This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/8664bf-e96a-4c0f-8be3-e72e9b4b7658/1/W4smxTL7xStd5nKrNXYdHH2X6yY.mft File: W4smxTL7xStd5nKrNXYdHH2X6yY.mft (raw, json) Hash identifier: ipsCd/T+VG6yO4n4cSrnnPm11R9Uvg073ec4P++WNcY= Subject key identifier: 48:20:E7:4A:41:A7:4A:56:EE:25:F1:D9:B5:1C:66:87:42:DE:1A:A0 Authority key identifier: 5B:8B:26:C5:32:FB:C5:2B:5D:E6:72:AB:35:76:1D:1C:7D:97:EB:26 Certificate issuer: /CN=5b8b26c532fbc52b5de672ab35761d1c7d97eb26 Certificate serial: 019C420F4ED22B61B998C4153C48EC7A348D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W4smxTL7xStd5nKrNXYdHH2X6yY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/8664bf-e96a-4c0f-8be3-e72e9b4b7658/1/W4smxTL7xStd5nKrNXYdHH2X6yY.mft Manifest number: 02C3 Signing time: Mon 09 Feb 2026 11:00:25 +0000 Manifest this update: Mon 09 Feb 2026 11:00:25 +0000 Manifest next update: Tue 10 Feb 2026 11:00:25 +0000 Files and hashes: 1: W4smxTL7xStd5nKrNXYdHH2X6yY.crl (hash: D6B8mNL0f70DFRytWwk8OniSWg1TuH08my/b7OkWC1c=) 2: fOEnPAWhsxTOpFt7roZ3tUcQEpA.roa (hash: hJyQkOhG2dynFkXSSov+GNMjBt8nhvuX9AxIVC3sXH0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/8664bf-e96a-4c0f-8be3-e72e9b4b7658/1/W4smxTL7xStd5nKrNXYdHH2X6yY.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/8664bf-e96a-4c0f-8be3-e72e9b4b7658/1/W4smxTL7xStd5nKrNXYdHH2X6yY.mft rsync://rpki.ripe.net/repository/DEFAULT/W4smxTL7xStd5nKrNXYdHH2X6yY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:4e:d2:2b:61:b9:98:c4:15:3c:48:ec:7a:34:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b8b26c532fbc52b5de672ab35761d1c7d97eb26 Validity Not Before: Feb 9 11:00:25 2026 GMT Not After : Feb 10 11:00:25 2026 GMT Subject: CN=4820e74a41a74a56ee25f1d9b51c668742de1aa0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e1:9e:96:8d:3f:26:4b:09:ce:72:a1:e5:99: 37:84:52:db:72:ec:98:2b:84:90:6a:0f:ea:4c:5e: 7a:0b:e1:88:b9:06:94:b2:72:66:df:d6:f1:55:a5: d7:2a:5f:5f:f7:64:cd:c3:b3:1f:38:4d:2e:86:05: 1a:e7:87:e9:b2:5f:ec:9a:b8:f4:eb:0d:c9:22:3c: 37:75:11:a9:a7:f9:3d:2a:e1:71:cc:d0:97:f3:45: 7e:d3:a3:07:5e:5f:15:5d:fe:77:77:d5:44:21:15: 4c:e2:be:f0:91:11:44:4f:93:64:6d:49:a2:a4:b2: 2a:06:a0:8a:f3:0b:e5:22:4f:c8:fc:e3:09:27:d4: de:29:68:1b:ef:96:13:ee:fe:fc:8a:b9:fc:8f:c5: 53:04:89:d8:b6:d8:ba:a8:26:73:54:ac:48:7e:85: d6:59:2e:50:19:9f:b2:06:90:62:a7:3a:9f:3b:48: 86:fa:87:c5:73:46:6f:45:37:bc:8f:3a:e9:ed:2e: f0:38:90:74:11:99:41:3f:b3:e1:fc:38:07:f6:14: 94:ca:7c:9b:01:31:73:a1:79:2f:55:ae:39:4c:36: ea:96:f9:ba:64:7b:6e:04:5f:41:06:91:1b:71:13: 8e:84:0f:d6:61:7b:6c:39:e0:e8:fa:37:1b:89:c3: e0:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:20:E7:4A:41:A7:4A:56:EE:25:F1:D9:B5:1C:66:87:42:DE:1A:A0 X509v3 Authority Key Identifier: keyid:5B:8B:26:C5:32:FB:C5:2B:5D:E6:72:AB:35:76:1D:1C:7D:97:EB:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W4smxTL7xStd5nKrNXYdHH2X6yY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8664bf-e96a-4c0f-8be3-e72e9b4b7658/1/W4smxTL7xStd5nKrNXYdHH2X6yY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8664bf-e96a-4c0f-8be3-e72e9b4b7658/1/W4smxTL7xStd5nKrNXYdHH2X6yY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:02:72:41:5e:83:be:b2:97:10:4f:d0:78:4f:b4:10:36:b5: e2:d0:11:05:09:5b:14:a1:17:56:33:a3:78:a3:8e:87:c6:d0: 99:4b:76:e7:69:69:41:1c:97:84:a9:11:11:29:3f:04:0f:c5: cd:22:b8:a5:10:3e:c2:48:fc:ed:a7:16:d7:dd:2e:3e:89:d1: a1:f6:51:13:8e:f4:01:96:ec:d7:d2:0d:2d:e6:f4:b2:fb:69: d2:e3:a5:ad:0c:32:46:d2:42:ec:bd:b2:65:28:db:ad:60:f4: 64:88:ff:a2:80:fc:63:99:df:d2:2f:cb:e5:1c:8e:a0:6d:f9: 7e:5f:6b:9b:ca:de:2b:f3:61:cf:f2:cc:c8:e1:5f:35:77:2f: 9e:b6:c4:8e:0d:83:5d:be:e7:49:0e:6a:30:01:62:58:76:4a: d6:fa:cc:18:fc:fc:ca:18:72:24:d9:13:9a:26:49:06:3e:ce: 25:6a:37:45:4a:b4:b2:9c:18:bf:38:e0:40:ef:ec:06:87:3d: 95:a7:b1:73:e8:02:ca:d5:e1:48:a4:51:88:12:6a:c4:71:ad: 20:d1:c6:4c:fa:6c:c4:d9:84:90:7d:10:7c:0a:a5:5a:18:f7: ba:6b:60:28:e1:2c:7d:31:26:29:7b:9c:15:f8:d1:47:d9:c1: 78:ee:cf:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD07SK2G5mMQVPEjsejSNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViOGIyNmM1MzJmYmM1MmI1ZGU2NzJhYjM1NzYxZDFjN2Q5 N2ViMjYwHhcNMjYwMjA5MTEwMDI1WhcNMjYwMjEwMTEwMDI1WjAzMTEwLwYDVQQD Eyg0ODIwZTc0YTQxYTc0YTU2ZWUyNWYxZDliNTFjNjY4NzQyZGUxYWEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+Gelo0/JksJznKh5Zk3hFLbcuyY K4SQag/qTF56C+GIuQaUsnJm39bxVaXXKl9f92TNw7MfOE0uhgUa54fpsl/smrj0 6w3JIjw3dRGpp/k9KuFxzNCX80V+06MHXl8VXf53d9VEIRVM4r7wkRFET5NkbUmi pLIqBqCK8wvlIk/I/OMJJ9TeKWgb75YT7v78irn8j8VTBInYtti6qCZzVKxIfoXW WS5QGZ+yBpBipzqfO0iG+ofFc0ZvRTe8jzrp7S7wOJB0EZlBP7Ph/DgH9hSUynyb ATFzoXkvVa45TDbqlvm6ZHtuBF9BBpEbcROOhA/WYXtsOeDo+jcbicPgPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEgg50pBp0pW7iXx2bUcZodC3hqgMB8GA1UdIwQY MBaAFFuLJsUy+8UrXeZyqzV2HRx9l+smMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzRzbXhUTDd4U3RkNW5Lck5YWWRISDJYNnlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC84NjY0YmYtZTk2YS00YzBmLThiZTMt ZTcyZTliNGI3NjU4LzEvVzRzbXhUTDd4U3RkNW5Lck5YWWRISDJYNnlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC84NjY0YmYtZTk2YS00YzBmLThiZTMtZTcyZTliNGI3NjU4 LzEvVzRzbXhUTDd4U3RkNW5Lck5YWWRISDJYNnlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArAJyQV6D vrKXEE/QeE+0EDa14tARBQlbFKEXVjOjeKOOh8bQmUt252lpQRyXhKkRESk/BA/F zSK4pRA+wkj87acW190uPonRofZRE470AZbs19INLeb0svtp0uOlrQwyRtJC7L2y ZSjbrWD0ZIj/ooD8Y5nf0i/L5RyOoG35fl9rm8reK/Nhz/LMyOFfNXcvnrbEjg2D Xb7nSQ5qMAFiWHZK1vrMGPz8yhhyJNkTmiZJBj7OJWo3RUq0spwYvzjgQO/sBoc9 laexc+gCytXhSKRRiBJqxHGtINHGTPpsxNmEkH0QfAqlWhj3umtgKOEsfTEmKXuc FfjRR9nBeO7PQA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:52:06 2026 by rpki-client