This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft File: WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft (raw, json) Hash identifier: xzzagVHroyO9fOsH5aMu178YJp41gR9NNNSzWOqT/Tc= Subject key identifier: 52:33:BE:5D:8F:11:20:EB:35:9B:CC:1E:A0:1D:A5:80:A9:01:F4:E4 Authority key identifier: 59:F2:47:0C:03:A0:F0:BA:D0:08:46:B0:F6:7C:7A:23:2D:55:72:88 Certificate issuer: /CN=59f2470c03a0f0bad00846b0f67c7a232d557288 Certificate serial: 019C4321FADEB93DBF1D46B5B5A902C3BE73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft Manifest number: 138D Signing time: Mon 09 Feb 2026 16:00:26 +0000 Manifest this update: Mon 09 Feb 2026 16:00:26 +0000 Manifest next update: Tue 10 Feb 2026 16:00:26 +0000 Files and hashes: 1: ENxrzlHEmoQ6o2u0YmmjGiCeHLE.roa (hash: T0DH4Bt7Lf7uI/6XsA2J/6/aZ8CTNeiUm7gLSNK7Cno=) 2: WfJHDAOg8LrQCEaw9nx6Iy1Vcog.crl (hash: mFIFeR4bPE1SHcuCX1u8TrV5QI7TNel8V6EL9a/K1bA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.crl rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft rsync://rpki.ripe.net/repository/DEFAULT/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:21:fa:de:b9:3d:bf:1d:46:b5:b5:a9:02:c3:be:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59f2470c03a0f0bad00846b0f67c7a232d557288 Validity Not Before: Feb 9 16:00:26 2026 GMT Not After : Feb 10 16:00:26 2026 GMT Subject: CN=5233be5d8f1120eb359bcc1ea01da580a901f4e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:81:26:a7:2c:41:6e:10:7c:78:04:fa:53:1c: 1b:d4:1d:4a:30:c1:87:16:51:a5:81:5c:39:d6:fd: 18:7e:49:80:d4:29:bf:56:f6:3d:57:90:54:6b:6c: e6:d0:a0:3a:77:fd:1d:b2:f3:39:bd:f4:27:64:99: 92:df:b3:ef:d2:dc:5e:00:d9:94:93:b6:de:6a:86: b4:55:7c:49:fb:0e:7a:4d:52:aa:d4:43:72:12:b4: c7:eb:5d:de:d9:aa:cf:e8:5c:6c:c0:c9:f6:f0:d7: 22:23:f4:04:d7:19:7c:9e:bd:dc:8f:8e:ac:f7:20: b8:33:16:0e:d7:81:af:df:20:4c:aa:c3:5e:f8:67: 95:cd:04:f9:70:b4:96:bd:2c:3e:14:66:36:8e:35: 94:a1:d0:2e:b6:87:e4:69:65:f6:02:c8:fd:ea:45: ef:1b:ee:d3:c5:8d:c6:96:27:27:0b:71:c8:77:4f: b5:3f:d6:b6:0f:c8:61:c2:6e:d1:c6:c9:6d:e5:4f: 95:ff:a9:df:4f:34:2c:fe:a4:6a:15:43:66:34:80: 23:42:5a:a8:b3:29:bd:59:8f:ac:59:66:a2:74:26: 24:7d:cf:0e:3a:67:ab:9b:7d:3c:a9:48:26:5b:36: 2e:ed:43:b5:0d:3c:24:c4:bd:db:51:9a:44:f7:1c: cc:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:33:BE:5D:8F:11:20:EB:35:9B:CC:1E:A0:1D:A5:80:A9:01:F4:E4 X509v3 Authority Key Identifier: keyid:59:F2:47:0C:03:A0:F0:BA:D0:08:46:B0:F6:7C:7A:23:2D:55:72:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:de:02:34:fe:e6:77:8e:7e:1f:d9:93:bd:a9:f2:af:f7:f1: e4:22:e5:6a:bd:d8:91:f9:33:96:d3:88:53:89:12:de:27:5e: d8:52:c4:c3:89:24:9d:93:5c:1d:92:fe:2b:ae:1d:19:82:45: 4b:74:dc:49:93:0a:e6:3e:c2:80:c9:00:1f:3e:1a:cd:bc:48: 2f:d1:b1:b3:10:5d:7d:7b:42:d0:17:c5:c7:9d:9d:cb:c4:9a: 94:a5:17:53:da:6f:ff:13:c4:91:f6:cd:86:57:40:07:5a:7b: ab:df:78:42:6c:6f:4c:1a:64:b8:09:24:0f:02:4b:24:19:45: 03:17:29:ce:f5:c2:0b:0d:74:b8:a3:5c:66:40:73:32:83:2d: d1:6d:8a:24:f9:c6:ab:4c:dd:98:47:30:1d:d0:d1:1c:c7:91: bb:0a:e6:e8:5b:af:1c:00:a1:64:3f:cd:8c:80:ad:09:d7:39: 80:9e:d2:6a:e7:90:30:c3:33:d0:7c:1a:e0:5e:82:98:da:b0: c7:27:1a:da:23:2e:4c:e1:38:e6:03:10:36:36:ab:76:17:fe: 8d:68:33:0c:d3:0d:0d:8c:25:3d:01:2b:04:aa:d5:59:2b:08: 0c:59:fd:8b:5d:5e:d3:88:17:a3:19:d5:3d:ba:f3:7a:09:4e: 02:71:9d:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIfreuT2/HUa1takCw75zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5ZjI0NzBjMDNhMGYwYmFkMDA4NDZiMGY2N2M3YTIzMmQ1 NTcyODgwHhcNMjYwMjA5MTYwMDI2WhcNMjYwMjEwMTYwMDI2WjAzMTEwLwYDVQQD Eyg1MjMzYmU1ZDhmMTEyMGViMzU5YmNjMWVhMDFkYTU4MGE5MDFmNGU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIEmpyxBbhB8eAT6Uxwb1B1KMMGH FlGlgVw51v0YfkmA1Cm/VvY9V5BUa2zm0KA6d/0dsvM5vfQnZJmS37Pv0txeANmU k7beaoa0VXxJ+w56TVKq1ENyErTH613e2arP6FxswMn28NciI/QE1xl8nr3cj46s 9yC4MxYO14Gv3yBMqsNe+GeVzQT5cLSWvSw+FGY2jjWUodAutofkaWX2Asj96kXv G+7TxY3GlicnC3HId0+1P9a2D8hhwm7Rxslt5U+V/6nfTzQs/qRqFUNmNIAjQlqo sym9WY+sWWaidCYkfc8OOmerm308qUgmWzYu7UO1DTwkxL3bUZpE9xzMJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFIzvl2PESDrNZvMHqAdpYCpAfTkMB8GA1UdIwQY MBaAFFnyRwwDoPC60AhGsPZ8eiMtVXKIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2ZKSERBT2c4THJRQ0VhdzlueDZJeTFWY29nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9jZWM2ZDYtNmQzNC00MTA3LWI2NzIt OTJiZWYzNGU3N2FhLzEvV2ZKSERBT2c4THJRQ0VhdzlueDZJeTFWY29nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS9jZWM2ZDYtNmQzNC00MTA3LWI2NzItOTJiZWYzNGU3N2Fh LzEvV2ZKSERBT2c4THJRQ0VhdzlueDZJeTFWY29nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVd4CNP7m d45+H9mTvanyr/fx5CLlar3YkfkzltOIU4kS3ide2FLEw4kknZNcHZL+K64dGYJF S3TcSZMK5j7CgMkAHz4azbxIL9GxsxBdfXtC0BfFx52dy8SalKUXU9pv/xPEkfbN hldAB1p7q994QmxvTBpkuAkkDwJLJBlFAxcpzvXCCw10uKNcZkBzMoMt0W2KJPnG q0zdmEcwHdDRHMeRuwrm6FuvHAChZD/NjICtCdc5gJ7SaueQMMMz0Hwa4F6CmNqw xyca2iMuTOE45gMQNjardhf+jWgzDNMNDYwlPQErBKrVWSsIDFn9i11e04gXoxnV PbrzeglOAnGdvg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:57:41 2026 by rpki-client