This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/d734fa-6e83-4683-bf49-87122b514e69/1/WYjwhVxEeNG5Srio1tnZxRHzFCY.mft File: WYjwhVxEeNG5Srio1tnZxRHzFCY.mft (raw, json) Hash identifier: kcvJQuiKEaMl2iGHEwaN/u/IFR4gM79WT6SXux+SDLs= Subject key identifier: AD:98:AD:D9:E0:2B:BD:B9:63:59:87:C2:D2:07:F8:9E:E4:7D:69:AD Authority key identifier: 59:88:F0:85:5C:44:78:D1:B9:4A:B8:A8:D6:D9:D9:C5:11:F3:14:26 Certificate issuer: /CN=5988f0855c4478d1b94ab8a8d6d9d9c511f31426 Certificate serial: 019BB05D96EB9AFB9BC237330B3234D6D7F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WYjwhVxEeNG5Srio1tnZxRHzFCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/d734fa-6e83-4683-bf49-87122b514e69/1/WYjwhVxEeNG5Srio1tnZxRHzFCY.mft Manifest number: 0E7A Signing time: Mon 12 Jan 2026 04:01:21 +0000 Manifest this update: Mon 12 Jan 2026 04:01:21 +0000 Manifest next update: Tue 13 Jan 2026 04:01:21 +0000 Files and hashes: 1: WYjwhVxEeNG5Srio1tnZxRHzFCY.crl (hash: +GLAA+MRadZZOwKaj8GDeFKzidiIwRZ1gCzlZLAHr0w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/d734fa-6e83-4683-bf49-87122b514e69/1/WYjwhVxEeNG5Srio1tnZxRHzFCY.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/d734fa-6e83-4683-bf49-87122b514e69/1/WYjwhVxEeNG5Srio1tnZxRHzFCY.mft rsync://rpki.ripe.net/repository/DEFAULT/WYjwhVxEeNG5Srio1tnZxRHzFCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b0:5d:96:eb:9a:fb:9b:c2:37:33:0b:32:34:d6:d7:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5988f0855c4478d1b94ab8a8d6d9d9c511f31426 Validity Not Before: Jan 12 04:01:21 2026 GMT Not After : Jan 13 04:01:21 2026 GMT Subject: CN=ad98add9e02bbdb9635987c2d207f89ee47d69ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:78:a3:7d:73:e2:0c:67:2e:4a:c7:a3:d4:6f: b8:eb:58:19:54:b1:7c:23:b2:26:4f:ca:31:de:4a: 79:a2:58:84:17:86:22:50:80:89:22:11:a3:d5:6f: 89:5a:53:98:68:dc:e9:72:6e:7c:7b:dc:79:84:26: 0c:55:b2:37:7c:19:ad:e4:f0:9c:1e:1b:20:4e:33: d1:ec:ff:48:c3:21:d7:4a:f8:73:2b:fb:43:76:b6: 14:1b:9b:01:72:4b:fc:a7:96:90:6b:75:79:54:13: a6:91:ee:10:17:5b:bb:dc:37:a7:76:9f:3a:45:d9: 45:52:69:4e:37:05:5c:e7:59:e9:ed:56:5c:4b:c2: e4:8d:61:5c:05:8a:5c:c2:3f:81:ca:5c:89:09:e4: e6:c7:ac:65:56:7f:76:ae:94:5b:fc:d7:6e:bd:ec: 66:8a:62:13:33:dd:05:94:e8:00:89:70:bb:2b:56: 34:71:0d:45:6f:e8:31:b5:66:a2:7e:bc:b2:a3:41: e8:18:05:1c:c9:b4:3a:57:99:6a:f9:5b:aa:59:cc: fd:7f:75:1a:32:10:c4:57:55:dc:e4:a7:56:da:50: 54:34:2f:4c:1b:6b:28:0f:2a:26:5c:6d:00:d3:3c: e4:81:d2:90:c2:ae:72:3f:d5:8a:1c:41:17:d4:de: 0f:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:98:AD:D9:E0:2B:BD:B9:63:59:87:C2:D2:07:F8:9E:E4:7D:69:AD X509v3 Authority Key Identifier: keyid:59:88:F0:85:5C:44:78:D1:B9:4A:B8:A8:D6:D9:D9:C5:11:F3:14:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WYjwhVxEeNG5Srio1tnZxRHzFCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d734fa-6e83-4683-bf49-87122b514e69/1/WYjwhVxEeNG5Srio1tnZxRHzFCY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d734fa-6e83-4683-bf49-87122b514e69/1/WYjwhVxEeNG5Srio1tnZxRHzFCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:38:ec:fc:24:19:e0:07:5f:14:b0:55:fe:65:a5:1b:20:3a: 70:39:6b:29:bf:81:73:f4:63:ee:da:af:86:41:b5:bb:59:2b: 84:dc:ea:bb:03:34:0f:f5:00:60:b3:33:7e:bf:bb:69:3b:64: b8:5f:6b:8c:4a:33:3e:05:c8:75:ea:9b:f3:91:c9:84:47:5e: 2a:b2:a2:a8:d8:4a:98:c7:2f:13:fd:bd:76:d4:6c:de:9e:32: c2:c7:ee:8a:7f:9f:4b:9a:c8:91:dc:58:29:42:3a:62:29:f0: 22:43:01:25:9e:df:3d:0b:35:d7:f9:0b:8d:e0:a7:92:c6:82: f3:5e:99:42:6f:f3:85:1c:c4:8c:e6:da:e3:e7:2e:99:b4:57: 2d:a7:32:b2:64:11:28:44:4b:1a:20:e7:f0:17:62:aa:5f:75: 0e:ea:e6:9f:41:47:c6:e9:46:1c:10:73:eb:4e:06:88:6d:b4: 74:4e:06:b4:b6:82:70:f5:5a:bc:4b:d4:44:7a:55:54:7f:f7: a6:63:4a:e3:34:aa:a9:d2:16:b9:bf:d9:8d:25:81:f3:1e:4b: 8d:cb:63:c7:c0:b2:ba:07:72:4b:59:b7:a2:26:28:68:a9:f7: 23:78:ea:8d:66:55:8f:a6:d1:97:e9:9b:30:8b:99:84:02:5e: 2f:c7:d6:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuwXZbrmvubwjczCzI01tfyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5ODhmMDg1NWM0NDc4ZDFiOTRhYjhhOGQ2ZDlkOWM1MTFm MzE0MjYwHhcNMjYwMTEyMDQwMTIxWhcNMjYwMTEzMDQwMTIxWjAzMTEwLwYDVQQD EyhhZDk4YWRkOWUwMmJiZGI5NjM1OTg3YzJkMjA3Zjg5ZWU0N2Q2OWFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonijfXPiDGcuSsej1G+461gZVLF8 I7ImT8ox3kp5oliEF4YiUICJIhGj1W+JWlOYaNzpcm58e9x5hCYMVbI3fBmt5PCc HhsgTjPR7P9IwyHXSvhzK/tDdrYUG5sBckv8p5aQa3V5VBOmke4QF1u73Dendp86 RdlFUmlONwVc51np7VZcS8LkjWFcBYpcwj+BylyJCeTmx6xlVn92rpRb/Nduvexm imITM90FlOgAiXC7K1Y0cQ1Fb+gxtWaifryyo0HoGAUcybQ6V5lq+VuqWcz9f3Ua MhDEV1Xc5KdW2lBUNC9MG2soDyomXG0A0zzkgdKQwq5yP9WKHEEX1N4PiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK2YrdngK725Y1mHwtIH+J7kfWmtMB8GA1UdIwQY MBaAFFmI8IVcRHjRuUq4qNbZ2cUR8xQmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1lqd2hWeEVlTkc1U3JpbzF0blp4Ukh6RkNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9kNzM0ZmEtNmU4My00NjgzLWJmNDkt ODcxMjJiNTE0ZTY5LzEvV1lqd2hWeEVlTkc1U3JpbzF0blp4Ukh6RkNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS9kNzM0ZmEtNmU4My00NjgzLWJmNDktODcxMjJiNTE0ZTY5 LzEvV1lqd2hWeEVlTkc1U3JpbzF0blp4Ukh6RkNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoDjs/CQZ 4AdfFLBV/mWlGyA6cDlrKb+Bc/Rj7tqvhkG1u1krhNzquwM0D/UAYLMzfr+7aTtk uF9rjEozPgXIdeqb85HJhEdeKrKiqNhKmMcvE/29dtRs3p4ywsfuin+fS5rIkdxY KUI6YinwIkMBJZ7fPQs11/kLjeCnksaC816ZQm/zhRzEjOba4+cumbRXLacysmQR KERLGiDn8Bdiql91Durmn0FHxulGHBBz604GiG20dE4GtLaCcPVavEvURHpVVH/3 pmNK4zSqqdIWub/ZjSWB8x5Ljctjx8CyugdyS1m3oiYoaKn3I3jqjWZVj6bRl+mb MIuZhAJeL8fWAw== -----END CERTIFICATE-----Generated at Mon Jan 12 13:35:32 2026 by rpki-client