This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.mft File: wKIzWQ3lhuDFWCHG9tVzKvyEEik.mft (raw, json) Hash identifier: SpHBmqZ7GRSrVflwwXJNERDHF3MVinUWSHqXmNlTUD0= Subject key identifier: 18:59:67:28:99:A6:16:74:B6:A6:A4:3A:77:C7:21:F0:BD:19:50:BF Authority key identifier: C0:A2:33:59:0D:E5:86:E0:C5:58:21:C6:F6:D5:73:2A:FC:84:12:29 Certificate issuer: /CN=c0a233590de586e0c55821c6f6d5732afc841229 Certificate serial: 019C42B4877CFFAD5897CC15841765B65620 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wKIzWQ3lhuDFWCHG9tVzKvyEEik.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.mft Manifest number: 1815 Signing time: Mon 09 Feb 2026 14:00:53 +0000 Manifest this update: Mon 09 Feb 2026 14:00:53 +0000 Manifest next update: Tue 10 Feb 2026 14:00:53 +0000 Files and hashes: 1: iTxkGMwghR3F8OYGNZTj6Coxz2o.roa (hash: 3IWO290f4BpEo42cnDH0C8gpXxBNeOVm/2imb34ZTKI=) 2: wKIzWQ3lhuDFWCHG9tVzKvyEEik.crl (hash: 0sajxBUd89xjJAK9aTsXCwzNuvdP5+9dXhCJkuDZcTs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.mft rsync://rpki.ripe.net/repository/DEFAULT/wKIzWQ3lhuDFWCHG9tVzKvyEEik.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:87:7c:ff:ad:58:97:cc:15:84:17:65:b6:56:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0a233590de586e0c55821c6f6d5732afc841229 Validity Not Before: Feb 9 14:00:53 2026 GMT Not After : Feb 10 14:00:53 2026 GMT Subject: CN=1859672899a61674b6a6a43a77c721f0bd1950bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:a1:b0:36:55:0c:66:2e:e4:01:8f:23:c0:82: cc:bf:da:97:e4:b5:60:cb:ae:33:15:4b:be:91:1a: 92:94:ac:df:f0:0b:33:68:20:d8:ba:d5:06:69:0b: 24:d4:4c:42:a2:38:22:48:e6:8d:87:eb:c0:fe:14: 7b:6c:36:2f:8e:96:a2:31:11:7c:c4:fd:64:fa:0c: 19:ae:1f:90:8f:65:e6:43:78:e3:46:b9:e3:d8:38: f9:0f:be:70:77:95:b2:ed:e5:2d:8e:9e:e2:06:54: 82:4a:5b:3b:24:71:8e:32:ec:60:1b:91:65:3c:5f: 9c:02:2d:a5:34:5e:3b:e4:2a:ea:9f:9a:d8:31:57: 16:80:fc:5b:1c:de:2c:b1:2e:3e:b5:57:c1:32:b6: e4:7e:f8:c2:15:a6:fa:8a:b0:b8:e3:41:96:cf:cc: bc:22:fd:eb:59:f3:18:de:0f:aa:8f:35:a9:37:ff: 43:a9:e7:83:4c:02:ab:c9:39:aa:67:08:d1:d5:02: 82:4e:71:e0:b1:99:b0:aa:4a:26:9b:9d:c9:7f:6b: b6:d9:09:10:d0:64:2d:a4:de:80:40:cf:9e:2c:c8: 63:b8:fb:40:6e:94:d3:cb:c1:80:91:a7:14:66:c6: f8:80:fd:f1:19:e3:d1:68:9b:b8:3c:38:69:02:78: 6d:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:59:67:28:99:A6:16:74:B6:A6:A4:3A:77:C7:21:F0:BD:19:50:BF X509v3 Authority Key Identifier: keyid:C0:A2:33:59:0D:E5:86:E0:C5:58:21:C6:F6:D5:73:2A:FC:84:12:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wKIzWQ3lhuDFWCHG9tVzKvyEEik.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:c0:6a:48:0c:eb:71:91:83:2a:2b:ee:cd:50:5c:1b:a3:fe: c8:8a:3e:3a:2e:9f:96:54:0a:ee:03:d8:60:df:cc:b9:dd:27: 80:18:e8:8e:36:62:9c:f4:96:09:f6:ed:cd:5e:f5:0c:f9:f3: 0b:93:7e:a4:b7:ff:58:d8:4f:60:95:96:ce:43:5d:b5:84:9c: a5:06:0a:64:ec:9c:fd:92:66:2d:05:d6:21:46:92:65:92:ae: eb:11:81:0a:ca:28:cb:07:00:80:4e:be:70:7d:74:30:a7:3d: 0f:fe:1b:d0:c6:29:75:43:ca:89:0b:b2:ba:d0:07:93:35:e0: 37:4b:05:d9:05:f9:d0:21:0b:61:83:ea:5e:75:14:f0:51:1b: 10:d9:7a:05:94:4d:9b:1d:72:42:c0:3e:84:bd:3c:68:19:38: f7:89:58:43:78:00:af:f0:09:6b:80:70:30:ff:c4:ad:92:1c: ed:39:21:65:e9:60:a6:15:ca:66:48:83:7e:f7:80:32:dc:25: 2b:96:01:a0:4c:7c:b7:3b:2d:b5:16:4a:79:72:77:75:80:45: c0:e1:0b:51:33:cd:89:8f:1b:8a:63:89:be:e7:54:b9:de:8d: 01:22:d5:f9:7b:ba:5a:a9:82:79:dc:06:d0:27:17:e0:5a:e0: 59:2f:47:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtId8/61Yl8wVhBdltlYgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwYTIzMzU5MGRlNTg2ZTBjNTU4MjFjNmY2ZDU3MzJhZmM4 NDEyMjkwHhcNMjYwMjA5MTQwMDUzWhcNMjYwMjEwMTQwMDUzWjAzMTEwLwYDVQQD EygxODU5NjcyODk5YTYxNjc0YjZhNmE0M2E3N2M3MjFmMGJkMTk1MGJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjaGwNlUMZi7kAY8jwILMv9qX5LVg y64zFUu+kRqSlKzf8AszaCDYutUGaQsk1ExCojgiSOaNh+vA/hR7bDYvjpaiMRF8 xP1k+gwZrh+Qj2XmQ3jjRrnj2Dj5D75wd5Wy7eUtjp7iBlSCSls7JHGOMuxgG5Fl PF+cAi2lNF475Crqn5rYMVcWgPxbHN4ssS4+tVfBMrbkfvjCFab6irC440GWz8y8 Iv3rWfMY3g+qjzWpN/9DqeeDTAKryTmqZwjR1QKCTnHgsZmwqkomm53Jf2u22QkQ 0GQtpN6AQM+eLMhjuPtAbpTTy8GAkacUZsb4gP3xGePRaJu4PDhpAnht3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBhZZyiZphZ0tqakOnfHIfC9GVC/MB8GA1UdIwQY MBaAFMCiM1kN5YbgxVghxvbVcyr8hBIpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0tJeldRM2xodURGV0NIRzl0VnpLdnlFRWlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy85N2IwYjctMDEzZC00MzNlLWI1Mzgt YTg0ZWI0MTFlZjhhLzEvd0tJeldRM2xodURGV0NIRzl0VnpLdnlFRWlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy85N2IwYjctMDEzZC00MzNlLWI1MzgtYTg0ZWI0MTFlZjhh LzEvd0tJeldRM2xodURGV0NIRzl0VnpLdnlFRWlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAecBqSAzr cZGDKivuzVBcG6P+yIo+Oi6fllQK7gPYYN/Mud0ngBjojjZinPSWCfbtzV71DPnz C5N+pLf/WNhPYJWWzkNdtYScpQYKZOyc/ZJmLQXWIUaSZZKu6xGBCsooywcAgE6+ cH10MKc9D/4b0MYpdUPKiQuyutAHkzXgN0sF2QX50CELYYPqXnUU8FEbENl6BZRN mx1yQsA+hL08aBk494lYQ3gAr/AJa4BwMP/ErZIc7TkhZelgphXKZkiDfveAMtwl K5YBoEx8tzsttRZKeXJ3dYBFwOELUTPNiY8bimOJvudUud6NASLV+Xu6WqmCedwG 0CcX4FrgWS9HEw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:58:00 2026 by rpki-client