This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/5e7141-9103-48eb-8dcd-ad5868825c36/1/wsFAyCGJcO9g5ok1Txa2OvSQCtU.mft File: wsFAyCGJcO9g5ok1Txa2OvSQCtU.mft (raw, json) Hash identifier: DzhhSLytRZIDWCAlHR8VtB/uYw7JCrgdGrLPknkosKw= Subject key identifier: F2:FC:69:67:39:F0:ED:E6:EC:86:33:40:A0:08:21:A3:CC:B1:0A:66 Authority key identifier: C2:C1:40:C8:21:89:70:EF:60:E6:89:35:4F:16:B6:3A:F4:90:0A:D5 Certificate issuer: /CN=c2c140c8218970ef60e689354f16b63af4900ad5 Certificate serial: 019C41A15311DA1D54A78AFAADEC654D1734 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsFAyCGJcO9g5ok1Txa2OvSQCtU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/5e7141-9103-48eb-8dcd-ad5868825c36/1/wsFAyCGJcO9g5ok1Txa2OvSQCtU.mft Manifest number: 0C8E Signing time: Mon 09 Feb 2026 09:00:17 +0000 Manifest this update: Mon 09 Feb 2026 09:00:17 +0000 Manifest next update: Tue 10 Feb 2026 09:00:17 +0000 Files and hashes: 1: wsFAyCGJcO9g5ok1Txa2OvSQCtU.crl (hash: 5OVI/737mH3iIZiD37I/xYiT0WqGKlNfPakcIjGZfGI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/5e7141-9103-48eb-8dcd-ad5868825c36/1/wsFAyCGJcO9g5ok1Txa2OvSQCtU.crl rsync://rpki.ripe.net/repository/DEFAULT/89/5e7141-9103-48eb-8dcd-ad5868825c36/1/wsFAyCGJcO9g5ok1Txa2OvSQCtU.mft rsync://rpki.ripe.net/repository/DEFAULT/wsFAyCGJcO9g5ok1Txa2OvSQCtU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:53:11:da:1d:54:a7:8a:fa:ad:ec:65:4d:17:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2c140c8218970ef60e689354f16b63af4900ad5 Validity Not Before: Feb 9 09:00:17 2026 GMT Not After : Feb 10 09:00:17 2026 GMT Subject: CN=f2fc696739f0ede6ec863340a00821a3ccb10a66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:61:ab:a6:1d:60:cb:80:27:cb:af:e3:7c:8b: fd:06:ea:42:ed:d9:d1:b9:29:63:88:8b:f1:17:b2: 5d:53:0c:f0:f1:2b:5c:bf:64:cb:39:5e:e5:db:6c: 62:fc:83:36:ab:13:dc:2c:95:87:4b:bb:2a:05:6c: 3e:14:c6:97:68:20:5e:43:aa:73:8c:58:36:6b:d1: 73:8c:51:88:4e:31:b7:bc:44:25:81:33:6b:57:a0: 90:6e:83:e1:25:92:f8:42:d4:ff:7e:b7:89:34:68: 52:a3:76:c4:c8:67:76:c0:ab:e0:62:92:33:bf:b7: 72:f8:41:59:51:bc:a4:fd:35:d8:19:fd:00:1e:a0: 25:32:04:16:09:83:b1:1b:4c:9d:0f:b4:a3:fd:4c: aa:6f:44:7e:09:02:82:7c:57:85:1f:62:c1:ec:74: 75:f6:7c:b5:cd:01:e4:a6:52:fc:98:3c:85:4b:0a: 94:a0:d2:38:6a:5d:72:ac:4d:2b:a7:47:17:fd:9a: f6:ab:37:8c:fe:0c:4a:c7:a1:1a:57:a4:40:bf:98: 06:34:b3:7e:a1:5a:0c:c8:3c:4c:65:37:a2:cd:15: a3:5d:e1:ba:9a:c6:19:d6:ff:a5:29:f8:f4:12:12: 65:31:c3:d8:ee:b3:83:51:c7:81:53:08:10:73:96: 1a:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:FC:69:67:39:F0:ED:E6:EC:86:33:40:A0:08:21:A3:CC:B1:0A:66 X509v3 Authority Key Identifier: keyid:C2:C1:40:C8:21:89:70:EF:60:E6:89:35:4F:16:B6:3A:F4:90:0A:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsFAyCGJcO9g5ok1Txa2OvSQCtU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/5e7141-9103-48eb-8dcd-ad5868825c36/1/wsFAyCGJcO9g5ok1Txa2OvSQCtU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/5e7141-9103-48eb-8dcd-ad5868825c36/1/wsFAyCGJcO9g5ok1Txa2OvSQCtU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:b6:da:ca:1f:3d:76:ef:81:63:f7:2a:40:6c:03:0f:ca:0a: 4f:21:13:a0:09:6a:11:8d:b5:36:7a:28:91:50:f1:b0:65:2c: 10:2e:b2:a4:2f:2d:1d:22:bb:20:46:8a:8e:c6:d1:f6:77:6b: 7b:18:eb:3a:98:1b:59:9e:5d:36:9b:85:3b:d7:2b:eb:01:f6: 87:30:2b:b8:cc:93:d8:ea:34:cb:10:31:f2:08:8e:a9:9f:fc: a4:1c:80:dc:54:15:c5:83:5d:50:de:c6:bc:dc:7a:d7:9f:a6: 1e:32:da:82:80:c0:7e:79:8a:7c:2d:98:cd:06:16:4a:49:2b: 84:f5:b8:14:f9:c8:e4:52:db:1b:ee:7b:e4:1a:1d:1b:b4:8c: f2:8b:ed:63:e5:d7:b9:ea:f1:13:d7:5c:0d:aa:6e:a8:0b:8b: e7:81:db:d1:a5:25:55:37:a0:02:a3:a1:f1:2d:c9:93:d8:f8: 87:3e:09:f3:6b:eb:1f:3d:de:de:df:43:21:c6:58:90:0f:3e: eb:af:87:79:91:a5:1d:cc:a9:72:5d:f0:c1:24:64:47:24:bb: 0e:b6:9a:61:04:88:aa:5a:e4:8f:e6:d9:c0:af:75:3a:4f:a0: 1c:25:ba:63:d7:70:68:cb:5b:97:78:f0:4b:75:c9:c3:77:6b: 0d:06:50:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBoVMR2h1Up4r6rexlTRc0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyYzE0MGM4MjE4OTcwZWY2MGU2ODkzNTRmMTZiNjNhZjQ5 MDBhZDUwHhcNMjYwMjA5MDkwMDE3WhcNMjYwMjEwMDkwMDE3WjAzMTEwLwYDVQQD EyhmMmZjNjk2NzM5ZjBlZGU2ZWM4NjMzNDBhMDA4MjFhM2NjYjEwYTY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGGrph1gy4Any6/jfIv9BupC7dnR uSljiIvxF7JdUwzw8Stcv2TLOV7l22xi/IM2qxPcLJWHS7sqBWw+FMaXaCBeQ6pz jFg2a9FzjFGITjG3vEQlgTNrV6CQboPhJZL4QtT/freJNGhSo3bEyGd2wKvgYpIz v7dy+EFZUbyk/TXYGf0AHqAlMgQWCYOxG0ydD7Sj/Uyqb0R+CQKCfFeFH2LB7HR1 9ny1zQHkplL8mDyFSwqUoNI4al1yrE0rp0cX/Zr2qzeM/gxKx6EaV6RAv5gGNLN+ oVoMyDxMZTeizRWjXeG6msYZ1v+lKfj0EhJlMcPY7rODUceBUwgQc5YaMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPL8aWc58O3m7IYzQKAIIaPMsQpmMB8GA1UdIwQY MBaAFMLBQMghiXDvYOaJNU8Wtjr0kArVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3NGQXlDR0pjTzlnNW9rMVR4YTJPdlNRQ3RVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS81ZTcxNDEtOTEwMy00OGViLThkY2Qt YWQ1ODY4ODI1YzM2LzEvd3NGQXlDR0pjTzlnNW9rMVR4YTJPdlNRQ3RVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS81ZTcxNDEtOTEwMy00OGViLThkY2QtYWQ1ODY4ODI1YzM2 LzEvd3NGQXlDR0pjTzlnNW9rMVR4YTJPdlNRQ3RVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEbbayh89 du+BY/cqQGwDD8oKTyEToAlqEY21NnookVDxsGUsEC6ypC8tHSK7IEaKjsbR9ndr exjrOpgbWZ5dNpuFO9cr6wH2hzAruMyT2Oo0yxAx8giOqZ/8pByA3FQVxYNdUN7G vNx615+mHjLagoDAfnmKfC2YzQYWSkkrhPW4FPnI5FLbG+575BodG7SM8ovtY+XX uerxE9dcDapuqAuL54Hb0aUlVTegAqOh8S3Jk9j4hz4J82vrHz3e3t9DIcZYkA8+ 66+HeZGlHcypcl3wwSRkRyS7DraaYQSIqlrkj+bZwK91Ok+gHCW6Y9dwaMtbl3jw S3XJw3drDQZQQQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:34:00 2026 by rpki-client