This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/5a3ee7-d424-4a1d-88dd-0d89f0c33212/1/WA5JRAKV5QU-0Cq8bHmei1nUzuA.mft File: WA5JRAKV5QU-0Cq8bHmei1nUzuA.mft (raw, json) Hash identifier: OOQkIVixCaN5FGlYIHdU1nJnJHase20RBYCjjogzLao= Subject key identifier: 53:05:B0:32:84:D3:84:68:BC:48:0D:B6:9F:1A:D4:60:C4:0E:4F:F1 Authority key identifier: 58:0E:49:44:02:95:E5:05:3E:D0:2A:BC:6C:79:9E:8B:59:D4:CE:E0 Certificate issuer: /CN=580e49440295e5053ed02abc6c799e8b59d4cee0 Certificate serial: 019C41A2133F772B9418B3C5FECD77729717 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WA5JRAKV5QU-0Cq8bHmei1nUzuA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/5a3ee7-d424-4a1d-88dd-0d89f0c33212/1/WA5JRAKV5QU-0Cq8bHmei1nUzuA.mft Manifest number: 0B Signing time: Mon 09 Feb 2026 09:01:06 +0000 Manifest this update: Mon 09 Feb 2026 09:01:06 +0000 Manifest next update: Tue 10 Feb 2026 09:01:06 +0000 Files and hashes: 1: WA5JRAKV5QU-0Cq8bHmei1nUzuA.crl (hash: 8RaGjCD5PJKCY/l/rkHiIPQBrLPNI5+HFD5wm2eSsUU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/5a3ee7-d424-4a1d-88dd-0d89f0c33212/1/WA5JRAKV5QU-0Cq8bHmei1nUzuA.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/5a3ee7-d424-4a1d-88dd-0d89f0c33212/1/WA5JRAKV5QU-0Cq8bHmei1nUzuA.mft rsync://rpki.ripe.net/repository/DEFAULT/WA5JRAKV5QU-0Cq8bHmei1nUzuA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a2:13:3f:77:2b:94:18:b3:c5:fe:cd:77:72:97:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=580e49440295e5053ed02abc6c799e8b59d4cee0 Validity Not Before: Feb 9 09:01:06 2026 GMT Not After : Feb 10 09:01:06 2026 GMT Subject: CN=5305b03284d38468bc480db69f1ad460c40e4ff1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:32:3a:e7:25:ac:ce:20:1d:10:44:8c:6c:41: af:67:59:98:66:30:57:4c:b6:85:1d:fc:10:32:3b: 77:f6:f4:7e:f5:ed:0b:64:1a:6b:12:e5:23:9e:3f: 19:08:30:6e:ec:02:ac:91:ce:1e:14:fc:15:b4:9c: d8:9f:4a:b9:05:ae:10:80:a4:2a:24:62:c9:ee:a3: 59:b4:3c:0f:ce:5a:72:b0:5d:f8:63:1a:ac:22:a8: ae:0e:0d:9c:fc:53:8a:d5:8c:5c:32:21:27:6e:71: 52:18:70:97:7e:79:2e:a1:7e:da:5e:34:ff:e3:e9: 83:eb:17:e1:21:7f:56:3f:51:02:44:cc:95:60:34: f4:e6:66:98:bb:31:3a:0e:3f:59:e0:29:ce:6b:67: 0d:2b:45:6a:ec:24:b4:ef:46:56:15:f3:ff:f5:34: ae:83:31:66:d2:24:6d:8f:de:90:83:42:80:3c:19: 5a:b7:60:cc:48:48:e9:76:83:62:82:9f:9e:ce:0b: f6:05:03:88:46:7d:b3:29:bb:2e:fc:46:59:b2:de: 33:28:d1:fd:e0:c1:c7:9c:df:f2:18:75:b1:56:cc: 69:ce:0a:bd:ad:d1:cc:00:be:e8:66:0e:93:e5:f3: 81:c0:c2:b0:f8:d0:dc:ef:91:57:c0:88:e9:4d:06: 44:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:05:B0:32:84:D3:84:68:BC:48:0D:B6:9F:1A:D4:60:C4:0E:4F:F1 X509v3 Authority Key Identifier: keyid:58:0E:49:44:02:95:E5:05:3E:D0:2A:BC:6C:79:9E:8B:59:D4:CE:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WA5JRAKV5QU-0Cq8bHmei1nUzuA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5a3ee7-d424-4a1d-88dd-0d89f0c33212/1/WA5JRAKV5QU-0Cq8bHmei1nUzuA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5a3ee7-d424-4a1d-88dd-0d89f0c33212/1/WA5JRAKV5QU-0Cq8bHmei1nUzuA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:e5:e0:fc:d5:69:9d:c8:43:3c:cf:a1:c4:d8:21:0d:31:d2: e9:60:0e:9f:61:58:65:81:a9:51:85:20:ff:34:5e:75:2a:28: 55:ba:e3:f2:0e:da:94:f4:28:37:22:3f:8d:2c:fb:45:19:33: da:ce:8b:64:0a:7e:dc:4b:67:c8:a9:64:e0:05:54:46:61:c4: bd:3c:3e:86:7f:89:9c:f1:63:ca:fe:85:0b:c9:a0:0e:a4:d9: 99:56:59:0b:8e:eb:ef:8c:80:1c:78:e8:02:3f:f5:eb:84:45: 91:a6:5d:5e:7e:42:e7:e1:ad:bc:02:a0:6a:53:9c:54:20:4e: 63:e0:fe:b5:c3:60:30:5a:c3:0f:46:14:9b:53:99:2e:a0:28: e3:af:5b:ab:1e:59:86:ef:a2:76:67:44:94:b0:65:4f:56:62: cb:50:df:d5:99:ca:d6:ff:be:bf:b0:9a:8a:5f:ef:38:e4:bd: 2f:e1:c9:1e:e3:6f:16:df:ca:5e:4a:8e:75:c4:3a:0a:36:ca: 44:f7:2b:bd:ee:f3:85:13:4d:b8:49:d6:42:21:64:9d:5b:23: cd:eb:bd:5b:46:31:ce:a3:e0:e2:b1:ab:83:8e:ad:a0:af:c9: f3:40:c9:ac:e3:b1:d2:b6:04:0a:56:17:97:da:d2:0a:89:c5: bc:df:38:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBohM/dyuUGLPF/s13cpcXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4MGU0OTQ0MDI5NWU1MDUzZWQwMmFiYzZjNzk5ZThiNTlk NGNlZTAwHhcNMjYwMjA5MDkwMTA2WhcNMjYwMjEwMDkwMTA2WjAzMTEwLwYDVQQD Eyg1MzA1YjAzMjg0ZDM4NDY4YmM0ODBkYjY5ZjFhZDQ2MGM0MGU0ZmYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDI65yWsziAdEESMbEGvZ1mYZjBX TLaFHfwQMjt39vR+9e0LZBprEuUjnj8ZCDBu7AKskc4eFPwVtJzYn0q5Ba4QgKQq JGLJ7qNZtDwPzlpysF34YxqsIqiuDg2c/FOK1YxcMiEnbnFSGHCXfnkuoX7aXjT/ 4+mD6xfhIX9WP1ECRMyVYDT05maYuzE6Dj9Z4CnOa2cNK0Vq7CS070ZWFfP/9TSu gzFm0iRtj96Qg0KAPBlat2DMSEjpdoNigp+ezgv2BQOIRn2zKbsu/EZZst4zKNH9 4MHHnN/yGHWxVsxpzgq9rdHMAL7oZg6T5fOBwMKw+NDc75FXwIjpTQZEFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFMFsDKE04RovEgNtp8a1GDEDk/xMB8GA1UdIwQY MBaAFFgOSUQCleUFPtAqvGx5notZ1M7gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0E1SlJBS1Y1UVUtMENxOGJIbWVpMW5VenVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC81YTNlZTctZDQyNC00YTFkLTg4ZGQt MGQ4OWYwYzMzMjEyLzEvV0E1SlJBS1Y1UVUtMENxOGJIbWVpMW5VenVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC81YTNlZTctZDQyNC00YTFkLTg4ZGQtMGQ4OWYwYzMzMjEy LzEvV0E1SlJBS1Y1UVUtMENxOGJIbWVpMW5VenVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeeXg/NVp nchDPM+hxNghDTHS6WAOn2FYZYGpUYUg/zRedSooVbrj8g7alPQoNyI/jSz7RRkz 2s6LZAp+3EtnyKlk4AVURmHEvTw+hn+JnPFjyv6FC8mgDqTZmVZZC47r74yAHHjo Aj/164RFkaZdXn5C5+GtvAKgalOcVCBOY+D+tcNgMFrDD0YUm1OZLqAo469bqx5Z hu+idmdElLBlT1Ziy1Df1ZnK1v++v7Cail/vOOS9L+HJHuNvFt/KXkqOdcQ6CjbK RPcrve7zhRNNuEnWQiFknVsjzeu9W0YxzqPg4rGrg46toK/J80DJrOOx0rYEClYX l9rSConFvN84Vg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:48:00 2026 by rpki-client