This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/153d53-6e69-4301-abd3-f311bac2a37f/1/wb80sZClHOUwAleRGvMEBPSVH7Y.mft File: wb80sZClHOUwAleRGvMEBPSVH7Y.mft (raw, json) Hash identifier: iH5nkDL2NHjG2Yady6kO7LJuV1fMVYLX47UbQF6Ndn0= Subject key identifier: BA:A6:0D:00:7F:27:A4:66:07:48:1F:C1:00:A3:0B:44:1E:9B:80:DC Authority key identifier: C1:BF:34:B1:90:A5:1C:E5:30:02:57:91:1A:F3:04:04:F4:95:1F:B6 Certificate issuer: /CN=c1bf34b190a51ce5300257911af30404f4951fb6 Certificate serial: 019C43FDBE1FA1D83AB5E44B93B2BBD53F2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wb80sZClHOUwAleRGvMEBPSVH7Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/153d53-6e69-4301-abd3-f311bac2a37f/1/wb80sZClHOUwAleRGvMEBPSVH7Y.mft Manifest number: 180F Signing time: Mon 09 Feb 2026 20:00:28 +0000 Manifest this update: Mon 09 Feb 2026 20:00:28 +0000 Manifest next update: Tue 10 Feb 2026 20:00:28 +0000 Files and hashes: 1: Y29t-Qutit4Mtq2FXXVVajwYkJ8.roa (hash: IFvAqWAV36VhOvXLelo0nvun/QoXpwk8T72OiDJu/UQ=) 2: wb80sZClHOUwAleRGvMEBPSVH7Y.crl (hash: OW6WLvZTlJzYjsAGgt+kvajKTF1Aykv4GEvY/RnV09A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/153d53-6e69-4301-abd3-f311bac2a37f/1/wb80sZClHOUwAleRGvMEBPSVH7Y.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/153d53-6e69-4301-abd3-f311bac2a37f/1/wb80sZClHOUwAleRGvMEBPSVH7Y.mft rsync://rpki.ripe.net/repository/DEFAULT/wb80sZClHOUwAleRGvMEBPSVH7Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fd:be:1f:a1:d8:3a:b5:e4:4b:93:b2:bb:d5:3f:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1bf34b190a51ce5300257911af30404f4951fb6 Validity Not Before: Feb 9 20:00:28 2026 GMT Not After : Feb 10 20:00:28 2026 GMT Subject: CN=baa60d007f27a46607481fc100a30b441e9b80dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:93:79:eb:42:8c:26:d0:f9:10:85:4b:b5:31: 24:b9:a6:75:a8:f3:5c:2e:5c:71:e7:77:dd:70:33: 20:5d:9f:72:12:84:7d:25:9e:68:d7:a5:e9:48:62: e8:3a:d3:a5:36:90:f7:2f:dd:d3:6b:f2:af:59:18: 25:24:1a:52:53:5a:74:29:25:6c:d1:65:46:65:60: 76:14:b5:d6:f3:11:fb:1f:9a:9f:b4:fd:3e:b1:34: dc:e0:19:98:b3:31:cb:ad:27:1a:5d:29:2c:9e:f5: e2:fb:8c:d3:ed:c0:43:4a:5a:62:e8:64:4d:c2:c4: 0d:5a:df:27:0c:77:4b:52:5f:ba:76:9d:a9:1b:b0: 52:b7:c6:90:b7:ec:e4:12:59:dd:1e:fb:69:0b:7b: b8:7c:8f:ff:86:80:07:0a:5c:a0:74:65:29:09:f6: 6d:2d:92:8b:92:ad:49:75:c0:fd:f5:0b:f1:c4:f5: 70:7c:9c:26:90:92:2f:63:ff:f6:a0:c3:ae:e1:6f: dc:48:28:3e:3d:3f:ec:91:3a:42:af:64:66:5b:31: a8:e8:a9:b1:2d:76:09:3e:48:3d:a0:d5:0a:e7:c5: 46:ac:74:04:20:fb:1d:1f:44:59:5a:e9:c1:b0:9c: e0:53:6f:2f:c0:e9:b0:35:68:c7:97:f7:32:a0:a6: a7:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:A6:0D:00:7F:27:A4:66:07:48:1F:C1:00:A3:0B:44:1E:9B:80:DC X509v3 Authority Key Identifier: keyid:C1:BF:34:B1:90:A5:1C:E5:30:02:57:91:1A:F3:04:04:F4:95:1F:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wb80sZClHOUwAleRGvMEBPSVH7Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/153d53-6e69-4301-abd3-f311bac2a37f/1/wb80sZClHOUwAleRGvMEBPSVH7Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/153d53-6e69-4301-abd3-f311bac2a37f/1/wb80sZClHOUwAleRGvMEBPSVH7Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:16:14:22:81:7d:03:64:c7:b5:8b:3c:02:7a:54:59:ca:57: 0a:ce:f0:dd:f5:88:75:bb:56:50:bc:6e:ab:2c:85:bd:b1:e5: da:ab:4b:a6:d8:7c:82:1c:95:4a:9c:fb:91:22:28:3d:14:14: 15:18:b2:be:36:00:8e:da:9c:58:55:6c:dc:1d:6f:05:44:bc: 98:ca:76:8d:bb:53:48:f5:43:b5:0e:37:c3:99:9b:2c:c1:3d: 06:ea:70:4f:05:4e:13:20:81:d1:da:73:72:37:82:a1:58:8c: d7:b8:a3:ce:17:94:cd:43:16:95:cc:4c:c1:28:86:d0:63:cb: 2b:bc:b8:fe:60:f4:0b:9a:ab:a0:80:de:e2:b7:b8:83:71:11: 93:12:ca:80:c5:e8:50:63:b3:b2:5e:39:66:ee:66:f9:f4:e6: 12:4d:6e:2f:68:cc:3c:f2:6b:b0:a9:6f:65:be:bf:e1:2f:a2: 18:e7:bc:ba:56:5e:82:96:f5:8d:0c:48:7f:52:e8:ae:86:60: aa:64:f2:b2:5c:b8:87:1f:52:0b:46:3f:84:f6:93:e7:8b:fb: 2f:66:cf:30:2a:d3:d8:0a:b3:52:18:03:e2:9e:11:29:b4:2f: 1c:09:82:b7:04:87:5a:9f:09:06:0a:8b:0f:bf:40:47:78:fb: 7d:56:0d:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/b4fodg6teRLk7K71T8tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxYmYzNGIxOTBhNTFjZTUzMDAyNTc5MTFhZjMwNDA0ZjQ5 NTFmYjYwHhcNMjYwMjA5MjAwMDI4WhcNMjYwMjEwMjAwMDI4WjAzMTEwLwYDVQQD EyhiYWE2MGQwMDdmMjdhNDY2MDc0ODFmYzEwMGEzMGI0NDFlOWI4MGRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJN560KMJtD5EIVLtTEkuaZ1qPNc Llxx53fdcDMgXZ9yEoR9JZ5o16XpSGLoOtOlNpD3L93Ta/KvWRglJBpSU1p0KSVs 0WVGZWB2FLXW8xH7H5qftP0+sTTc4BmYszHLrScaXSksnvXi+4zT7cBDSlpi6GRN wsQNWt8nDHdLUl+6dp2pG7BSt8aQt+zkElndHvtpC3u4fI//hoAHClygdGUpCfZt LZKLkq1JdcD99QvxxPVwfJwmkJIvY//2oMOu4W/cSCg+PT/skTpCr2RmWzGo6Kmx LXYJPkg9oNUK58VGrHQEIPsdH0RZWunBsJzgU28vwOmwNWjHl/cyoKaniwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLqmDQB/J6RmB0gfwQCjC0Qem4DcMB8GA1UdIwQY MBaAFMG/NLGQpRzlMAJXkRrzBAT0lR+2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2I4MHNaQ2xIT1V3QWxlUkd2TUVCUFNWSDdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS8xNTNkNTMtNmU2OS00MzAxLWFiZDMt ZjMxMWJhYzJhMzdmLzEvd2I4MHNaQ2xIT1V3QWxlUkd2TUVCUFNWSDdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS8xNTNkNTMtNmU2OS00MzAxLWFiZDMtZjMxMWJhYzJhMzdm LzEvd2I4MHNaQ2xIT1V3QWxlUkd2TUVCUFNWSDdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXxYUIoF9 A2THtYs8AnpUWcpXCs7w3fWIdbtWULxuqyyFvbHl2qtLpth8ghyVSpz7kSIoPRQU FRiyvjYAjtqcWFVs3B1vBUS8mMp2jbtTSPVDtQ43w5mbLME9BupwTwVOEyCB0dpz cjeCoViM17ijzheUzUMWlcxMwSiG0GPLK7y4/mD0C5qroIDe4re4g3ERkxLKgMXo UGOzsl45Zu5m+fTmEk1uL2jMPPJrsKlvZb6/4S+iGOe8ulZegpb1jQxIf1LoroZg qmTysly4hx9SC0Y/hPaT54v7L2bPMCrT2AqzUhgD4p4RKbQvHAmCtwSHWp8JBgqL D79AR3j7fVYNFg== -----END CERTIFICATE-----Generated at Tue Feb 10 04:33:28 2026 by rpki-client