This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/0d1089-d967-43b5-bc30-17502d3df95f/1/rwlQP8rAF2lRWhny3CZX2S_TUN8.mft File: rwlQP8rAF2lRWhny3CZX2S_TUN8.mft (raw, json) Hash identifier: INq51EvviZL3axogthdNCEa9aKbTwP6vAcRRx0wsqWw= Subject key identifier: 62:F6:56:3B:96:49:81:C4:D9:22:63:09:0B:B7:77:99:F6:7C:89:EF Authority key identifier: AF:09:50:3F:CA:C0:17:69:51:5A:19:F2:DC:26:57:D9:2F:D3:50:DF Certificate issuer: /CN=af09503fcac01769515a19f2dc2657d92fd350df Certificate serial: 019C1C82E46160F885288E4E34D5D4F925EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwlQP8rAF2lRWhny3CZX2S_TUN8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/0d1089-d967-43b5-bc30-17502d3df95f/1/rwlQP8rAF2lRWhny3CZX2S_TUN8.mft Manifest number: 178F Signing time: Mon 02 Feb 2026 04:01:06 +0000 Manifest this update: Mon 02 Feb 2026 04:01:06 +0000 Manifest next update: Tue 03 Feb 2026 04:01:06 +0000 Files and hashes: 1: oPTsHymLci7fd09NsvXBq7O6RPk.roa (hash: LFrx4cQED0mzFhJ5bZEMbk7u2JP9cJJqjo6hpAnRfYc=) 2: rwlQP8rAF2lRWhny3CZX2S_TUN8.crl (hash: 7z3aAi85AtUb74S0jQdnZmoJ7V96IBtfa+J6Xloi/3Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/0d1089-d967-43b5-bc30-17502d3df95f/1/rwlQP8rAF2lRWhny3CZX2S_TUN8.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/0d1089-d967-43b5-bc30-17502d3df95f/1/rwlQP8rAF2lRWhny3CZX2S_TUN8.mft rsync://rpki.ripe.net/repository/DEFAULT/rwlQP8rAF2lRWhny3CZX2S_TUN8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 04:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1c:82:e4:61:60:f8:85:28:8e:4e:34:d5:d4:f9:25:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af09503fcac01769515a19f2dc2657d92fd350df Validity Not Before: Feb 2 04:01:06 2026 GMT Not After : Feb 3 04:01:06 2026 GMT Subject: CN=62f6563b964981c4d92263090bb77799f67c89ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:f9:c1:9e:11:36:02:81:3c:7c:aa:76:9a:d5: 31:fe:00:7a:df:60:50:d7:9b:1e:85:00:a3:2e:f5: f0:88:83:6d:07:cf:d3:36:51:58:a0:f1:13:0b:bb: ff:65:1d:18:87:1f:5e:0a:b9:18:ff:bf:6b:93:8b: fb:90:88:c6:83:f0:44:92:74:44:b0:2f:13:32:2a: 67:b2:ae:1f:e1:63:36:09:99:97:be:54:e4:e1:ae: 04:f2:76:9f:48:f5:59:99:32:dd:16:c0:53:0a:78: ae:bd:ca:4e:5f:28:3d:1a:79:e5:8a:58:0c:2d:26: c5:ad:fd:88:68:d0:9d:9f:c5:c9:b6:54:2b:89:31: 96:2b:cd:8c:25:67:ef:53:1e:b7:87:3a:9f:f3:1d: b9:d5:9e:c2:da:97:b5:d9:f5:14:bb:e8:b4:2b:03: ad:dc:b2:d5:9b:0d:70:1e:60:ed:ad:18:e8:a9:c2: dc:68:57:91:29:bd:d7:2a:e6:ff:4e:de:cb:91:01: f4:81:1b:b3:20:70:8a:fe:3d:d2:65:37:96:35:bc: 7a:85:54:a3:e7:b1:b4:ff:07:00:c8:e3:c3:8c:48: 86:10:ef:97:1c:83:04:1a:a7:f3:ca:2f:0d:db:ac: 44:f7:61:02:88:6c:49:a1:d4:c8:79:58:5f:44:4e: 99:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:F6:56:3B:96:49:81:C4:D9:22:63:09:0B:B7:77:99:F6:7C:89:EF X509v3 Authority Key Identifier: keyid:AF:09:50:3F:CA:C0:17:69:51:5A:19:F2:DC:26:57:D9:2F:D3:50:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwlQP8rAF2lRWhny3CZX2S_TUN8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0d1089-d967-43b5-bc30-17502d3df95f/1/rwlQP8rAF2lRWhny3CZX2S_TUN8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0d1089-d967-43b5-bc30-17502d3df95f/1/rwlQP8rAF2lRWhny3CZX2S_TUN8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:1c:e4:25:64:6c:d5:09:db:71:77:97:e0:06:13:5c:91:14: d5:59:19:39:fc:93:82:2e:e3:60:a9:0f:78:d1:90:84:6d:b2: bc:1f:30:87:fc:ad:e8:7c:63:78:df:08:82:91:2c:e2:51:61: 79:64:96:0c:14:a1:69:be:11:21:36:b7:72:1f:4e:98:b0:8f: 98:92:21:71:38:0f:11:1e:9e:48:d2:a1:6c:28:d6:fe:67:ba: 74:a7:74:08:b4:6f:53:1c:6c:25:49:19:46:1c:4f:3a:d0:bd: 43:6c:a0:d7:f4:8c:5a:62:73:bb:9a:4e:3d:29:b8:ca:48:71: 82:d1:f3:2d:29:6e:86:58:09:c8:97:7c:c8:0d:16:ab:a7:2a: 92:d4:d6:ee:95:a8:c1:3d:0c:bf:69:e8:ae:c6:0f:28:58:97: 5a:71:f8:7b:54:8e:db:8a:94:2b:f9:0f:7c:8f:c0:8b:e8:b3: 4d:93:f7:ae:44:7b:ca:22:67:1a:5c:33:81:42:9d:3c:bd:13: f3:33:cd:37:4e:d6:e2:bd:14:e0:a1:27:54:80:44:25:5f:e3: b9:1c:cc:2a:0a:a5:a6:8e:8e:62:d6:c1:27:ec:cd:4a:d3:c3: be:03:37:2e:76:81:76:d7:5f:18:13:1e:bd:2f:e3:05:76:99: a2:be:ee:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwcguRhYPiFKI5ONNXU+SXvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmMDk1MDNmY2FjMDE3Njk1MTVhMTlmMmRjMjY1N2Q5MmZk MzUwZGYwHhcNMjYwMjAyMDQwMTA2WhcNMjYwMjAzMDQwMTA2WjAzMTEwLwYDVQQD Eyg2MmY2NTYzYjk2NDk4MWM0ZDkyMjYzMDkwYmI3Nzc5OWY2N2M4OWVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3fnBnhE2AoE8fKp2mtUx/gB632BQ 15sehQCjLvXwiINtB8/TNlFYoPETC7v/ZR0Yhx9eCrkY/79rk4v7kIjGg/BEknRE sC8TMipnsq4f4WM2CZmXvlTk4a4E8nafSPVZmTLdFsBTCniuvcpOXyg9GnnlilgM LSbFrf2IaNCdn8XJtlQriTGWK82MJWfvUx63hzqf8x251Z7C2pe12fUUu+i0KwOt 3LLVmw1wHmDtrRjoqcLcaFeRKb3XKub/Tt7LkQH0gRuzIHCK/j3SZTeWNbx6hVSj 57G0/wcAyOPDjEiGEO+XHIMEGqfzyi8N26xE92ECiGxJodTIeVhfRE6ZfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGL2VjuWSYHE2SJjCQu3d5n2fInvMB8GA1UdIwQY MBaAFK8JUD/KwBdpUVoZ8twmV9kv01DfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcndsUVA4ckFGMmxSV2hueTNDWlgyU19UVU44LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8wZDEwODktZDk2Ny00M2I1LWJjMzAt MTc1MDJkM2RmOTVmLzEvcndsUVA4ckFGMmxSV2hueTNDWlgyU19UVU44Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy8wZDEwODktZDk2Ny00M2I1LWJjMzAtMTc1MDJkM2RmOTVm LzEvcndsUVA4ckFGMmxSV2hueTNDWlgyU19UVU44LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXxzkJWRs 1QnbcXeX4AYTXJEU1VkZOfyTgi7jYKkPeNGQhG2yvB8wh/yt6HxjeN8IgpEs4lFh eWSWDBShab4RITa3ch9OmLCPmJIhcTgPER6eSNKhbCjW/me6dKd0CLRvUxxsJUkZ RhxPOtC9Q2yg1/SMWmJzu5pOPSm4ykhxgtHzLSluhlgJyJd8yA0Wq6cqktTW7pWo wT0Mv2norsYPKFiXWnH4e1SO24qUK/kPfI/Ai+izTZP3rkR7yiJnGlwzgUKdPL0T 8zPNN07W4r0U4KEnVIBEJV/juRzMKgqlpo6OYtbBJ+zNStPDvgM3LnaBdtdfGBMe vS/jBXaZor7uyw== -----END CERTIFICATE-----Generated at Mon Feb 2 09:43:23 2026 by rpki-client