This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3990c2-51be-4b87-af62-e0e099640eac/1/ws_pT97DCaxVMFrJDnw9Yo39QGo.mft File: ws_pT97DCaxVMFrJDnw9Yo39QGo.mft (raw, json) Hash identifier: OmEjMmUFsKzzNEI9lm2EP1fV0UKiOLc87CCS3wuitc4= Subject key identifier: B9:69:9D:CB:4C:C9:26:17:52:F2:AF:03:44:AF:E0:B0:39:5A:0B:2D Authority key identifier: C2:CF:E9:4F:DE:C3:09:AC:55:30:5A:C9:0E:7C:3D:62:8D:FD:40:6A Certificate issuer: /CN=c2cfe94fdec309ac55305ac90e7c3d628dfd406a Certificate serial: 019C43595C9E1DDE0E09519348A4F6F96531 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ws_pT97DCaxVMFrJDnw9Yo39QGo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3990c2-51be-4b87-af62-e0e099640eac/1/ws_pT97DCaxVMFrJDnw9Yo39QGo.mft Manifest number: 0391 Signing time: Mon 09 Feb 2026 17:00:55 +0000 Manifest this update: Mon 09 Feb 2026 17:00:55 +0000 Manifest next update: Tue 10 Feb 2026 17:00:55 +0000 Files and hashes: 1: ws_pT97DCaxVMFrJDnw9Yo39QGo.crl (hash: w409qdDZFlMkzOvmqNtLD+oPFP1PjNs9Rdx+bMSaq1g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/3990c2-51be-4b87-af62-e0e099640eac/1/ws_pT97DCaxVMFrJDnw9Yo39QGo.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/3990c2-51be-4b87-af62-e0e099640eac/1/ws_pT97DCaxVMFrJDnw9Yo39QGo.mft rsync://rpki.ripe.net/repository/DEFAULT/ws_pT97DCaxVMFrJDnw9Yo39QGo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:59:5c:9e:1d:de:0e:09:51:93:48:a4:f6:f9:65:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2cfe94fdec309ac55305ac90e7c3d628dfd406a Validity Not Before: Feb 9 17:00:55 2026 GMT Not After : Feb 10 17:00:55 2026 GMT Subject: CN=b9699dcb4cc9261752f2af0344afe0b0395a0b2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d0:70:b7:be:fc:ec:9a:f0:aa:55:78:75:38: 86:0e:b2:1a:92:dd:48:3b:d5:84:63:49:0d:8a:32: a2:b4:1c:3b:27:b3:d4:f7:be:2f:80:4c:47:1e:33: a7:10:3c:c0:73:56:6d:50:34:40:84:5b:63:b1:4e: 40:82:11:ab:70:dd:3d:69:11:ef:97:03:5d:17:10: e7:a5:c7:3e:90:07:a6:db:bb:f6:1d:e3:79:c7:db: 8e:52:31:52:d8:fd:37:25:c6:5c:65:af:cd:d8:7f: e2:78:cc:20:5b:10:8c:f4:77:46:ab:1a:a0:2e:00: 19:b4:a6:01:c5:d0:7b:aa:16:25:2c:ef:85:16:39: 81:45:81:13:c5:69:fb:b3:c8:54:ff:22:24:86:ea: 89:1d:89:99:3b:ed:fc:7a:f9:82:a8:d7:d7:f9:ee: 0c:24:e9:4a:26:ae:e9:c4:b4:e0:99:66:58:f5:cf: 90:00:01:43:ba:15:3a:3a:b2:2d:43:85:6b:2a:ab: c5:ac:d2:69:87:3e:17:79:59:84:80:47:fa:69:a4: f9:aa:ed:a5:10:20:50:12:9f:a5:92:49:2e:4f:46: 35:2b:62:88:fa:d5:0e:bf:7e:af:2c:ee:0a:98:1d: c2:95:b8:76:95:15:f4:58:47:cc:5c:c9:0c:eb:84: 6b:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:69:9D:CB:4C:C9:26:17:52:F2:AF:03:44:AF:E0:B0:39:5A:0B:2D X509v3 Authority Key Identifier: keyid:C2:CF:E9:4F:DE:C3:09:AC:55:30:5A:C9:0E:7C:3D:62:8D:FD:40:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ws_pT97DCaxVMFrJDnw9Yo39QGo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3990c2-51be-4b87-af62-e0e099640eac/1/ws_pT97DCaxVMFrJDnw9Yo39QGo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3990c2-51be-4b87-af62-e0e099640eac/1/ws_pT97DCaxVMFrJDnw9Yo39QGo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:be:b1:d2:dc:bc:bb:5c:e6:b4:f1:db:1f:82:55:2e:e2:7e: d8:a4:11:bd:54:2a:ed:75:4e:1b:45:12:50:b1:19:e1:6a:d4: db:27:fb:33:36:41:76:2b:bc:7c:c1:56:f3:0d:e4:f6:25:b7: 20:c1:38:0a:ab:f1:39:b1:61:0e:16:a0:0b:7a:58:ed:d8:b3: 72:5e:0f:c6:1e:2d:97:39:42:0e:0e:cd:a8:93:62:18:c1:c9: 15:eb:48:0d:b3:d5:18:94:93:9c:20:6a:07:cf:d2:2f:99:11: 32:d4:52:b4:3a:59:25:fc:22:fd:1e:64:49:59:5f:06:6f:0d: 15:04:48:a9:12:a9:be:8c:ba:69:7b:f6:32:91:27:e2:9c:23: 5d:43:2b:37:80:7c:38:80:31:18:38:3a:bf:75:78:89:df:9a: 16:17:fe:1c:59:fc:95:e5:c8:50:e0:16:83:e5:9a:f1:0d:95: f2:7f:2d:23:c3:93:f7:fb:76:74:46:5c:a3:71:c8:b1:5b:2a: 90:54:77:c0:6a:36:5a:a4:63:98:0a:4f:71:72:1b:53:72:4d: 7f:a9:c8:de:3c:62:63:23:79:92:20:88:99:d3:f9:23:66:8d: a2:d4:70:c7:5c:de:9e:78:f2:78:d1:62:c1:ca:a8:bc:e0:88: 36:78:40:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWVyeHd4OCVGTSKT2+WUxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyY2ZlOTRmZGVjMzA5YWM1NTMwNWFjOTBlN2MzZDYyOGRm ZDQwNmEwHhcNMjYwMjA5MTcwMDU1WhcNMjYwMjEwMTcwMDU1WjAzMTEwLwYDVQQD EyhiOTY5OWRjYjRjYzkyNjE3NTJmMmFmMDM0NGFmZTBiMDM5NWEwYjJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzdBwt7787JrwqlV4dTiGDrIakt1I O9WEY0kNijKitBw7J7PU974vgExHHjOnEDzAc1ZtUDRAhFtjsU5AghGrcN09aRHv lwNdFxDnpcc+kAem27v2HeN5x9uOUjFS2P03JcZcZa/N2H/ieMwgWxCM9HdGqxqg LgAZtKYBxdB7qhYlLO+FFjmBRYETxWn7s8hU/yIkhuqJHYmZO+38evmCqNfX+e4M JOlKJq7pxLTgmWZY9c+QAAFDuhU6OrItQ4VrKqvFrNJphz4XeVmEgEf6aaT5qu2l ECBQEp+lkkkuT0Y1K2KI+tUOv36vLO4KmB3Clbh2lRX0WEfMXMkM64RrywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLlpnctMySYXUvKvA0Sv4LA5WgstMB8GA1UdIwQY MBaAFMLP6U/ewwmsVTBayQ58PWKN/UBqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3NfcFQ5N0RDYXhWTUZySkRudzlZbzM5UUdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8zOTkwYzItNTFiZS00Yjg3LWFmNjIt ZTBlMDk5NjQwZWFjLzEvd3NfcFQ5N0RDYXhWTUZySkRudzlZbzM5UUdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8zOTkwYzItNTFiZS00Yjg3LWFmNjItZTBlMDk5NjQwZWFj LzEvd3NfcFQ5N0RDYXhWTUZySkRudzlZbzM5UUdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABr6x0ty8 u1zmtPHbH4JVLuJ+2KQRvVQq7XVOG0USULEZ4WrU2yf7MzZBdiu8fMFW8w3k9iW3 IME4CqvxObFhDhagC3pY7dizcl4Pxh4tlzlCDg7NqJNiGMHJFetIDbPVGJSTnCBq B8/SL5kRMtRStDpZJfwi/R5kSVlfBm8NFQRIqRKpvoy6aXv2MpEn4pwjXUMrN4B8 OIAxGDg6v3V4id+aFhf+HFn8leXIUOAWg+Wa8Q2V8n8tI8OT9/t2dEZco3HIsVsq kFR3wGo2WqRjmApPcXIbU3JNf6nI3jxiYyN5kiCImdP5I2aNotRwx1zennjyeNFi wcqovOCINnhAEw== -----END CERTIFICATE-----Generated at Mon Feb 9 21:05:09 2026 by rpki-client