This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/652bef-6f4e-4997-bb3a-4c9e49239624/1/wsej20o9La--GGqmhfRzbqfQjDg.mft File: wsej20o9La--GGqmhfRzbqfQjDg.mft (raw, json) Hash identifier: yCvq13CT+zH0dIdxmhywU/C5pulLI9sJhvRw8ffuaG0= Subject key identifier: 57:F4:09:C8:55:80:A0:7C:88:18:3A:F0:77:3E:7D:57:EB:9D:24:6E Authority key identifier: C2:C7:A3:DB:4A:3D:2D:AF:BE:18:6A:A6:85:F4:73:6E:A7:D0:8C:38 Certificate issuer: /CN=c2c7a3db4a3d2dafbe186aa685f4736ea7d08c38 Certificate serial: 019C41D8504595CC269E52EC877543D21E07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsej20o9La--GGqmhfRzbqfQjDg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/652bef-6f4e-4997-bb3a-4c9e49239624/1/wsej20o9La--GGqmhfRzbqfQjDg.mft Manifest number: 1166 Signing time: Mon 09 Feb 2026 10:00:21 +0000 Manifest this update: Mon 09 Feb 2026 10:00:21 +0000 Manifest next update: Tue 10 Feb 2026 10:00:21 +0000 Files and hashes: 1: wsej20o9La--GGqmhfRzbqfQjDg.crl (hash: RQNKVdIYDh7o9y7ft7I5Pzs4HcOeuL2vy5dd5xxzw/Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/652bef-6f4e-4997-bb3a-4c9e49239624/1/wsej20o9La--GGqmhfRzbqfQjDg.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/652bef-6f4e-4997-bb3a-4c9e49239624/1/wsej20o9La--GGqmhfRzbqfQjDg.mft rsync://rpki.ripe.net/repository/DEFAULT/wsej20o9La--GGqmhfRzbqfQjDg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:50:45:95:cc:26:9e:52:ec:87:75:43:d2:1e:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2c7a3db4a3d2dafbe186aa685f4736ea7d08c38 Validity Not Before: Feb 9 10:00:21 2026 GMT Not After : Feb 10 10:00:21 2026 GMT Subject: CN=57f409c85580a07c88183af0773e7d57eb9d246e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:1e:87:14:93:b8:f0:f1:9f:55:f1:7e:c0:06: d6:11:33:47:b5:1e:ba:38:1b:c8:dc:34:3a:f7:15: 04:32:de:b1:a3:38:4b:1a:f7:f0:91:2a:d2:04:6b: 88:85:fb:5c:02:83:c0:83:eb:54:39:b1:0c:3a:0e: 53:2e:3d:92:b9:e9:f9:cc:12:7d:18:ec:ba:5e:4a: a8:f6:88:28:a1:75:53:75:5f:85:de:0a:f7:1c:0a: 2d:01:9d:45:44:75:10:1c:58:ea:6f:ff:5b:54:3b: fd:b8:89:80:cc:ef:bb:79:21:ab:6a:59:fe:25:78: 12:a9:0d:32:26:bd:24:80:ca:eb:c8:5d:be:0a:4c: d2:fb:a2:50:f5:46:a7:9e:65:5c:48:b2:77:8b:33: d1:af:1f:f1:e7:85:4a:f9:3d:2a:d1:71:e4:98:85: dc:fc:bf:38:2a:61:d2:38:6b:90:df:0d:2b:1d:5e: b1:a0:e6:a2:b0:2e:33:ab:df:bb:2d:63:d1:db:f3: a0:65:91:de:b6:b6:da:50:87:8a:30:e6:13:8c:ba: 6c:e0:4a:17:e8:cc:53:71:38:e2:3e:2e:22:d1:c6: dc:b4:88:b2:67:d0:9b:87:32:60:b0:76:39:a4:b4: ef:b7:0b:c1:e2:2a:a2:1a:7e:b7:ef:33:7b:fa:1d: e4:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:F4:09:C8:55:80:A0:7C:88:18:3A:F0:77:3E:7D:57:EB:9D:24:6E X509v3 Authority Key Identifier: keyid:C2:C7:A3:DB:4A:3D:2D:AF:BE:18:6A:A6:85:F4:73:6E:A7:D0:8C:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsej20o9La--GGqmhfRzbqfQjDg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/652bef-6f4e-4997-bb3a-4c9e49239624/1/wsej20o9La--GGqmhfRzbqfQjDg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/652bef-6f4e-4997-bb3a-4c9e49239624/1/wsej20o9La--GGqmhfRzbqfQjDg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:3f:2d:bc:67:99:fd:a6:f3:46:e8:4e:79:53:c0:ee:17:b9: 8a:a7:cd:2b:98:cf:15:8a:9b:8c:80:5d:be:02:fa:6b:b9:73: 18:09:4c:19:b5:d5:1d:70:d9:02:35:bf:0a:9f:f7:b9:a1:f6: 46:64:91:3a:38:6c:7f:dc:86:f5:a0:4f:3e:4b:c6:88:0b:e4: 16:ef:65:a2:46:30:83:8f:cf:aa:c3:ef:7d:6e:64:88:a5:2a: 7d:a5:be:53:e1:fc:38:c3:a6:01:69:0c:ce:8f:8a:b4:71:9f: e6:2d:52:fe:67:7e:dd:f2:c3:f3:23:47:21:56:ef:3c:b0:3a: 1f:f5:be:b8:b3:71:78:c7:41:03:30:6f:a6:be:49:a6:ba:c8: 1d:d5:bd:c8:03:9d:07:d2:2b:f6:8e:24:b9:2c:74:19:6f:f7: 3e:88:44:07:f5:10:84:67:84:3e:fd:82:06:3f:77:66:e7:28: 6c:20:dd:e0:39:a1:48:14:8b:35:f8:44:cf:66:97:b6:4c:2d: 04:80:e1:d8:f3:be:9a:d7:52:0b:ad:7c:61:59:a1:93:7f:94: df:2c:bc:12:b7:d7:cd:ef:42:56:6b:6a:22:5a:78:a5:7c:c6: 2f:2f:dc:2a:20:a7:35:83:96:9e:b5:a1:52:6c:e3:b9:b1:38: ed:ec:5a:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2FBFlcwmnlLsh3VD0h4HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyYzdhM2RiNGEzZDJkYWZiZTE4NmFhNjg1ZjQ3MzZlYTdk MDhjMzgwHhcNMjYwMjA5MTAwMDIxWhcNMjYwMjEwMTAwMDIxWjAzMTEwLwYDVQQD Eyg1N2Y0MDljODU1ODBhMDdjODgxODNhZjA3NzNlN2Q1N2ViOWQyNDZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzR6HFJO48PGfVfF+wAbWETNHtR66 OBvI3DQ69xUEMt6xozhLGvfwkSrSBGuIhftcAoPAg+tUObEMOg5TLj2Suen5zBJ9 GOy6Xkqo9ogooXVTdV+F3gr3HAotAZ1FRHUQHFjqb/9bVDv9uImAzO+7eSGraln+ JXgSqQ0yJr0kgMrryF2+CkzS+6JQ9UannmVcSLJ3izPRrx/x54VK+T0q0XHkmIXc /L84KmHSOGuQ3w0rHV6xoOaisC4zq9+7LWPR2/OgZZHetrbaUIeKMOYTjLps4EoX 6MxTcTjiPi4i0cbctIiyZ9CbhzJgsHY5pLTvtwvB4iqiGn637zN7+h3kiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFf0CchVgKB8iBg68Hc+fVfrnSRuMB8GA1UdIwQY MBaAFMLHo9tKPS2vvhhqpoX0c26n0Iw4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3NlajIwbzlMYS0tR0dxbWhmUnpicWZRakRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi82NTJiZWYtNmY0ZS00OTk3LWJiM2Et NGM5ZTQ5MjM5NjI0LzEvd3NlajIwbzlMYS0tR0dxbWhmUnpicWZRakRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi82NTJiZWYtNmY0ZS00OTk3LWJiM2EtNGM5ZTQ5MjM5NjI0 LzEvd3NlajIwbzlMYS0tR0dxbWhmUnpicWZRakRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsT8tvGeZ /abzRuhOeVPA7he5iqfNK5jPFYqbjIBdvgL6a7lzGAlMGbXVHXDZAjW/Cp/3uaH2 RmSROjhsf9yG9aBPPkvGiAvkFu9lokYwg4/PqsPvfW5kiKUqfaW+U+H8OMOmAWkM zo+KtHGf5i1S/md+3fLD8yNHIVbvPLA6H/W+uLNxeMdBAzBvpr5JprrIHdW9yAOd B9Ir9o4kuSx0GW/3PohEB/UQhGeEPv2CBj93ZucobCDd4DmhSBSLNfhEz2aXtkwt BIDh2PO+mtdSC618YVmhk3+U3yy8ErfXze9CVmtqIlp4pXzGLy/cKiCnNYOWnrWh UmzjubE47exauw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:46:12 2026 by rpki-client