This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/e2b709-b843-4205-ba31-d5045c501707/1/_WjZ9SvHlS3fCn34GhHuFD8zJwo.mft File: _WjZ9SvHlS3fCn34GhHuFD8zJwo.mft (raw, json) Hash identifier: DuUas1jQ5wZh73HdtMlLQJOSCn3C5pmKcAWHwlF6z34= Subject key identifier: F8:1B:DD:80:14:3A:AF:14:D8:C5:B9:83:BE:D0:D7:9C:66:D4:DB:01 Authority key identifier: FD:68:D9:F5:2B:C7:95:2D:DF:0A:7D:F8:1A:11:EE:14:3F:33:27:0A Certificate issuer: /CN=fd68d9f52bc7952ddf0a7df81a11ee143f33270a Certificate serial: 019C427DA3F7F86DAC011CBDA3BCDE350972 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_WjZ9SvHlS3fCn34GhHuFD8zJwo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/e2b709-b843-4205-ba31-d5045c501707/1/_WjZ9SvHlS3fCn34GhHuFD8zJwo.mft Manifest number: 0E3C Signing time: Mon 09 Feb 2026 13:00:55 +0000 Manifest this update: Mon 09 Feb 2026 13:00:55 +0000 Manifest next update: Tue 10 Feb 2026 13:00:55 +0000 Files and hashes: 1: _WjZ9SvHlS3fCn34GhHuFD8zJwo.crl (hash: xeI+OTWK8Qyh9f+hTMfr91OHZLpygfr578v2hedWalw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/e2b709-b843-4205-ba31-d5045c501707/1/_WjZ9SvHlS3fCn34GhHuFD8zJwo.crl rsync://rpki.ripe.net/repository/DEFAULT/97/e2b709-b843-4205-ba31-d5045c501707/1/_WjZ9SvHlS3fCn34GhHuFD8zJwo.mft rsync://rpki.ripe.net/repository/DEFAULT/_WjZ9SvHlS3fCn34GhHuFD8zJwo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:a3:f7:f8:6d:ac:01:1c:bd:a3:bc:de:35:09:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd68d9f52bc7952ddf0a7df81a11ee143f33270a Validity Not Before: Feb 9 13:00:55 2026 GMT Not After : Feb 10 13:00:55 2026 GMT Subject: CN=f81bdd80143aaf14d8c5b983bed0d79c66d4db01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:50:3f:2d:49:f7:5b:e8:3f:a4:45:2a:81:58: 48:a5:67:56:7f:1c:94:c1:60:3f:68:df:f4:b6:3d: ae:43:29:2b:84:1e:2a:63:35:35:c6:b3:db:55:26: 37:ba:26:3c:79:44:a6:f3:ef:ac:60:a5:fa:76:8b: b4:b2:ea:e4:e6:cc:f0:dd:77:20:dd:df:9f:48:69: de:6c:88:1f:5d:fb:2f:11:3b:09:f9:20:2b:f1:30: 08:4b:84:2f:fe:fa:cb:7d:d6:75:7f:c5:e8:3a:dc: 67:29:13:be:69:36:64:46:5f:15:13:1e:55:45:de: 97:1d:eb:0d:3e:6c:1a:03:90:11:73:32:3d:7d:c3: 0f:64:8f:2b:63:a3:ac:fe:37:f8:88:36:ef:df:8b: c6:88:dc:45:0e:71:1a:2d:9c:cf:27:12:8c:4e:fd: 5f:3f:ae:a1:70:4e:3e:42:ef:e8:b8:33:4d:f3:bd: 19:e3:5c:b8:44:79:64:1a:ed:c5:29:d9:31:0a:57: 64:1a:fe:29:64:47:ee:1e:bb:db:7d:68:36:05:c5: ee:ce:51:35:d4:5d:ea:3d:6e:a3:4c:82:ff:84:01: fb:de:b0:f7:e6:bf:b0:20:69:3b:f5:a8:10:23:7d: a9:e5:e0:f7:82:b8:c4:ac:db:f7:1a:19:fb:30:d0: f7:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:1B:DD:80:14:3A:AF:14:D8:C5:B9:83:BE:D0:D7:9C:66:D4:DB:01 X509v3 Authority Key Identifier: keyid:FD:68:D9:F5:2B:C7:95:2D:DF:0A:7D:F8:1A:11:EE:14:3F:33:27:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_WjZ9SvHlS3fCn34GhHuFD8zJwo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/e2b709-b843-4205-ba31-d5045c501707/1/_WjZ9SvHlS3fCn34GhHuFD8zJwo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/e2b709-b843-4205-ba31-d5045c501707/1/_WjZ9SvHlS3fCn34GhHuFD8zJwo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:2f:0b:6f:f8:3d:88:ee:89:7d:b3:54:b8:85:a1:2b:f2:7c: ec:66:08:06:70:75:ed:d9:8b:26:1c:c8:3e:5f:77:f6:e1:41: 48:14:09:f7:42:3c:56:8b:91:6c:5b:53:65:5a:bb:7c:b3:b3: 4a:67:ff:70:58:6e:35:eb:76:66:f8:26:f1:d7:7e:cb:d9:23: c3:66:77:02:cf:49:17:fa:82:71:9f:ce:f4:80:27:ef:d0:19: 0c:cf:6c:77:39:f6:9d:e4:64:6d:89:0f:5b:7f:5c:bc:70:a7: 21:f5:ff:90:8a:88:e2:21:87:f6:83:42:96:c9:73:c6:99:1a: 7c:69:5c:7d:19:26:37:90:c8:89:69:89:f8:07:3f:bc:0b:9f: f2:9d:10:62:ff:8b:70:68:a4:bc:43:94:2a:9f:29:0d:29:67: fa:29:a6:f9:e4:cc:dd:7d:04:61:11:57:05:c3:af:2c:b5:3b: ac:0b:60:42:ff:95:c5:be:25:a6:c1:03:4c:84:7c:b4:9f:ca: 41:9b:bd:94:48:54:3b:a5:31:3d:d0:b6:6b:bb:1d:24:1c:98: b7:2f:47:28:af:81:27:04:80:a1:f1:15:c5:0d:ee:6e:c9:cf: 8e:7a:96:3d:d7:cb:f1:de:fa:0e:41:1d:9c:f1:8f:9f:0c:1e: 0b:c5:34:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfaP3+G2sARy9o7zeNQlyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkNjhkOWY1MmJjNzk1MmRkZjBhN2RmODFhMTFlZTE0M2Yz MzI3MGEwHhcNMjYwMjA5MTMwMDU1WhcNMjYwMjEwMTMwMDU1WjAzMTEwLwYDVQQD EyhmODFiZGQ4MDE0M2FhZjE0ZDhjNWI5ODNiZWQwZDc5YzY2ZDRkYjAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFA/LUn3W+g/pEUqgVhIpWdWfxyU wWA/aN/0tj2uQykrhB4qYzU1xrPbVSY3uiY8eUSm8++sYKX6dou0surk5szw3Xcg 3d+fSGnebIgfXfsvETsJ+SAr8TAIS4Qv/vrLfdZ1f8XoOtxnKRO+aTZkRl8VEx5V Rd6XHesNPmwaA5ARczI9fcMPZI8rY6Os/jf4iDbv34vGiNxFDnEaLZzPJxKMTv1f P66hcE4+Qu/ouDNN870Z41y4RHlkGu3FKdkxCldkGv4pZEfuHrvbfWg2BcXuzlE1 1F3qPW6jTIL/hAH73rD35r+wIGk79agQI32p5eD3grjErNv3Ghn7MND3UwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPgb3YAUOq8U2MW5g77Q15xm1NsBMB8GA1UdIwQY MBaAFP1o2fUrx5Ut3wp9+BoR7hQ/MycKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1dqWjlTdkhsUzNmQ24zNEdoSHVGRDh6SndvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9lMmI3MDktYjg0My00MjA1LWJhMzEt ZDUwNDVjNTAxNzA3LzEvX1dqWjlTdkhsUzNmQ24zNEdoSHVGRDh6SndvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny9lMmI3MDktYjg0My00MjA1LWJhMzEtZDUwNDVjNTAxNzA3 LzEvX1dqWjlTdkhsUzNmQ24zNEdoSHVGRDh6SndvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZS8Lb/g9 iO6JfbNUuIWhK/J87GYIBnB17dmLJhzIPl939uFBSBQJ90I8VouRbFtTZVq7fLOz Smf/cFhuNet2Zvgm8dd+y9kjw2Z3As9JF/qCcZ/O9IAn79AZDM9sdzn2neRkbYkP W39cvHCnIfX/kIqI4iGH9oNClslzxpkafGlcfRkmN5DIiWmJ+Ac/vAuf8p0QYv+L cGikvEOUKp8pDSln+imm+eTM3X0EYRFXBcOvLLU7rAtgQv+Vxb4lpsEDTIR8tJ/K QZu9lEhUO6UxPdC2a7sdJByYty9HKK+BJwSAofEVxQ3ubsnPjnqWPdfL8d76DkEd nPGPnwweC8U0xQ== -----END CERTIFICATE-----Generated at Mon Feb 9 22:20:41 2026 by rpki-client