This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/f5e26b-787a-4013-b635-8582810208c6/1/wBgy1Ug13BTpEp4LprJRSzlLydM.mft File: wBgy1Ug13BTpEp4LprJRSzlLydM.mft (raw, json) Hash identifier: PURPQCDajtAed9n78AnX561DTAZJbA8onsQoM/R3deE= Subject key identifier: 1E:C7:AE:63:71:AB:E9:E3:01:BE:0C:1A:F2:AD:71:82:46:43:01:44 Authority key identifier: C0:18:32:D5:48:35:DC:14:E9:12:9E:0B:A6:B2:51:4B:39:4B:C9:D3 Certificate issuer: /CN=c01832d54835dc14e9129e0ba6b2514b394bc9d3 Certificate serial: 019C41337B380F23ABCA308CFC9FBBE11314 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wBgy1Ug13BTpEp4LprJRSzlLydM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/f5e26b-787a-4013-b635-8582810208c6/1/wBgy1Ug13BTpEp4LprJRSzlLydM.mft Manifest number: 180C Signing time: Mon 09 Feb 2026 07:00:18 +0000 Manifest this update: Mon 09 Feb 2026 07:00:18 +0000 Manifest next update: Tue 10 Feb 2026 07:00:18 +0000 Files and hashes: 1: wBgy1Ug13BTpEp4LprJRSzlLydM.crl (hash: gsXFHIAa3BZ7LWwQ0HBMoSrUB6eUeYsye0F9nRp2tj8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/f5e26b-787a-4013-b635-8582810208c6/1/wBgy1Ug13BTpEp4LprJRSzlLydM.crl rsync://rpki.ripe.net/repository/DEFAULT/15/f5e26b-787a-4013-b635-8582810208c6/1/wBgy1Ug13BTpEp4LprJRSzlLydM.mft rsync://rpki.ripe.net/repository/DEFAULT/wBgy1Ug13BTpEp4LprJRSzlLydM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:33:7b:38:0f:23:ab:ca:30:8c:fc:9f:bb:e1:13:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c01832d54835dc14e9129e0ba6b2514b394bc9d3 Validity Not Before: Feb 9 07:00:18 2026 GMT Not After : Feb 10 07:00:18 2026 GMT Subject: CN=1ec7ae6371abe9e301be0c1af2ad718246430144 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:05:40:e5:72:a8:9c:41:36:68:3a:29:45:23: 9c:55:e6:2d:0e:3c:ba:a6:01:85:59:41:b3:1e:f2: 50:49:69:cd:a7:2d:b0:43:18:13:07:6a:e7:af:6a: ab:c3:a9:48:24:a4:b9:e1:6e:25:c5:23:0e:10:fa: 83:43:77:db:b4:65:05:b6:60:9b:2c:d9:4b:ae:f3: b5:4b:56:e6:f7:23:3e:b5:81:c6:5f:21:0a:77:81: b5:b1:96:e1:9a:6f:05:f0:d3:73:21:72:5a:89:a2: 84:62:80:2a:99:d3:34:c2:86:b0:69:b3:e2:8b:97: b5:1e:23:e9:f6:cd:f6:58:86:4d:70:cb:21:ee:53: 8e:9b:71:9e:ee:ad:2a:18:1c:91:7b:dd:84:89:d8: 76:a9:45:39:cb:17:4b:73:1f:e7:75:c3:3e:92:a3: 80:52:39:09:99:42:37:6f:bf:b7:52:fc:f9:ff:ee: 0e:72:83:40:cb:72:e5:70:93:e8:c4:50:30:82:a5: fe:c7:f0:70:75:f6:a2:07:5a:1b:ae:6c:79:84:4c: a6:b4:20:18:21:67:4a:0c:48:f3:f9:05:2b:df:69: c4:ee:28:13:a5:91:ac:1b:2e:22:f9:50:da:9c:b3: 2e:f7:77:54:54:3b:80:57:26:6a:71:7c:8e:32:d7: 0b:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:C7:AE:63:71:AB:E9:E3:01:BE:0C:1A:F2:AD:71:82:46:43:01:44 X509v3 Authority Key Identifier: keyid:C0:18:32:D5:48:35:DC:14:E9:12:9E:0B:A6:B2:51:4B:39:4B:C9:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBgy1Ug13BTpEp4LprJRSzlLydM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/f5e26b-787a-4013-b635-8582810208c6/1/wBgy1Ug13BTpEp4LprJRSzlLydM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/f5e26b-787a-4013-b635-8582810208c6/1/wBgy1Ug13BTpEp4LprJRSzlLydM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:d2:b9:02:df:76:cd:84:8e:7b:53:7c:31:b8:d5:b0:17:3d: 9f:53:b6:f9:38:33:cf:91:13:7f:0c:d5:e6:eb:15:51:88:f7: 4e:09:c0:ba:15:87:f3:4d:81:9c:0b:57:ab:ca:16:85:13:51: 6b:e4:ca:ed:6f:a7:d4:7d:00:8a:bf:86:69:6e:d3:c1:46:2c: 30:c9:b4:14:69:9b:47:c4:f8:84:7c:8e:38:79:ca:c3:1c:b8: 9a:3e:88:41:d7:cb:61:cb:5a:13:64:cd:84:a1:8b:b4:9a:91: 66:ed:37:da:da:68:58:69:ea:46:7e:bd:a1:0b:74:3c:3c:01: 62:7d:90:b6:41:2b:f6:90:a9:e9:8b:ab:b2:39:72:16:1d:c1: a4:a9:48:2a:ff:28:bc:b7:3b:db:7b:84:bf:d8:f7:1e:f0:2a: a6:b9:9f:85:56:86:34:a1:e9:b6:21:79:88:d4:98:39:e4:e3: 34:42:29:2c:e3:de:16:1a:bb:49:23:fa:30:60:18:37:7a:0e: eb:a2:b4:c8:b6:04:09:20:7d:66:62:62:50:60:53:e9:bf:90: f9:fa:50:11:d0:d0:b4:62:32:64:03:d2:ff:d2:2d:2b:1f:8a: 35:9c:09:e2:0c:91:1a:55:d3:33:82:b2:db:b2:44:a6:bc:cd: 37:54:df:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBM3s4DyOryjCM/J+74RMUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwMTgzMmQ1NDgzNWRjMTRlOTEyOWUwYmE2YjI1MTRiMzk0 YmM5ZDMwHhcNMjYwMjA5MDcwMDE4WhcNMjYwMjEwMDcwMDE4WjAzMTEwLwYDVQQD EygxZWM3YWU2MzcxYWJlOWUzMDFiZTBjMWFmMmFkNzE4MjQ2NDMwMTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQVA5XKonEE2aDopRSOcVeYtDjy6 pgGFWUGzHvJQSWnNpy2wQxgTB2rnr2qrw6lIJKS54W4lxSMOEPqDQ3fbtGUFtmCb LNlLrvO1S1bm9yM+tYHGXyEKd4G1sZbhmm8F8NNzIXJaiaKEYoAqmdM0woawabPi i5e1HiPp9s32WIZNcMsh7lOOm3Ge7q0qGByRe92Eidh2qUU5yxdLcx/ndcM+kqOA UjkJmUI3b7+3Uvz5/+4OcoNAy3LlcJPoxFAwgqX+x/BwdfaiB1obrmx5hEymtCAY IWdKDEjz+QUr32nE7igTpZGsGy4i+VDanLMu93dUVDuAVyZqcXyOMtcLOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB7HrmNxq+njAb4MGvKtcYJGQwFEMB8GA1UdIwQY MBaAFMAYMtVINdwU6RKeC6ayUUs5S8nTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0JneTFVZzEzQlRwRXA0THBySlJTemxMeWRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9mNWUyNmItNzg3YS00MDEzLWI2MzUt ODU4MjgxMDIwOGM2LzEvd0JneTFVZzEzQlRwRXA0THBySlJTemxMeWRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS9mNWUyNmItNzg3YS00MDEzLWI2MzUtODU4MjgxMDIwOGM2 LzEvd0JneTFVZzEzQlRwRXA0THBySlJTemxMeWRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAktK5At92 zYSOe1N8MbjVsBc9n1O2+Tgzz5ETfwzV5usVUYj3TgnAuhWH802BnAtXq8oWhRNR a+TK7W+n1H0Air+GaW7TwUYsMMm0FGmbR8T4hHyOOHnKwxy4mj6IQdfLYctaE2TN hKGLtJqRZu032tpoWGnqRn69oQt0PDwBYn2QtkEr9pCp6YursjlyFh3BpKlIKv8o vLc723uEv9j3HvAqprmfhVaGNKHptiF5iNSYOeTjNEIpLOPeFhq7SSP6MGAYN3oO 66K0yLYECSB9ZmJiUGBT6b+Q+fpQEdDQtGIyZAPS/9ItKx+KNZwJ4gyRGlXTM4Ky 27JEprzNN1TfoA== -----END CERTIFICATE-----Generated at Mon Feb 9 17:02:26 2026 by rpki-client