This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.mft File: wznRHn1JkvmvswQx42BCqv3eXAo.mft (raw, json) Hash identifier: CKrU0uIo/p6CHMwMKCoY/KfuCLNBUTAPVhRJ+sQrcqg= Subject key identifier: A1:E9:EB:4F:5C:10:B1:A7:A5:FE:85:23:53:BE:09:C9:47:AC:23:A8 Authority key identifier: C3:39:D1:1E:7D:49:92:F9:AF:B3:04:31:E3:60:42:AA:FD:DE:5C:0A Certificate issuer: /CN=c339d11e7d4992f9afb30431e36042aafdde5c0a Certificate serial: 019C4390A1984F83F389E189B2352ED4DCD5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wznRHn1JkvmvswQx42BCqv3eXAo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.mft Manifest number: 07C0 Signing time: Mon 09 Feb 2026 18:01:17 +0000 Manifest this update: Mon 09 Feb 2026 18:01:17 +0000 Manifest next update: Tue 10 Feb 2026 18:01:17 +0000 Files and hashes: 1: n1oRFTjCd9cFrEeWK2PvigDChJY.roa (hash: riBn9NUOMZo7Fygg/p6pfL41K2EW13FXu4gut4vgGRs=) 2: wznRHn1JkvmvswQx42BCqv3eXAo.crl (hash: O5b1cMn5lkQ9vy92NxiK51DCCYBwZTtN5KztjbF2TLw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.mft rsync://rpki.ripe.net/repository/DEFAULT/wznRHn1JkvmvswQx42BCqv3eXAo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:a1:98:4f:83:f3:89:e1:89:b2:35:2e:d4:dc:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c339d11e7d4992f9afb30431e36042aafdde5c0a Validity Not Before: Feb 9 18:01:17 2026 GMT Not After : Feb 10 18:01:17 2026 GMT Subject: CN=a1e9eb4f5c10b1a7a5fe852353be09c947ac23a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:c7:92:82:cc:e7:96:42:d3:c6:6e:0c:2a:06: c5:1a:1c:01:83:6f:b9:3a:4c:f3:09:34:5b:98:e6: fe:c2:55:bb:83:47:e4:20:16:bf:d4:c6:c0:ff:64: 60:e1:a8:67:16:c6:0f:da:6d:33:46:ac:09:a6:d1: 4a:9c:9e:d1:3b:11:0e:77:67:44:c4:2b:be:53:12: d0:c2:b1:5d:1e:15:cf:65:61:71:75:5b:d6:ef:76: e2:b9:89:0a:32:03:5d:f6:44:63:6c:eb:13:50:11: fd:17:59:c0:6b:22:e6:96:0b:05:f3:dc:74:1d:76: fa:c4:4c:96:87:ca:e2:c3:80:84:77:d4:13:05:7d: 29:e6:b7:54:90:6c:a3:ba:d9:cd:8e:73:a1:4c:44: 02:c2:6c:18:e6:d3:68:b5:a3:1c:c5:9e:8b:11:3e: 27:23:f3:cf:82:68:e8:40:da:8c:71:19:91:47:2d: ca:f0:a5:70:dd:17:e1:ce:d2:2b:54:19:59:d0:7b: 2e:16:b4:fb:53:34:44:1f:fc:b5:bf:ba:8f:be:b4: d5:a8:ad:e0:1e:84:fe:ad:f1:4a:da:67:59:4c:e6: bd:c0:32:d1:f9:97:21:b0:f5:17:08:3c:9f:b8:61: 26:b9:97:9d:0c:04:63:13:a8:a5:41:62:c2:c7:2f: a5:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:E9:EB:4F:5C:10:B1:A7:A5:FE:85:23:53:BE:09:C9:47:AC:23:A8 X509v3 Authority Key Identifier: keyid:C3:39:D1:1E:7D:49:92:F9:AF:B3:04:31:E3:60:42:AA:FD:DE:5C:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wznRHn1JkvmvswQx42BCqv3eXAo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:bc:94:bd:f5:f9:74:f2:c1:79:6d:0a:8b:b3:ed:29:58:83: 63:c4:20:e9:80:3e:9e:f2:55:1a:14:61:4d:bf:ec:2b:42:34: 11:60:c5:6f:a9:eb:11:8a:45:c8:75:b3:fd:88:5f:18:73:bb: 6a:5d:f7:fd:31:65:c2:24:d1:ab:b3:fd:f3:b9:1d:92:98:e1: c2:e4:12:cf:f9:e5:d8:56:f8:c6:d0:02:eb:95:14:69:cd:be: 57:a9:46:5b:64:78:bf:0e:4e:30:3d:2d:47:5a:9b:c0:a9:59: e6:d6:3c:d9:f5:61:4a:b8:eb:ef:e7:25:39:dd:89:7b:4f:ca: 6a:b7:f8:ac:54:ea:5e:09:f9:ff:0b:c2:00:0d:14:78:7b:31: a5:9b:48:99:c9:78:a9:b9:37:19:c8:85:83:31:c1:6a:ff:fd: ad:54:f0:19:ce:78:35:79:2d:eb:40:ea:6b:2e:3c:58:87:a7: b9:83:b1:ba:0d:70:17:51:1c:da:1c:74:3b:47:1e:82:e4:07: 08:c0:83:73:79:f5:a9:b0:c6:1b:f4:5c:40:c9:0b:3e:83:2a: d6:77:50:cd:8a:7e:0f:dd:f3:bd:7a:84:81:3e:6e:15:25:6b: ac:fc:48:03:4f:1f:2b:a2:36:ae:f2:50:5b:7d:95:eb:37:c2: f8:d1:b3:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkKGYT4PzieGJsjUu1NzVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzMzlkMTFlN2Q0OTkyZjlhZmIzMDQzMWUzNjA0MmFhZmRk ZTVjMGEwHhcNMjYwMjA5MTgwMTE3WhcNMjYwMjEwMTgwMTE3WjAzMTEwLwYDVQQD EyhhMWU5ZWI0ZjVjMTBiMWE3YTVmZTg1MjM1M2JlMDljOTQ3YWMyM2E4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8eSgsznlkLTxm4MKgbFGhwBg2+5 OkzzCTRbmOb+wlW7g0fkIBa/1MbA/2Rg4ahnFsYP2m0zRqwJptFKnJ7ROxEOd2dE xCu+UxLQwrFdHhXPZWFxdVvW73biuYkKMgNd9kRjbOsTUBH9F1nAayLmlgsF89x0 HXb6xEyWh8riw4CEd9QTBX0p5rdUkGyjutnNjnOhTEQCwmwY5tNotaMcxZ6LET4n I/PPgmjoQNqMcRmRRy3K8KVw3RfhztIrVBlZ0HsuFrT7UzREH/y1v7qPvrTVqK3g HoT+rfFK2mdZTOa9wDLR+ZchsPUXCDyfuGEmuZedDARjE6ilQWLCxy+ldwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKHp609cELGnpf6FI1O+CclHrCOoMB8GA1UdIwQY MBaAFMM50R59SZL5r7MEMeNgQqr93lwKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3puUkhuMUprdm12c3dReDQyQkNxdjNlWEFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9jMGRlZjYtYmMwYS00MjIxLTk3OTEt MmQ4MDE5MDE3ODQ5LzEvd3puUkhuMUprdm12c3dReDQyQkNxdjNlWEFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi9jMGRlZjYtYmMwYS00MjIxLTk3OTEtMmQ4MDE5MDE3ODQ5 LzEvd3puUkhuMUprdm12c3dReDQyQkNxdjNlWEFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKbyUvfX5 dPLBeW0Ki7PtKViDY8Qg6YA+nvJVGhRhTb/sK0I0EWDFb6nrEYpFyHWz/YhfGHO7 al33/TFlwiTRq7P987kdkpjhwuQSz/nl2Fb4xtAC65UUac2+V6lGW2R4vw5OMD0t R1qbwKlZ5tY82fVhSrjr7+clOd2Je0/Karf4rFTqXgn5/wvCAA0UeHsxpZtImcl4 qbk3GciFgzHBav/9rVTwGc54NXkt60Dqay48WIenuYOxug1wF1Ec2hx0O0ceguQH CMCDc3n1qbDGG/RcQMkLPoMq1ndQzYp+D93zvXqEgT5uFSVrrPxIA08fK6I2rvJQ W32V6zfC+NGzXA== -----END CERTIFICATE-----Generated at Tue Feb 10 01:31:25 2026 by rpki-client