This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/288123-ca1d-4936-aff8-d1a84b414ef8/1/0WKatyzbkDPuVW45m_UiY9WqWkY.mft File: 0WKatyzbkDPuVW45m_UiY9WqWkY.mft (raw, json) Hash identifier: 3sTYE6aF6hVbH2MVCmZ6ZruA03pigijdDZ1TAS7iZXc= Subject key identifier: 57:F7:99:01:6E:FE:98:32:26:84:C4:14:06:02:EA:D8:E9:52:52:DD Authority key identifier: D1:62:9A:B7:2C:DB:90:33:EE:55:6E:39:9B:F5:22:63:D5:AA:5A:46 Certificate issuer: /CN=d1629ab72cdb9033ee556e399bf52263d5aa5a46 Certificate serial: 019C43C758D0D06DBF469B3B76EAB6ABC0D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0WKatyzbkDPuVW45m_UiY9WqWkY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/288123-ca1d-4936-aff8-d1a84b414ef8/1/0WKatyzbkDPuVW45m_UiY9WqWkY.mft Manifest number: 1547 Signing time: Mon 09 Feb 2026 19:01:03 +0000 Manifest this update: Mon 09 Feb 2026 19:01:03 +0000 Manifest next update: Tue 10 Feb 2026 19:01:03 +0000 Files and hashes: 1: 0WKatyzbkDPuVW45m_UiY9WqWkY.crl (hash: TAZDGrTyiSvDFdvz2Folm3RtMSpCMr3yuAKPoNEKmoI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/288123-ca1d-4936-aff8-d1a84b414ef8/1/0WKatyzbkDPuVW45m_UiY9WqWkY.crl rsync://rpki.ripe.net/repository/DEFAULT/57/288123-ca1d-4936-aff8-d1a84b414ef8/1/0WKatyzbkDPuVW45m_UiY9WqWkY.mft rsync://rpki.ripe.net/repository/DEFAULT/0WKatyzbkDPuVW45m_UiY9WqWkY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:c7:58:d0:d0:6d:bf:46:9b:3b:76:ea:b6:ab:c0:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1629ab72cdb9033ee556e399bf52263d5aa5a46 Validity Not Before: Feb 9 19:01:03 2026 GMT Not After : Feb 10 19:01:03 2026 GMT Subject: CN=57f799016efe98322684c4140602ead8e95252dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:cc:db:26:d8:dd:81:11:4b:4f:ff:21:95:f5: c9:9f:6b:d6:83:e2:7d:55:b9:7f:3b:d1:fa:0c:f0: 24:75:f1:c9:fe:e5:bb:b1:8a:b2:8f:4f:47:9d:16: cb:84:fa:81:51:fc:29:d0:3b:38:68:17:4b:07:e1: 84:58:ba:0e:00:0d:a2:c5:4d:2a:3c:ba:9a:80:b1: b1:bc:f8:5d:c3:bf:a9:01:9f:a5:2b:e9:16:31:bd: 55:0b:d4:5b:5e:6c:6e:ba:20:15:74:f6:8c:f3:5d: 65:e9:1f:d7:ee:5b:50:47:f4:0b:0b:3b:a2:ac:a7: 83:ab:82:89:d6:ca:8e:0a:ed:1f:04:eb:59:78:cd: c1:c4:55:03:07:b9:99:12:c9:25:6c:4e:d4:a6:4c: 5a:5a:d2:98:0f:0d:52:45:ce:29:bb:a4:1b:00:8e: 40:fa:f1:b7:8c:6e:5d:10:37:db:55:d4:26:38:35: 55:b7:1a:c0:61:18:8f:13:55:f4:e1:8d:79:26:4d: 06:2a:61:94:63:f5:8a:93:08:67:32:20:9d:8d:bf: d6:da:3c:fe:83:28:ab:0f:2b:67:87:09:91:7f:da: ba:8c:07:96:47:ae:bf:06:fd:d3:20:1e:5b:01:eb: 0d:6e:12:7c:d6:64:cf:57:e5:fc:b1:c3:0e:f3:42: 93:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:F7:99:01:6E:FE:98:32:26:84:C4:14:06:02:EA:D8:E9:52:52:DD X509v3 Authority Key Identifier: keyid:D1:62:9A:B7:2C:DB:90:33:EE:55:6E:39:9B:F5:22:63:D5:AA:5A:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0WKatyzbkDPuVW45m_UiY9WqWkY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/288123-ca1d-4936-aff8-d1a84b414ef8/1/0WKatyzbkDPuVW45m_UiY9WqWkY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/288123-ca1d-4936-aff8-d1a84b414ef8/1/0WKatyzbkDPuVW45m_UiY9WqWkY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:3b:bc:22:58:ac:6a:53:2a:fc:d6:b4:25:ae:75:7c:65:31: 40:41:57:e9:28:19:33:33:c3:9a:da:76:92:09:f9:a8:51:ef: 05:88:fa:79:20:59:ca:b0:3f:07:bb:38:99:76:95:ef:1b:eb: a8:a8:72:b6:3b:67:da:3f:37:8d:0e:38:ff:51:59:5c:4f:d9: b4:cf:74:b0:df:16:da:b7:bb:69:2e:c7:cf:24:ad:dd:0a:fe: af:6f:de:f6:a9:e3:32:26:7d:6a:71:6b:05:aa:ea:6a:f6:58: b5:86:20:97:27:7e:f8:3b:df:0d:18:ee:b3:28:1d:21:7c:b9: 2f:17:46:55:21:6f:95:30:dd:81:5e:da:b4:1b:72:28:ce:21: f7:67:3f:e7:32:11:3f:4b:6a:64:30:81:cc:7e:41:72:d5:aa: ae:6d:18:cb:71:cc:42:f7:ac:8f:e9:81:2f:5c:09:5b:f7:7a: 82:5c:68:eb:bd:91:b8:b4:ae:0a:7f:0e:85:d5:1d:58:26:92: a6:ad:87:1c:93:1e:b2:54:4a:91:e9:0e:87:4b:02:70:c7:4c: f9:83:5e:b3:b4:54:d1:e0:f8:11:10:38:7e:c6:7c:1e:c3:a2: 62:f8:2b:a2:ef:fb:a4:39:1c:60:8e:77:9e:22:ac:5d:54:a8: 74:f9:01:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDx1jQ0G2/Rps7duq2q8DSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxNjI5YWI3MmNkYjkwMzNlZTU1NmUzOTliZjUyMjYzZDVh YTVhNDYwHhcNMjYwMjA5MTkwMTAzWhcNMjYwMjEwMTkwMTAzWjAzMTEwLwYDVQQD Eyg1N2Y3OTkwMTZlZmU5ODMyMjY4NGM0MTQwNjAyZWFkOGU5NTI1MmRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1szbJtjdgRFLT/8hlfXJn2vWg+J9 Vbl/O9H6DPAkdfHJ/uW7sYqyj09HnRbLhPqBUfwp0Ds4aBdLB+GEWLoOAA2ixU0q PLqagLGxvPhdw7+pAZ+lK+kWMb1VC9RbXmxuuiAVdPaM811l6R/X7ltQR/QLCzui rKeDq4KJ1sqOCu0fBOtZeM3BxFUDB7mZEsklbE7UpkxaWtKYDw1SRc4pu6QbAI5A +vG3jG5dEDfbVdQmODVVtxrAYRiPE1X04Y15Jk0GKmGUY/WKkwhnMiCdjb/W2jz+ gyirDytnhwmRf9q6jAeWR66/Bv3TIB5bAesNbhJ81mTPV+X8scMO80KTIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFf3mQFu/pgyJoTEFAYC6tjpUlLdMB8GA1UdIwQY MBaAFNFimrcs25Az7lVuOZv1ImPVqlpGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFdLYXR5emJrRFB1Vlc0NW1fVWlZOVdxV2tZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yODgxMjMtY2ExZC00OTM2LWFmZjgt ZDFhODRiNDE0ZWY4LzEvMFdLYXR5emJrRFB1Vlc0NW1fVWlZOVdxV2tZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8yODgxMjMtY2ExZC00OTM2LWFmZjgtZDFhODRiNDE0ZWY4 LzEvMFdLYXR5emJrRFB1Vlc0NW1fVWlZOVdxV2tZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFTu8Ilis alMq/Na0Ja51fGUxQEFX6SgZMzPDmtp2kgn5qFHvBYj6eSBZyrA/B7s4mXaV7xvr qKhytjtn2j83jQ44/1FZXE/ZtM90sN8W2re7aS7HzySt3Qr+r2/e9qnjMiZ9anFr BarqavZYtYYglyd++DvfDRjusygdIXy5LxdGVSFvlTDdgV7atBtyKM4h92c/5zIR P0tqZDCBzH5BctWqrm0Yy3HMQvesj+mBL1wJW/d6glxo672RuLSuCn8OhdUdWCaS pq2HHJMeslRKkekOh0sCcMdM+YNes7RU0eD4ERA4fsZ8HsOiYvgrou/7pDkcYI53 niKsXVSodPkBhA== -----END CERTIFICATE-----Generated at Mon Feb 9 21:08:59 2026 by rpki-client