This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/0da847-1ae9-496c-89fa-9245a9ab978b/1/rwMNO0xYnpSj72Hd1UAajz_3m20.mft File: rwMNO0xYnpSj72Hd1UAajz_3m20.mft (raw, json) Hash identifier: 3FfyXbdtA/rGBMHIH3bXnVcVrpRqVcxM3OuLDPBwwmo= Subject key identifier: 39:2D:D2:52:08:68:C5:C1:2D:ED:5D:62:8B:47:31:D0:37:D6:F0:60 Authority key identifier: AF:03:0D:3B:4C:58:9E:94:A3:EF:61:DD:D5:40:1A:8F:3F:F7:9B:6D Certificate issuer: /CN=af030d3b4c589e94a3ef61ddd5401a8f3ff79b6d Certificate serial: 019C4390CEF83479F97CB8D2B6B550EC238B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwMNO0xYnpSj72Hd1UAajz_3m20.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/0da847-1ae9-496c-89fa-9245a9ab978b/1/rwMNO0xYnpSj72Hd1UAajz_3m20.mft Manifest number: 0647 Signing time: Mon 09 Feb 2026 18:01:29 +0000 Manifest this update: Mon 09 Feb 2026 18:01:29 +0000 Manifest next update: Tue 10 Feb 2026 18:01:29 +0000 Files and hashes: 1: rwMNO0xYnpSj72Hd1UAajz_3m20.crl (hash: uVftx6gnMuVx0yrpQ5fjVVJV/YKXckamgjSWT2b0XQM=) 2: sKXut25F8mstcMlebmCBZ3ash14.roa (hash: WdcSiIGfJAIq+j/hEE113/iMWyToETbAb54DBmpGZ9M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/0da847-1ae9-496c-89fa-9245a9ab978b/1/rwMNO0xYnpSj72Hd1UAajz_3m20.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/0da847-1ae9-496c-89fa-9245a9ab978b/1/rwMNO0xYnpSj72Hd1UAajz_3m20.mft rsync://rpki.ripe.net/repository/DEFAULT/rwMNO0xYnpSj72Hd1UAajz_3m20.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:ce:f8:34:79:f9:7c:b8:d2:b6:b5:50:ec:23:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af030d3b4c589e94a3ef61ddd5401a8f3ff79b6d Validity Not Before: Feb 9 18:01:29 2026 GMT Not After : Feb 10 18:01:29 2026 GMT Subject: CN=392dd2520868c5c12ded5d628b4731d037d6f060 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:2c:09:1a:8a:6c:34:e9:bf:48:35:73:09:58: 98:fa:2a:81:b3:a2:66:6f:7a:16:37:e6:15:84:6c: fd:62:26:dc:41:e0:14:3c:24:41:e6:7f:7b:39:c9: 32:70:60:e2:64:13:a2:3c:ed:2d:2c:7d:f1:6f:aa: 35:fe:46:1f:ec:44:6d:8d:20:78:60:d0:dd:05:80: 69:c8:ac:01:91:06:b8:94:f3:a9:8a:40:0d:d3:bd: 3d:ea:12:87:23:80:41:91:a7:04:a2:d7:98:83:e0: 7c:c3:01:a7:54:d0:15:58:7d:d2:b3:4b:33:03:dd: 08:6b:51:b9:f0:c1:ae:c0:d1:16:c0:81:b8:ef:70: 66:1a:a6:1e:b8:65:7a:49:d9:43:5d:36:cd:1c:bf: 89:e5:67:40:e4:50:44:d7:5c:b3:a4:b4:d4:22:3c: 89:25:44:2c:31:76:a8:1c:17:8c:b5:1a:be:5c:fd: 55:c3:80:13:26:51:81:58:fc:6d:2c:a8:1a:22:c6: 3c:ab:f9:47:60:6c:53:23:c4:f1:da:13:7f:a4:36: 4f:7d:2f:67:98:e4:2f:e5:44:44:5d:6e:d1:63:11: df:9f:9a:78:73:37:d4:d6:09:7f:67:7b:84:8f:8e: 03:bb:a1:79:63:75:ac:a1:ae:0e:75:97:41:f6:e1: 26:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:2D:D2:52:08:68:C5:C1:2D:ED:5D:62:8B:47:31:D0:37:D6:F0:60 X509v3 Authority Key Identifier: keyid:AF:03:0D:3B:4C:58:9E:94:A3:EF:61:DD:D5:40:1A:8F:3F:F7:9B:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwMNO0xYnpSj72Hd1UAajz_3m20.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0da847-1ae9-496c-89fa-9245a9ab978b/1/rwMNO0xYnpSj72Hd1UAajz_3m20.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0da847-1ae9-496c-89fa-9245a9ab978b/1/rwMNO0xYnpSj72Hd1UAajz_3m20.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:87:27:b0:0c:98:fd:d9:e2:91:3f:d2:5d:ed:70:1e:38:dd: d2:a0:05:d1:6a:0d:57:0e:6a:8b:d9:80:69:39:f5:c6:3d:bf: 75:ab:a5:0b:fd:e1:c5:6c:92:05:c6:09:01:de:52:e6:6c:47: 2d:7b:63:52:ef:ce:a6:2a:a4:59:50:ae:13:60:06:26:b7:e5: d5:9c:86:d6:df:cc:da:13:48:8c:18:2e:b7:ee:5f:ec:b2:eb: a4:9d:5c:05:44:71:9b:3d:a1:65:93:51:3d:30:4f:63:6c:e3: 49:de:b9:0d:29:c8:6d:a3:55:8a:3d:bb:1e:49:cf:89:c8:65: 7f:81:59:35:cb:a0:32:58:7c:18:f1:06:97:c5:09:be:91:59: 5a:d0:df:5d:05:2a:a8:f6:2f:1d:7e:dc:2d:d2:9f:69:20:75: 7e:57:87:87:25:fb:38:b8:38:09:71:4e:04:e8:2b:8d:ae:b3: 71:48:84:8d:99:74:5b:b8:56:ea:14:a6:da:ee:61:e4:4d:dd: 83:01:8e:d5:57:ce:ab:b0:57:4f:de:ae:63:59:4e:47:4d:05: 58:ec:f2:11:de:34:de:2c:06:9d:ff:cd:6a:bb:77:c7:a7:23: da:75:2c:36:da:80:28:41:c4:1a:9e:7b:4d:46:fe:c5:05:f2: d2:6b:79:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkM74NHn5fLjStrVQ7COLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmMDMwZDNiNGM1ODllOTRhM2VmNjFkZGQ1NDAxYThmM2Zm NzliNmQwHhcNMjYwMjA5MTgwMTI5WhcNMjYwMjEwMTgwMTI5WjAzMTEwLwYDVQQD EygzOTJkZDI1MjA4NjhjNWMxMmRlZDVkNjI4YjQ3MzFkMDM3ZDZmMDYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvywJGopsNOm/SDVzCViY+iqBs6Jm b3oWN+YVhGz9YibcQeAUPCRB5n97OckycGDiZBOiPO0tLH3xb6o1/kYf7ERtjSB4 YNDdBYBpyKwBkQa4lPOpikAN07096hKHI4BBkacEoteYg+B8wwGnVNAVWH3Ss0sz A90Ia1G58MGuwNEWwIG473BmGqYeuGV6SdlDXTbNHL+J5WdA5FBE11yzpLTUIjyJ JUQsMXaoHBeMtRq+XP1Vw4ATJlGBWPxtLKgaIsY8q/lHYGxTI8Tx2hN/pDZPfS9n mOQv5UREXW7RYxHfn5p4czfU1gl/Z3uEj44Du6F5Y3Wsoa4OdZdB9uEm/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDkt0lIIaMXBLe1dYotHMdA31vBgMB8GA1UdIwQY MBaAFK8DDTtMWJ6Uo+9h3dVAGo8/95ttMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcndNTk8weFlucFNqNzJIZDFVQWFqel8zbTIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8wZGE4NDctMWFlOS00OTZjLTg5ZmEt OTI0NWE5YWI5NzhiLzEvcndNTk8weFlucFNqNzJIZDFVQWFqel8zbTIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi8wZGE4NDctMWFlOS00OTZjLTg5ZmEtOTI0NWE5YWI5Nzhi LzEvcndNTk8weFlucFNqNzJIZDFVQWFqel8zbTIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaYcnsAyY /dnikT/SXe1wHjjd0qAF0WoNVw5qi9mAaTn1xj2/daulC/3hxWySBcYJAd5S5mxH LXtjUu/OpiqkWVCuE2AGJrfl1ZyG1t/M2hNIjBgut+5f7LLrpJ1cBURxmz2hZZNR PTBPY2zjSd65DSnIbaNVij27HknPichlf4FZNcugMlh8GPEGl8UJvpFZWtDfXQUq qPYvHX7cLdKfaSB1fleHhyX7OLg4CXFOBOgrja6zcUiEjZl0W7hW6hSm2u5h5E3d gwGO1VfOq7BXT96uY1lOR00FWOzyEd403iwGnf/Nart3x6cj2nUsNtqAKEHEGp57 TUb+xQXy0mt5ZQ== -----END CERTIFICATE-----Generated at Tue Feb 10 02:51:10 2026 by rpki-client