This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/b92213-5c34-4fc6-92cc-5be96860afc4/1/WhVoGZ0pI5onRa1Dtpb73C4GcG0.mft File: WhVoGZ0pI5onRa1Dtpb73C4GcG0.mft (raw, json) Hash identifier: 8R48KIeBCOtgNZiE7ma1E32HxEGdGKwy4984Z+GPv5o= Subject key identifier: 21:E6:5B:46:59:0B:AB:50:70:32:74:9C:8A:C7:61:41:7D:D2:8C:8A Authority key identifier: 5A:15:68:19:9D:29:23:9A:27:45:AD:43:B6:96:FB:DC:2E:06:70:6D Certificate issuer: /CN=5a1568199d29239a2745ad43b696fbdc2e06706d Certificate serial: 019C432260F8339F5137C648D445CA3B789C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WhVoGZ0pI5onRa1Dtpb73C4GcG0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/b92213-5c34-4fc6-92cc-5be96860afc4/1/WhVoGZ0pI5onRa1Dtpb73C4GcG0.mft Manifest number: 17D8 Signing time: Mon 09 Feb 2026 16:00:52 +0000 Manifest this update: Mon 09 Feb 2026 16:00:52 +0000 Manifest next update: Tue 10 Feb 2026 16:00:52 +0000 Files and hashes: 1: WhVoGZ0pI5onRa1Dtpb73C4GcG0.crl (hash: kdsGv4OpWhcKVozv3tCFEKZiGFg+Q7eSBIx3e+LLMow=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/b92213-5c34-4fc6-92cc-5be96860afc4/1/WhVoGZ0pI5onRa1Dtpb73C4GcG0.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/b92213-5c34-4fc6-92cc-5be96860afc4/1/WhVoGZ0pI5onRa1Dtpb73C4GcG0.mft rsync://rpki.ripe.net/repository/DEFAULT/WhVoGZ0pI5onRa1Dtpb73C4GcG0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:60:f8:33:9f:51:37:c6:48:d4:45:ca:3b:78:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a1568199d29239a2745ad43b696fbdc2e06706d Validity Not Before: Feb 9 16:00:52 2026 GMT Not After : Feb 10 16:00:52 2026 GMT Subject: CN=21e65b46590bab507032749c8ac761417dd28c8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:87:52:70:d6:33:62:39:0e:1f:83:5d:22:a1: 28:d2:e5:69:2b:41:54:36:70:81:79:28:40:7f:5a: 7c:4a:21:16:50:10:d8:73:56:75:83:e1:34:89:f3: 4d:d2:b4:4e:76:f2:a3:8c:f0:c1:7c:43:16:70:96: 01:47:fd:2e:13:04:c4:32:36:2b:03:1f:b6:1e:d8: 15:39:5e:3c:e5:19:5c:37:41:9c:82:5d:6c:08:f7: 8c:c0:ac:ed:b0:73:5c:54:ba:20:4f:4b:42:1e:6c: f9:44:cd:84:53:f6:11:5a:16:a7:65:df:61:66:76: b9:6e:d0:19:34:11:a5:1e:19:86:9f:e3:45:6f:ab: c0:a6:c4:6f:bf:26:44:35:40:ed:88:fc:95:32:a6: d2:63:7e:fd:9d:ad:a4:89:80:d8:a6:fb:55:1c:0d: 0d:e4:73:ed:b4:fe:bc:07:13:fe:06:44:b7:db:bb: d1:d8:ee:4d:fb:fd:a5:6e:38:93:f2:4b:5a:75:ba: 7f:3a:7b:e1:9b:37:a6:81:fc:5e:a6:19:b9:81:80: c8:cd:aa:2f:99:01:98:fe:37:cd:18:a5:e4:cb:fc: 89:50:54:f1:f0:8f:2c:5a:35:58:57:01:e2:b3:fa: fe:ba:87:fe:13:a6:54:38:44:9a:12:21:51:b6:47: 7e:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:E6:5B:46:59:0B:AB:50:70:32:74:9C:8A:C7:61:41:7D:D2:8C:8A X509v3 Authority Key Identifier: keyid:5A:15:68:19:9D:29:23:9A:27:45:AD:43:B6:96:FB:DC:2E:06:70:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhVoGZ0pI5onRa1Dtpb73C4GcG0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b92213-5c34-4fc6-92cc-5be96860afc4/1/WhVoGZ0pI5onRa1Dtpb73C4GcG0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b92213-5c34-4fc6-92cc-5be96860afc4/1/WhVoGZ0pI5onRa1Dtpb73C4GcG0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:0c:af:f5:21:1e:69:a6:63:cc:a8:ec:81:3e:2e:07:ad:17: ad:ec:3f:d7:d2:aa:0b:db:5e:1a:80:40:13:89:8e:38:ae:a5: af:e7:b8:ea:2c:12:8d:2a:50:74:7c:78:39:86:7b:54:9a:58: ee:3a:ae:b2:68:95:d1:09:4e:b3:44:cb:4e:bb:67:ba:7e:1c: 9e:b8:fb:00:e8:55:3d:f6:ad:99:6c:68:32:0b:e6:a2:81:30: 84:80:09:d1:3d:0f:2d:49:c3:28:ba:c4:4e:36:72:c7:3d:23: 2a:7e:d8:a7:24:0d:26:f9:c0:77:59:ce:e2:5f:78:47:c3:4b: 9d:f5:2f:12:04:74:35:82:1d:bf:ef:9f:cc:9f:a9:d5:60:d7: 16:43:3a:de:01:0a:76:92:54:77:56:55:bb:24:88:47:b9:b3: 1b:58:c8:0c:51:b2:c5:da:e6:bd:15:5a:5c:0d:27:56:b9:25: 40:1b:e5:0c:e1:9a:d5:46:80:72:46:31:91:b8:cb:e2:1e:b0: b5:53:14:4a:cf:3b:d6:12:29:b2:c6:2c:67:16:cb:40:9a:59: 0d:88:b6:70:0d:45:00:6e:30:ad:ce:b0:5f:a4:ad:fc:40:46: 37:e6:e5:de:b0:bb:1e:71:66:60:d7:94:3a:71:a7:71:7c:59: f7:0f:9f:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDImD4M59RN8ZI1EXKO3icMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhMTU2ODE5OWQyOTIzOWEyNzQ1YWQ0M2I2OTZmYmRjMmUw NjcwNmQwHhcNMjYwMjA5MTYwMDUyWhcNMjYwMjEwMTYwMDUyWjAzMTEwLwYDVQQD EygyMWU2NWI0NjU5MGJhYjUwNzAzMjc0OWM4YWM3NjE0MTdkZDI4YzhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYdScNYzYjkOH4NdIqEo0uVpK0FU NnCBeShAf1p8SiEWUBDYc1Z1g+E0ifNN0rROdvKjjPDBfEMWcJYBR/0uEwTEMjYr Ax+2HtgVOV485RlcN0Gcgl1sCPeMwKztsHNcVLogT0tCHmz5RM2EU/YRWhanZd9h Zna5btAZNBGlHhmGn+NFb6vApsRvvyZENUDtiPyVMqbSY379na2kiYDYpvtVHA0N 5HPttP68BxP+BkS327vR2O5N+/2lbjiT8ktadbp/Onvhmzemgfxephm5gYDIzaov mQGY/jfNGKXky/yJUFTx8I8sWjVYVwHis/r+uof+E6ZUOESaEiFRtkd+FQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCHmW0ZZC6tQcDJ0nIrHYUF90oyKMB8GA1UdIwQY MBaAFFoVaBmdKSOaJ0WtQ7aW+9wuBnBtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2hWb0daMHBJNW9uUmExRHRwYjczQzRHY0cwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9iOTIyMTMtNWMzNC00ZmM2LTkyY2Mt NWJlOTY4NjBhZmM0LzEvV2hWb0daMHBJNW9uUmExRHRwYjczQzRHY0cwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC9iOTIyMTMtNWMzNC00ZmM2LTkyY2MtNWJlOTY4NjBhZmM0 LzEvV2hWb0daMHBJNW9uUmExRHRwYjczQzRHY0cwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATQyv9SEe aaZjzKjsgT4uB60Xrew/19KqC9teGoBAE4mOOK6lr+e46iwSjSpQdHx4OYZ7VJpY 7jqusmiV0QlOs0TLTrtnun4cnrj7AOhVPfatmWxoMgvmooEwhIAJ0T0PLUnDKLrE TjZyxz0jKn7YpyQNJvnAd1nO4l94R8NLnfUvEgR0NYIdv++fzJ+p1WDXFkM63gEK dpJUd1ZVuySIR7mzG1jIDFGyxdrmvRVaXA0nVrklQBvlDOGa1UaAckYxkbjL4h6w tVMUSs871hIpssYsZxbLQJpZDYi2cA1FAG4wrc6wX6St/EBGN+bl3rC7HnFmYNeU OnGncXxZ9w+fBg== -----END CERTIFICATE-----Generated at Mon Feb 9 20:55:01 2026 by rpki-client