This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/625e0e-eba8-4e88-a021-4e7d5848de00/1/CWw-hlT-h72rRxHXduRLTwzRtkc.mft File: CWw-hlT-h72rRxHXduRLTwzRtkc.mft (raw, json) Hash identifier: hFy+BpcSZnp2eow7WKu8KV+I6eQlpZD8LL5ZMZQsYj8= Subject key identifier: E9:0B:D8:E9:E1:1E:FF:CF:C4:52:CE:18:92:FB:DA:82:C5:94:D6:CB Authority key identifier: 09:6C:3E:86:54:FE:87:BD:AB:47:11:D7:76:E4:4B:4F:0C:D1:B6:47 Certificate issuer: /CN=096c3e8654fe87bdab4711d776e44b4f0cd1b647 Certificate serial: 019C41A17831999C1FBB37E49B2F5C21B03C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWw-hlT-h72rRxHXduRLTwzRtkc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/625e0e-eba8-4e88-a021-4e7d5848de00/1/CWw-hlT-h72rRxHXduRLTwzRtkc.mft Manifest number: 0272 Signing time: Mon 09 Feb 2026 09:00:26 +0000 Manifest this update: Mon 09 Feb 2026 09:00:26 +0000 Manifest next update: Tue 10 Feb 2026 09:00:26 +0000 Files and hashes: 1: CWw-hlT-h72rRxHXduRLTwzRtkc.crl (hash: wU4dGl33kDfLcXEfD/EM+TVtUmhGK9jLiyI2T/M0lhE=) 2: M3DwLkdZ4U5SO6WeKhfSjchcFqQ.roa (hash: GytdW9ktv5N5mIUsOefVAFMWXbdLbqFMuWoFw+Cxm4Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/625e0e-eba8-4e88-a021-4e7d5848de00/1/CWw-hlT-h72rRxHXduRLTwzRtkc.crl rsync://rpki.ripe.net/repository/DEFAULT/04/625e0e-eba8-4e88-a021-4e7d5848de00/1/CWw-hlT-h72rRxHXduRLTwzRtkc.mft rsync://rpki.ripe.net/repository/DEFAULT/CWw-hlT-h72rRxHXduRLTwzRtkc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:78:31:99:9c:1f:bb:37:e4:9b:2f:5c:21:b0:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=096c3e8654fe87bdab4711d776e44b4f0cd1b647 Validity Not Before: Feb 9 09:00:26 2026 GMT Not After : Feb 10 09:00:26 2026 GMT Subject: CN=e90bd8e9e11effcfc452ce1892fbda82c594d6cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:22:3c:fb:3e:61:09:e9:e6:a6:a8:de:20:f9: 56:9b:df:5a:2c:0f:71:14:4b:15:42:8d:50:14:60: 62:f1:89:bc:6a:ec:12:83:f0:08:1f:aa:40:db:ed: d2:ae:ad:b2:a9:7f:e5:a1:96:81:77:33:a3:fc:47: 0d:b2:ce:29:a4:0f:51:33:59:32:92:42:99:62:29: ac:89:3a:54:d3:58:a3:02:32:46:19:67:82:d5:cb: f2:e3:50:fc:41:7b:1e:f8:34:9c:c5:b4:b6:19:f0: f5:83:77:a7:64:5c:72:be:80:55:83:64:ac:a9:52: 34:09:30:d8:7f:f3:54:27:63:e0:7d:c8:89:9a:b8: 5a:90:34:22:a7:75:54:99:15:af:71:e9:cd:d5:d9: e1:e4:90:3c:36:77:e0:34:0e:de:20:94:62:9c:a7: 4d:64:95:5e:47:2e:3e:66:c4:2e:40:7a:00:ec:cb: d6:fe:28:0b:f7:da:98:72:c9:f7:13:90:e5:a4:de: d8:a9:c5:c7:b5:9c:72:3a:2f:08:82:fd:d0:b7:e9: a8:5f:af:52:14:21:65:95:dd:01:d7:e5:8d:d4:5e: 6a:b6:6b:33:81:41:45:e3:c4:99:ef:8d:2b:3f:c4: b5:db:f5:2c:5b:ea:05:59:4b:5d:26:9a:06:86:2d: 03:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:0B:D8:E9:E1:1E:FF:CF:C4:52:CE:18:92:FB:DA:82:C5:94:D6:CB X509v3 Authority Key Identifier: keyid:09:6C:3E:86:54:FE:87:BD:AB:47:11:D7:76:E4:4B:4F:0C:D1:B6:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWw-hlT-h72rRxHXduRLTwzRtkc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/625e0e-eba8-4e88-a021-4e7d5848de00/1/CWw-hlT-h72rRxHXduRLTwzRtkc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/625e0e-eba8-4e88-a021-4e7d5848de00/1/CWw-hlT-h72rRxHXduRLTwzRtkc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:03:fc:e8:fb:ba:c7:18:76:d0:d8:40:f2:de:e8:3f:b1:ff: a7:1e:49:72:bc:72:74:19:05:49:de:4d:0e:78:13:fb:3b:7f: a4:d9:73:56:43:c9:82:b5:56:ad:86:cb:a0:7b:c7:76:95:94: e6:28:4b:8b:f4:d1:f3:38:4b:10:0a:10:d7:a5:26:02:04:46: 00:35:23:c1:03:b5:c5:a4:f0:7a:18:24:ec:f0:2b:d6:3d:c3: 58:9e:55:de:0e:68:51:6f:5f:97:e5:41:24:96:9e:48:fd:7b: 17:f9:4f:8e:42:fd:c2:39:e5:d6:0d:3d:7a:4e:cf:18:0d:09: fb:16:64:b7:06:ae:40:75:a3:b6:c0:cf:48:a7:7b:bf:34:e3: 03:e9:1d:8c:48:b1:6d:dd:71:a5:11:21:34:41:e9:8d:f5:f7: 2b:21:1e:d3:10:d9:06:2c:39:32:c7:19:93:72:c8:65:c3:2e: ec:fa:b6:fc:8d:f7:01:f9:95:f2:38:fd:2f:77:44:dc:85:93: d4:b7:00:37:31:ed:67:d3:13:22:45:94:b1:75:b6:59:44:83: 00:fa:ab:dd:de:90:43:67:ba:98:2a:67:11:f2:e7:d3:a8:eb: 65:06:a4:c7:f5:1f:c7:42:c8:e3:ce:7e:e3:21:c5:d8:c2:50: 2d:e5:5a:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBoXgxmZwfuzfkmy9cIbA8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5NmMzZTg2NTRmZTg3YmRhYjQ3MTFkNzc2ZTQ0YjRmMGNk MWI2NDcwHhcNMjYwMjA5MDkwMDI2WhcNMjYwMjEwMDkwMDI2WjAzMTEwLwYDVQQD EyhlOTBiZDhlOWUxMWVmZmNmYzQ1MmNlMTg5MmZiZGE4MmM1OTRkNmNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3CI8+z5hCenmpqjeIPlWm99aLA9x FEsVQo1QFGBi8Ym8auwSg/AIH6pA2+3Srq2yqX/loZaBdzOj/EcNss4ppA9RM1ky kkKZYimsiTpU01ijAjJGGWeC1cvy41D8QXse+DScxbS2GfD1g3enZFxyvoBVg2Ss qVI0CTDYf/NUJ2PgfciJmrhakDQip3VUmRWvcenN1dnh5JA8NnfgNA7eIJRinKdN ZJVeRy4+ZsQuQHoA7MvW/igL99qYcsn3E5DlpN7YqcXHtZxyOi8Igv3Qt+moX69S FCFlld0B1+WN1F5qtmszgUFF48SZ740rP8S12/UsW+oFWUtdJpoGhi0DAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOkL2OnhHv/PxFLOGJL72oLFlNbLMB8GA1UdIwQY MBaAFAlsPoZU/oe9q0cR13bkS08M0bZHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1d3LWhsVC1oNzJyUnhIWGR1UkxUd3pSdGtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC82MjVlMGUtZWJhOC00ZTg4LWEwMjEt NGU3ZDU4NDhkZTAwLzEvQ1d3LWhsVC1oNzJyUnhIWGR1UkxUd3pSdGtjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC82MjVlMGUtZWJhOC00ZTg4LWEwMjEtNGU3ZDU4NDhkZTAw LzEvQ1d3LWhsVC1oNzJyUnhIWGR1UkxUd3pSdGtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAgP86Pu6 xxh20NhA8t7oP7H/px5JcrxydBkFSd5NDngT+zt/pNlzVkPJgrVWrYbLoHvHdpWU 5ihLi/TR8zhLEAoQ16UmAgRGADUjwQO1xaTwehgk7PAr1j3DWJ5V3g5oUW9fl+VB JJaeSP17F/lPjkL9wjnl1g09ek7PGA0J+xZktwauQHWjtsDPSKd7vzTjA+kdjEix bd1xpREhNEHpjfX3KyEe0xDZBiw5MscZk3LIZcMu7Pq2/I33AfmV8jj9L3dE3IWT 1LcANzHtZ9MTIkWUsXW2WUSDAPqr3d6QQ2e6mCpnEfLn06jrZQakx/Ufx0LI485+ 4yHF2MJQLeVaUw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:29:26 2026 by rpki-client