This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/68b521-c790-4957-9e52-2d26f1b56e20/1/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.mft File: wOtmi3NaGDk3Tkj3nLJDbb9BfKo.mft (raw, json) Hash identifier: 1jC+5JyYZTBtOqMWYVA2h6PwwDSV19B+Q3KbdU+8Dzc= Subject key identifier: 89:05:A7:4A:EC:7F:A3:9B:58:49:EE:BA:FC:3F:F8:49:04:BA:7A:68 Authority key identifier: C0:EB:66:8B:73:5A:18:39:37:4E:48:F7:9C:B2:43:6D:BF:41:7C:AA Certificate issuer: /CN=c0eb668b735a1839374e48f79cb2436dbf417caa Certificate serial: 019C432285FA4976C39209FD1E238FD50BC7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/68b521-c790-4957-9e52-2d26f1b56e20/1/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.mft Manifest number: 11EC Signing time: Mon 09 Feb 2026 16:01:01 +0000 Manifest this update: Mon 09 Feb 2026 16:01:01 +0000 Manifest next update: Tue 10 Feb 2026 16:01:01 +0000 Files and hashes: 1: AWc9W3f7WW6fRyUj-qew2yWym0Q.roa (hash: CKhXDKmYEvv2kevwS8ScaNP/c7Fe+e5j3kS5/wFaq50=) 2: wOtmi3NaGDk3Tkj3nLJDbb9BfKo.crl (hash: FRsJqfdVVl+mfDbX7b4IbWY+c3w/GuZpFvrh9EonMFo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/68b521-c790-4957-9e52-2d26f1b56e20/1/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/68b521-c790-4957-9e52-2d26f1b56e20/1/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.mft rsync://rpki.ripe.net/repository/DEFAULT/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 16:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:85:fa:49:76:c3:92:09:fd:1e:23:8f:d5:0b:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0eb668b735a1839374e48f79cb2436dbf417caa Validity Not Before: Feb 9 16:01:01 2026 GMT Not After : Feb 10 16:01:01 2026 GMT Subject: CN=8905a74aec7fa39b5849eebafc3ff84904ba7a68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:10:8f:e3:a2:a7:c9:ef:78:42:0c:d7:5c:f4: 84:b6:66:69:a8:1c:31:3a:2a:6a:8f:27:48:9b:52: 51:17:1a:07:9d:c6:89:91:4b:63:7f:d1:94:84:fa: a8:3e:87:0e:bb:bd:b2:8e:97:a1:da:b0:21:5f:07: 60:b7:b4:9f:5d:84:3c:04:2d:ba:d0:25:8f:11:dd: a0:4f:43:ca:3a:89:5a:12:d1:1c:22:60:bf:18:a0: dc:6b:7a:40:12:61:30:0a:79:8c:2d:86:19:9a:74: f8:5f:22:d1:fc:59:1b:ad:90:f1:fc:16:17:d3:d9: 2f:21:00:b5:8a:17:46:0e:0e:f3:1c:0f:31:ad:d8: 93:0e:f0:8d:1e:c2:bf:40:50:51:4e:31:75:07:6f: e3:2e:16:46:5c:b5:c9:69:79:36:f8:94:54:22:04: c7:80:8f:c4:cd:92:ea:10:18:1e:6c:f1:d6:b8:d7: 2f:79:4a:aa:59:be:df:4d:91:cd:40:63:74:1c:15: 65:26:f5:43:90:27:4e:f6:c0:fd:af:9f:a7:91:ba: 4d:9e:2d:7f:40:85:b8:37:bb:d2:75:01:c5:60:f6: bb:8c:fb:44:53:b3:e5:2d:29:c1:36:68:9b:d2:74: e3:f4:11:66:c2:6d:24:14:05:3e:02:5f:77:a2:8a: 95:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:05:A7:4A:EC:7F:A3:9B:58:49:EE:BA:FC:3F:F8:49:04:BA:7A:68 X509v3 Authority Key Identifier: keyid:C0:EB:66:8B:73:5A:18:39:37:4E:48:F7:9C:B2:43:6D:BF:41:7C:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/68b521-c790-4957-9e52-2d26f1b56e20/1/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/68b521-c790-4957-9e52-2d26f1b56e20/1/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:90:60:a3:a4:b9:d2:5d:67:af:46:aa:65:fb:c5:d2:8c:5c: 80:cc:d0:3d:bb:8a:0d:e2:fd:ea:d6:1c:c5:ca:a9:0d:53:08: d8:a8:a6:0b:8e:cd:cf:3c:dd:32:45:77:f5:77:f3:1f:5b:87: e2:98:a4:d5:c1:62:28:0a:d1:bb:3e:95:e8:e0:b0:7c:f9:46: b3:0b:23:70:32:7a:7c:2e:97:a0:d0:3a:1e:9f:11:c2:d1:ae: 7e:72:3d:35:46:a8:20:dc:97:ab:a4:ff:b4:a2:49:d9:63:f7: f3:a8:dc:e9:ef:6e:8a:40:53:e9:46:f5:e5:49:76:c0:44:3a: 5d:a2:c4:67:82:8d:10:ae:ac:a8:c8:2f:9c:b2:d0:87:20:67: 77:94:73:24:c5:99:03:38:89:e4:e7:2d:0e:07:d9:7b:14:bd: bd:9a:7f:a6:f3:13:dc:fd:40:76:4e:83:6c:63:36:ed:95:e9: 0c:82:63:8d:b7:32:81:24:d5:c2:11:0d:f9:2c:d7:97:04:dd: 3a:4a:24:0d:52:64:db:f8:97:b0:60:35:4f:c8:bb:48:76:5b: 6f:76:78:c5:36:e3:2a:35:81:ce:df:ac:c8:65:3a:7b:93:dd: 6e:c3:ca:8b:75:fa:ca:05:b5:4b:4a:73:69:b5:06:4e:ae:cf: 42:08:17:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIoX6SXbDkgn9HiOP1QvHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwZWI2NjhiNzM1YTE4MzkzNzRlNDhmNzljYjI0MzZkYmY0 MTdjYWEwHhcNMjYwMjA5MTYwMTAxWhcNMjYwMjEwMTYwMTAxWjAzMTEwLwYDVQQD Eyg4OTA1YTc0YWVjN2ZhMzliNTg0OWVlYmFmYzNmZjg0OTA0YmE3YTY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhCP46Knye94QgzXXPSEtmZpqBwx OipqjydIm1JRFxoHncaJkUtjf9GUhPqoPocOu72yjpeh2rAhXwdgt7SfXYQ8BC26 0CWPEd2gT0PKOolaEtEcImC/GKDca3pAEmEwCnmMLYYZmnT4XyLR/FkbrZDx/BYX 09kvIQC1ihdGDg7zHA8xrdiTDvCNHsK/QFBRTjF1B2/jLhZGXLXJaXk2+JRUIgTH gI/EzZLqEBgebPHWuNcveUqqWb7fTZHNQGN0HBVlJvVDkCdO9sD9r5+nkbpNni1/ QIW4N7vSdQHFYPa7jPtEU7PlLSnBNmib0nTj9BFmwm0kFAU+Al93ooqVuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIkFp0rsf6ObWEnuuvw/+EkEunpoMB8GA1UdIwQY MBaAFMDrZotzWhg5N05I95yyQ22/QXyqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd090bWkzTmFHRGszVGtqM25MSkRiYjlCZktvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC82OGI1MjEtYzc5MC00OTU3LTllNTIt MmQyNmYxYjU2ZTIwLzEvd090bWkzTmFHRGszVGtqM25MSkRiYjlCZktvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC82OGI1MjEtYzc5MC00OTU3LTllNTItMmQyNmYxYjU2ZTIw LzEvd090bWkzTmFHRGszVGtqM25MSkRiYjlCZktvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzZBgo6S5 0l1nr0aqZfvF0oxcgMzQPbuKDeL96tYcxcqpDVMI2KimC47NzzzdMkV39XfzH1uH 4pik1cFiKArRuz6V6OCwfPlGswsjcDJ6fC6XoNA6Hp8RwtGufnI9NUaoINyXq6T/ tKJJ2WP386jc6e9uikBT6Ub15Ul2wEQ6XaLEZ4KNEK6sqMgvnLLQhyBnd5RzJMWZ AziJ5OctDgfZexS9vZp/pvMT3P1Adk6DbGM27ZXpDIJjjbcygSTVwhEN+SzXlwTd OkokDVJk2/iXsGA1T8i7SHZbb3Z4xTbjKjWBzt+syGU6e5PdbsPKi3X6ygW1S0pz abUGTq7PQggXlw== -----END CERTIFICATE-----Generated at Tue Feb 10 01:35:09 2026 by rpki-client