This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/4a61fc-d077-4f4d-b2ea-d90368270e14/1/wo0zhLQSx8zb_6ZB1BTBF90O0FU.mft File: wo0zhLQSx8zb_6ZB1BTBF90O0FU.mft (raw, json) Hash identifier: aw6CAktpsXkLOtWkSIHiILrsxwL0EcE+8pqAYmgT9/4= Subject key identifier: 1E:CD:BF:57:57:FC:0A:CC:85:98:6F:17:B7:51:4B:7C:A2:E0:9C:D6 Authority key identifier: C2:8D:33:84:B4:12:C7:CC:DB:FF:A6:41:D4:14:C1:17:DD:0E:D0:55 Certificate issuer: /CN=c28d3384b412c7ccdbffa641d414c117dd0ed055 Certificate serial: 019C42464B1C5EB88B83266DA9F3BA38D52D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wo0zhLQSx8zb_6ZB1BTBF90O0FU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/4a61fc-d077-4f4d-b2ea-d90368270e14/1/wo0zhLQSx8zb_6ZB1BTBF90O0FU.mft Manifest number: 0547 Signing time: Mon 09 Feb 2026 12:00:28 +0000 Manifest this update: Mon 09 Feb 2026 12:00:28 +0000 Manifest next update: Tue 10 Feb 2026 12:00:28 +0000 Files and hashes: 1: wo0zhLQSx8zb_6ZB1BTBF90O0FU.crl (hash: cELDzvNR8UoiJlPLieB6erqj5MTYo2D0/c3ikTOcU3E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/4a61fc-d077-4f4d-b2ea-d90368270e14/1/wo0zhLQSx8zb_6ZB1BTBF90O0FU.crl rsync://rpki.ripe.net/repository/DEFAULT/16/4a61fc-d077-4f4d-b2ea-d90368270e14/1/wo0zhLQSx8zb_6ZB1BTBF90O0FU.mft rsync://rpki.ripe.net/repository/DEFAULT/wo0zhLQSx8zb_6ZB1BTBF90O0FU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:4b:1c:5e:b8:8b:83:26:6d:a9:f3:ba:38:d5:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c28d3384b412c7ccdbffa641d414c117dd0ed055 Validity Not Before: Feb 9 12:00:28 2026 GMT Not After : Feb 10 12:00:28 2026 GMT Subject: CN=1ecdbf5757fc0acc85986f17b7514b7ca2e09cd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:bf:09:93:85:58:7b:16:f8:ad:ec:d5:17:d0: d4:50:f0:d2:dc:4d:c0:5a:b0:03:f9:7a:25:12:4b: 29:29:97:5b:54:0e:7f:59:61:fd:89:86:56:2a:a0: 79:13:d2:c9:f5:e7:ce:d3:40:01:fd:3e:28:c0:b9: 2b:48:32:2c:7d:cf:0f:12:24:cd:d0:0a:af:4a:05: d4:47:78:ea:26:dc:56:da:e6:a4:1b:e1:bf:d4:fc: 01:75:4b:dd:01:c6:62:e4:c5:dd:46:6d:b0:1f:18: 05:ae:f3:25:3b:e0:96:da:ae:e7:1d:ae:ce:3f:a9: 34:10:16:05:13:f5:4d:8e:a3:83:e5:d9:2d:24:86: 92:69:06:3c:c6:b1:0e:21:de:ec:c0:60:0d:4e:de: 78:de:8d:ae:53:28:c4:b7:6c:54:35:c9:1c:f3:7e: 47:e3:74:ca:86:59:a9:4b:8f:db:d9:fc:cb:01:d2: 69:55:8f:6d:6a:ab:44:0b:a8:14:e1:50:2e:5a:88: 4a:e3:8b:7f:74:73:ae:65:c5:b0:71:2b:df:fe:d2: 1b:09:7b:3d:a1:e4:21:16:1e:3f:2d:75:d0:d3:04: 4d:1e:48:9b:d7:3f:61:31:82:a3:a7:e5:e8:8b:2b: b5:e0:e0:b3:32:ef:5b:58:69:0c:72:35:16:07:54: 59:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:CD:BF:57:57:FC:0A:CC:85:98:6F:17:B7:51:4B:7C:A2:E0:9C:D6 X509v3 Authority Key Identifier: keyid:C2:8D:33:84:B4:12:C7:CC:DB:FF:A6:41:D4:14:C1:17:DD:0E:D0:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wo0zhLQSx8zb_6ZB1BTBF90O0FU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/4a61fc-d077-4f4d-b2ea-d90368270e14/1/wo0zhLQSx8zb_6ZB1BTBF90O0FU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/4a61fc-d077-4f4d-b2ea-d90368270e14/1/wo0zhLQSx8zb_6ZB1BTBF90O0FU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:bf:43:65:1f:ec:19:bf:dc:0c:22:f9:3c:9e:07:8d:05:fc: 66:fb:40:42:72:2b:f4:a0:ae:20:81:5d:23:81:14:43:52:f6: c4:48:f7:9b:90:c5:60:72:f0:46:0a:ed:e8:04:34:a1:34:2d: 68:ed:a4:e8:79:c2:51:6c:2f:6d:72:31:0b:23:af:b5:b0:59: 92:ef:99:53:ab:c4:8d:58:f3:16:a2:12:3f:ce:fb:18:f3:f9: d5:a9:d7:77:5e:88:f6:ec:81:20:f1:52:01:45:4d:5c:f2:df: 0a:5b:a9:52:6b:cd:bc:a0:83:13:74:4e:51:d5:4f:9b:22:12: 44:68:db:85:30:75:34:55:b3:f4:9c:4f:c2:eb:74:29:26:a9: f6:97:6f:5d:f2:a6:5a:af:88:e1:f1:58:c6:a8:86:3e:b5:10: fb:09:e1:77:76:99:1e:02:51:bf:90:bc:4b:8a:0a:14:d6:77: 84:01:08:1e:b9:8e:eb:80:d1:a4:97:12:cd:67:08:13:d8:65: 1c:2a:af:ee:3a:a8:cc:27:12:df:ed:6b:d5:fb:8d:2a:47:96: ef:a9:53:d5:05:0d:c2:bf:96:2f:35:0a:dc:bf:8c:58:c7:54: 09:5a:45:a8:80:3d:e3:78:8e:66:46:c2:ae:8c:32:06:b7:6c: f7:71:fd:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRkscXriLgyZtqfO6ONUtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyOGQzMzg0YjQxMmM3Y2NkYmZmYTY0MWQ0MTRjMTE3ZGQw ZWQwNTUwHhcNMjYwMjA5MTIwMDI4WhcNMjYwMjEwMTIwMDI4WjAzMTEwLwYDVQQD EygxZWNkYmY1NzU3ZmMwYWNjODU5ODZmMTdiNzUxNGI3Y2EyZTA5Y2Q2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzb8Jk4VYexb4rezVF9DUUPDS3E3A WrAD+XolEkspKZdbVA5/WWH9iYZWKqB5E9LJ9efO00AB/T4owLkrSDIsfc8PEiTN 0AqvSgXUR3jqJtxW2uakG+G/1PwBdUvdAcZi5MXdRm2wHxgFrvMlO+CW2q7nHa7O P6k0EBYFE/VNjqOD5dktJIaSaQY8xrEOId7swGANTt543o2uUyjEt2xUNckc835H 43TKhlmpS4/b2fzLAdJpVY9taqtEC6gU4VAuWohK44t/dHOuZcWwcSvf/tIbCXs9 oeQhFh4/LXXQ0wRNHkib1z9hMYKjp+Xoiyu14OCzMu9bWGkMcjUWB1RZ3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB7Nv1dX/ArMhZhvF7dRS3yi4JzWMB8GA1UdIwQY MBaAFMKNM4S0EsfM2/+mQdQUwRfdDtBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd28wemhMUVN4OHpiXzZaQjFCVEJGOTBPMEZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi80YTYxZmMtZDA3Ny00ZjRkLWIyZWEt ZDkwMzY4MjcwZTE0LzEvd28wemhMUVN4OHpiXzZaQjFCVEJGOTBPMEZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi80YTYxZmMtZDA3Ny00ZjRkLWIyZWEtZDkwMzY4MjcwZTE0 LzEvd28wemhMUVN4OHpiXzZaQjFCVEJGOTBPMEZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABL9DZR/s Gb/cDCL5PJ4HjQX8ZvtAQnIr9KCuIIFdI4EUQ1L2xEj3m5DFYHLwRgrt6AQ0oTQt aO2k6HnCUWwvbXIxCyOvtbBZku+ZU6vEjVjzFqISP877GPP51anXd16I9uyBIPFS AUVNXPLfClupUmvNvKCDE3ROUdVPmyISRGjbhTB1NFWz9JxPwut0KSap9pdvXfKm Wq+I4fFYxqiGPrUQ+wnhd3aZHgJRv5C8S4oKFNZ3hAEIHrmO64DRpJcSzWcIE9hl HCqv7jqozCcS3+1r1fuNKkeW76lT1QUNwr+WLzUK3L+MWMdUCVpFqIA943iOZkbC rowyBrds93H9mA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:46:11 2026 by rpki-client