This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/33fb90-189b-4e31-b92a-0c18d8597328/1/rwL7VrRZx6IaebaLThGKuHb8lqU.mft File: rwL7VrRZx6IaebaLThGKuHb8lqU.mft (raw, json) Hash identifier: L01/H/bpWwhsZYVW8Y2D4VsiooEkLWQbtPD5pwcC7tg= Subject key identifier: 78:3C:CF:CC:9B:42:F9:ED:BD:05:E1:46:E4:BE:3D:31:5A:99:72:95 Authority key identifier: AF:02:FB:56:B4:59:C7:A2:1A:79:B6:8B:4E:11:8A:B8:76:FC:96:A5 Certificate issuer: /CN=af02fb56b459c7a21a79b68b4e118ab876fc96a5 Certificate serial: 019C42B4111860B200CB1C162BD80CF04427 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwL7VrRZx6IaebaLThGKuHb8lqU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/33fb90-189b-4e31-b92a-0c18d8597328/1/rwL7VrRZx6IaebaLThGKuHb8lqU.mft Manifest number: 100B Signing time: Mon 09 Feb 2026 14:00:22 +0000 Manifest this update: Mon 09 Feb 2026 14:00:22 +0000 Manifest next update: Tue 10 Feb 2026 14:00:22 +0000 Files and hashes: 1: rwL7VrRZx6IaebaLThGKuHb8lqU.crl (hash: fDnLYXTBYXXb0KfTMBSgrqY2LqRYVYH7w0FRzSGOHF4=) 2: s9PnUrURA1UCKgGCXpOd5G6p8no.roa (hash: e5fYovHhc28JGLHPGhUlbL9alymDaPqLYlneZlPK+cQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/33fb90-189b-4e31-b92a-0c18d8597328/1/rwL7VrRZx6IaebaLThGKuHb8lqU.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/33fb90-189b-4e31-b92a-0c18d8597328/1/rwL7VrRZx6IaebaLThGKuHb8lqU.mft rsync://rpki.ripe.net/repository/DEFAULT/rwL7VrRZx6IaebaLThGKuHb8lqU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:11:18:60:b2:00:cb:1c:16:2b:d8:0c:f0:44:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af02fb56b459c7a21a79b68b4e118ab876fc96a5 Validity Not Before: Feb 9 14:00:22 2026 GMT Not After : Feb 10 14:00:22 2026 GMT Subject: CN=783ccfcc9b42f9edbd05e146e4be3d315a997295 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:54:79:80:f6:2d:9f:54:0d:d7:75:6c:74:7b: 76:c5:27:1b:50:47:a2:ba:72:21:f8:0f:e4:47:7b: 7c:b6:50:ce:f7:d8:01:af:f0:73:75:f8:f4:34:2a: 54:a1:72:75:03:e4:38:be:c8:04:8d:84:87:dc:8a: 52:6b:df:7a:7d:95:45:c7:6a:28:73:0f:0b:d8:d5: f1:88:8b:b7:12:e1:25:01:6e:a2:bd:3b:8e:fc:67: f0:c4:7d:6b:ee:00:b4:30:de:16:9f:7e:03:ec:37: 2f:50:c0:88:dd:fb:08:8b:d9:66:5c:bb:e2:ce:ec: 75:32:1f:ac:6f:cd:01:dc:ea:f2:f5:2b:43:1c:85: 82:c6:74:c5:90:f8:1f:46:be:9a:c0:ab:07:76:96: 54:5d:2c:b7:2d:c9:e6:e1:b4:9a:f8:01:e7:8e:02: c8:49:b1:b1:09:4e:01:9f:fc:ea:9b:bd:b6:9e:bd: b5:81:18:77:4b:4e:4e:40:28:df:c5:00:40:4c:ca: 46:2e:f3:f5:c1:4f:cd:9b:5d:4c:6e:42:70:ef:53: b4:dc:13:29:30:76:38:ab:dc:a2:92:9f:37:89:23: a8:17:8d:fb:1f:2c:8d:97:fb:29:0e:02:30:21:0f: e0:13:bf:a0:a7:99:93:ef:a4:24:d2:37:b6:09:d9: ac:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:3C:CF:CC:9B:42:F9:ED:BD:05:E1:46:E4:BE:3D:31:5A:99:72:95 X509v3 Authority Key Identifier: keyid:AF:02:FB:56:B4:59:C7:A2:1A:79:B6:8B:4E:11:8A:B8:76:FC:96:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwL7VrRZx6IaebaLThGKuHb8lqU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/33fb90-189b-4e31-b92a-0c18d8597328/1/rwL7VrRZx6IaebaLThGKuHb8lqU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/33fb90-189b-4e31-b92a-0c18d8597328/1/rwL7VrRZx6IaebaLThGKuHb8lqU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:56:02:46:42:e8:c7:9e:4a:43:d8:51:e8:fb:ee:35:04:74: 6d:e2:4b:7a:dd:1c:ad:6f:7f:8e:dd:5e:70:c7:11:90:cf:4c: e2:98:d5:f5:7c:6f:27:4e:37:68:da:3c:58:ba:e7:31:cd:22: 7d:ca:73:ad:d1:dc:d4:b7:c9:2f:e2:ba:60:96:da:44:ee:6e: da:da:74:7e:c1:40:1d:f5:f7:f4:0c:d0:21:4e:99:f8:50:c7: 77:44:b0:08:22:70:63:2d:9a:f0:5c:c5:e1:7e:a6:8b:31:45: 40:6f:94:92:31:34:7d:a1:3b:5a:4c:19:e7:bb:70:1c:47:a5: 64:c0:a4:3a:2d:3f:b0:36:49:f7:ba:f4:fc:f5:55:46:ef:c7: 6a:28:68:a4:e0:63:90:1c:91:d3:eb:ca:b4:4e:5b:b3:94:0b: 18:69:be:7a:0a:1c:5c:f1:8a:05:82:42:97:7d:c3:f7:e2:e4: 04:6b:6a:03:2b:f3:ad:e8:a7:04:b8:04:49:fb:e1:23:4a:08: 28:6f:ac:d9:15:7d:61:56:28:4b:91:66:1b:7b:64:39:3b:af: 00:c1:83:53:41:a9:ed:93:ad:93:04:44:e9:81:0f:1f:5f:38: 03:1c:5c:a1:c0:15:a6:eb:ca:d0:87:ab:b5:88:9a:a0:7d:13: 6b:80:74:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtBEYYLIAyxwWK9gM8EQnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmMDJmYjU2YjQ1OWM3YTIxYTc5YjY4YjRlMTE4YWI4NzZm Yzk2YTUwHhcNMjYwMjA5MTQwMDIyWhcNMjYwMjEwMTQwMDIyWjAzMTEwLwYDVQQD Eyg3ODNjY2ZjYzliNDJmOWVkYmQwNWUxNDZlNGJlM2QzMTVhOTk3Mjk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlR5gPYtn1QN13VsdHt2xScbUEei unIh+A/kR3t8tlDO99gBr/Bzdfj0NCpUoXJ1A+Q4vsgEjYSH3IpSa996fZVFx2oo cw8L2NXxiIu3EuElAW6ivTuO/GfwxH1r7gC0MN4Wn34D7DcvUMCI3fsIi9lmXLvi zux1Mh+sb80B3Ory9StDHIWCxnTFkPgfRr6awKsHdpZUXSy3Lcnm4bSa+AHnjgLI SbGxCU4Bn/zqm722nr21gRh3S05OQCjfxQBATMpGLvP1wU/Nm11MbkJw71O03BMp MHY4q9yikp83iSOoF437HyyNl/spDgIwIQ/gE7+gp5mT76Qk0je2CdmsMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHg8z8ybQvntvQXhRuS+PTFamXKVMB8GA1UdIwQY MBaAFK8C+1a0WceiGnm2i04Rirh2/JalMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcndMN1ZyUlp4NklhZWJhTFRoR0t1SGI4bHFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8zM2ZiOTAtMTg5Yi00ZTMxLWI5MmEt MGMxOGQ4NTk3MzI4LzEvcndMN1ZyUlp4NklhZWJhTFRoR0t1SGI4bHFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC8zM2ZiOTAtMTg5Yi00ZTMxLWI5MmEtMGMxOGQ4NTk3MzI4 LzEvcndMN1ZyUlp4NklhZWJhTFRoR0t1SGI4bHFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHFYCRkLo x55KQ9hR6PvuNQR0beJLet0crW9/jt1ecMcRkM9M4pjV9XxvJ043aNo8WLrnMc0i fcpzrdHc1LfJL+K6YJbaRO5u2tp0fsFAHfX39AzQIU6Z+FDHd0SwCCJwYy2a8FzF 4X6mizFFQG+UkjE0faE7WkwZ57twHEelZMCkOi0/sDZJ97r0/PVVRu/HaihopOBj kByR0+vKtE5bs5QLGGm+egocXPGKBYJCl33D9+LkBGtqAyvzreinBLgESfvhI0oI KG+s2RV9YVYoS5FmG3tkOTuvAMGDU0Gp7ZOtkwRE6YEPH184AxxcocAVpuvK0Ier tYiaoH0Ta4B0ZA== -----END CERTIFICATE-----Generated at Mon Feb 9 22:43:23 2026 by rpki-client