This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/5f84a1-e8dc-4115-a645-e81720a3978d/1/0WLUzQwan_4krVFT0Zzpwx3LTH0.mft File: 0WLUzQwan_4krVFT0Zzpwx3LTH0.mft (raw, json) Hash identifier: RVh+V6dpI3DJUej7mGz51/FOqS3q/S+WpQwDmjw9qmo= Subject key identifier: 06:E1:92:56:85:B6:FA:A1:72:A7:A0:B3:C7:2C:1D:36:44:B5:79:9F Authority key identifier: D1:62:D4:CD:0C:1A:9F:FE:24:AD:51:53:D1:9C:E9:C3:1D:CB:4C:7D Certificate issuer: /CN=d162d4cd0c1a9ffe24ad5153d19ce9c31dcb4c7d Certificate serial: 019C420F99922F65DA03799E1417A9070757 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0WLUzQwan_4krVFT0Zzpwx3LTH0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/5f84a1-e8dc-4115-a645-e81720a3978d/1/0WLUzQwan_4krVFT0Zzpwx3LTH0.mft Manifest number: 180A Signing time: Mon 09 Feb 2026 11:00:44 +0000 Manifest this update: Mon 09 Feb 2026 11:00:44 +0000 Manifest next update: Tue 10 Feb 2026 11:00:44 +0000 Files and hashes: 1: 0WLUzQwan_4krVFT0Zzpwx3LTH0.crl (hash: +P7a7Y+hQqhrOJWI9FyHm26/iSM60CuWYvHEeMQ1lWk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/5f84a1-e8dc-4115-a645-e81720a3978d/1/0WLUzQwan_4krVFT0Zzpwx3LTH0.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/5f84a1-e8dc-4115-a645-e81720a3978d/1/0WLUzQwan_4krVFT0Zzpwx3LTH0.mft rsync://rpki.ripe.net/repository/DEFAULT/0WLUzQwan_4krVFT0Zzpwx3LTH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:99:92:2f:65:da:03:79:9e:14:17:a9:07:07:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d162d4cd0c1a9ffe24ad5153d19ce9c31dcb4c7d Validity Not Before: Feb 9 11:00:44 2026 GMT Not After : Feb 10 11:00:44 2026 GMT Subject: CN=06e1925685b6faa172a7a0b3c72c1d3644b5799f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a0:9a:da:e9:08:61:8a:65:2b:87:f6:c0:a4: 4e:13:fa:6a:ae:7d:b6:31:f8:c1:c0:3a:e4:14:55: 66:21:80:c5:79:2a:05:16:5d:79:fe:c4:b4:63:95: f5:6e:05:3d:a9:f5:42:4c:bb:25:67:89:45:9a:f8: 51:5e:9c:c3:52:ee:b8:ed:77:4d:5f:9b:c9:81:53: ab:2d:f6:9b:b8:b6:af:0a:c0:66:1c:a4:44:09:41: 23:80:74:c6:c4:10:ed:ee:98:20:ae:7d:1d:e8:5e: d3:ae:cb:6b:f7:f1:06:48:b0:fc:56:5d:87:0e:c2: 16:a8:59:e0:ad:5c:bc:d9:b0:a9:1d:3f:27:c4:e4: 4c:0e:28:50:65:f8:e2:32:21:6b:c6:a9:73:16:ae: 71:21:03:1d:47:aa:a8:75:35:cc:5e:b2:75:bd:05: bf:24:c0:7c:84:7f:12:0e:4b:14:99:ab:e3:eb:fa: 54:e1:00:27:9c:49:f7:6d:4d:fb:76:97:b1:3d:32: 00:b9:83:9f:ad:0a:ed:23:77:a8:ca:ea:60:61:f3: 93:94:a2:14:3f:b2:18:d5:f0:b0:28:f3:bb:62:0f: 29:62:02:3b:58:d3:09:0e:2a:2c:28:68:cd:68:e0: 7b:a1:13:c5:77:43:d7:34:00:d9:c3:19:a6:9e:8e: a6:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:E1:92:56:85:B6:FA:A1:72:A7:A0:B3:C7:2C:1D:36:44:B5:79:9F X509v3 Authority Key Identifier: keyid:D1:62:D4:CD:0C:1A:9F:FE:24:AD:51:53:D1:9C:E9:C3:1D:CB:4C:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0WLUzQwan_4krVFT0Zzpwx3LTH0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/5f84a1-e8dc-4115-a645-e81720a3978d/1/0WLUzQwan_4krVFT0Zzpwx3LTH0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/5f84a1-e8dc-4115-a645-e81720a3978d/1/0WLUzQwan_4krVFT0Zzpwx3LTH0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:07:ce:48:f5:4e:5b:2e:bc:94:ec:00:5d:47:fd:9e:3f:2c: 38:f2:43:2e:e4:32:ab:a5:67:a7:5c:9c:27:60:aa:ce:1f:0d: a2:7c:09:20:ed:52:58:c9:86:4a:ce:c2:2c:25:7e:eb:20:88: 96:94:43:24:d3:9d:e9:0e:e7:18:27:a7:91:4e:66:5c:c5:03: 6e:90:ce:5a:40:d9:c3:c2:8e:01:43:22:e8:2d:60:7d:e8:7a: 06:51:4a:4f:45:5e:ba:be:f2:ab:1e:a8:e1:55:90:6b:13:b6: fb:89:30:9b:93:40:a0:3c:87:c4:ee:8e:c1:29:3d:d4:c3:ac: 51:be:67:21:db:cc:d9:21:cd:fd:8e:23:8e:3d:f6:3b:d6:78: 31:fe:ad:52:24:38:e7:d3:1c:ab:e0:75:66:2e:3a:36:e5:59: d3:24:e2:07:37:2a:f7:35:bc:64:79:40:79:a8:ba:bf:06:76: 0a:0e:c7:0c:8a:46:4d:49:c4:f7:f6:47:3e:94:ff:ea:40:3c: 73:aa:72:f8:17:63:34:84:76:5d:4c:53:62:17:5e:78:62:12: 8d:02:af:73:dd:ad:63:99:65:8c:c4:7a:9c:a9:66:41:0f:32: 74:4a:0d:0e:a5:ba:ed:09:50:3e:6d:0e:3c:6e:0a:c4:d8:35: d3:39:81:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD5mSL2XaA3meFBepBwdXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxNjJkNGNkMGMxYTlmZmUyNGFkNTE1M2QxOWNlOWMzMWRj YjRjN2QwHhcNMjYwMjA5MTEwMDQ0WhcNMjYwMjEwMTEwMDQ0WjAzMTEwLwYDVQQD EygwNmUxOTI1Njg1YjZmYWExNzJhN2EwYjNjNzJjMWQzNjQ0YjU3OTlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKCa2ukIYYplK4f2wKROE/pqrn22 MfjBwDrkFFVmIYDFeSoFFl15/sS0Y5X1bgU9qfVCTLslZ4lFmvhRXpzDUu647XdN X5vJgVOrLfabuLavCsBmHKRECUEjgHTGxBDt7pggrn0d6F7Trstr9/EGSLD8Vl2H DsIWqFngrVy82bCpHT8nxORMDihQZfjiMiFrxqlzFq5xIQMdR6qodTXMXrJ1vQW/ JMB8hH8SDksUmavj6/pU4QAnnEn3bU37dpexPTIAuYOfrQrtI3eoyupgYfOTlKIU P7IY1fCwKPO7Yg8pYgI7WNMJDiosKGjNaOB7oRPFd0PXNADZwxmmno6mDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAbhklaFtvqhcqegs8csHTZEtXmfMB8GA1UdIwQY MBaAFNFi1M0MGp/+JK1RU9Gc6cMdy0x9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFdMVXpRd2FuXzRrclZGVDBaenB3eDNMVEgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi81Zjg0YTEtZThkYy00MTE1LWE2NDUt ZTgxNzIwYTM5NzhkLzEvMFdMVXpRd2FuXzRrclZGVDBaenB3eDNMVEgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi81Zjg0YTEtZThkYy00MTE1LWE2NDUtZTgxNzIwYTM5Nzhk LzEvMFdMVXpRd2FuXzRrclZGVDBaenB3eDNMVEgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAngfOSPVO Wy68lOwAXUf9nj8sOPJDLuQyq6Vnp1ycJ2Cqzh8NonwJIO1SWMmGSs7CLCV+6yCI lpRDJNOd6Q7nGCenkU5mXMUDbpDOWkDZw8KOAUMi6C1gfeh6BlFKT0Veur7yqx6o 4VWQaxO2+4kwm5NAoDyHxO6OwSk91MOsUb5nIdvM2SHN/Y4jjj32O9Z4Mf6tUiQ4 59Mcq+B1Zi46NuVZ0yTiBzcq9zW8ZHlAeai6vwZ2Cg7HDIpGTUnE9/ZHPpT/6kA8 c6py+BdjNIR2XUxTYhdeeGISjQKvc92tY5lljMR6nKlmQQ8ydEoNDqW67QlQPm0O PG4KxNg10zmB4Q== -----END CERTIFICATE-----Generated at Mon Feb 9 20:53:34 2026 by rpki-client