This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/0b45e9-3f4a-4bd8-bab9-fb9081a16139/1/85-Wwg4Q928D7UeBW3pqXv2-A9U.mft File: 85-Wwg4Q928D7UeBW3pqXv2-A9U.mft (raw, json) Hash identifier: j1ozgIqDVfhgr7zyQyiFnb1ywJG1+j83tPujiMtaRqM= Subject key identifier: B8:70:56:1C:A4:5F:BA:64:93:5F:97:2D:36:D5:04:04:5D:04:99:C8 Authority key identifier: F3:9F:96:C2:0E:10:F7:6F:03:ED:47:81:5B:7A:6A:5E:FD:BE:03:D5 Certificate issuer: /CN=f39f96c20e10f76f03ed47815b7a6a5efdbe03d5 Certificate serial: 019B9CD6D249844EA911D438D493C4031847 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/85-Wwg4Q928D7UeBW3pqXv2-A9U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/0b45e9-3f4a-4bd8-bab9-fb9081a16139/1/85-Wwg4Q928D7UeBW3pqXv2-A9U.mft Manifest number: 12E4 Signing time: Thu 08 Jan 2026 09:01:22 +0000 Manifest this update: Thu 08 Jan 2026 09:01:22 +0000 Manifest next update: Fri 09 Jan 2026 09:01:22 +0000 Files and hashes: 1: 4cosnLw5Fm-5ue3YjH5Pgxj4SZk.roa (hash: foM+Gdb6JStZoN1QON4h/dJiKuqvrGQX7DM2q+rUSl0=) 2: 85-Wwg4Q928D7UeBW3pqXv2-A9U.crl (hash: hxPcEjcqyekQm1NXBvzgl3Vmg2UOJHJ/4dmXBrU1MxY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/0b45e9-3f4a-4bd8-bab9-fb9081a16139/1/85-Wwg4Q928D7UeBW3pqXv2-A9U.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/0b45e9-3f4a-4bd8-bab9-fb9081a16139/1/85-Wwg4Q928D7UeBW3pqXv2-A9U.mft rsync://rpki.ripe.net/repository/DEFAULT/85-Wwg4Q928D7UeBW3pqXv2-A9U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:9c:d6:d2:49:84:4e:a9:11:d4:38:d4:93:c4:03:18:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f39f96c20e10f76f03ed47815b7a6a5efdbe03d5 Validity Not Before: Jan 8 09:01:22 2026 GMT Not After : Jan 9 09:01:22 2026 GMT Subject: CN=b870561ca45fba64935f972d36d504045d0499c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:e4:b2:a0:53:8f:be:a6:e8:b5:cb:3a:b9:d0: 9f:08:a7:be:b5:12:ea:aa:62:93:b5:15:fb:ca:0c: d1:50:83:04:5a:ef:d3:90:bc:af:29:71:9b:38:36: 8e:77:60:9c:e8:31:e9:cc:3c:98:6b:bd:9c:0c:77: 61:b3:5b:63:67:a0:99:7a:29:b9:21:3c:4e:06:7a: 6f:0a:3e:ca:65:59:ff:e4:5e:b6:eb:e0:0e:83:25: 9e:97:0b:cf:ad:ef:c7:fd:98:27:0a:65:d4:48:08: 02:ea:a8:ee:48:88:cd:9c:5b:2f:84:6b:28:b9:fa: d2:a9:07:ff:23:22:9f:ee:d9:6d:f0:ff:a6:c3:80: a3:3a:e9:2a:e4:4a:48:5d:5a:47:7a:13:50:ef:35: e7:f8:18:79:75:64:de:00:77:9e:33:52:4d:90:cf: 5c:3f:99:48:02:d2:bb:73:23:db:68:1f:99:c3:cf: 70:b4:65:92:ca:9b:5d:61:07:05:27:da:f0:24:f8: 5b:d4:96:b4:58:15:b7:35:e6:82:65:e3:ca:1e:1d: 3d:55:3d:7c:ab:3a:6e:e5:2d:87:0b:61:ef:d0:a9: 96:6a:33:07:95:4e:8b:3a:ad:b6:4a:06:cb:31:5f: 28:fe:c0:01:0f:d4:6b:3e:1d:94:dc:c3:27:a7:f6: 99:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:70:56:1C:A4:5F:BA:64:93:5F:97:2D:36:D5:04:04:5D:04:99:C8 X509v3 Authority Key Identifier: keyid:F3:9F:96:C2:0E:10:F7:6F:03:ED:47:81:5B:7A:6A:5E:FD:BE:03:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/85-Wwg4Q928D7UeBW3pqXv2-A9U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/0b45e9-3f4a-4bd8-bab9-fb9081a16139/1/85-Wwg4Q928D7UeBW3pqXv2-A9U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/0b45e9-3f4a-4bd8-bab9-fb9081a16139/1/85-Wwg4Q928D7UeBW3pqXv2-A9U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:14:6f:05:1f:47:61:30:17:76:21:b4:26:f3:7a:60:e8:99: aa:cf:36:22:4d:10:05:4c:ca:71:c8:cb:69:66:76:14:2e:d4: 1a:a4:64:62:47:f8:79:98:6c:49:61:48:95:b1:12:4f:a5:f1: d7:db:e0:94:3d:5e:6d:4b:3f:a5:c1:e4:f5:34:ab:6f:40:32: 16:c8:47:d8:aa:c2:a8:db:55:3a:57:95:36:33:51:c2:0e:b0: e1:45:3e:fb:e6:40:97:d7:4d:bd:26:38:e0:d4:37:0e:59:aa: 71:7b:e0:61:2d:d8:4b:af:79:20:cf:06:8a:e4:b9:b2:29:b3: d2:05:01:af:2d:db:16:97:dc:d4:6a:87:c0:7b:e8:37:75:53: 98:c3:37:49:78:b7:9e:d5:ee:87:38:e7:a3:ec:c1:8f:2c:a8: 68:3d:75:81:9b:07:48:f4:bd:53:ef:87:53:94:7b:80:2c:27: e6:8b:98:f6:83:b2:96:c3:a6:30:8d:aa:45:b7:e2:3d:2f:12: 8d:e5:4d:5b:af:ad:f9:87:87:75:64:81:66:5e:ae:e8:6d:1a: 15:2b:d2:20:32:62:66:48:e7:b4:97:69:bd:3c:70:b4:7f:93: 5c:e1:cc:84:f6:32:d0:fc:f9:bd:cc:f0:db:99:dc:09:cf:a7: 14:4d:c0:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuc1tJJhE6pEdQ41JPEAxhHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzOWY5NmMyMGUxMGY3NmYwM2VkNDc4MTViN2E2YTVlZmRi ZTAzZDUwHhcNMjYwMTA4MDkwMTIyWhcNMjYwMTA5MDkwMTIyWjAzMTEwLwYDVQQD EyhiODcwNTYxY2E0NWZiYTY0OTM1Zjk3MmQzNmQ1MDQwNDVkMDQ5OWM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1+SyoFOPvqbotcs6udCfCKe+tRLq qmKTtRX7ygzRUIMEWu/TkLyvKXGbODaOd2Cc6DHpzDyYa72cDHdhs1tjZ6CZeim5 ITxOBnpvCj7KZVn/5F626+AOgyWelwvPre/H/ZgnCmXUSAgC6qjuSIjNnFsvhGso ufrSqQf/IyKf7tlt8P+mw4CjOukq5EpIXVpHehNQ7zXn+Bh5dWTeAHeeM1JNkM9c P5lIAtK7cyPbaB+Zw89wtGWSyptdYQcFJ9rwJPhb1Ja0WBW3NeaCZePKHh09VT18 qzpu5S2HC2Hv0KmWajMHlU6LOq22SgbLMV8o/sABD9RrPh2U3MMnp/aZYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLhwVhykX7pkk1+XLTbVBARdBJnIMB8GA1UdIwQY MBaAFPOflsIOEPdvA+1HgVt6al79vgPVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODUtV3dnNFE5MjhEN1VlQlczcHFYdjItQTlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC8wYjQ1ZTktM2Y0YS00YmQ4LWJhYjkt ZmI5MDgxYTE2MTM5LzEvODUtV3dnNFE5MjhEN1VlQlczcHFYdjItQTlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC8wYjQ1ZTktM2Y0YS00YmQ4LWJhYjktZmI5MDgxYTE2MTM5 LzEvODUtV3dnNFE5MjhEN1VlQlczcHFYdjItQTlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeRRvBR9H YTAXdiG0JvN6YOiZqs82Ik0QBUzKccjLaWZ2FC7UGqRkYkf4eZhsSWFIlbEST6Xx 19vglD1ebUs/pcHk9TSrb0AyFshH2KrCqNtVOleVNjNRwg6w4UU+++ZAl9dNvSY4 4NQ3DlmqcXvgYS3YS695IM8GiuS5simz0gUBry3bFpfc1GqHwHvoN3VTmMM3SXi3 ntXuhzjno+zBjyyoaD11gZsHSPS9U++HU5R7gCwn5ouY9oOylsOmMI2qRbfiPS8S jeVNW6+t+YeHdWSBZl6u6G0aFSvSIDJiZkjntJdpvTxwtH+TXOHMhPYy0Pz5vczw 25ncCc+nFE3ASQ== -----END CERTIFICATE-----Generated at Thu Jan 8 17:04:53 2026 by rpki-client