This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9d8187-2b54-4203-a023-8a92109989ef/1/WkxPlqpaAsrag9S4jUnmpzq9JfA.mft File: WkxPlqpaAsrag9S4jUnmpzq9JfA.mft (raw, json) Hash identifier: +AjEvCcvO92T8vI/h4Xm61nQDnl/3x1wUil1NgJUc8E= Subject key identifier: 56:9A:65:32:72:4A:6B:44:66:82:DB:7D:A1:60:FC:76:53:C1:10:79 Authority key identifier: 5A:4C:4F:96:AA:5A:02:CA:DA:83:D4:B8:8D:49:E6:A7:3A:BD:25:F0 Certificate issuer: /CN=5a4c4f96aa5a02cada83d4b88d49e6a73abd25f0 Certificate serial: 019C420FB8C69A1D6227AAB41F572CAFFDDD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WkxPlqpaAsrag9S4jUnmpzq9JfA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9d8187-2b54-4203-a023-8a92109989ef/1/WkxPlqpaAsrag9S4jUnmpzq9JfA.mft Manifest number: 0FAF Signing time: Mon 09 Feb 2026 11:00:52 +0000 Manifest this update: Mon 09 Feb 2026 11:00:52 +0000 Manifest next update: Tue 10 Feb 2026 11:00:52 +0000 Files and hashes: 1: G7RZoTOwTcKPekHKI4U7pubMxTo.roa (hash: hkFq7H3atVzzygJHfrNdoE+NINNolqqepS5P7kn64YA=) 2: WkxPlqpaAsrag9S4jUnmpzq9JfA.crl (hash: FuJERG0W5rtL+FvbhfmQ2qhmKW6+KK17pRRhvmqWLGE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/9d8187-2b54-4203-a023-8a92109989ef/1/WkxPlqpaAsrag9S4jUnmpzq9JfA.crl rsync://rpki.ripe.net/repository/DEFAULT/90/9d8187-2b54-4203-a023-8a92109989ef/1/WkxPlqpaAsrag9S4jUnmpzq9JfA.mft rsync://rpki.ripe.net/repository/DEFAULT/WkxPlqpaAsrag9S4jUnmpzq9JfA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:b8:c6:9a:1d:62:27:aa:b4:1f:57:2c:af:fd:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a4c4f96aa5a02cada83d4b88d49e6a73abd25f0 Validity Not Before: Feb 9 11:00:52 2026 GMT Not After : Feb 10 11:00:52 2026 GMT Subject: CN=569a6532724a6b446682db7da160fc7653c11079 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c6:94:97:1a:df:5b:68:98:74:23:3d:50:85: 5a:4c:f9:a0:46:8b:ac:5f:87:eb:7e:46:61:1d:e1: 72:85:2a:65:6e:e0:1e:36:84:3c:b7:23:1a:12:96: 84:6c:c4:28:ce:fb:58:6d:d6:94:fd:f5:2d:b0:5f: 3d:32:c3:5e:5a:e0:da:d8:a9:19:4f:db:f7:d4:75: 48:ec:6a:42:14:9d:9e:e9:30:73:c6:73:df:d5:5f: 24:fc:26:6d:b2:1c:07:de:b3:2a:73:f9:8f:18:a3: fa:cc:fa:ec:dc:ff:56:96:33:db:6d:65:94:95:73: f6:f0:29:b0:a3:53:fe:0d:19:6f:4c:31:41:09:25: cf:d7:6c:f7:5b:53:92:97:1f:c5:c1:86:fb:d4:d9: 59:c0:df:75:4a:51:91:a2:92:61:8d:54:18:31:18: 6f:61:ce:e8:1b:c9:74:cb:38:bd:c0:fe:9a:c3:1c: ff:71:7a:9a:45:c4:a1:98:bd:75:be:ea:73:9f:d6: 39:ec:20:59:27:a8:ea:1b:75:da:ba:f3:b2:61:b0: 58:c1:cb:15:a1:a6:10:22:a9:28:ce:25:80:6b:8d: 12:5e:1c:cc:67:4c:7c:69:04:35:8a:be:0c:a4:32: d1:02:31:4a:a5:09:15:f6:2a:cb:59:90:7a:8e:03: 14:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:9A:65:32:72:4A:6B:44:66:82:DB:7D:A1:60:FC:76:53:C1:10:79 X509v3 Authority Key Identifier: keyid:5A:4C:4F:96:AA:5A:02:CA:DA:83:D4:B8:8D:49:E6:A7:3A:BD:25:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WkxPlqpaAsrag9S4jUnmpzq9JfA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d8187-2b54-4203-a023-8a92109989ef/1/WkxPlqpaAsrag9S4jUnmpzq9JfA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d8187-2b54-4203-a023-8a92109989ef/1/WkxPlqpaAsrag9S4jUnmpzq9JfA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:41:d8:4a:ba:e5:4e:84:d9:6c:7d:c0:df:dc:7e:ae:d1:8b: c1:a7:b0:a3:65:3c:64:10:68:57:bb:f7:f8:ea:0a:40:da:3e: 2f:e0:13:6a:20:b5:46:91:e2:e8:e5:74:3e:1f:5d:99:a0:5e: 21:5d:2d:a8:19:00:f9:0e:9e:93:2d:4c:c2:d4:18:4d:2d:3e: f6:a1:14:1c:85:a4:e9:ec:25:9c:b4:1a:ed:e8:5f:fb:8c:74: 32:9b:9d:65:b2:ae:22:91:23:65:d8:3f:fc:3e:cd:5c:9a:e8: 97:9e:ce:96:e4:1d:ae:c3:0f:65:b5:54:d8:9b:09:aa:65:ab: 11:6a:bc:e3:03:b8:f2:64:ae:21:9a:6e:79:b3:ab:72:66:cb: 16:be:e9:ef:11:2c:49:2a:2c:cd:37:0c:65:0b:75:27:5f:35: 47:30:b7:d4:50:0c:57:59:3d:d8:c0:10:84:fb:12:d3:41:b1: a5:4b:e1:e3:12:72:74:10:fa:d0:4d:9b:f6:9e:79:06:4f:c2: 44:2d:87:64:b0:d5:ec:9e:ff:fc:b1:c7:07:92:b5:cb:44:ba: bf:6c:74:97:80:44:9d:64:39:c7:2b:de:f3:1f:ee:d3:d3:7b: 06:ac:86:a7:c3:2c:6a:69:bd:16:2c:bb:c0:5c:54:e8:ae:54: 20:d2:ef:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD7jGmh1iJ6q0H1csr/3dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhNGM0Zjk2YWE1YTAyY2FkYTgzZDRiODhkNDllNmE3M2Fi ZDI1ZjAwHhcNMjYwMjA5MTEwMDUyWhcNMjYwMjEwMTEwMDUyWjAzMTEwLwYDVQQD Eyg1NjlhNjUzMjcyNGE2YjQ0NjY4MmRiN2RhMTYwZmM3NjUzYzExMDc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcaUlxrfW2iYdCM9UIVaTPmgRous X4frfkZhHeFyhSplbuAeNoQ8tyMaEpaEbMQozvtYbdaU/fUtsF89MsNeWuDa2KkZ T9v31HVI7GpCFJ2e6TBzxnPf1V8k/CZtshwH3rMqc/mPGKP6zPrs3P9WljPbbWWU lXP28Cmwo1P+DRlvTDFBCSXP12z3W1OSlx/FwYb71NlZwN91SlGRopJhjVQYMRhv Yc7oG8l0yzi9wP6awxz/cXqaRcShmL11vupzn9Y57CBZJ6jqG3XauvOyYbBYwcsV oaYQIqkoziWAa40SXhzMZ0x8aQQ1ir4MpDLRAjFKpQkV9irLWZB6jgMURwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFaaZTJySmtEZoLbfaFg/HZTwRB5MB8GA1UdIwQY MBaAFFpMT5aqWgLK2oPUuI1J5qc6vSXwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2t4UGxxcGFBc3JhZzlTNGpVbm1wenE5SmZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC85ZDgxODctMmI1NC00MjAzLWEwMjMt OGE5MjEwOTk4OWVmLzEvV2t4UGxxcGFBc3JhZzlTNGpVbm1wenE5SmZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC85ZDgxODctMmI1NC00MjAzLWEwMjMtOGE5MjEwOTk4OWVm LzEvV2t4UGxxcGFBc3JhZzlTNGpVbm1wenE5SmZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk0HYSrrl ToTZbH3A39x+rtGLwaewo2U8ZBBoV7v3+OoKQNo+L+ATaiC1RpHi6OV0Ph9dmaBe IV0tqBkA+Q6eky1MwtQYTS0+9qEUHIWk6ewlnLQa7ehf+4x0MpudZbKuIpEjZdg/ /D7NXJrol57OluQdrsMPZbVU2JsJqmWrEWq84wO48mSuIZpuebOrcmbLFr7p7xEs SSoszTcMZQt1J181RzC31FAMV1k92MAQhPsS00GxpUvh4xJydBD60E2b9p55Bk/C RC2HZLDV7J7//LHHB5K1y0S6v2x0l4BEnWQ5xyve8x/u09N7BqyGp8Msamm9Fiy7 wFxU6K5UINLvVw== -----END CERTIFICATE-----Generated at Mon Feb 9 16:57:21 2026 by rpki-client