This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/d397c3-cf6f-44d0-9a0b-2b6f24bdd061/1/Wo2FsuHsHyHcrF1Yeeacs0L9FHk.mft File: Wo2FsuHsHyHcrF1Yeeacs0L9FHk.mft (raw, json) Hash identifier: rjN9CizHtaly/d8t/hsPhlsuYuV5EZrU1n0rw7y3f5o= Subject key identifier: 5C:FC:0F:DB:FD:FB:93:F0:8F:07:32:EF:30:0C:05:E5:64:E9:AF:DE Authority key identifier: 5A:8D:85:B2:E1:EC:1F:21:DC:AC:5D:58:79:E6:9C:B3:42:FD:14:79 Certificate issuer: /CN=5a8d85b2e1ec1f21dcac5d5879e69cb342fd1479 Certificate serial: 019C427DDC53646C108E8CE098D15675CB34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wo2FsuHsHyHcrF1Yeeacs0L9FHk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/d397c3-cf6f-44d0-9a0b-2b6f24bdd061/1/Wo2FsuHsHyHcrF1Yeeacs0L9FHk.mft Manifest number: 03B8 Signing time: Mon 09 Feb 2026 13:01:10 +0000 Manifest this update: Mon 09 Feb 2026 13:01:10 +0000 Manifest next update: Tue 10 Feb 2026 13:01:10 +0000 Files and hashes: 1: Wo2FsuHsHyHcrF1Yeeacs0L9FHk.crl (hash: uXZhDXWyPTqFF+DBCjtOZOkwhZL7boh9Eu7UayEJH1M=) 2: hWzqX8PUSz5NnlIujiYrGP8Gjcc.roa (hash: OJCaeK4r40A+RIAK6TWHK7bXN+Fg4TAZH3puzByUxwY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/d397c3-cf6f-44d0-9a0b-2b6f24bdd061/1/Wo2FsuHsHyHcrF1Yeeacs0L9FHk.crl rsync://rpki.ripe.net/repository/DEFAULT/65/d397c3-cf6f-44d0-9a0b-2b6f24bdd061/1/Wo2FsuHsHyHcrF1Yeeacs0L9FHk.mft rsync://rpki.ripe.net/repository/DEFAULT/Wo2FsuHsHyHcrF1Yeeacs0L9FHk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:dc:53:64:6c:10:8e:8c:e0:98:d1:56:75:cb:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a8d85b2e1ec1f21dcac5d5879e69cb342fd1479 Validity Not Before: Feb 9 13:01:10 2026 GMT Not After : Feb 10 13:01:10 2026 GMT Subject: CN=5cfc0fdbfdfb93f08f0732ef300c05e564e9afde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:d9:3a:9b:13:cd:c8:07:b6:a2:91:dd:b4:92: da:92:a7:15:6a:33:0a:80:61:cf:c7:0f:26:df:76: 54:19:c2:92:82:a0:29:0e:22:a3:07:c2:25:61:01: b7:9c:4c:42:6b:4f:58:a5:97:59:a8:f8:44:01:6b: ed:e1:f2:05:ee:76:df:e1:69:b1:df:9e:a3:e9:f9: 00:c7:18:1c:70:ec:94:27:5a:ff:66:b9:7f:41:70: 26:23:e6:72:52:bd:de:3f:5b:90:1a:f6:6d:c7:18: fc:f7:73:24:80:c9:af:0d:8e:8f:da:48:14:91:ac: 7c:7e:8f:d3:0c:d0:72:59:9c:ec:dd:8e:a4:85:81: 00:0d:33:c1:d4:29:1d:b0:13:3a:58:e9:c7:c8:ea: 58:66:19:f4:b6:8f:b8:4a:02:77:2b:05:e5:ed:cb: f4:ce:01:f4:39:9c:fd:e9:13:75:44:04:b4:d3:56: cc:12:9f:2c:23:9c:b7:d6:19:fe:45:82:08:1c:a4: 9e:7e:0c:2c:9d:e6:ba:e4:2b:fd:94:bf:2a:8e:56: 15:3b:ce:9e:96:2d:1a:bd:e3:86:b9:38:ca:bd:9c: 10:e4:90:4c:93:da:6c:ec:c8:ab:93:45:da:9c:76: 9a:d4:5c:aa:6e:4c:5f:1e:85:07:0e:03:02:60:5e: 1c:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:FC:0F:DB:FD:FB:93:F0:8F:07:32:EF:30:0C:05:E5:64:E9:AF:DE X509v3 Authority Key Identifier: keyid:5A:8D:85:B2:E1:EC:1F:21:DC:AC:5D:58:79:E6:9C:B3:42:FD:14:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wo2FsuHsHyHcrF1Yeeacs0L9FHk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/d397c3-cf6f-44d0-9a0b-2b6f24bdd061/1/Wo2FsuHsHyHcrF1Yeeacs0L9FHk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/d397c3-cf6f-44d0-9a0b-2b6f24bdd061/1/Wo2FsuHsHyHcrF1Yeeacs0L9FHk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:ee:78:47:09:32:d5:8a:46:fc:e3:df:6e:23:b3:ee:f4:00: c3:75:ae:f8:7c:69:ef:2f:5f:e5:59:5d:73:21:9f:6f:7e:a8: a8:49:7d:db:38:d5:51:de:c4:ba:3b:01:33:5d:73:d5:f3:ba: 42:8b:23:54:57:1e:fd:5a:ca:4c:84:12:83:58:2e:75:ba:b0: b2:37:5b:3e:40:13:55:8b:6e:5a:c3:5b:72:8a:bb:77:a1:07: cb:35:cd:5d:2e:b6:cf:0e:58:f3:cf:f3:1b:a9:3f:ac:df:59: dc:93:16:3a:35:26:5f:03:19:12:5d:de:94:43:00:7e:d2:59: 72:10:b4:9c:76:2a:55:69:ec:2c:13:83:a2:63:18:ad:37:a8: a9:f8:d0:57:17:bf:44:10:75:f4:50:30:47:68:22:c7:55:e0: b2:4a:5f:e8:c1:3d:cc:8d:10:48:95:b9:1c:c6:c6:91:94:ae: 14:5c:84:4a:1f:3d:4d:4a:3d:8d:f2:03:46:26:50:6c:ce:91: a8:95:54:a7:28:ab:34:8b:de:2b:15:c2:83:97:e5:30:5a:e1: 9f:59:f7:96:2f:e2:1a:23:81:24:37:68:0d:5a:8b:ee:5e:cd: 4c:9e:82:99:8c:8c:3d:7f:1b:1f:7a:61:e0:a8:19:c2:7f:aa: d7:2c:ef:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfdxTZGwQjozgmNFWdcs0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhOGQ4NWIyZTFlYzFmMjFkY2FjNWQ1ODc5ZTY5Y2IzNDJm ZDE0NzkwHhcNMjYwMjA5MTMwMTEwWhcNMjYwMjEwMTMwMTEwWjAzMTEwLwYDVQQD Eyg1Y2ZjMGZkYmZkZmI5M2YwOGYwNzMyZWYzMDBjMDVlNTY0ZTlhZmRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdk6mxPNyAe2opHdtJLakqcVajMK gGHPxw8m33ZUGcKSgqApDiKjB8IlYQG3nExCa09YpZdZqPhEAWvt4fIF7nbf4Wmx 356j6fkAxxgccOyUJ1r/Zrl/QXAmI+ZyUr3eP1uQGvZtxxj893MkgMmvDY6P2kgU kax8fo/TDNByWZzs3Y6khYEADTPB1CkdsBM6WOnHyOpYZhn0to+4SgJ3KwXl7cv0 zgH0OZz96RN1RAS001bMEp8sI5y31hn+RYIIHKSefgwsnea65Cv9lL8qjlYVO86e li0aveOGuTjKvZwQ5JBMk9ps7Mirk0XanHaa1FyqbkxfHoUHDgMCYF4cdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFz8D9v9+5Pwjwcy7zAMBeVk6a/eMB8GA1UdIwQY MBaAFFqNhbLh7B8h3KxdWHnmnLNC/RR5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV28yRnN1SHNIeUhjckYxWWVlYWNzMEw5RkhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9kMzk3YzMtY2Y2Zi00NGQwLTlhMGIt MmI2ZjI0YmRkMDYxLzEvV28yRnN1SHNIeUhjckYxWWVlYWNzMEw5RkhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS9kMzk3YzMtY2Y2Zi00NGQwLTlhMGItMmI2ZjI0YmRkMDYx LzEvV28yRnN1SHNIeUhjckYxWWVlYWNzMEw5RkhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWu54Rwky 1YpG/OPfbiOz7vQAw3Wu+Hxp7y9f5VldcyGfb36oqEl92zjVUd7EujsBM11z1fO6 QosjVFce/VrKTIQSg1gudbqwsjdbPkATVYtuWsNbcoq7d6EHyzXNXS62zw5Y88/z G6k/rN9Z3JMWOjUmXwMZEl3elEMAftJZchC0nHYqVWnsLBODomMYrTeoqfjQVxe/ RBB19FAwR2gix1Xgskpf6ME9zI0QSJW5HMbGkZSuFFyESh89TUo9jfIDRiZQbM6R qJVUpyirNIveKxXCg5flMFrhn1n3li/iGiOBJDdoDVqL7l7NTJ6CmYyMPX8bH3ph 4KgZwn+q1yzviQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:28:36 2026 by rpki-client