This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/b4cd6e-3e8c-4402-b2c1-b1a1edda77cd/1/wKmyD2ubglk-wH4MuLuHDOEYZdw.mft File: wKmyD2ubglk-wH4MuLuHDOEYZdw.mft (raw, json) Hash identifier: XpX2f/lly2NowmYanUirGYafzhZ8YsxL8/AtYHml1fg= Subject key identifier: E6:DB:C9:52:13:0C:15:DA:CF:5E:11:71:D2:E9:6A:CF:67:91:28:AE Authority key identifier: C0:A9:B2:0F:6B:9B:82:59:3E:C0:7E:0C:B8:BB:87:0C:E1:18:65:DC Certificate issuer: /CN=c0a9b20f6b9b82593ec07e0cb8bb870ce11865dc Certificate serial: 019C41D89C30D4FDA882EDC8D3E024B682BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wKmyD2ubglk-wH4MuLuHDOEYZdw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/b4cd6e-3e8c-4402-b2c1-b1a1edda77cd/1/wKmyD2ubglk-wH4MuLuHDOEYZdw.mft Manifest number: 0B80 Signing time: Mon 09 Feb 2026 10:00:40 +0000 Manifest this update: Mon 09 Feb 2026 10:00:40 +0000 Manifest next update: Tue 10 Feb 2026 10:00:40 +0000 Files and hashes: 1: wKmyD2ubglk-wH4MuLuHDOEYZdw.crl (hash: JsRbgrFW1JrGvAgtABtrM70gXwDnkhnQHIJ12lxLzPw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/b4cd6e-3e8c-4402-b2c1-b1a1edda77cd/1/wKmyD2ubglk-wH4MuLuHDOEYZdw.crl rsync://rpki.ripe.net/repository/DEFAULT/17/b4cd6e-3e8c-4402-b2c1-b1a1edda77cd/1/wKmyD2ubglk-wH4MuLuHDOEYZdw.mft rsync://rpki.ripe.net/repository/DEFAULT/wKmyD2ubglk-wH4MuLuHDOEYZdw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:9c:30:d4:fd:a8:82:ed:c8:d3:e0:24:b6:82:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0a9b20f6b9b82593ec07e0cb8bb870ce11865dc Validity Not Before: Feb 9 10:00:40 2026 GMT Not After : Feb 10 10:00:40 2026 GMT Subject: CN=e6dbc952130c15dacf5e1171d2e96acf679128ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:31:6e:12:cf:4d:42:fb:8c:88:c6:c2:13:56: 09:cc:38:7b:30:0e:de:19:d6:d0:b2:35:e5:76:23: 06:9b:fa:ab:9c:5e:79:95:7e:eb:56:9b:b6:0b:8a: 8d:57:07:bd:52:41:aa:4b:7e:a7:0a:60:c7:d2:f1: 3d:53:b5:45:09:b6:2b:f0:ba:96:5d:e0:53:e4:6a: 6e:94:98:49:ed:d6:85:16:65:df:6c:7a:f6:94:cd: 41:ee:dc:98:b7:35:8b:8a:b2:a2:9e:1f:60:d4:50: 37:e2:da:74:60:20:ce:fc:00:7a:4a:fb:3b:68:35: 61:3c:c7:1c:af:63:e1:cd:9f:8a:e9:5d:60:76:ca: b5:6f:b3:4b:e1:76:c8:f9:58:63:81:e4:46:f5:8e: 52:6f:ac:5f:62:8e:c8:34:28:ef:67:92:6b:61:39: f9:04:c7:31:2a:8b:a5:9b:42:7a:a3:a4:67:f0:d2: e7:6f:a5:ba:fb:b6:a6:9b:4f:21:27:48:a1:a2:e9: c8:12:56:99:54:e4:6b:e8:24:6f:c7:bf:9c:58:e6: 13:45:fc:1b:7b:77:47:74:10:64:e3:d2:56:53:b9: 19:f4:c4:21:e7:a9:9f:c4:f1:16:e1:e3:b8:87:63: d2:bf:26:46:39:fa:76:0e:1a:e7:f4:a9:f7:af:72: f7:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:DB:C9:52:13:0C:15:DA:CF:5E:11:71:D2:E9:6A:CF:67:91:28:AE X509v3 Authority Key Identifier: keyid:C0:A9:B2:0F:6B:9B:82:59:3E:C0:7E:0C:B8:BB:87:0C:E1:18:65:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wKmyD2ubglk-wH4MuLuHDOEYZdw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b4cd6e-3e8c-4402-b2c1-b1a1edda77cd/1/wKmyD2ubglk-wH4MuLuHDOEYZdw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b4cd6e-3e8c-4402-b2c1-b1a1edda77cd/1/wKmyD2ubglk-wH4MuLuHDOEYZdw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:df:a9:17:92:dc:7d:17:e8:05:40:bb:bb:76:55:6b:f9:ad: 9d:56:30:7a:aa:0b:cf:04:e9:bf:bb:5c:f6:aa:db:04:69:93: 3c:40:fd:97:42:4b:41:40:7a:fb:d0:0d:a8:92:1c:3a:86:f2: 33:ce:ed:7a:14:d0:32:d4:c3:10:c8:f6:14:55:ab:b8:90:51: 18:c7:7c:22:9d:96:f6:2e:57:c1:9a:11:e8:51:bd:d3:80:e1: c3:81:a2:88:b9:eb:66:56:a9:a7:7c:16:03:31:5f:2e:95:d8: c5:1b:e6:50:64:65:9a:e3:b7:20:e8:fd:40:25:95:be:f1:4b: 79:73:6d:e2:f0:e9:85:ce:6f:de:be:92:e2:95:46:52:4d:d6: 52:62:15:65:6d:0c:ff:2d:bc:47:51:b3:76:bc:8c:f1:ad:cf: 29:19:9c:89:58:81:8a:42:c6:31:0a:73:5f:ec:17:57:c9:d0: 32:d0:26:a2:16:f9:59:82:92:f4:7f:c9:9d:27:7e:10:67:19: cd:44:b9:83:b9:b1:a8:92:80:67:ef:93:4e:0e:ff:a8:d9:25: 93:cc:e0:16:5a:61:22:8e:7c:2e:49:0c:d3:3e:00:d1:fc:97: a5:a1:29:ff:24:d3:d7:3a:03:ab:de:37:8e:5c:85:aa:44:84: e8:d2:ad:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2Jww1P2ogu3I0+AktoK+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwYTliMjBmNmI5YjgyNTkzZWMwN2UwY2I4YmI4NzBjZTEx ODY1ZGMwHhcNMjYwMjA5MTAwMDQwWhcNMjYwMjEwMTAwMDQwWjAzMTEwLwYDVQQD EyhlNmRiYzk1MjEzMGMxNWRhY2Y1ZTExNzFkMmU5NmFjZjY3OTEyOGFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6zFuEs9NQvuMiMbCE1YJzDh7MA7e GdbQsjXldiMGm/qrnF55lX7rVpu2C4qNVwe9UkGqS36nCmDH0vE9U7VFCbYr8LqW XeBT5GpulJhJ7daFFmXfbHr2lM1B7tyYtzWLirKinh9g1FA34tp0YCDO/AB6Svs7 aDVhPMccr2PhzZ+K6V1gdsq1b7NL4XbI+VhjgeRG9Y5Sb6xfYo7INCjvZ5JrYTn5 BMcxKoulm0J6o6Rn8NLnb6W6+7amm08hJ0ihounIElaZVORr6CRvx7+cWOYTRfwb e3dHdBBk49JWU7kZ9MQh56mfxPEW4eO4h2PSvyZGOfp2Dhrn9Kn3r3L3IwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFObbyVITDBXaz14RcdLpas9nkSiuMB8GA1UdIwQY MBaAFMCpsg9rm4JZPsB+DLi7hwzhGGXcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0tteUQydWJnbGstd0g0TXVMdUhET0VZWmR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9iNGNkNmUtM2U4Yy00NDAyLWIyYzEt YjFhMWVkZGE3N2NkLzEvd0tteUQydWJnbGstd0g0TXVMdUhET0VZWmR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9iNGNkNmUtM2U4Yy00NDAyLWIyYzEtYjFhMWVkZGE3N2Nk LzEvd0tteUQydWJnbGstd0g0TXVMdUhET0VZWmR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtd+pF5Lc fRfoBUC7u3ZVa/mtnVYweqoLzwTpv7tc9qrbBGmTPED9l0JLQUB6+9ANqJIcOoby M87tehTQMtTDEMj2FFWruJBRGMd8Ip2W9i5XwZoR6FG904Dhw4GiiLnrZlapp3wW AzFfLpXYxRvmUGRlmuO3IOj9QCWVvvFLeXNt4vDphc5v3r6S4pVGUk3WUmIVZW0M /y28R1GzdryM8a3PKRmciViBikLGMQpzX+wXV8nQMtAmohb5WYKS9H/JnSd+EGcZ zUS5g7mxqJKAZ++TTg7/qNklk8zgFlphIo58LkkM0z4A0fyXpaEp/yTT1zoDq943 jlyFqkSE6NKtMw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:29:29 2026 by rpki-client