This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/21195c-566a-4ff0-9496-508081499be7/1/WtYtZLAg5sARSELydiZePAfT6lw.mft File: WtYtZLAg5sARSELydiZePAfT6lw.mft (raw, json) Hash identifier: pi3xvKMySlZ41NzmZcX5OaTtdooW3w+OuXBECZiV+bA= Subject key identifier: 33:9E:A9:B6:50:D0:42:A5:5A:C9:3E:7A:9B:AC:0B:38:4E:F6:2E:F7 Authority key identifier: 5A:D6:2D:64:B0:20:E6:C0:11:48:42:F2:76:26:5E:3C:07:D3:EA:5C Certificate issuer: /CN=5ad62d64b020e6c0114842f276265e3c07d3ea5c Certificate serial: 019C4358C2F9A2E655FD772B857BD71DB19E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtYtZLAg5sARSELydiZePAfT6lw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/21195c-566a-4ff0-9496-508081499be7/1/WtYtZLAg5sARSELydiZePAfT6lw.mft Manifest number: 0422 Signing time: Mon 09 Feb 2026 17:00:16 +0000 Manifest this update: Mon 09 Feb 2026 17:00:16 +0000 Manifest next update: Tue 10 Feb 2026 17:00:16 +0000 Files and hashes: 1: WtYtZLAg5sARSELydiZePAfT6lw.crl (hash: qF+vIiNik8l+FvEMcIy9rJQYD1XQxrQqYodpAqrigFA=) 2: fph5gTuLwd2OWoh3SrvtX0TJ1jU.roa (hash: SKuyO2n0G10edipOcdvCUjjKqC8VGVks6CgzeewLwB4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/21195c-566a-4ff0-9496-508081499be7/1/WtYtZLAg5sARSELydiZePAfT6lw.crl rsync://rpki.ripe.net/repository/DEFAULT/38/21195c-566a-4ff0-9496-508081499be7/1/WtYtZLAg5sARSELydiZePAfT6lw.mft rsync://rpki.ripe.net/repository/DEFAULT/WtYtZLAg5sARSELydiZePAfT6lw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:58:c2:f9:a2:e6:55:fd:77:2b:85:7b:d7:1d:b1:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ad62d64b020e6c0114842f276265e3c07d3ea5c Validity Not Before: Feb 9 17:00:16 2026 GMT Not After : Feb 10 17:00:16 2026 GMT Subject: CN=339ea9b650d042a55ac93e7a9bac0b384ef62ef7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a1:92:56:21:d4:fc:5c:0e:7e:35:7e:f1:e6: d3:34:ed:04:d0:07:b1:5d:80:38:06:8e:9e:f9:81: 92:7d:b2:a5:71:b8:71:d1:f7:de:8a:f3:4c:e7:3a: 02:64:23:83:19:45:79:c1:6b:5c:ed:50:7b:0c:80: 3e:95:c2:95:63:80:d8:fa:fc:9b:39:b0:c7:be:9d: d1:9b:09:16:bb:f7:cf:00:a9:df:92:29:8e:f8:c9: 5f:a6:24:0e:7f:10:4d:0b:dd:9a:91:14:1b:22:10: 09:b6:d1:56:a6:c3:ba:8b:b7:8a:69:49:52:77:0a: a2:c6:a7:bf:1c:58:ed:64:cf:c2:ee:0b:0d:5e:5d: 86:8d:2f:b6:a5:b4:44:c4:80:e8:4b:73:c4:cd:ab: 8e:db:fa:16:04:b3:ca:3e:54:40:77:72:8d:9b:ef: 97:0b:37:de:95:42:7f:53:38:18:cf:fe:1b:32:90: 36:c5:f8:24:29:7a:8b:57:24:d1:9d:b6:2d:49:9d: 22:a1:0b:fe:02:5e:b9:0d:aa:2e:bd:95:1f:af:ec: 23:17:bf:2d:b3:00:22:e0:5b:c2:76:99:e4:f8:af: dc:4c:4d:cb:bd:fe:61:79:90:74:3a:c0:fb:4f:e7: 6b:5f:ce:0c:b2:d6:10:b2:cf:6a:7e:92:15:07:c5: b7:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:9E:A9:B6:50:D0:42:A5:5A:C9:3E:7A:9B:AC:0B:38:4E:F6:2E:F7 X509v3 Authority Key Identifier: keyid:5A:D6:2D:64:B0:20:E6:C0:11:48:42:F2:76:26:5E:3C:07:D3:EA:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtYtZLAg5sARSELydiZePAfT6lw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/21195c-566a-4ff0-9496-508081499be7/1/WtYtZLAg5sARSELydiZePAfT6lw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/21195c-566a-4ff0-9496-508081499be7/1/WtYtZLAg5sARSELydiZePAfT6lw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:60:b2:da:da:dd:05:9f:21:19:3b:da:12:ad:45:a4:82:1d: e9:4c:3a:5c:0e:07:c8:c8:f0:92:fa:23:fa:b9:0f:8f:53:93: 23:f5:b3:14:39:62:86:9f:d9:fc:37:e1:8c:c9:ef:84:af:3b: 53:24:f4:3f:7c:5c:e1:f4:74:8b:6a:64:50:d5:7a:7e:7a:aa: d8:42:74:fe:66:5d:ed:54:c9:c3:bd:d9:e3:c6:df:30:b3:3e: 94:8f:a8:24:7a:fa:b5:1b:e9:9c:71:0f:b4:8b:53:28:12:38: 54:44:3f:1d:46:70:55:68:95:aa:4e:05:9f:1d:b9:1f:4c:8f: ee:40:64:a9:79:93:af:92:1c:87:c8:d4:56:48:37:da:72:1c: 0f:ac:37:f2:0e:50:26:e3:eb:9d:62:2b:af:58:84:96:87:e5: 79:08:ee:1d:3e:19:2d:04:33:5f:61:35:44:96:96:01:3e:d0: 64:81:27:91:93:91:76:5d:a1:13:3c:37:3d:5a:65:b6:f9:1a: 32:ad:c1:00:b2:27:58:92:8d:9e:35:73:60:3d:a5:6d:5e:39: 74:ee:7f:c9:dc:bf:0e:73:03:56:f3:ec:e5:33:14:a8:e7:10: 96:2c:d8:70:cc:98:8d:1d:22:cf:41:6c:49:4a:bb:40:4b:22: d5:83:86:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWML5ouZV/XcrhXvXHbGeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhZDYyZDY0YjAyMGU2YzAxMTQ4NDJmMjc2MjY1ZTNjMDdk M2VhNWMwHhcNMjYwMjA5MTcwMDE2WhcNMjYwMjEwMTcwMDE2WjAzMTEwLwYDVQQD EygzMzllYTliNjUwZDA0MmE1NWFjOTNlN2E5YmFjMGIzODRlZjYyZWY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6GSViHU/FwOfjV+8ebTNO0E0Aex XYA4Bo6e+YGSfbKlcbhx0ffeivNM5zoCZCODGUV5wWtc7VB7DIA+lcKVY4DY+vyb ObDHvp3RmwkWu/fPAKnfkimO+MlfpiQOfxBNC92akRQbIhAJttFWpsO6i7eKaUlS dwqixqe/HFjtZM/C7gsNXl2GjS+2pbRExIDoS3PEzauO2/oWBLPKPlRAd3KNm++X CzfelUJ/UzgYz/4bMpA2xfgkKXqLVyTRnbYtSZ0ioQv+Al65DaouvZUfr+wjF78t swAi4FvCdpnk+K/cTE3Lvf5heZB0OsD7T+drX84MstYQss9qfpIVB8W3XwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDOeqbZQ0EKlWsk+epusCzhO9i73MB8GA1UdIwQY MBaAFFrWLWSwIObAEUhC8nYmXjwH0+pcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3RZdFpMQWc1c0FSU0VMeWRpWmVQQWZUNmx3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8yMTE5NWMtNTY2YS00ZmYwLTk0OTYt NTA4MDgxNDk5YmU3LzEvV3RZdFpMQWc1c0FSU0VMeWRpWmVQQWZUNmx3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8yMTE5NWMtNTY2YS00ZmYwLTk0OTYtNTA4MDgxNDk5YmU3 LzEvV3RZdFpMQWc1c0FSU0VMeWRpWmVQQWZUNmx3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAamCy2trd BZ8hGTvaEq1FpIId6Uw6XA4HyMjwkvoj+rkPj1OTI/WzFDlihp/Z/DfhjMnvhK87 UyT0P3xc4fR0i2pkUNV6fnqq2EJ0/mZd7VTJw73Z48bfMLM+lI+oJHr6tRvpnHEP tItTKBI4VEQ/HUZwVWiVqk4Fnx25H0yP7kBkqXmTr5Ich8jUVkg32nIcD6w38g5Q JuPrnWIrr1iElofleQjuHT4ZLQQzX2E1RJaWAT7QZIEnkZORdl2hEzw3PVpltvka Mq3BALInWJKNnjVzYD2lbV45dO5/ydy/DnMDVvPs5TMUqOcQlizYcMyYjR0iz0Fs SUq7QEsi1YOGGQ== -----END CERTIFICATE-----Generated at Mon Feb 9 20:00:10 2026 by rpki-client