This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/b33e14-b3eb-4de5-a519-9adaa4b2b196/1/Wva8LaPCxkKxSuEpwb__JnhS1vw.mft File: Wva8LaPCxkKxSuEpwb__JnhS1vw.mft (raw, json) Hash identifier: fFtNdRpcp2MxTg+VFb6s/CXfv/v2g+HYYwdlR0QSir8= Subject key identifier: 2F:3A:DC:28:5C:D4:73:CA:FC:F4:73:D9:A8:3C:91:D3:A9:DA:C2:71 Authority key identifier: 5A:F6:BC:2D:A3:C2:C6:42:B1:4A:E1:29:C1:BF:FF:26:78:52:D6:FC Certificate issuer: /CN=5af6bc2da3c2c642b14ae129c1bfff267852d6fc Certificate serial: 019C427DF4343D440295009244C65DE6E77F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wva8LaPCxkKxSuEpwb__JnhS1vw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/b33e14-b3eb-4de5-a519-9adaa4b2b196/1/Wva8LaPCxkKxSuEpwb__JnhS1vw.mft Manifest number: 0235 Signing time: Mon 09 Feb 2026 13:01:16 +0000 Manifest this update: Mon 09 Feb 2026 13:01:16 +0000 Manifest next update: Tue 10 Feb 2026 13:01:16 +0000 Files and hashes: 1: K4OipTcwUR5GHe48dIx0uYunkgU.roa (hash: 4X8maR7BlRFLa0y2Jq93U8WPeZASLwROy9eW+4OpHmY=) 2: Wva8LaPCxkKxSuEpwb__JnhS1vw.crl (hash: wlYusQ9edwH0Whnj+ckwsm4lcfIpRe8z3+DSCB7ZDyI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/b33e14-b3eb-4de5-a519-9adaa4b2b196/1/Wva8LaPCxkKxSuEpwb__JnhS1vw.crl rsync://rpki.ripe.net/repository/DEFAULT/25/b33e14-b3eb-4de5-a519-9adaa4b2b196/1/Wva8LaPCxkKxSuEpwb__JnhS1vw.mft rsync://rpki.ripe.net/repository/DEFAULT/Wva8LaPCxkKxSuEpwb__JnhS1vw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:f4:34:3d:44:02:95:00:92:44:c6:5d:e6:e7:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5af6bc2da3c2c642b14ae129c1bfff267852d6fc Validity Not Before: Feb 9 13:01:16 2026 GMT Not After : Feb 10 13:01:16 2026 GMT Subject: CN=2f3adc285cd473cafcf473d9a83c91d3a9dac271 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:5f:8d:d2:05:00:2c:fb:64:67:5f:6f:bd:d1: 21:2e:d5:54:c1:fd:79:ec:2b:4c:b1:27:9c:ed:19: 5d:16:b8:0d:46:97:51:aa:f8:09:14:2c:ee:3e:b8: 21:2b:d9:b8:d8:28:4d:82:e5:6f:4b:a9:cf:91:ef: 41:11:19:03:dc:d0:b8:a7:d2:cf:51:88:a0:66:f6: f6:a7:ce:97:d1:07:4f:52:7f:a9:98:12:da:11:7a: ca:18:a4:ec:de:6a:95:f9:1a:4d:3c:bf:4c:f2:63: 95:6b:1f:ac:af:6d:dd:7a:f9:9d:43:88:34:41:aa: 22:a2:d5:e1:20:ad:ab:67:76:35:ec:f4:90:74:26: c7:b7:90:19:77:a1:ec:bb:c0:82:f6:75:33:11:77: ec:6d:cb:ff:5a:b7:29:a8:bc:17:72:a5:94:34:b4: ab:90:28:7c:13:b6:4d:66:30:f0:8c:c6:bc:38:7f: f3:90:d7:45:d0:4d:4c:db:cb:a8:67:c7:c0:6c:2e: 41:a1:10:57:03:2f:ca:9b:c8:d9:f8:c9:75:d9:c6: 5b:0e:a9:a9:ec:6a:32:87:ed:90:e8:ca:a3:f6:a6: 92:76:0d:7a:91:c5:73:21:1c:34:7e:a8:8d:2f:59: c3:60:2c:79:19:da:66:1e:28:42:88:92:bc:52:f7: 52:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:3A:DC:28:5C:D4:73:CA:FC:F4:73:D9:A8:3C:91:D3:A9:DA:C2:71 X509v3 Authority Key Identifier: keyid:5A:F6:BC:2D:A3:C2:C6:42:B1:4A:E1:29:C1:BF:FF:26:78:52:D6:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wva8LaPCxkKxSuEpwb__JnhS1vw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/b33e14-b3eb-4de5-a519-9adaa4b2b196/1/Wva8LaPCxkKxSuEpwb__JnhS1vw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/b33e14-b3eb-4de5-a519-9adaa4b2b196/1/Wva8LaPCxkKxSuEpwb__JnhS1vw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:ae:ca:34:1c:cc:a3:bf:c2:2c:9b:c3:d5:cb:b1:14:78:6b: 21:ae:20:18:e9:26:0b:f0:0b:6a:cb:73:e2:92:5d:89:f8:61: 4a:20:86:2c:ba:72:b5:11:f2:c7:de:5e:d5:64:e8:4a:8f:67: 17:db:f2:58:1e:8c:4d:a0:0e:1d:d3:2a:de:25:15:e6:46:2e: a4:3e:4c:07:63:a2:01:6c:2e:cf:5c:ac:0a:7a:ce:ea:80:2f: 22:2c:26:99:0e:ef:fa:2b:77:c1:3b:f6:44:c1:71:40:14:8d: 22:35:ab:6a:ab:ad:3b:e3:fa:d6:0c:0d:c7:43:50:68:ad:ea: d5:ab:68:5f:9c:e9:0e:7c:89:2e:67:0c:fe:e3:a6:a2:d9:34: 83:bf:47:4f:95:f8:2a:77:87:79:26:28:eb:43:f2:6a:0c:5a: ce:fb:21:ca:47:2c:75:58:ac:35:ee:0b:3b:3b:3b:0f:16:11: d2:06:2e:75:3d:eb:9d:f3:28:80:7d:e8:fa:70:a5:36:68:61: 3e:51:6c:30:9a:d3:06:f9:a0:57:87:59:8a:a9:7c:5f:88:68: ba:5f:1c:0c:af:3f:15:d6:b1:cc:6d:7b:53:b4:e3:cf:a0:14: c6:19:9e:f8:53:07:f8:0d:d2:92:84:ee:8e:96:1d:2c:5c:f0: 15:57:f8:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCffQ0PUQClQCSRMZd5ud/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhZjZiYzJkYTNjMmM2NDJiMTRhZTEyOWMxYmZmZjI2Nzg1 MmQ2ZmMwHhcNMjYwMjA5MTMwMTE2WhcNMjYwMjEwMTMwMTE2WjAzMTEwLwYDVQQD EygyZjNhZGMyODVjZDQ3M2NhZmNmNDczZDlhODNjOTFkM2E5ZGFjMjcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5F+N0gUALPtkZ19vvdEhLtVUwf15 7CtMsSec7RldFrgNRpdRqvgJFCzuPrghK9m42ChNguVvS6nPke9BERkD3NC4p9LP UYigZvb2p86X0QdPUn+pmBLaEXrKGKTs3mqV+RpNPL9M8mOVax+sr23devmdQ4g0 QaoiotXhIK2rZ3Y17PSQdCbHt5AZd6Hsu8CC9nUzEXfsbcv/WrcpqLwXcqWUNLSr kCh8E7ZNZjDwjMa8OH/zkNdF0E1M28uoZ8fAbC5BoRBXAy/Km8jZ+Ml12cZbDqmp 7Goyh+2Q6Mqj9qaSdg16kcVzIRw0fqiNL1nDYCx5GdpmHihCiJK8UvdSnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC863Chc1HPK/PRz2ag8kdOp2sJxMB8GA1UdIwQY MBaAFFr2vC2jwsZCsUrhKcG//yZ4Utb8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3ZhOExhUEN4a0t4U3VFcHdiX19KbmhTMXZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9iMzNlMTQtYjNlYi00ZGU1LWE1MTkt OWFkYWE0YjJiMTk2LzEvV3ZhOExhUEN4a0t4U3VFcHdiX19KbmhTMXZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9iMzNlMTQtYjNlYi00ZGU1LWE1MTktOWFkYWE0YjJiMTk2 LzEvV3ZhOExhUEN4a0t4U3VFcHdiX19KbmhTMXZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACa7KNBzM o7/CLJvD1cuxFHhrIa4gGOkmC/ALastz4pJdifhhSiCGLLpytRHyx95e1WToSo9n F9vyWB6MTaAOHdMq3iUV5kYupD5MB2OiAWwuz1ysCnrO6oAvIiwmmQ7v+it3wTv2 RMFxQBSNIjWraqutO+P61gwNx0NQaK3q1atoX5zpDnyJLmcM/uOmotk0g79HT5X4 KneHeSYo60PyagxazvshykcsdVisNe4LOzs7DxYR0gYudT3rnfMogH3o+nClNmhh PlFsMJrTBvmgV4dZiql8X4houl8cDK8/FdaxzG17U7Tjz6AUxhme+FMH+A3SkoTu jpYdLFzwFVf4Kg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:31:05 2026 by rpki-client