This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.mft File: WNh9kviQwtNllt7KHLCwu4sHoSI.mft (raw, json) Hash identifier: CBk5ogb2N1JxfI2pOy0aRWzky1g31Xlk+dlKECHga9Q= Subject key identifier: 33:45:68:8A:39:36:36:84:AE:5F:0B:20:B8:DB:B5:B3:FA:9F:13:50 Authority key identifier: 58:D8:7D:92:F8:90:C2:D3:65:96:DE:CA:1C:B0:B0:BB:8B:07:A1:22 Certificate issuer: /CN=58d87d92f890c2d36596deca1cb0b0bb8b07a122 Certificate serial: 019C3453FC33A5F684D40E08C7C5F719DAB4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WNh9kviQwtNllt7KHLCwu4sHoSI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.mft Manifest number: 0372 Signing time: Fri 06 Feb 2026 19:00:45 +0000 Manifest this update: Fri 06 Feb 2026 19:00:45 +0000 Manifest next update: Sat 07 Feb 2026 19:00:45 +0000 Files and hashes: 1: WNh9kviQwtNllt7KHLCwu4sHoSI.crl (hash: nJvFuqRQKg9EpKeeo0lPlf0EnkhPdNi+5hpiE7MyQII=) 2: fKz1A69yLCD9Hy5RMB-BhxbMKoI.roa (hash: gMBhZrPmuKQd2KYBjPZnqO6rV1OivjKrkRnC0qrBguI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.crl rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.mft rsync://rpki.ripe.net/repository/DEFAULT/WNh9kviQwtNllt7KHLCwu4sHoSI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Feb 2026 19:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:34:53:fc:33:a5:f6:84:d4:0e:08:c7:c5:f7:19:da:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58d87d92f890c2d36596deca1cb0b0bb8b07a122 Validity Not Before: Feb 6 19:00:45 2026 GMT Not After : Feb 7 19:00:45 2026 GMT Subject: CN=3345688a39363684ae5f0b20b8dbb5b3fa9f1350 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:cd:58:3d:35:cd:f3:e5:3b:91:34:e4:14:ba: 8b:1c:c3:f9:49:60:eb:af:eb:0a:ef:c7:4b:9b:b9: 56:67:df:52:be:d0:82:7d:59:93:4f:ad:2b:c8:bb: f7:66:88:49:41:b2:f8:63:fc:87:b2:c1:c2:db:c1: 40:ee:df:85:d4:78:dc:fa:af:62:13:45:54:62:ea: bd:c7:4c:8c:87:d9:9d:4d:ae:7f:a8:18:92:62:35: 55:44:4b:35:3a:f3:75:62:6f:5b:db:a8:e1:e5:32: 9f:6c:5c:36:83:25:71:fa:4d:dd:2b:f3:0e:05:bb: 6d:48:5e:e5:33:51:97:bd:63:13:9c:c8:49:b9:e6: 3d:62:3b:ed:27:62:aa:87:f3:09:63:06:ee:11:32: 86:86:fc:3a:15:55:5b:46:8f:28:a6:65:e8:c2:d6: e3:3b:48:62:20:3d:6e:3c:f5:f7:67:b5:e1:0b:52: 97:dd:ed:0a:62:64:e2:c4:a3:fc:fa:fe:4b:63:94: d4:7f:1c:83:91:f3:54:c7:ee:a9:5c:6c:3d:e2:44: 5a:94:20:3a:0f:f5:1d:be:a5:f4:f6:13:67:1d:7c: d7:ce:b3:7e:2c:df:c1:9f:4b:3d:06:46:27:fc:e3: fb:c2:be:41:c4:0a:bc:60:e9:22:8a:e6:1e:89:8a: c5:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:45:68:8A:39:36:36:84:AE:5F:0B:20:B8:DB:B5:B3:FA:9F:13:50 X509v3 Authority Key Identifier: keyid:58:D8:7D:92:F8:90:C2:D3:65:96:DE:CA:1C:B0:B0:BB:8B:07:A1:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WNh9kviQwtNllt7KHLCwu4sHoSI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:10:e7:5d:53:1a:a1:06:05:ae:28:d5:f9:6f:84:34:24:30: 6a:cb:73:d0:65:02:40:f9:44:06:49:86:27:e4:bd:c8:b5:f4: 32:34:6b:1d:7e:51:60:09:1d:d2:a9:9a:c7:40:0b:d0:e6:ba: 54:d3:8c:d5:4e:dd:75:09:0a:8e:f8:34:8e:54:fd:0f:fa:40: db:e5:37:3c:39:ff:8f:30:bd:29:21:d2:07:82:4f:9b:5b:10: 82:90:25:6d:a6:93:97:f2:c7:e4:a5:cb:a8:ef:03:bb:1d:fb: a1:4a:b7:c2:b5:fd:5b:14:52:51:92:95:a7:6b:bd:14:f0:c3: a3:5b:f0:df:ee:20:ee:d9:bd:30:d7:7f:73:6d:31:62:97:d5: d4:17:76:a9:7b:3d:a6:25:ca:6f:88:c3:8f:91:52:75:ac:6e: 31:85:c4:97:49:48:6c:7b:5b:a1:67:ca:43:8c:31:8c:d2:9c: 16:2b:40:47:6f:0a:9f:f1:38:46:4a:6d:d1:88:dc:0f:d5:1f: 0f:fb:31:c8:fa:20:6a:c0:c2:6f:90:2f:b2:6c:3f:ac:ba:ee: 9b:bc:ea:14:6c:e9:88:dd:91:ba:a5:a7:16:db:bc:d1:e2:ea: cf:a8:cf:27:09:ad:39:b8:74:2b:07:0b:7b:d7:14:a5:44:11: 5e:36:36:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZw0U/wzpfaE1A4Ix8X3Gdq0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4ZDg3ZDkyZjg5MGMyZDM2NTk2ZGVjYTFjYjBiMGJiOGIw N2ExMjIwHhcNMjYwMjA2MTkwMDQ1WhcNMjYwMjA3MTkwMDQ1WjAzMTEwLwYDVQQD EygzMzQ1Njg4YTM5MzYzNjg0YWU1ZjBiMjBiOGRiYjViM2ZhOWYxMzUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq81YPTXN8+U7kTTkFLqLHMP5SWDr r+sK78dLm7lWZ99SvtCCfVmTT60ryLv3ZohJQbL4Y/yHssHC28FA7t+F1Hjc+q9i E0VUYuq9x0yMh9mdTa5/qBiSYjVVREs1OvN1Ym9b26jh5TKfbFw2gyVx+k3dK/MO BbttSF7lM1GXvWMTnMhJueY9YjvtJ2Kqh/MJYwbuETKGhvw6FVVbRo8opmXowtbj O0hiID1uPPX3Z7XhC1KX3e0KYmTixKP8+v5LY5TUfxyDkfNUx+6pXGw94kRalCA6 D/UdvqX09hNnHXzXzrN+LN/Bn0s9BkYn/OP7wr5BxAq8YOkiiuYeiYrFLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDNFaIo5NjaErl8LILjbtbP6nxNQMB8GA1UdIwQY MBaAFFjYfZL4kMLTZZbeyhywsLuLB6EiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV05oOWt2aVF3dE5sbHQ3S0hMQ3d1NHNIb1NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8xZGIyMTMtNGFmZC00NDA3LWJhOWMt YmQ3MzYwOWVlNWRhLzEvV05oOWt2aVF3dE5sbHQ3S0hMQ3d1NHNIb1NJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8xZGIyMTMtNGFmZC00NDA3LWJhOWMtYmQ3MzYwOWVlNWRh LzEvV05oOWt2aVF3dE5sbHQ3S0hMQ3d1NHNIb1NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmRDnXVMa oQYFrijV+W+ENCQwastz0GUCQPlEBkmGJ+S9yLX0MjRrHX5RYAkd0qmax0AL0Oa6 VNOM1U7ddQkKjvg0jlT9D/pA2+U3PDn/jzC9KSHSB4JPm1sQgpAlbaaTl/LH5KXL qO8Dux37oUq3wrX9WxRSUZKVp2u9FPDDo1vw3+4g7tm9MNd/c20xYpfV1Bd2qXs9 piXKb4jDj5FSdaxuMYXEl0lIbHtboWfKQ4wxjNKcFitAR28Kn/E4Rkpt0YjcD9Uf D/sxyPogasDCb5Avsmw/rLrum7zqFGzpiN2RuqWnFtu80eLqz6jPJwmtObh0KwcL e9cUpUQRXjY2Xw== -----END CERTIFICATE-----Generated at Sat Feb 7 05:46:02 2026 by rpki-client