This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/7672e2-1c7f-4d2e-8961-c26c3e23baf6/1/0wUa-GYelCUtF1k103l-nsos2Aw.mft File: 0wUa-GYelCUtF1k103l-nsos2Aw.mft (raw, json) Hash identifier: YEAUrhvkRmPkoxf+Va8fDgUnv9jz5iz9/315fxVf4Lk= Subject key identifier: 94:59:5C:4F:E0:39:FC:99:DC:6A:35:BD:6A:2E:BD:07:E9:C3:EC:32 Authority key identifier: D3:05:1A:F8:66:1E:94:25:2D:17:59:35:D3:79:7E:9E:CA:2C:D8:0C Certificate issuer: /CN=d3051af8661e94252d175935d3797e9eca2cd80c Certificate serial: 019C43900698BAD5C8C66539C23ED0ABBE0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0wUa-GYelCUtF1k103l-nsos2Aw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/7672e2-1c7f-4d2e-8961-c26c3e23baf6/1/0wUa-GYelCUtF1k103l-nsos2Aw.mft Manifest number: 1178 Signing time: Mon 09 Feb 2026 18:00:38 +0000 Manifest this update: Mon 09 Feb 2026 18:00:38 +0000 Manifest next update: Tue 10 Feb 2026 18:00:38 +0000 Files and hashes: 1: 0wUa-GYelCUtF1k103l-nsos2Aw.crl (hash: z4QF5Xxt6D2j1V/OtADVhcmfF+ZBkQl0L6da3UxHIO4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/7672e2-1c7f-4d2e-8961-c26c3e23baf6/1/0wUa-GYelCUtF1k103l-nsos2Aw.crl rsync://rpki.ripe.net/repository/DEFAULT/42/7672e2-1c7f-4d2e-8961-c26c3e23baf6/1/0wUa-GYelCUtF1k103l-nsos2Aw.mft rsync://rpki.ripe.net/repository/DEFAULT/0wUa-GYelCUtF1k103l-nsos2Aw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:06:98:ba:d5:c8:c6:65:39:c2:3e:d0:ab:be:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3051af8661e94252d175935d3797e9eca2cd80c Validity Not Before: Feb 9 18:00:38 2026 GMT Not After : Feb 10 18:00:38 2026 GMT Subject: CN=94595c4fe039fc99dc6a35bd6a2ebd07e9c3ec32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:eb:e5:74:f5:73:10:ec:25:14:39:87:96:e6: b5:0b:ef:36:ed:dc:2e:dc:93:30:7a:df:8a:5d:d7: d0:53:3a:6a:b5:0b:99:80:d9:11:30:6a:46:15:c6: ca:15:74:66:ff:6d:91:10:fb:35:7b:d6:7c:87:50: 5f:02:80:3d:17:e1:98:42:f0:3a:35:8c:c3:55:be: bd:14:9a:b9:cb:e3:e0:21:2b:97:ed:d1:7d:88:24: 5e:19:9d:57:80:15:0d:13:cb:f0:cc:a1:ec:3d:7e: cc:73:80:7c:41:4b:a8:93:8b:c2:4a:2d:94:b3:dc: 3f:82:10:b3:0c:86:d0:02:0a:40:ea:b4:53:b8:69: 65:68:02:0d:af:f3:af:06:86:58:ec:ef:05:e1:9d: ff:0b:5f:2d:cc:a7:6d:3f:b2:45:ca:50:b5:1e:13: 03:07:ab:7d:64:c8:b6:31:c9:af:ea:96:f2:e1:ba: 5a:4b:97:a1:bb:71:80:7e:e2:f0:7e:c3:3a:fb:d5: 17:ec:5a:06:9f:95:8e:b7:36:7d:68:88:8e:db:27: 2a:85:50:cb:93:d9:d8:44:b2:f8:47:2f:bb:55:f7: 43:a9:cf:c1:76:cf:ec:6f:0a:b2:16:8d:39:15:8c: c7:17:09:75:2b:a9:41:03:f0:be:f3:67:0a:8a:7b: 23:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:59:5C:4F:E0:39:FC:99:DC:6A:35:BD:6A:2E:BD:07:E9:C3:EC:32 X509v3 Authority Key Identifier: keyid:D3:05:1A:F8:66:1E:94:25:2D:17:59:35:D3:79:7E:9E:CA:2C:D8:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0wUa-GYelCUtF1k103l-nsos2Aw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7672e2-1c7f-4d2e-8961-c26c3e23baf6/1/0wUa-GYelCUtF1k103l-nsos2Aw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7672e2-1c7f-4d2e-8961-c26c3e23baf6/1/0wUa-GYelCUtF1k103l-nsos2Aw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:eb:06:5b:c8:67:e0:1d:13:e5:15:f8:99:39:95:5c:43:da: 59:46:7b:59:ea:aa:3d:ec:0a:4c:e1:5b:95:ed:42:d8:a0:1c: c0:8d:d5:48:a2:60:00:05:5e:8c:eb:b9:33:5f:a5:b4:25:34: 87:62:cb:91:4b:a7:54:1a:4a:69:9a:bd:fc:64:4d:b5:78:cd: 08:21:08:fa:76:59:66:9c:7b:a2:c4:47:14:2e:83:3d:a8:0a: c4:e5:30:27:67:fc:46:c1:7a:35:a3:c9:f0:9f:c0:af:c9:67: 93:c8:a7:57:3d:b2:21:ed:c3:9a:66:55:fd:b6:59:8d:88:73: 6a:fa:7b:54:05:84:e4:94:39:65:3d:4c:7a:1f:3c:6f:94:d9: 30:9d:10:6d:04:2f:3f:73:da:b9:a3:3b:99:60:06:28:e4:a3: b0:4f:bd:4f:97:96:40:57:27:03:b5:e7:e7:36:62:1d:2c:64: 0b:f8:5f:2d:71:08:46:0f:3d:86:6d:c4:8c:2b:b5:b8:b6:85: 68:f6:8f:8b:ce:0b:54:1c:a4:2f:bd:2d:39:db:7f:fc:01:ac: c0:04:4f:b5:cf:ec:89:50:ad:6f:2c:da:a9:c4:32:88:42:63: 83:46:25:02:48:0f:5b:61:0e:01:19:57:0f:9e:d5:ce:36:bd: 22:c9:81:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkAaYutXIxmU5wj7Qq74NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzMDUxYWY4NjYxZTk0MjUyZDE3NTkzNWQzNzk3ZTllY2Ey Y2Q4MGMwHhcNMjYwMjA5MTgwMDM4WhcNMjYwMjEwMTgwMDM4WjAzMTEwLwYDVQQD Eyg5NDU5NWM0ZmUwMzlmYzk5ZGM2YTM1YmQ2YTJlYmQwN2U5YzNlYzMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOvldPVzEOwlFDmHlua1C+827dwu 3JMwet+KXdfQUzpqtQuZgNkRMGpGFcbKFXRm/22REPs1e9Z8h1BfAoA9F+GYQvA6 NYzDVb69FJq5y+PgISuX7dF9iCReGZ1XgBUNE8vwzKHsPX7Mc4B8QUuok4vCSi2U s9w/ghCzDIbQAgpA6rRTuGllaAINr/OvBoZY7O8F4Z3/C18tzKdtP7JFylC1HhMD B6t9ZMi2Mcmv6pby4bpaS5ehu3GAfuLwfsM6+9UX7FoGn5WOtzZ9aIiO2ycqhVDL k9nYRLL4Ry+7VfdDqc/Bds/sbwqyFo05FYzHFwl1K6lBA/C+82cKinsjuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJRZXE/gOfyZ3Go1vWouvQfpw+wyMB8GA1UdIwQY MBaAFNMFGvhmHpQlLRdZNdN5fp7KLNgMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHdVYS1HWWVsQ1V0RjFrMTAzbC1uc29zMkF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi83NjcyZTItMWM3Zi00ZDJlLTg5NjEt YzI2YzNlMjNiYWY2LzEvMHdVYS1HWWVsQ1V0RjFrMTAzbC1uc29zMkF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi83NjcyZTItMWM3Zi00ZDJlLTg5NjEtYzI2YzNlMjNiYWY2 LzEvMHdVYS1HWWVsQ1V0RjFrMTAzbC1uc29zMkF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmesGW8hn 4B0T5RX4mTmVXEPaWUZ7WeqqPewKTOFble1C2KAcwI3VSKJgAAVejOu5M1+ltCU0 h2LLkUunVBpKaZq9/GRNtXjNCCEI+nZZZpx7osRHFC6DPagKxOUwJ2f8RsF6NaPJ 8J/Ar8lnk8inVz2yIe3DmmZV/bZZjYhzavp7VAWE5JQ5ZT1Meh88b5TZMJ0QbQQv P3PauaM7mWAGKOSjsE+9T5eWQFcnA7Xn5zZiHSxkC/hfLXEIRg89hm3EjCu1uLaF aPaPi84LVBykL70tOdt//AGswARPtc/siVCtbyzaqcQyiEJjg0YlAkgPW2EOARlX D57Vzja9IsmBEQ== -----END CERTIFICATE-----Generated at Mon Feb 9 20:56:02 2026 by rpki-client