This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/164986-fb3f-42ec-9635-0c8431acd68a/1/WWQcBXT0mlJRLm3QM7d7v5Es7cU.mft File: WWQcBXT0mlJRLm3QM7d7v5Es7cU.mft (raw, json) Hash identifier: jGlVRZesoYCS+xmYZp77xUgnHkSk7Bm7iZMYyVmr/gA= Subject key identifier: E6:2F:DE:03:1A:F6:04:AF:C6:80:68:01:32:B9:D5:0A:D2:5D:9F:0D Authority key identifier: 59:64:1C:05:74:F4:9A:52:51:2E:6D:D0:33:B7:7B:BF:91:2C:ED:C5 Certificate issuer: /CN=59641c0574f49a52512e6dd033b77bbf912cedc5 Certificate serial: 019C43C6FC727C6B6091F50B0C5EEB23882E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WWQcBXT0mlJRLm3QM7d7v5Es7cU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/164986-fb3f-42ec-9635-0c8431acd68a/1/WWQcBXT0mlJRLm3QM7d7v5Es7cU.mft Manifest number: 07CA Signing time: Mon 09 Feb 2026 19:00:39 +0000 Manifest this update: Mon 09 Feb 2026 19:00:39 +0000 Manifest next update: Tue 10 Feb 2026 19:00:39 +0000 Files and hashes: 1: WWQcBXT0mlJRLm3QM7d7v5Es7cU.crl (hash: +ZX2sbWjyfrPnsqHTt3NsnqWKRCicplkZIqiwdlyNWg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/164986-fb3f-42ec-9635-0c8431acd68a/1/WWQcBXT0mlJRLm3QM7d7v5Es7cU.crl rsync://rpki.ripe.net/repository/DEFAULT/55/164986-fb3f-42ec-9635-0c8431acd68a/1/WWQcBXT0mlJRLm3QM7d7v5Es7cU.mft rsync://rpki.ripe.net/repository/DEFAULT/WWQcBXT0mlJRLm3QM7d7v5Es7cU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:c6:fc:72:7c:6b:60:91:f5:0b:0c:5e:eb:23:88:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59641c0574f49a52512e6dd033b77bbf912cedc5 Validity Not Before: Feb 9 19:00:39 2026 GMT Not After : Feb 10 19:00:39 2026 GMT Subject: CN=e62fde031af604afc680680132b9d50ad25d9f0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:75:4c:d3:c2:88:2a:1c:96:ec:ad:e6:82:6e: 9c:72:38:ed:19:79:d4:b9:c0:1d:9a:7f:c9:6d:4b: 20:a5:51:4a:86:81:0a:0a:15:20:f0:c5:0a:4f:7e: e2:17:25:df:f0:e1:c1:af:75:22:5d:19:93:0b:b9: 08:cc:eb:6f:71:bb:b3:c4:7f:cf:c1:71:19:df:23: c0:3c:bb:38:24:0a:94:3e:e1:b6:81:12:b2:29:dd: e5:9f:32:19:d4:a5:1b:6b:91:c8:6a:47:75:fb:d6: 79:21:6c:e5:94:ee:4e:37:28:0a:55:db:c1:7d:83: 68:86:8c:b1:83:a1:e1:72:c6:6e:a6:0f:dc:9c:63: 0d:89:e8:e2:9d:af:17:ea:10:be:e0:89:66:b0:1b: c5:38:0d:c6:ed:46:39:3f:88:71:84:ec:38:f2:fa: 11:36:24:ba:89:cd:2c:80:bd:2b:46:4a:54:01:ca: 50:e6:48:aa:a2:e6:84:e8:61:23:c0:88:a9:f8:da: 0a:af:1f:a5:dc:44:5a:c8:36:e7:bc:c3:ef:a9:36: 44:cf:c9:40:8d:b0:ef:e6:66:4b:b0:69:46:83:12: fc:74:43:67:81:af:64:17:e0:b2:82:65:94:24:78: fb:f9:33:95:1f:d1:81:b7:d1:00:b8:8c:b9:04:d7: e3:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:2F:DE:03:1A:F6:04:AF:C6:80:68:01:32:B9:D5:0A:D2:5D:9F:0D X509v3 Authority Key Identifier: keyid:59:64:1C:05:74:F4:9A:52:51:2E:6D:D0:33:B7:7B:BF:91:2C:ED:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WWQcBXT0mlJRLm3QM7d7v5Es7cU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/164986-fb3f-42ec-9635-0c8431acd68a/1/WWQcBXT0mlJRLm3QM7d7v5Es7cU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/164986-fb3f-42ec-9635-0c8431acd68a/1/WWQcBXT0mlJRLm3QM7d7v5Es7cU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:9c:52:00:d4:f9:73:b6:d3:27:bb:5a:a1:64:e0:0a:94:8c: a9:7a:f8:a9:a2:49:5b:19:bd:f8:a3:b3:cf:89:f9:f6:10:0f: 72:2b:c4:46:0f:22:32:75:24:6f:7f:e1:fa:ce:b0:f3:12:1b: d1:09:47:a5:97:16:e6:21:80:65:40:46:29:a6:c2:5a:d2:12: 87:bd:b6:a2:1c:d6:ed:3a:8b:40:4a:bb:9a:7d:53:2b:30:d4: 7e:9a:33:ab:eb:1d:aa:33:4a:79:31:26:a3:bd:90:c8:8e:8d: 35:52:a4:df:19:c4:cf:d4:c8:ba:05:67:67:13:8d:3e:9a:e3: 47:ef:a6:bb:fd:49:41:e8:0f:90:ba:76:9d:9b:0f:3d:d1:45: dc:06:dd:a2:0c:f2:86:6a:53:cf:b2:46:21:c1:dd:8d:2a:2b: bd:6e:83:94:20:a1:02:1f:16:e5:cf:b6:c3:d9:98:8a:53:8d: c6:79:03:d8:64:c9:48:1e:5d:1a:98:57:fe:bf:7d:61:aa:b5: 46:79:39:f3:d8:b8:9b:cd:6b:a9:13:81:e9:6a:95:75:c3:fd: 02:69:4a:c2:b9:8a:2b:b9:91:7b:4f:03:e1:31:89:fd:5c:2d: 38:70:65:43:8a:da:66:a6:bb:2d:2e:6a:ad:a8:ae:57:9f:6c: eb:cd:ab:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDxvxyfGtgkfULDF7rI4guMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5NjQxYzA1NzRmNDlhNTI1MTJlNmRkMDMzYjc3YmJmOTEy Y2VkYzUwHhcNMjYwMjA5MTkwMDM5WhcNMjYwMjEwMTkwMDM5WjAzMTEwLwYDVQQD EyhlNjJmZGUwMzFhZjYwNGFmYzY4MDY4MDEzMmI5ZDUwYWQyNWQ5ZjBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXVM08KIKhyW7K3mgm6ccjjtGXnU ucAdmn/JbUsgpVFKhoEKChUg8MUKT37iFyXf8OHBr3UiXRmTC7kIzOtvcbuzxH/P wXEZ3yPAPLs4JAqUPuG2gRKyKd3lnzIZ1KUba5HIakd1+9Z5IWzllO5ONygKVdvB fYNohoyxg6HhcsZupg/cnGMNiejina8X6hC+4IlmsBvFOA3G7UY5P4hxhOw48voR NiS6ic0sgL0rRkpUAcpQ5kiqouaE6GEjwIip+NoKrx+l3ERayDbnvMPvqTZEz8lA jbDv5mZLsGlGgxL8dENnga9kF+CygmWUJHj7+TOVH9GBt9EAuIy5BNfj4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOYv3gMa9gSvxoBoATK51QrSXZ8NMB8GA1UdIwQY MBaAFFlkHAV09JpSUS5t0DO3e7+RLO3FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1dRY0JYVDBtbEpSTG0zUU03ZDd2NUVzN2NVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8xNjQ5ODYtZmIzZi00MmVjLTk2MzUt MGM4NDMxYWNkNjhhLzEvV1dRY0JYVDBtbEpSTG0zUU03ZDd2NUVzN2NVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS8xNjQ5ODYtZmIzZi00MmVjLTk2MzUtMGM4NDMxYWNkNjhh LzEvV1dRY0JYVDBtbEpSTG0zUU03ZDd2NUVzN2NVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdpxSANT5 c7bTJ7taoWTgCpSMqXr4qaJJWxm9+KOzz4n59hAPcivERg8iMnUkb3/h+s6w8xIb 0QlHpZcW5iGAZUBGKabCWtISh722ohzW7TqLQEq7mn1TKzDUfpozq+sdqjNKeTEm o72QyI6NNVKk3xnEz9TIugVnZxONPprjR++mu/1JQegPkLp2nZsPPdFF3Abdogzy hmpTz7JGIcHdjSorvW6DlCChAh8W5c+2w9mYilONxnkD2GTJSB5dGphX/r99Yaq1 Rnk589i4m81rqROB6WqVdcP9AmlKwrmKK7mRe08D4TGJ/VwtOHBlQ4raZqa7LS5q raiuV59s682rzA== -----END CERTIFICATE-----Generated at Mon Feb 9 22:42:03 2026 by rpki-client