This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/0b45e9-3f4a-4bd8-bab9-fb9081a16139/1/85-Wwg4Q928D7UeBW3pqXv2-A9U.mft File: 85-Wwg4Q928D7UeBW3pqXv2-A9U.mft (raw, json) Hash identifier: mOSeGPh73ibU9Ij1aHvVQ4mUeSuB08hFbE3XlkJZ19A= Subject key identifier: 8C:E4:FF:5C:CB:90:18:D2:5D:F9:84:53:1B:45:1D:FE:B8:91:25:14 Authority key identifier: F3:9F:96:C2:0E:10:F7:6F:03:ED:47:81:5B:7A:6A:5E:FD:BE:03:D5 Certificate issuer: /CN=f39f96c20e10f76f03ed47815b7a6a5efdbe03d5 Certificate serial: 019B8D9ABBF62372F69DAD7F7249C08367AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/85-Wwg4Q928D7UeBW3pqXv2-A9U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/0b45e9-3f4a-4bd8-bab9-fb9081a16139/1/85-Wwg4Q928D7UeBW3pqXv2-A9U.mft Manifest number: 12DC Signing time: Mon 05 Jan 2026 10:01:26 +0000 Manifest this update: Mon 05 Jan 2026 10:01:26 +0000 Manifest next update: Tue 06 Jan 2026 10:01:26 +0000 Files and hashes: 1: 4cosnLw5Fm-5ue3YjH5Pgxj4SZk.roa (hash: foM+Gdb6JStZoN1QON4h/dJiKuqvrGQX7DM2q+rUSl0=) 2: 85-Wwg4Q928D7UeBW3pqXv2-A9U.crl (hash: lERmw8p04d3mgrGrGNc03EDzwVVPDqvsPCJlXvO4xXQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/0b45e9-3f4a-4bd8-bab9-fb9081a16139/1/85-Wwg4Q928D7UeBW3pqXv2-A9U.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/0b45e9-3f4a-4bd8-bab9-fb9081a16139/1/85-Wwg4Q928D7UeBW3pqXv2-A9U.mft rsync://rpki.ripe.net/repository/DEFAULT/85-Wwg4Q928D7UeBW3pqXv2-A9U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 10:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:8d:9a:bb:f6:23:72:f6:9d:ad:7f:72:49:c0:83:67:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f39f96c20e10f76f03ed47815b7a6a5efdbe03d5 Validity Not Before: Jan 5 10:01:26 2026 GMT Not After : Jan 6 10:01:26 2026 GMT Subject: CN=8ce4ff5ccb9018d25df984531b451dfeb8912514 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:bc:19:ed:7b:7f:82:71:77:66:40:55:74:e6: 63:b3:e3:ea:6b:27:7e:15:70:80:e9:22:41:e1:7f: 4f:40:02:ab:b8:63:2d:09:4b:2f:e8:6f:d5:c9:1c: 96:d6:88:05:e2:c8:c2:29:cc:04:17:24:8a:49:90: e9:88:57:53:ab:dc:76:11:6b:ef:c0:01:b2:d7:26: ee:15:ea:8b:42:76:5b:7a:f3:c3:32:b0:ca:81:e8: 43:e0:4d:41:74:89:cd:29:1d:c2:8e:b4:24:ff:6e: 6e:b6:a8:07:06:df:fb:e6:1a:cf:be:04:53:6b:90: d7:19:7b:92:1e:8c:04:82:34:79:05:64:37:8f:e8: 03:17:e3:cb:d9:03:7a:72:51:5f:36:39:13:3c:cf: 6e:89:1a:5a:30:2f:71:91:3c:c2:8d:49:e0:18:0e: 8f:2f:9c:6a:a2:d0:81:f6:8c:1f:4b:94:8a:7c:9f: 47:94:a2:84:68:a1:77:fe:42:cd:8e:31:62:33:f6: e8:1d:37:10:1e:11:36:0a:f3:38:34:81:fc:d5:24: 1f:ea:04:ef:2b:6c:3d:d9:08:c8:51:c4:f7:31:df: d5:24:68:f7:69:64:6b:b9:33:05:56:1e:c4:1c:95: 22:d1:1c:b4:f9:9c:ec:d7:31:0e:44:db:65:4f:50: a0:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:E4:FF:5C:CB:90:18:D2:5D:F9:84:53:1B:45:1D:FE:B8:91:25:14 X509v3 Authority Key Identifier: keyid:F3:9F:96:C2:0E:10:F7:6F:03:ED:47:81:5B:7A:6A:5E:FD:BE:03:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/85-Wwg4Q928D7UeBW3pqXv2-A9U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/0b45e9-3f4a-4bd8-bab9-fb9081a16139/1/85-Wwg4Q928D7UeBW3pqXv2-A9U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/0b45e9-3f4a-4bd8-bab9-fb9081a16139/1/85-Wwg4Q928D7UeBW3pqXv2-A9U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:b3:26:0c:d8:e0:11:e1:2c:de:59:58:83:89:e2:a2:38:02: 4c:60:dd:ec:89:b6:7e:0e:b2:ca:95:f4:f0:ca:17:24:c8:28: 16:c0:c7:ef:74:fd:3e:6d:d0:c5:83:54:63:f2:ee:11:e9:a0: 5b:3f:c7:88:5d:b0:4d:60:0e:a3:fb:da:87:f7:6b:6b:f3:37: 59:79:0e:50:93:a1:b8:83:11:e2:76:6c:3e:b5:9c:2c:be:00: a9:53:cd:3f:d1:2c:c8:76:92:1e:b6:0b:19:e8:64:4e:95:0c: 31:5c:c2:21:24:7d:4b:91:cd:18:da:d8:34:ae:e9:bd:bc:77: 05:1c:8e:28:87:c4:38:15:b0:c8:b3:e8:ef:0f:3c:8c:9a:bf: 48:af:91:e0:75:7f:e4:45:3e:59:54:c2:79:ac:70:f2:d7:72: 9b:23:f3:7a:51:73:02:76:8c:b6:6c:31:13:36:90:8e:58:6e: 6a:f5:16:4b:e7:07:de:3c:29:7b:20:13:fe:c1:6e:44:53:9c: ce:bd:1a:47:d8:e1:63:13:70:16:12:54:82:22:00:00:e5:3c: fb:b4:b3:6f:b0:e4:c4:6b:d1:3f:bd:10:84:88:af:d4:f7:82: 60:4b:ad:23:f5:80:f3:e3:3c:28:ca:90:01:45:5f:79:f6:ba: 0b:52:6f:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuNmrv2I3L2na1/cknAg2euMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzOWY5NmMyMGUxMGY3NmYwM2VkNDc4MTViN2E2YTVlZmRi ZTAzZDUwHhcNMjYwMTA1MTAwMTI2WhcNMjYwMTA2MTAwMTI2WjAzMTEwLwYDVQQD Eyg4Y2U0ZmY1Y2NiOTAxOGQyNWRmOTg0NTMxYjQ1MWRmZWI4OTEyNTE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7wZ7Xt/gnF3ZkBVdOZjs+Pqayd+ FXCA6SJB4X9PQAKruGMtCUsv6G/VyRyW1ogF4sjCKcwEFySKSZDpiFdTq9x2EWvv wAGy1ybuFeqLQnZbevPDMrDKgehD4E1BdInNKR3CjrQk/25utqgHBt/75hrPvgRT a5DXGXuSHowEgjR5BWQ3j+gDF+PL2QN6clFfNjkTPM9uiRpaMC9xkTzCjUngGA6P L5xqotCB9owfS5SKfJ9HlKKEaKF3/kLNjjFiM/boHTcQHhE2CvM4NIH81SQf6gTv K2w92QjIUcT3Md/VJGj3aWRruTMFVh7EHJUi0Ry0+Zzs1zEORNtlT1CgBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIzk/1zLkBjSXfmEUxtFHf64kSUUMB8GA1UdIwQY MBaAFPOflsIOEPdvA+1HgVt6al79vgPVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODUtV3dnNFE5MjhEN1VlQlczcHFYdjItQTlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC8wYjQ1ZTktM2Y0YS00YmQ4LWJhYjkt ZmI5MDgxYTE2MTM5LzEvODUtV3dnNFE5MjhEN1VlQlczcHFYdjItQTlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC8wYjQ1ZTktM2Y0YS00YmQ4LWJhYjktZmI5MDgxYTE2MTM5 LzEvODUtV3dnNFE5MjhEN1VlQlczcHFYdjItQTlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArrMmDNjg EeEs3llYg4niojgCTGDd7Im2fg6yypX08MoXJMgoFsDH73T9Pm3QxYNUY/LuEemg Wz/HiF2wTWAOo/vah/dra/M3WXkOUJOhuIMR4nZsPrWcLL4AqVPNP9EsyHaSHrYL GehkTpUMMVzCISR9S5HNGNrYNK7pvbx3BRyOKIfEOBWwyLPo7w88jJq/SK+R4HV/ 5EU+WVTCeaxw8tdymyPzelFzAnaMtmwxEzaQjlhuavUWS+cH3jwpeyAT/sFuRFOc zr0aR9jhYxNwFhJUgiIAAOU8+7Szb7DkxGvRP70QhIiv1PeCYEutI/WA8+M8KMqQ AUVfefa6C1JvBg== -----END CERTIFICATE-----Generated at Mon Jan 5 19:08:51 2026 by rpki-client