This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/be9311-66d8-4c19-8267-3c529bf62e54/1/wHdQuDER1Bcbv1XKAjIsGg3ArDI.mft File: wHdQuDER1Bcbv1XKAjIsGg3ArDI.mft (raw, json) Hash identifier: quUXmy3PFb9AVQ/xoTbOGNwhKwU3PZXnLfdIrJHCuSA= Subject key identifier: BB:44:43:46:AC:3F:ED:11:7C:0A:15:5C:21:12:99:F3:26:D2:61:D8 Authority key identifier: C0:77:50:B8:31:11:D4:17:1B:BF:55:CA:02:32:2C:1A:0D:C0:AC:32 Certificate issuer: /CN=c07750b83111d4171bbf55ca02322c1a0dc0ac32 Certificate serial: 019C43591023E19571CC5E0B61EDB459F7C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wHdQuDER1Bcbv1XKAjIsGg3ArDI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/be9311-66d8-4c19-8267-3c529bf62e54/1/wHdQuDER1Bcbv1XKAjIsGg3ArDI.mft Manifest number: 10E4 Signing time: Mon 09 Feb 2026 17:00:36 +0000 Manifest this update: Mon 09 Feb 2026 17:00:36 +0000 Manifest next update: Tue 10 Feb 2026 17:00:36 +0000 Files and hashes: 1: gWlv5iDtX9nVjLLKKMShSTPx4uA.roa (hash: LL5oSQlkIVfG3xLLP9DHUwmZyFU2l1CdAagBhNZJ0QQ=) 2: wHdQuDER1Bcbv1XKAjIsGg3ArDI.crl (hash: DajCkyhjmAKzax22/Yz7rgnpNmsmaVs4UpH3d5NHlxA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/be9311-66d8-4c19-8267-3c529bf62e54/1/wHdQuDER1Bcbv1XKAjIsGg3ArDI.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/be9311-66d8-4c19-8267-3c529bf62e54/1/wHdQuDER1Bcbv1XKAjIsGg3ArDI.mft rsync://rpki.ripe.net/repository/DEFAULT/wHdQuDER1Bcbv1XKAjIsGg3ArDI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:59:10:23:e1:95:71:cc:5e:0b:61:ed:b4:59:f7:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c07750b83111d4171bbf55ca02322c1a0dc0ac32 Validity Not Before: Feb 9 17:00:36 2026 GMT Not After : Feb 10 17:00:36 2026 GMT Subject: CN=bb444346ac3fed117c0a155c211299f326d261d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:63:fc:bf:1c:2f:6d:c6:a0:f6:6c:ba:6f:8c: 23:5e:37:eb:4f:74:60:91:79:9e:2e:8b:e1:de:6f: 51:8d:08:20:de:a2:d7:2c:b6:94:fd:fd:43:00:7e: 74:ca:33:01:3b:cb:ca:10:ec:f1:79:68:37:f4:97: 77:fb:aa:1b:cc:a5:83:3f:ca:48:0a:4c:09:cf:15: 54:ac:09:4d:e2:39:fe:bb:48:61:95:eb:2f:a2:41: 8e:3e:49:ae:9a:d1:51:b6:d2:3a:7a:b3:65:4c:83: 09:ac:84:33:a9:8f:37:33:54:55:a1:27:84:ea:b3: 94:3f:9b:2a:79:23:06:b9:a2:f3:15:37:13:15:a0: ef:36:c8:8d:bb:ca:a4:c0:44:53:05:4a:41:4f:c8: 22:85:b7:48:8c:6c:eb:56:bd:57:cd:d3:87:d9:45: 2e:b1:75:a7:86:24:1e:df:af:a8:80:0c:96:20:12: 3a:a6:44:48:51:78:a3:d8:b6:88:d0:b6:d5:c3:b6: 6f:2a:ee:fb:43:51:6d:80:69:f9:e3:2a:8a:83:66: e3:6f:44:b4:94:cb:b8:5c:0b:70:4d:cd:83:93:2b: 2a:67:b2:48:b9:d6:ce:13:9d:92:8d:dc:73:45:25: d5:06:3f:e2:df:d5:e2:67:d7:c3:8e:b1:83:c4:71: 9e:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:44:43:46:AC:3F:ED:11:7C:0A:15:5C:21:12:99:F3:26:D2:61:D8 X509v3 Authority Key Identifier: keyid:C0:77:50:B8:31:11:D4:17:1B:BF:55:CA:02:32:2C:1A:0D:C0:AC:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wHdQuDER1Bcbv1XKAjIsGg3ArDI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/be9311-66d8-4c19-8267-3c529bf62e54/1/wHdQuDER1Bcbv1XKAjIsGg3ArDI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/be9311-66d8-4c19-8267-3c529bf62e54/1/wHdQuDER1Bcbv1XKAjIsGg3ArDI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:e6:5e:17:e1:bb:a3:b8:48:9b:49:b3:44:ce:8a:0c:7b:b3: 57:07:a0:fa:28:b7:b0:dd:ac:35:9f:7b:bc:1d:f0:6e:9b:fe: 35:23:7e:fc:9c:ca:fb:72:e5:fc:3f:84:a0:7b:d8:e2:70:ef: f3:11:3e:52:87:64:2e:25:53:5a:ff:49:6c:3b:b6:b1:dc:48: 58:37:c4:e9:66:ec:42:76:4e:de:11:a6:51:da:e3:e6:65:78: 84:d1:70:ce:c7:1b:9a:40:b6:67:37:e1:69:23:8a:d1:f7:bf: 67:d5:bb:49:68:dc:ab:ec:d0:0b:30:71:89:84:9d:0c:83:23: f5:70:b4:96:51:9d:83:4e:31:7d:1a:df:bb:3b:e7:4c:23:f9: e2:96:36:0a:1b:3b:3f:e0:fb:ee:74:3e:8e:fe:59:31:a9:d7: 8d:88:82:6d:02:83:83:76:ea:36:4a:2f:2d:53:19:34:9c:fa: de:c5:0a:8c:11:9f:7b:04:98:48:13:fb:15:6b:75:6e:bf:2d: f6:5b:0d:d0:6f:14:14:1f:e4:28:4d:75:dc:d5:41:f3:8e:aa: fd:ed:97:b8:0f:98:eb:33:0f:e6:96:a3:23:a3:13:06:f8:ed: 73:96:19:74:5b:9f:04:cf:1f:c1:19:7c:d1:e1:00:07:10:9a: 1a:4b:bb:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWRAj4ZVxzF4LYe20WffHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwNzc1MGI4MzExMWQ0MTcxYmJmNTVjYTAyMzIyYzFhMGRj MGFjMzIwHhcNMjYwMjA5MTcwMDM2WhcNMjYwMjEwMTcwMDM2WjAzMTEwLwYDVQQD EyhiYjQ0NDM0NmFjM2ZlZDExN2MwYTE1NWMyMTEyOTlmMzI2ZDI2MWQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWP8vxwvbcag9my6b4wjXjfrT3Rg kXmeLovh3m9RjQgg3qLXLLaU/f1DAH50yjMBO8vKEOzxeWg39Jd3+6obzKWDP8pI CkwJzxVUrAlN4jn+u0hhlesvokGOPkmumtFRttI6erNlTIMJrIQzqY83M1RVoSeE 6rOUP5sqeSMGuaLzFTcTFaDvNsiNu8qkwERTBUpBT8gihbdIjGzrVr1XzdOH2UUu sXWnhiQe36+ogAyWIBI6pkRIUXij2LaI0LbVw7ZvKu77Q1FtgGn54yqKg2bjb0S0 lMu4XAtwTc2DkysqZ7JIudbOE52SjdxzRSXVBj/i39XiZ9fDjrGDxHGenwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLtEQ0asP+0RfAoVXCESmfMm0mHYMB8GA1UdIwQY MBaAFMB3ULgxEdQXG79VygIyLBoNwKwyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0hkUXVERVIxQmNidjFYS0FqSXNHZzNBckRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9iZTkzMTEtNjZkOC00YzE5LTgyNjct M2M1MjliZjYyZTU0LzEvd0hkUXVERVIxQmNidjFYS0FqSXNHZzNBckRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS9iZTkzMTEtNjZkOC00YzE5LTgyNjctM2M1MjliZjYyZTU0 LzEvd0hkUXVERVIxQmNidjFYS0FqSXNHZzNBckRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkeZeF+G7 o7hIm0mzRM6KDHuzVweg+ii3sN2sNZ97vB3wbpv+NSN+/JzK+3Ll/D+EoHvY4nDv 8xE+UodkLiVTWv9JbDu2sdxIWDfE6WbsQnZO3hGmUdrj5mV4hNFwzscbmkC2Zzfh aSOK0fe/Z9W7SWjcq+zQCzBxiYSdDIMj9XC0llGdg04xfRrfuzvnTCP54pY2Chs7 P+D77nQ+jv5ZManXjYiCbQKDg3bqNkovLVMZNJz63sUKjBGfewSYSBP7FWt1br8t 9lsN0G8UFB/kKE113NVB846q/e2XuA+Y6zMP5pajI6MTBvjtc5YZdFufBM8fwRl8 0eEABxCaGku7uw== -----END CERTIFICATE-----Generated at Mon Feb 9 22:40:44 2026 by rpki-client