This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/cbd9d1-84a4-451d-9214-0906da1b23a6/1/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.mft File: WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.mft (raw, json) Hash identifier: xK+6phIM583gY1WQCuvNWlOuQp+Hc9e6WQrxG6OWCwQ= Subject key identifier: B7:03:97:AA:3E:D4:D2:84:F5:C4:A8:FF:0B:CB:09:18:31:98:5D:9D Authority key identifier: 59:FA:70:27:66:1A:C8:C4:A7:7F:F2:AB:D5:96:86:AF:99:F1:59:28 Certificate issuer: /CN=59fa7027661ac8c4a77ff2abd59686af99f15928 Certificate serial: 019C4390AFD360E26EF510CAA8BE5C91BF33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/cbd9d1-84a4-451d-9214-0906da1b23a6/1/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.mft Manifest number: 0221 Signing time: Mon 09 Feb 2026 18:01:21 +0000 Manifest this update: Mon 09 Feb 2026 18:01:21 +0000 Manifest next update: Tue 10 Feb 2026 18:01:21 +0000 Files and hashes: 1: WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.crl (hash: pDe8LUprJ2mzW98K/sC6Xtmj2EXsRVGIiX5pYS2os1U=) 2: d-YZ5YMu6Gnv8_xefmeMRmvOLWM.roa (hash: UJIzF9X7wYmHRhMhy99cqcN/dZPFPGX82ihlzf56Hno=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/cbd9d1-84a4-451d-9214-0906da1b23a6/1/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/cbd9d1-84a4-451d-9214-0906da1b23a6/1/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.mft rsync://rpki.ripe.net/repository/DEFAULT/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:af:d3:60:e2:6e:f5:10:ca:a8:be:5c:91:bf:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59fa7027661ac8c4a77ff2abd59686af99f15928 Validity Not Before: Feb 9 18:01:21 2026 GMT Not After : Feb 10 18:01:21 2026 GMT Subject: CN=b70397aa3ed4d284f5c4a8ff0bcb091831985d9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:0c:10:dc:00:cf:13:06:10:91:39:8b:2d:44: 1e:ce:2d:96:23:9a:06:1b:af:ef:02:dc:90:c8:94: 7f:1b:51:86:8d:8e:4d:6e:1e:b7:7c:8a:e1:ee:ce: 66:4e:86:9d:b0:5f:9c:98:0d:85:f2:d8:5e:46:b9: f6:33:10:75:93:ac:71:e9:0b:aa:c7:47:e0:90:07: b5:bb:6a:4a:08:55:0b:ff:bb:88:f2:52:5f:13:8b: 06:47:17:2a:d4:8a:73:79:55:90:81:be:7e:2b:2f: 5f:18:18:16:29:6c:95:aa:18:1a:ac:7c:cc:a4:d9: ad:c4:55:e2:67:2d:76:28:0e:82:ad:cd:8c:e8:69: 03:3b:b5:70:63:21:80:57:be:97:b3:f1:52:37:bf: ce:55:4c:c4:1a:28:56:ca:f9:89:3f:2e:6e:d9:86: 78:31:8b:38:30:dd:c8:11:db:22:34:34:f8:29:4a: c7:06:0e:7e:01:d0:15:9f:1f:37:24:df:b0:92:b3: 88:5f:b8:35:f1:d6:6c:81:58:42:2b:6f:9f:99:a4: b4:e1:10:c1:e1:58:16:67:0d:0d:e6:24:49:fc:5e: 72:9b:e0:ee:80:cd:4c:94:4a:3c:22:8d:ce:63:58: 3e:1a:02:d5:89:6e:11:3a:60:d8:dc:66:80:da:92: ff:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:03:97:AA:3E:D4:D2:84:F5:C4:A8:FF:0B:CB:09:18:31:98:5D:9D X509v3 Authority Key Identifier: keyid:59:FA:70:27:66:1A:C8:C4:A7:7F:F2:AB:D5:96:86:AF:99:F1:59:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/cbd9d1-84a4-451d-9214-0906da1b23a6/1/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/cbd9d1-84a4-451d-9214-0906da1b23a6/1/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:80:e3:ec:fd:01:40:7f:70:e0:9a:4a:f1:8c:62:f1:79:59: 6a:6e:77:e6:3a:38:9a:06:de:a7:c2:c1:b0:e8:3f:97:d8:b1: da:c1:14:5c:51:da:17:77:4a:3e:13:bb:df:ab:14:68:16:d0: 89:47:80:f2:70:41:7b:51:04:ed:1c:26:99:31:44:2d:6f:d3: 1b:77:c0:af:28:5d:83:42:aa:a0:97:50:51:f6:7a:bc:11:a4: fe:1a:7f:cc:36:d9:40:ce:28:16:9b:b6:2c:78:94:79:45:35: 38:11:03:97:2a:fa:87:9c:5f:a0:26:0d:37:e4:56:fe:60:4f: 23:2c:b0:bd:1f:54:ee:a1:6f:a5:00:0c:e7:6b:20:d6:06:5e: a9:dd:32:a4:91:33:a5:4d:20:b2:38:3a:e2:7a:16:4e:05:c5: c4:48:2f:70:9a:5c:e4:f5:4e:22:8e:5b:84:ad:d4:86:09:bd: 25:08:46:db:35:ec:ea:16:81:1f:ba:4e:ed:26:06:f9:75:ad: 3f:97:1b:f7:ae:f5:48:f8:11:5c:57:3e:c9:71:dc:59:00:c6: 9a:ef:00:30:ab:46:fc:ce:03:13:8e:fa:65:60:ce:1b:7e:6e: f9:c4:24:4a:b5:d7:c4:cb:03:39:9c:89:89:32:13:db:d9:f1: e9:ba:f4:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkK/TYOJu9RDKqL5ckb8zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5ZmE3MDI3NjYxYWM4YzRhNzdmZjJhYmQ1OTY4NmFmOTlm MTU5MjgwHhcNMjYwMjA5MTgwMTIxWhcNMjYwMjEwMTgwMTIxWjAzMTEwLwYDVQQD EyhiNzAzOTdhYTNlZDRkMjg0ZjVjNGE4ZmYwYmNiMDkxODMxOTg1ZDlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgwQ3ADPEwYQkTmLLUQezi2WI5oG G6/vAtyQyJR/G1GGjY5Nbh63fIrh7s5mToadsF+cmA2F8theRrn2MxB1k6xx6Quq x0fgkAe1u2pKCFUL/7uI8lJfE4sGRxcq1IpzeVWQgb5+Ky9fGBgWKWyVqhgarHzM pNmtxFXiZy12KA6Crc2M6GkDO7VwYyGAV76Xs/FSN7/OVUzEGihWyvmJPy5u2YZ4 MYs4MN3IEdsiNDT4KUrHBg5+AdAVnx83JN+wkrOIX7g18dZsgVhCK2+fmaS04RDB 4VgWZw0N5iRJ/F5ym+DugM1MlEo8Io3OY1g+GgLViW4ROmDY3GaA2pL/SQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLcDl6o+1NKE9cSo/wvLCRgxmF2dMB8GA1UdIwQY MBaAFFn6cCdmGsjEp3/yq9WWhq+Z8VkoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2Zwd0oyWWF5TVNuZl9LcjFaYUdyNW54V1NnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9jYmQ5ZDEtODRhNC00NTFkLTkyMTQt MDkwNmRhMWIyM2E2LzEvV2Zwd0oyWWF5TVNuZl9LcjFaYUdyNW54V1NnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS9jYmQ5ZDEtODRhNC00NTFkLTkyMTQtMDkwNmRhMWIyM2E2 LzEvV2Zwd0oyWWF5TVNuZl9LcjFaYUdyNW54V1NnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiIDj7P0B QH9w4JpK8Yxi8XlZam535jo4mgbep8LBsOg/l9ix2sEUXFHaF3dKPhO736sUaBbQ iUeA8nBBe1EE7RwmmTFELW/TG3fAryhdg0KqoJdQUfZ6vBGk/hp/zDbZQM4oFpu2 LHiUeUU1OBEDlyr6h5xfoCYNN+RW/mBPIyywvR9U7qFvpQAM52sg1gZeqd0ypJEz pU0gsjg64noWTgXFxEgvcJpc5PVOIo5bhK3Uhgm9JQhG2zXs6haBH7pO7SYG+XWt P5cb9671SPgRXFc+yXHcWQDGmu8AMKtG/M4DE476ZWDOG35u+cQkSrXXxMsDOZyJ iTIT29nx6br0kQ== -----END CERTIFICATE-----Generated at Tue Feb 10 02:52:11 2026 by rpki-client