This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/eb3ab5-56cd-4227-b06d-a6ce38f3d1d8/1/w1k2RMcJGfYIPygZpz89Oeucteg.mft File: w1k2RMcJGfYIPygZpz89Oeucteg.mft (raw, json) Hash identifier: Xwsa2pWWQSk13KiFciu0ad9BU2Rpr+4pSB3AmsLyROI= Subject key identifier: B4:8D:C8:6E:CB:5D:3A:08:93:1B:A5:F6:69:0C:E1:34:F3:7F:CA:97 Authority key identifier: C3:59:36:44:C7:09:19:F6:08:3F:28:19:A7:3F:3D:39:EB:9C:B5:E8 Certificate issuer: /CN=c3593644c70919f6083f2819a73f3d39eb9cb5e8 Certificate serial: 019C41D8994867D535864004E6DCB1E20924 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w1k2RMcJGfYIPygZpz89Oeucteg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/eb3ab5-56cd-4227-b06d-a6ce38f3d1d8/1/w1k2RMcJGfYIPygZpz89Oeucteg.mft Manifest number: 10D5 Signing time: Mon 09 Feb 2026 10:00:39 +0000 Manifest this update: Mon 09 Feb 2026 10:00:39 +0000 Manifest next update: Tue 10 Feb 2026 10:00:39 +0000 Files and hashes: 1: w1k2RMcJGfYIPygZpz89Oeucteg.crl (hash: SwPm8W3dCt5LsDmV2u9/R/8PLYE/vT0zOI9W2Hl8n10=) 2: x4-mHKJb7bMwY9GE86KAS0BLgKg.roa (hash: ++8zNyvezH+pL+l7TXoCaIybHlTSo3lc/2BXe8F2UWc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/eb3ab5-56cd-4227-b06d-a6ce38f3d1d8/1/w1k2RMcJGfYIPygZpz89Oeucteg.crl rsync://rpki.ripe.net/repository/DEFAULT/77/eb3ab5-56cd-4227-b06d-a6ce38f3d1d8/1/w1k2RMcJGfYIPygZpz89Oeucteg.mft rsync://rpki.ripe.net/repository/DEFAULT/w1k2RMcJGfYIPygZpz89Oeucteg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:99:48:67:d5:35:86:40:04:e6:dc:b1:e2:09:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3593644c70919f6083f2819a73f3d39eb9cb5e8 Validity Not Before: Feb 9 10:00:39 2026 GMT Not After : Feb 10 10:00:39 2026 GMT Subject: CN=b48dc86ecb5d3a08931ba5f6690ce134f37fca97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:24:cc:dc:ea:b3:db:46:b5:64:27:e9:c0:24: 80:94:7f:f5:43:68:4e:ed:f1:75:8d:3a:65:4a:4d: 84:ea:95:72:8f:0b:ac:c4:6b:ac:6b:a9:a3:e4:74: a5:27:f4:46:2f:11:d7:6e:cd:4a:a0:db:6c:af:ef: 50:ee:47:73:be:a2:da:e3:1d:91:c8:9f:90:07:cc: ac:11:55:37:7b:0f:fe:7b:e6:88:77:a3:72:ab:2e: 4d:83:14:e0:2f:af:7a:db:aa:ed:a9:be:cd:11:1e: ea:f7:3c:52:33:48:2a:38:d8:9b:27:15:1a:78:ac: 25:d6:b8:6b:a7:9a:c5:fb:b5:01:70:e9:24:7c:84: 16:2a:0d:76:e8:b1:3c:67:20:73:86:4f:2f:fd:e7: 91:3d:66:78:99:bf:a5:37:59:96:67:f5:1e:3d:a1: 2f:2d:ac:5a:ac:eb:63:e7:0e:d6:12:64:2c:dc:6d: 9f:6b:d8:71:fb:05:15:76:c8:da:58:82:c2:1f:7b: 69:10:4d:bb:9e:96:af:8c:20:77:30:d9:47:f4:8a: 53:67:ba:99:c0:bd:f5:b5:e8:8c:fa:2a:57:13:e7: b3:fa:94:0f:7f:c5:e2:5a:92:75:8e:8b:09:d4:70: 81:16:4a:1b:fb:b0:42:3b:a0:63:5f:8f:e5:90:54: e3:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:8D:C8:6E:CB:5D:3A:08:93:1B:A5:F6:69:0C:E1:34:F3:7F:CA:97 X509v3 Authority Key Identifier: keyid:C3:59:36:44:C7:09:19:F6:08:3F:28:19:A7:3F:3D:39:EB:9C:B5:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w1k2RMcJGfYIPygZpz89Oeucteg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/eb3ab5-56cd-4227-b06d-a6ce38f3d1d8/1/w1k2RMcJGfYIPygZpz89Oeucteg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/eb3ab5-56cd-4227-b06d-a6ce38f3d1d8/1/w1k2RMcJGfYIPygZpz89Oeucteg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:fd:f0:04:f3:4a:cb:ff:e5:fb:28:29:92:c7:20:99:8a:94: 8b:cf:97:1a:36:6f:07:43:f4:9b:72:27:3f:ae:8f:8a:44:e9: b4:8a:01:02:64:cd:5a:ed:47:c8:b4:db:a7:db:ca:d5:bb:7d: 2b:3d:d7:85:72:37:f7:56:ab:7e:74:45:4d:39:1e:48:66:0c: 95:ce:e5:6a:c6:3c:f8:bd:f9:92:84:69:10:c4:8e:25:47:b8: 6b:e9:9a:49:62:40:70:ad:2a:93:9a:2d:98:d4:63:ab:40:01: b2:49:b2:07:2d:99:91:ac:06:c8:29:bb:f6:79:c9:10:ee:9d: 59:64:bf:57:ea:bd:d0:67:28:bd:7c:64:0f:9d:de:c9:f4:1d: 34:df:4b:bf:e7:cf:80:d1:7b:27:e9:78:4b:ac:1a:e3:6e:7d: b5:55:3f:9a:80:e9:0b:f1:68:d0:50:dd:9f:fb:a2:43:e2:6d: 9c:cf:66:a7:2b:21:eb:eb:2c:48:9c:c2:1d:b3:f1:8d:56:01: 78:75:be:91:0c:fc:94:b6:32:26:fa:5b:52:ae:e5:59:95:d2: 6d:9e:56:1f:6a:97:5c:e3:c4:99:66:78:3d:55:39:91:0c:a4: 61:04:47:d2:60:7a:59:47:84:5d:d0:9b:a3:8f:fd:52:c5:55: d5:6d:8b:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2JlIZ9U1hkAE5tyx4gkkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzNTkzNjQ0YzcwOTE5ZjYwODNmMjgxOWE3M2YzZDM5ZWI5 Y2I1ZTgwHhcNMjYwMjA5MTAwMDM5WhcNMjYwMjEwMTAwMDM5WjAzMTEwLwYDVQQD EyhiNDhkYzg2ZWNiNWQzYTA4OTMxYmE1ZjY2OTBjZTEzNGYzN2ZjYTk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2CTM3Oqz20a1ZCfpwCSAlH/1Q2hO 7fF1jTplSk2E6pVyjwusxGusa6mj5HSlJ/RGLxHXbs1KoNtsr+9Q7kdzvqLa4x2R yJ+QB8ysEVU3ew/+e+aId6Nyqy5NgxTgL69626rtqb7NER7q9zxSM0gqONibJxUa eKwl1rhrp5rF+7UBcOkkfIQWKg126LE8ZyBzhk8v/eeRPWZ4mb+lN1mWZ/UePaEv LaxarOtj5w7WEmQs3G2fa9hx+wUVdsjaWILCH3tpEE27npavjCB3MNlH9IpTZ7qZ wL31teiM+ipXE+ez+pQPf8XiWpJ1josJ1HCBFkob+7BCO6BjX4/lkFTj9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLSNyG7LXToIkxul9mkM4TTzf8qXMB8GA1UdIwQY MBaAFMNZNkTHCRn2CD8oGac/PTnrnLXoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzFrMlJNY0pHZllJUHlnWnB6ODlPZXVjdGVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9lYjNhYjUtNTZjZC00MjI3LWIwNmQt YTZjZTM4ZjNkMWQ4LzEvdzFrMlJNY0pHZllJUHlnWnB6ODlPZXVjdGVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny9lYjNhYjUtNTZjZC00MjI3LWIwNmQtYTZjZTM4ZjNkMWQ4 LzEvdzFrMlJNY0pHZllJUHlnWnB6ODlPZXVjdGVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd/3wBPNK y//l+ygpkscgmYqUi8+XGjZvB0P0m3InP66PikTptIoBAmTNWu1HyLTbp9vK1bt9 Kz3XhXI391arfnRFTTkeSGYMlc7lasY8+L35koRpEMSOJUe4a+maSWJAcK0qk5ot mNRjq0ABskmyBy2ZkawGyCm79nnJEO6dWWS/V+q90GcovXxkD53eyfQdNN9Lv+fP gNF7J+l4S6wa4259tVU/moDpC/Fo0FDdn/uiQ+JtnM9mpysh6+ssSJzCHbPxjVYB eHW+kQz8lLYyJvpbUq7lWZXSbZ5WH2qXXOPEmWZ4PVU5kQykYQRH0mB6WUeEXdCb o4/9UsVV1W2LnA== -----END CERTIFICATE-----Generated at Mon Feb 9 20:06:30 2026 by rpki-client