV6sUDfy5HhZVvjai4aeu-_OA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 05 Jan 2026 23:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:8b:ab:7e:94:e6:9c:cd:6a:f5:16:f2:9e:de:87:fa:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0e395eac5037f2e4785956f8da8b869ebbefce0 Validity Not Before: Jan 5 01:00:30 2026 GMT Not After : Jan 6 01:00:30 2026 GMT Subject: CN=5bef884d6f84047949fea69c7044f1b1aa232745 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:54:57:00:30:ae:8a:bb:ea:ff:91:cf:6d:65: 5f:69:96:6e:1a:9b:85:74:cc:5b:98:32:4c:3f:91: 5b:58:ad:93:dc:4b:ff:56:e2:ba:4e:74:d9:f1:10: 50:27:f7:59:65:e6:df:f2:54:84:36:e7:95:c8:c5: b7:ba:1b:e3:37:66:b9:b6:07:98:47:44:02:e6:bc: 1c:21:12:de:87:cf:4b:a1:01:97:65:d8:82:b8:29: 88:7a:c1:e1:18:11:49:0e:92:a3:63:d8:10:79:62: ed:a0:6a:b6:2c:92:50:ff:d5:1c:34:2f:9b:c5:25: 1a:dc:1c:2e:5e:0c:91:a2:67:39:d8:e8:93:b6:0e: 2f:a9:bd:b5:f2:bb:b6:28:9f:55:4b:ea:3c:b1:fd: 8d:56:a5:5d:3e:c4:f9:ac:18:68:31:15:6d:f1:80: c5:cf:f0:21:61:ef:71:e9:7f:fd:02:75:65:8b:34: 02:bc:dc:42:9d:c8:b9:1a:36:5f:85:99:90:0b:28: 81:f2:9d:49:3e:76:40:3f:32:41:09:f4:e3:cf:0b: ca:6f:7b:6e:a2:91:78:a6:ed:41:81:69:54:5d:4e: 6e:ec:3b:8b:e3:2c:21:3e:c1:e2:e9:af:07:41:5e: f0:b1:42:bc:13:64:41:8a:c8:1b:8d:91:ea:74:f8: 2f:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:EF:88:4D:6F:84:04:79:49:FE:A6:9C:70:44:F1:B1:AA:23:27:45 X509v3 Authority Key Identifier: keyid:C0:E3:95:EA:C5:03:7F:2E:47:85:95:6F:8D:A8:B8:69:EB:BE:FC:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOOV6sUDfy5HhZVvjai4aeu-_OA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/420a13-f0a5-4db0-9048-15958a89a012/1/wOOV6sUDfy5HhZVvjai4aeu-_OA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/420a13-f0a5-4db0-9048-15958a89a012/1/wOOV6sUDfy5HhZVvjai4aeu-_OA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:f0:06:98:7a:0f:ff:16:c6:53:7b:c8:c6:8d:29:6f:23:77: f8:f8:c2:1c:12:95:d9:0e:fc:dc:f6:0a:08:34:d3:af:de:1e: ba:03:ff:a5:db:6a:8c:36:a6:c9:eb:14:58:22:93:34:7d:5b: f9:89:df:92:3e:88:c8:d8:9d:06:51:e9:78:7c:fb:2f:09:e1: e0:51:33:d9:f8:38:ec:a8:37:74:33:28:ac:e0:1a:ad:77:dc: 71:f5:dc:c9:4a:7b:93:82:6c:4b:8c:2b:ad:4d:7d:da:1c:a7: 3d:73:b2:3a:a2:45:e1:12:4c:21:96:d5:5e:68:36:3e:12:94: 7c:51:ac:48:d9:6b:12:c7:2f:61:9b:9f:38:0a:00:fe:15:51: 29:8d:26:51:32:af:ec:22:63:66:cf:eb:47:2f:78:2c:78:6b: 67:28:d7:de:c8:19:a5:18:ad:57:cf:14:7c:ec:c8:e7:f0:d3: fc:07:55:24:d1:84:25:d5:9d:fd:df:5f:4e:43:b3:70:2a:03: fa:19:35:d1:bf:a4:82:be:c9:a2:09:63:13:ec:9e:71:e9:c2: 70:94:5f:33:87:72:2e:2b:bb:40:a1:29:60:fd:3a:96:38:64: 1d:15:17:29:6f:f7:f3:f7:50:88:31:a0:0e:83:d4:28:40:dd: 81:47:6c:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuLq36U5pzNavUW8p7eh/qRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwZTM5NWVhYzUwMzdmMmU0Nzg1OTU2ZjhkYThiODY5ZWJi ZWZjZTAwHhcNMjYwMTA1MDEwMDMwWhcNMjYwMTA2MDEwMDMwWjAzMTEwLwYDVQQD Eyg1YmVmODg0ZDZmODQwNDc5NDlmZWE2OWM3MDQ0ZjFiMWFhMjMyNzQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0lRXADCuirvq/5HPbWVfaZZuGpuF dMxbmDJMP5FbWK2T3Ev/VuK6TnTZ8RBQJ/dZZebf8lSENueVyMW3uhvjN2a5tgeY R0QC5rwcIRLeh89LoQGXZdiCuCmIesHhGBFJDpKjY9gQeWLtoGq2LJJQ/9UcNC+b xSUa3BwuXgyRomc52OiTtg4vqb218ru2KJ9VS+o8sf2NVqVdPsT5rBhoMRVt8YDF z/AhYe9x6X/9AnVlizQCvNxCnci5GjZfhZmQCyiB8p1JPnZAPzJBCfTjzwvKb3tu opF4pu1BgWlUXU5u7DuL4ywhPsHi6a8HQV7wsUK8E2RBisgbjZHqdPgv/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFvviE1vhAR5Sf6mnHBE8bGqIydFMB8GA1UdIwQY MBaAFMDjlerFA38uR4WVb42ouGnrvvzgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd09PVjZzVURmeTVIaFpWdmphaTRhZXUtX09BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy80MjBhMTMtZjBhNS00ZGIwLTkwNDgt MTU5NThhODlhMDEyLzEvd09PVjZzVURmeTVIaFpWdmphaTRhZXUtX09BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy80MjBhMTMtZjBhNS00ZGIwLTkwNDgtMTU5NThhODlhMDEy LzEvd09PVjZzVURmeTVIaFpWdmphaTRhZXUtX09BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjvAGmHoP /xbGU3vIxo0pbyN3+PjCHBKV2Q783PYKCDTTr94eugP/pdtqjDamyesUWCKTNH1b +Ynfkj6IyNidBlHpeHz7Lwnh4FEz2fg47Kg3dDMorOAarXfccfXcyUp7k4JsS4wr rU192hynPXOyOqJF4RJMIZbVXmg2PhKUfFGsSNlrEscvYZufOAoA/hVRKY0mUTKv 7CJjZs/rRy94LHhrZyjX3sgZpRitV88UfOzI5/DT/AdVJNGEJdWd/d9fTkOzcCoD +hk10b+kgr7JogljE+yecenCcJRfM4dyLiu7QKEpYP06ljhkHRUXKW/38/dQiDGg DoPUKEDdgUdsng== -----END CERTIFICATE-----Generated at Mon Jan 5 07:00:16 2026 by rpki-client