This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a81df9-e84e-4d94-ada9-c4cdec104667/1/wUl7Tv24vMpUYNGJ12GPa4rGiwk.mft File: wUl7Tv24vMpUYNGJ12GPa4rGiwk.mft (raw, json) Hash identifier: WHKG67R7pF57FIhC6frYi7oOPuxsDhb9jfb9kMJAdXE= Subject key identifier: 69:12:F0:F9:87:2C:DA:09:C6:EC:3E:8B:6A:FA:A5:1F:B0:24:27:03 Authority key identifier: C1:49:7B:4E:FD:B8:BC:CA:54:60:D1:89:D7:61:8F:6B:8A:C6:8B:09 Certificate issuer: /CN=c1497b4efdb8bcca5460d189d7618f6b8ac68b09 Certificate serial: 019B77C81D27138B8B9FD80EF520BB75DCD6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wUl7Tv24vMpUYNGJ12GPa4rGiwk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/a81df9-e84e-4d94-ada9-c4cdec104667/1/wUl7Tv24vMpUYNGJ12GPa4rGiwk.mft Manifest number: 040E Signing time: Thu 01 Jan 2026 04:19:21 +0000 Manifest this update: Thu 01 Jan 2026 04:19:21 +0000 Manifest next update: Fri 02 Jan 2026 04:19:21 +0000 Files and hashes: 1: sESThJoImWepiHXICmCyiUQO13c.roa (hash: /EXA+hsAhf5yELjtFqrr5qslACb1l1qBz89KSCq1yVw=) 2: wUl7Tv24vMpUYNGJ12GPa4rGiwk.crl (hash: jEcuQxbVgPpyfa7sdBASuAc8dO3gGkeU/SCV8mAkP3Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/a81df9-e84e-4d94-ada9-c4cdec104667/1/wUl7Tv24vMpUYNGJ12GPa4rGiwk.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/a81df9-e84e-4d94-ada9-c4cdec104667/1/wUl7Tv24vMpUYNGJ12GPa4rGiwk.mft rsync://rpki.ripe.net/repository/DEFAULT/wUl7Tv24vMpUYNGJ12GPa4rGiwk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 00:18:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c8:1d:27:13:8b:8b:9f:d8:0e:f5:20:bb:75:dc:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1497b4efdb8bcca5460d189d7618f6b8ac68b09 Validity Not Before: Jan 1 04:19:21 2026 GMT Not After : Jan 2 04:19:21 2026 GMT Subject: CN=6912f0f9872cda09c6ec3e8b6afaa51fb0242703 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:2a:31:2c:bb:3d:bd:a4:45:9c:28:e5:9c:96: b8:05:83:10:02:74:44:f2:14:8d:1c:ac:35:4f:af: 42:c3:0f:75:64:00:3b:80:78:ae:29:aa:4a:9c:13: 33:1e:7a:65:60:9f:1b:3e:03:7a:3f:01:cc:d6:9b: 08:85:95:13:af:71:99:07:0f:7d:25:e9:88:c1:ae: fd:3b:b0:39:d3:d0:d2:f5:48:6f:ea:18:ba:b3:0c: eb:12:ba:da:87:a0:d2:aa:80:30:0f:6a:a1:6d:34: 20:9e:36:62:52:ff:40:e9:48:ae:54:58:a0:25:72: 08:ed:a3:fe:68:72:b8:9e:15:42:50:1a:92:28:9b: f4:ee:d4:a9:c3:e0:7e:c7:aa:9e:20:9a:59:f2:37: e9:ec:e5:50:0d:49:53:f3:a6:e8:e9:cc:b0:8f:b9: e2:3c:84:67:c7:fe:f0:d5:1b:04:48:84:61:cc:11: 05:6b:6d:fe:a8:65:8d:69:e3:9c:93:b8:3b:73:bb: b2:13:3b:14:4a:80:73:06:44:1e:93:68:10:b9:93: bc:2b:4e:cc:ac:eb:4b:c9:82:0c:5c:e8:ec:ef:9f: 0a:eb:8d:80:9c:33:c8:d7:7a:b2:ea:29:e8:b7:83: 24:93:0e:06:8f:de:a2:1c:84:1d:9d:d3:d2:8f:eb: 73:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:12:F0:F9:87:2C:DA:09:C6:EC:3E:8B:6A:FA:A5:1F:B0:24:27:03 X509v3 Authority Key Identifier: keyid:C1:49:7B:4E:FD:B8:BC:CA:54:60:D1:89:D7:61:8F:6B:8A:C6:8B:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wUl7Tv24vMpUYNGJ12GPa4rGiwk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a81df9-e84e-4d94-ada9-c4cdec104667/1/wUl7Tv24vMpUYNGJ12GPa4rGiwk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a81df9-e84e-4d94-ada9-c4cdec104667/1/wUl7Tv24vMpUYNGJ12GPa4rGiwk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:da:5f:fb:c1:28:5d:ab:66:9c:4f:b2:60:a4:b0:f0:b0:74: 22:93:49:05:8a:ab:26:13:08:12:1a:c6:ea:4e:15:a9:c6:e8: d0:0e:21:5d:1c:cd:d0:f7:f5:51:fe:c9:1e:8d:f4:68:1f:f6: 78:13:e0:5a:02:e8:23:7e:f0:53:f7:2c:22:60:99:7c:89:db: fa:ad:a6:99:8f:28:b2:64:38:21:ea:33:18:91:84:b4:18:d4: e0:dc:77:02:20:50:8f:84:a3:c8:7b:e7:5a:d2:1e:cd:72:59: 61:fc:61:76:5c:8d:8d:1b:53:04:f0:5e:44:4e:2a:6b:cb:6b: aa:bd:a9:15:f3:5d:13:b5:5f:4d:45:d4:e5:43:ab:a9:54:1a: 06:93:4d:e0:3a:c6:b2:13:1e:14:6e:ed:d1:dc:2a:b8:4d:69: 97:7b:9f:78:e4:76:2d:d2:cf:75:01:09:e1:b1:34:c7:83:f6: 12:b8:b3:b1:70:52:15:2a:db:fc:e5:53:be:00:5e:26:52:52: b3:ca:60:1a:1a:1e:86:0a:1a:7e:50:aa:d8:77:c0:b0:7b:ae: 2c:86:39:69:af:a1:21:11:9c:14:5a:2a:69:e1:a3:49:a0:8b: 60:0c:3e:9d:b6:a7:ab:46:1e:de:46:c7:2d:a2:53:8c:0e:bf: 2c:48:e2:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt3yB0nE4uLn9gO9SC7ddzWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxNDk3YjRlZmRiOGJjY2E1NDYwZDE4OWQ3NjE4ZjZiOGFj NjhiMDkwHhcNMjYwMTAxMDQxOTIxWhcNMjYwMTAyMDQxOTIxWjAzMTEwLwYDVQQD Eyg2OTEyZjBmOTg3MmNkYTA5YzZlYzNlOGI2YWZhYTUxZmIwMjQyNzAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSoxLLs9vaRFnCjlnJa4BYMQAnRE 8hSNHKw1T69Cww91ZAA7gHiuKapKnBMzHnplYJ8bPgN6PwHM1psIhZUTr3GZBw99 JemIwa79O7A509DS9Uhv6hi6swzrErrah6DSqoAwD2qhbTQgnjZiUv9A6UiuVFig JXII7aP+aHK4nhVCUBqSKJv07tSpw+B+x6qeIJpZ8jfp7OVQDUlT86bo6cywj7ni PIRnx/7w1RsESIRhzBEFa23+qGWNaeOck7g7c7uyEzsUSoBzBkQek2gQuZO8K07M rOtLyYIMXOjs758K642AnDPI13qy6inot4Mkkw4Gj96iHIQdndPSj+tzKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGkS8PmHLNoJxuw+i2r6pR+wJCcDMB8GA1UdIwQY MBaAFMFJe079uLzKVGDRiddhj2uKxosJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1VsN1R2MjR2TXBVWU5HSjEyR1BhNHJHaXdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9hODFkZjktZTg0ZS00ZDk0LWFkYTkt YzRjZGVjMTA0NjY3LzEvd1VsN1R2MjR2TXBVWU5HSjEyR1BhNHJHaXdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9hODFkZjktZTg0ZS00ZDk0LWFkYTktYzRjZGVjMTA0NjY3 LzEvd1VsN1R2MjR2TXBVWU5HSjEyR1BhNHJHaXdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAodpf+8Eo XatmnE+yYKSw8LB0IpNJBYqrJhMIEhrG6k4Vqcbo0A4hXRzN0Pf1Uf7JHo30aB/2 eBPgWgLoI37wU/csImCZfInb+q2mmY8osmQ4IeozGJGEtBjU4Nx3AiBQj4SjyHvn WtIezXJZYfxhdlyNjRtTBPBeRE4qa8trqr2pFfNdE7VfTUXU5UOrqVQaBpNN4DrG shMeFG7t0dwquE1pl3ufeOR2LdLPdQEJ4bE0x4P2ErizsXBSFSrb/OVTvgBeJlJS s8pgGhoehgoaflCq2HfAsHuuLIY5aa+hIRGcFFoqaeGjSaCLYAw+nbanq0Ye3kbH LaJTjA6/LEji8g== -----END CERTIFICATE-----Generated at Thu Jan 1 08:45:19 2026 by rpki-client