This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/wjZC0as50wnsXzPk6IFK3DWEgl8.mft File: wjZC0as50wnsXzPk6IFK3DWEgl8.mft (raw, json) Hash identifier: yoY4w7ofgLVxLXOTIF12RxhdvUj2ksUMwLPHJvmiLH4= Subject key identifier: 86:FB:B5:10:40:B3:39:CF:2C:A4:19:C7:D6:8A:37:C6:58:5C:AD:65 Authority key identifier: C2:36:42:D1:AB:39:D3:09:EC:5F:33:E4:E8:81:4A:DC:35:84:82:5F Certificate issuer: /CN=c23642d1ab39d309ec5f33e4e8814adc3584825f Certificate serial: 019C2A06D53ACE3DC83180F99922330885F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjZC0as50wnsXzPk6IFK3DWEgl8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/wjZC0as50wnsXzPk6IFK3DWEgl8.mft Manifest number: 0CB5 Signing time: Wed 04 Feb 2026 19:00:16 +0000 Manifest this update: Wed 04 Feb 2026 19:00:16 +0000 Manifest next update: Thu 05 Feb 2026 19:00:16 +0000 Files and hashes: 1: TuWv3N1-unV3Eu3hIWcQWgFmKPQ.roa (hash: J1hOIcfa6XqS5M+c4PzgE80mhXmq9LomS1O6BvUnhgQ=) 2: wjZC0as50wnsXzPk6IFK3DWEgl8.crl (hash: +RMNwFKHN3vV80c/8lLbFeehJklXbaDP1JmJmdyuB4k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/wjZC0as50wnsXzPk6IFK3DWEgl8.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/wjZC0as50wnsXzPk6IFK3DWEgl8.mft rsync://rpki.ripe.net/repository/DEFAULT/wjZC0as50wnsXzPk6IFK3DWEgl8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 18:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:2a:06:d5:3a:ce:3d:c8:31:80:f9:99:22:33:08:85:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c23642d1ab39d309ec5f33e4e8814adc3584825f Validity Not Before: Feb 4 19:00:16 2026 GMT Not After : Feb 5 19:00:16 2026 GMT Subject: CN=86fbb51040b339cf2ca419c7d68a37c6585cad65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:82:38:80:e3:e1:d1:cf:3e:8b:57:4d:81:19: 4b:0b:fa:2b:94:aa:dc:c4:9b:85:da:73:51:10:6a: 46:6f:b6:9f:c2:f7:2e:0d:f8:c1:c6:bc:5c:76:b0: e4:33:27:82:d8:da:a3:d3:27:29:71:5a:37:54:78: 70:77:89:8c:fb:8d:2d:7e:75:79:e2:81:d5:d2:6b: ec:8f:e6:5f:35:fe:76:f5:81:da:e6:fe:8e:85:c1: d9:5f:66:de:60:53:6e:25:49:12:d3:8c:32:29:27: 4f:13:7d:ae:17:65:a6:7c:1c:ee:9b:0c:62:d2:a7: 4e:07:b5:a6:1f:f4:41:43:f8:77:18:64:41:2f:1d: 15:c4:bf:2b:63:ed:2d:d1:aa:4f:30:fb:05:bf:e5: cd:3f:a2:8f:3c:d3:99:01:76:9e:4a:6a:77:be:6a: 14:6e:1e:1c:b5:b3:7d:92:a7:29:2e:90:e4:b4:bc: 56:94:98:d1:88:6c:68:6b:37:35:90:51:ba:8a:3a: f2:59:39:68:be:2a:9a:6f:d8:f0:92:d3:8b:d4:e2: 5e:9f:f0:df:65:50:d9:b7:50:75:6c:f1:0a:77:25: 9f:b6:4d:d1:88:0c:ac:47:c2:a9:87:ef:b0:48:3d: 31:9a:14:c3:97:fc:02:4f:7c:94:ce:16:84:68:f6: e4:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:FB:B5:10:40:B3:39:CF:2C:A4:19:C7:D6:8A:37:C6:58:5C:AD:65 X509v3 Authority Key Identifier: keyid:C2:36:42:D1:AB:39:D3:09:EC:5F:33:E4:E8:81:4A:DC:35:84:82:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjZC0as50wnsXzPk6IFK3DWEgl8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/wjZC0as50wnsXzPk6IFK3DWEgl8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/wjZC0as50wnsXzPk6IFK3DWEgl8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:55:06:93:a6:f1:f5:18:82:ad:ee:d7:c8:57:c3:e8:12:95: 11:8d:10:33:31:0a:1b:96:02:a1:58:36:c4:e0:c6:fb:91:05: ce:75:b2:19:be:37:f6:69:30:20:70:c9:2a:25:4d:49:bd:c7: a9:8e:b7:51:55:76:06:91:02:22:00:ca:54:1b:cc:e7:dc:f8: 7b:16:4c:7a:0f:09:0a:fc:d0:4c:89:6c:c7:cf:0e:c2:03:92: e8:50:7e:bd:e7:eb:94:f9:5d:c3:ef:84:5c:2c:ab:6d:dd:68: aa:17:6a:23:a5:0c:97:c5:a6:ad:a5:11:21:1a:f3:58:00:ff: 99:36:27:07:10:35:33:44:08:bc:7a:6d:ab:e4:7a:5c:46:3a: 56:b0:75:3b:1b:d0:e8:0c:0b:b1:af:29:34:0b:b4:b1:ee:00: 46:47:21:23:1a:24:2d:14:df:d7:7e:4a:fd:0c:09:2d:16:c1: f6:5c:5c:b2:c3:23:0a:0c:ef:ed:35:68:f1:4c:8d:7d:cf:29: 4d:aa:e5:4e:4f:f3:8a:ba:52:01:7b:b7:20:44:c7:f6:7b:c9: 1f:f2:f1:44:1c:68:aa:79:28:fd:66:27:ce:ba:8d:f9:60:f2: dc:1a:dc:43:b3:6f:bd:05:d7:8d:89:9c:da:90:26:c4:e7:d1: 48:50:dd:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwqBtU6zj3IMYD5mSIzCIXyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyMzY0MmQxYWIzOWQzMDllYzVmMzNlNGU4ODE0YWRjMzU4 NDgyNWYwHhcNMjYwMjA0MTkwMDE2WhcNMjYwMjA1MTkwMDE2WjAzMTEwLwYDVQQD Eyg4NmZiYjUxMDQwYjMzOWNmMmNhNDE5YzdkNjhhMzdjNjU4NWNhZDY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroI4gOPh0c8+i1dNgRlLC/orlKrc xJuF2nNREGpGb7afwvcuDfjBxrxcdrDkMyeC2Nqj0ycpcVo3VHhwd4mM+40tfnV5 4oHV0mvsj+ZfNf529YHa5v6OhcHZX2beYFNuJUkS04wyKSdPE32uF2WmfBzumwxi 0qdOB7WmH/RBQ/h3GGRBLx0VxL8rY+0t0apPMPsFv+XNP6KPPNOZAXaeSmp3vmoU bh4ctbN9kqcpLpDktLxWlJjRiGxoazc1kFG6ijryWTloviqab9jwktOL1OJen/Df ZVDZt1B1bPEKdyWftk3RiAysR8Kph++wSD0xmhTDl/wCT3yUzhaEaPbkewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIb7tRBAsznPLKQZx9aKN8ZYXK1lMB8GA1UdIwQY MBaAFMI2QtGrOdMJ7F8z5OiBStw1hIJfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2paQzBhczUwd25zWHpQazZJRkszRFdFZ2w4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9lNDE2OTgtZTdhYy00MThjLWI5MWQt MjI2Nzk2OGI2NTJmLzEvd2paQzBhczUwd25zWHpQazZJRkszRFdFZ2w4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9lNDE2OTgtZTdhYy00MThjLWI5MWQtMjI2Nzk2OGI2NTJm LzEvd2paQzBhczUwd25zWHpQazZJRkszRFdFZ2w4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK1UGk6bx 9RiCre7XyFfD6BKVEY0QMzEKG5YCoVg2xODG+5EFznWyGb439mkwIHDJKiVNSb3H qY63UVV2BpECIgDKVBvM59z4exZMeg8JCvzQTIlsx88OwgOS6FB+vefrlPldw++E XCyrbd1oqhdqI6UMl8WmraURIRrzWAD/mTYnBxA1M0QIvHptq+R6XEY6VrB1OxvQ 6AwLsa8pNAu0se4ARkchIxokLRTf135K/QwJLRbB9lxcssMjCgzv7TVo8UyNfc8p TarlTk/zirpSAXu3IETH9nvJH/LxRBxoqnko/WYnzrqN+WDy3BrcQ7NvvQXXjYmc 2pAmxOfRSFDdFQ== -----END CERTIFICATE-----Generated at Wed Feb 4 21:56:59 2026 by rpki-client