This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/8d99c5-b7c8-4895-af18-ae840028f6b1/1/w49sR0pKRBSpySd75Naqrivt6ks.mft File: w49sR0pKRBSpySd75Naqrivt6ks.mft (raw, json) Hash identifier: O4fj5dK2CMN+TZ5XXaRBcMGfVlAaoK9hL98XtpRyi9Y= Subject key identifier: E4:63:AD:B1:DD:8A:CE:04:A2:D2:19:95:80:AF:58:10:F0:F0:87:C6 Authority key identifier: C3:8F:6C:47:4A:4A:44:14:A9:C9:27:7B:E4:D6:AA:AE:2B:ED:EA:4B Certificate issuer: /CN=c38f6c474a4a4414a9c9277be4d6aaae2bedea4b Certificate serial: 019C439050C35CF9C4E0E1423EC16AA94B35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w49sR0pKRBSpySd75Naqrivt6ks.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/8d99c5-b7c8-4895-af18-ae840028f6b1/1/w49sR0pKRBSpySd75Naqrivt6ks.mft Manifest number: 021D Signing time: Mon 09 Feb 2026 18:00:57 +0000 Manifest this update: Mon 09 Feb 2026 18:00:57 +0000 Manifest next update: Tue 10 Feb 2026 18:00:57 +0000 Files and hashes: 1: w49sR0pKRBSpySd75Naqrivt6ks.crl (hash: zREFG+tynyWeA4lp5MBeTl9AS5fzOUbAFyqCLN1fsY0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/8d99c5-b7c8-4895-af18-ae840028f6b1/1/w49sR0pKRBSpySd75Naqrivt6ks.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/8d99c5-b7c8-4895-af18-ae840028f6b1/1/w49sR0pKRBSpySd75Naqrivt6ks.mft rsync://rpki.ripe.net/repository/DEFAULT/w49sR0pKRBSpySd75Naqrivt6ks.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:50:c3:5c:f9:c4:e0:e1:42:3e:c1:6a:a9:4b:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c38f6c474a4a4414a9c9277be4d6aaae2bedea4b Validity Not Before: Feb 9 18:00:57 2026 GMT Not After : Feb 10 18:00:57 2026 GMT Subject: CN=e463adb1dd8ace04a2d2199580af5810f0f087c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:ed:1b:e2:a6:be:e9:f2:43:7d:f4:02:9e:24: 89:87:43:14:dd:2e:d4:34:19:45:8c:44:5d:76:02: a6:58:ea:ef:2a:7b:23:1b:1b:63:e5:aa:fc:a8:0e: 0b:2f:4d:89:22:ca:c4:9e:89:0c:13:3a:f2:31:82: e7:e8:f4:59:cf:a8:7a:6d:e5:f4:6a:9c:57:21:54: 9a:d0:14:e0:6e:fa:95:9e:ac:ad:da:27:ff:c4:7a: d3:68:e6:cb:58:e9:6c:ee:9a:d0:2b:8c:74:0b:8d: 38:51:cc:01:9b:ba:f0:ed:10:f7:fc:02:61:91:dd: 79:97:7a:61:43:34:d1:11:c9:99:ae:8f:1e:2b:29: 59:e9:3a:ab:2c:e8:bd:16:e9:97:e1:46:8b:33:2d: 3d:db:e8:30:4e:dc:e1:5a:d3:69:74:c9:ee:ac:db: 34:4c:81:79:66:ca:03:49:1d:bd:f2:cc:9f:56:22: 83:67:89:6a:16:e9:02:c0:d8:f3:92:0b:23:83:57: b2:7f:28:42:03:f2:b3:22:08:8e:25:62:bb:c3:95: 22:31:13:df:f5:8f:4f:f2:d0:cd:8e:72:9b:80:f9: 18:e4:2d:2a:a8:3a:fe:9c:41:5f:a1:2b:5a:12:3a: 17:cf:d4:d7:e9:50:e8:60:2c:86:d2:07:b3:7e:0e: c1:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:63:AD:B1:DD:8A:CE:04:A2:D2:19:95:80:AF:58:10:F0:F0:87:C6 X509v3 Authority Key Identifier: keyid:C3:8F:6C:47:4A:4A:44:14:A9:C9:27:7B:E4:D6:AA:AE:2B:ED:EA:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w49sR0pKRBSpySd75Naqrivt6ks.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/8d99c5-b7c8-4895-af18-ae840028f6b1/1/w49sR0pKRBSpySd75Naqrivt6ks.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/8d99c5-b7c8-4895-af18-ae840028f6b1/1/w49sR0pKRBSpySd75Naqrivt6ks.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:83:c3:ce:14:ea:db:8d:6c:72:72:b0:b8:57:eb:01:6d:e7: 1f:99:18:bf:19:e3:eb:8c:a4:87:5a:bc:b5:a3:66:f4:aa:0f: 47:dc:12:25:8f:e6:22:60:c0:10:cf:f1:95:6f:6c:14:a2:3c: a2:35:a7:12:5a:37:28:45:eb:1e:d7:fe:51:31:72:07:e9:60: 75:74:93:9b:48:b3:b3:d6:40:7e:b2:52:8d:b9:ab:dd:09:59: 86:8a:4e:66:a9:76:5f:ff:2b:ca:6d:1d:7a:22:ca:c1:8d:36: af:46:39:79:fe:0a:30:fb:47:60:89:69:33:7c:b2:08:0a:ec: ce:43:4a:0a:f2:21:ca:b2:c4:8f:7e:1a:df:d2:ab:25:a3:5a: f3:08:23:85:1c:80:45:be:49:aa:ad:41:eb:27:0e:c8:88:a3: 75:9a:78:8f:92:69:7b:31:8d:72:eb:43:4f:36:d6:f9:dd:ad: af:9d:79:36:9a:a2:b1:1c:b4:5d:b4:1d:24:55:72:47:d7:d1: cf:a2:79:76:c6:03:ad:23:d8:12:3e:30:90:32:c5:da:89:30: 3a:3a:74:2c:90:e3:34:bf:4c:c2:94:65:b7:d6:76:ac:cf:a1: 7e:bc:ea:96:47:c1:93:5d:84:e5:4a:77:e6:fa:9e:b0:5c:eb: 0e:a7:98:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkFDDXPnE4OFCPsFqqUs1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzOGY2YzQ3NGE0YTQ0MTRhOWM5Mjc3YmU0ZDZhYWFlMmJl ZGVhNGIwHhcNMjYwMjA5MTgwMDU3WhcNMjYwMjEwMTgwMDU3WjAzMTEwLwYDVQQD EyhlNDYzYWRiMWRkOGFjZTA0YTJkMjE5OTU4MGFmNTgxMGYwZjA4N2M2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+e0b4qa+6fJDffQCniSJh0MU3S7U NBlFjERddgKmWOrvKnsjGxtj5ar8qA4LL02JIsrEnokMEzryMYLn6PRZz6h6beX0 apxXIVSa0BTgbvqVnqyt2if/xHrTaObLWOls7prQK4x0C404UcwBm7rw7RD3/AJh kd15l3phQzTREcmZro8eKylZ6TqrLOi9FumX4UaLMy092+gwTtzhWtNpdMnurNs0 TIF5ZsoDSR298syfViKDZ4lqFukCwNjzkgsjg1eyfyhCA/KzIgiOJWK7w5UiMRPf 9Y9P8tDNjnKbgPkY5C0qqDr+nEFfoStaEjoXz9TX6VDoYCyG0gezfg7BXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFORjrbHdis4EotIZlYCvWBDw8IfGMB8GA1UdIwQY MBaAFMOPbEdKSkQUqckne+TWqq4r7epLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzQ5c1IwcEtSQlNweVNkNzVOYXFyaXZ0NmtzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC84ZDk5YzUtYjdjOC00ODk1LWFmMTgt YWU4NDAwMjhmNmIxLzEvdzQ5c1IwcEtSQlNweVNkNzVOYXFyaXZ0NmtzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC84ZDk5YzUtYjdjOC00ODk1LWFmMTgtYWU4NDAwMjhmNmIx LzEvdzQ5c1IwcEtSQlNweVNkNzVOYXFyaXZ0NmtzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOYPDzhTq 241scnKwuFfrAW3nH5kYvxnj64ykh1q8taNm9KoPR9wSJY/mImDAEM/xlW9sFKI8 ojWnElo3KEXrHtf+UTFyB+lgdXSTm0izs9ZAfrJSjbmr3QlZhopOZql2X/8rym0d eiLKwY02r0Y5ef4KMPtHYIlpM3yyCArszkNKCvIhyrLEj34a39KrJaNa8wgjhRyA Rb5Jqq1B6ycOyIijdZp4j5JpezGNcutDTzbW+d2tr515NpqisRy0XbQdJFVyR9fR z6J5dsYDrSPYEj4wkDLF2okwOjp0LJDjNL9MwpRlt9Z2rM+hfrzqlkfBk12E5Up3 5vqesFzrDqeYtg== -----END CERTIFICATE-----Generated at Mon Feb 9 22:41:42 2026 by rpki-client