This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/e6bf5b-2e6a-42a4-b711-019cf77e4788/1/WC8uFTMWTruNhxz28sSaVn6iZjU.mft File: WC8uFTMWTruNhxz28sSaVn6iZjU.mft (raw, json) Hash identifier: qTaaNG/m9DCjV3A1Ud5/ErLCJg9PhYI6zG7wQyEtLi8= Subject key identifier: B7:B8:D5:EF:F3:1A:F5:7E:A0:75:DB:A7:DF:FE:2E:2E:D4:96:03:92 Authority key identifier: 58:2F:2E:15:33:16:4E:BB:8D:87:1C:F6:F2:C4:9A:56:7E:A2:66:35 Certificate issuer: /CN=582f2e1533164ebb8d871cf6f2c49a567ea26635 Certificate serial: 019BB214F6E644F22D37D13ECBE1A567DBE4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WC8uFTMWTruNhxz28sSaVn6iZjU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/e6bf5b-2e6a-42a4-b711-019cf77e4788/1/WC8uFTMWTruNhxz28sSaVn6iZjU.mft Manifest number: 0EE4 Signing time: Mon 12 Jan 2026 12:01:16 +0000 Manifest this update: Mon 12 Jan 2026 12:01:16 +0000 Manifest next update: Tue 13 Jan 2026 12:01:16 +0000 Files and hashes: 1: RmwUJ0oGcPWbFkHvIvFl1Ufrwi8.roa (hash: 7BejTzx0PSatkdz8hw0lzFkYHFJg7yBHsm95CN8BtZY=) 2: WC8uFTMWTruNhxz28sSaVn6iZjU.crl (hash: lYTdKQTN6tE2/DbaHSDoJRa8nY5sK1IepFVnYgEozcI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/e6bf5b-2e6a-42a4-b711-019cf77e4788/1/WC8uFTMWTruNhxz28sSaVn6iZjU.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/e6bf5b-2e6a-42a4-b711-019cf77e4788/1/WC8uFTMWTruNhxz28sSaVn6iZjU.mft rsync://rpki.ripe.net/repository/DEFAULT/WC8uFTMWTruNhxz28sSaVn6iZjU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 12:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b2:14:f6:e6:44:f2:2d:37:d1:3e:cb:e1:a5:67:db:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=582f2e1533164ebb8d871cf6f2c49a567ea26635 Validity Not Before: Jan 12 12:01:16 2026 GMT Not After : Jan 13 12:01:16 2026 GMT Subject: CN=b7b8d5eff31af57ea075dba7dffe2e2ed4960392 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:1d:f0:1d:78:42:d9:55:aa:c2:ce:c1:ef:82: ff:96:6c:ed:e4:9f:54:88:11:fd:b7:cb:5a:de:73: 6c:47:c3:25:68:8b:7a:c1:22:44:31:a1:fd:25:38: 8d:cf:d3:44:e3:ad:95:0c:da:99:19:37:c7:6b:85: 4d:b8:16:ab:d3:41:07:1b:dc:16:b1:11:30:75:36: 73:9c:aa:1c:70:d7:da:d6:b7:ed:8e:a9:93:8a:0d: c2:1e:a0:01:26:cc:ed:d3:5d:f6:83:8c:0a:c4:54: 08:e0:88:0e:fc:7d:fe:b1:6b:52:6b:c7:97:16:13: 9d:41:e9:ae:af:8b:38:55:65:71:3b:d6:04:00:ad: 87:f6:42:96:ee:da:bf:4b:6b:a6:05:2c:08:5b:d4: 49:a5:82:2e:ce:0c:fa:d5:f9:29:2a:c8:9e:16:02: 6d:bb:64:0e:4a:c9:af:c5:f6:f8:85:09:70:26:a5: 92:e4:7b:01:54:76:38:0a:6b:0e:ab:91:b0:47:04: 8e:48:d0:32:ca:26:86:12:ad:c8:a6:34:90:cd:14: 0c:6d:e7:1d:6a:6c:0c:08:f2:0d:80:dc:d7:c2:67: a2:83:56:c6:a3:4f:33:d3:f4:95:6e:54:51:a7:91: 2b:74:4d:54:60:4a:ce:10:a7:c7:c0:07:72:c6:e7: b0:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:B8:D5:EF:F3:1A:F5:7E:A0:75:DB:A7:DF:FE:2E:2E:D4:96:03:92 X509v3 Authority Key Identifier: keyid:58:2F:2E:15:33:16:4E:BB:8D:87:1C:F6:F2:C4:9A:56:7E:A2:66:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WC8uFTMWTruNhxz28sSaVn6iZjU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/e6bf5b-2e6a-42a4-b711-019cf77e4788/1/WC8uFTMWTruNhxz28sSaVn6iZjU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/e6bf5b-2e6a-42a4-b711-019cf77e4788/1/WC8uFTMWTruNhxz28sSaVn6iZjU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:6d:a1:27:f4:f2:97:af:ea:2e:ab:43:9b:98:ef:ac:cc:1f: a5:b5:44:7d:37:bf:b2:fe:28:ca:4c:ac:d4:4f:e2:7c:d2:df: 62:39:b6:ae:70:df:e7:7f:6a:ff:9f:64:35:e0:7b:f7:81:50: f3:cf:30:4d:8b:3e:99:ac:fe:5f:42:9e:53:58:da:22:81:ef: ab:82:69:31:51:a7:c7:2d:5a:f4:09:bc:7b:49:41:39:fe:9e: f4:1e:98:e2:4c:af:d1:ea:9a:de:a8:af:5e:51:f9:a5:a8:91: bb:a6:90:d8:df:14:c6:78:6d:50:ab:7f:1c:69:83:68:82:61: ca:3b:07:63:fd:3e:ec:b5:fa:04:72:9e:dd:0a:79:9d:6a:e2: fd:70:cc:ef:84:c8:ed:c8:8f:b3:73:62:71:f4:7a:85:9b:52: 63:24:4e:3d:42:a6:f6:4a:50:17:8e:b7:69:1b:ef:97:b2:f9: 2a:30:c8:bc:e2:9f:6d:d3:01:56:d2:57:d8:46:26:4d:e1:13: 00:58:e3:94:bf:08:9e:de:44:57:cc:2e:08:0e:5d:c7:ef:a9: 70:90:89:e9:31:a3:ae:aa:db:5a:3f:db:60:8f:8a:cc:a5:16: 89:06:0b:3f:71:1e:06:8a:de:cd:f0:ef:8d:54:d4:d0:7a:b9: a4:68:1c:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuyFPbmRPItN9E+y+GlZ9vkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4MmYyZTE1MzMxNjRlYmI4ZDg3MWNmNmYyYzQ5YTU2N2Vh MjY2MzUwHhcNMjYwMTEyMTIwMTE2WhcNMjYwMTEzMTIwMTE2WjAzMTEwLwYDVQQD EyhiN2I4ZDVlZmYzMWFmNTdlYTA3NWRiYTdkZmZlMmUyZWQ0OTYwMzkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtB3wHXhC2VWqws7B74L/lmzt5J9U iBH9t8ta3nNsR8MlaIt6wSJEMaH9JTiNz9NE462VDNqZGTfHa4VNuBar00EHG9wW sREwdTZznKoccNfa1rftjqmTig3CHqABJszt0132g4wKxFQI4IgO/H3+sWtSa8eX FhOdQemur4s4VWVxO9YEAK2H9kKW7tq/S2umBSwIW9RJpYIuzgz61fkpKsieFgJt u2QOSsmvxfb4hQlwJqWS5HsBVHY4CmsOq5GwRwSOSNAyyiaGEq3IpjSQzRQMbecd amwMCPINgNzXwmeig1bGo08z0/SVblRRp5ErdE1UYErOEKfHwAdyxuewYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLe41e/zGvV+oHXbp9/+Li7UlgOSMB8GA1UdIwQY MBaAFFgvLhUzFk67jYcc9vLEmlZ+omY1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0M4dUZUTVdUcnVOaHh6MjhzU2FWbjZpWmpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9lNmJmNWItMmU2YS00MmE0LWI3MTEt MDE5Y2Y3N2U0Nzg4LzEvV0M4dUZUTVdUcnVOaHh6MjhzU2FWbjZpWmpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9lNmJmNWItMmU2YS00MmE0LWI3MTEtMDE5Y2Y3N2U0Nzg4 LzEvV0M4dUZUTVdUcnVOaHh6MjhzU2FWbjZpWmpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaG2hJ/Ty l6/qLqtDm5jvrMwfpbVEfTe/sv4oykys1E/ifNLfYjm2rnDf539q/59kNeB794FQ 888wTYs+maz+X0KeU1jaIoHvq4JpMVGnxy1a9Am8e0lBOf6e9B6Y4kyv0eqa3qiv XlH5paiRu6aQ2N8UxnhtUKt/HGmDaIJhyjsHY/0+7LX6BHKe3Qp5nWri/XDM74TI 7ciPs3NicfR6hZtSYyROPUKm9kpQF463aRvvl7L5KjDIvOKfbdMBVtJX2EYmTeET AFjjlL8Int5EV8wuCA5dx++pcJCJ6TGjrqrbWj/bYI+KzKUWiQYLP3EeBorezfDv jVTU0Hq5pGgcDg== -----END CERTIFICATE-----Generated at Mon Jan 12 22:45:11 2026 by rpki-client