This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/6597cc-8b03-49b8-a761-887015b396f1/1/Wx2S_lASvWW-DDKw7jkXGciClCw.mft File: Wx2S_lASvWW-DDKw7jkXGciClCw.mft (raw, json) Hash identifier: zp7BkXBrdr51TePoFS8hYEEe6pjQ3QsCEB3SR4IseEg= Subject key identifier: 60:A0:79:7C:EF:EE:A9:13:77:C4:D2:F0:9B:2B:BF:5B:8A:40:F8:75 Authority key identifier: 5B:1D:92:FE:50:12:BD:65:BE:0C:32:B0:EE:39:17:19:C8:82:94:2C Certificate issuer: /CN=5b1d92fe5012bd65be0c32b0ee391719c882942c Certificate serial: 019C41340E44BBA2DD9B4A1549D4665C2B4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wx2S_lASvWW-DDKw7jkXGciClCw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/6597cc-8b03-49b8-a761-887015b396f1/1/Wx2S_lASvWW-DDKw7jkXGciClCw.mft Manifest number: 0C85 Signing time: Mon 09 Feb 2026 07:00:56 +0000 Manifest this update: Mon 09 Feb 2026 07:00:56 +0000 Manifest next update: Tue 10 Feb 2026 07:00:56 +0000 Files and hashes: 1: Wx2S_lASvWW-DDKw7jkXGciClCw.crl (hash: bdZn9QfMQfWbmLcEXK0Pm3u/CqVpyS7uu8dL/Fnkmlc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/6597cc-8b03-49b8-a761-887015b396f1/1/Wx2S_lASvWW-DDKw7jkXGciClCw.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/6597cc-8b03-49b8-a761-887015b396f1/1/Wx2S_lASvWW-DDKw7jkXGciClCw.mft rsync://rpki.ripe.net/repository/DEFAULT/Wx2S_lASvWW-DDKw7jkXGciClCw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:34:0e:44:bb:a2:dd:9b:4a:15:49:d4:66:5c:2b:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b1d92fe5012bd65be0c32b0ee391719c882942c Validity Not Before: Feb 9 07:00:56 2026 GMT Not After : Feb 10 07:00:56 2026 GMT Subject: CN=60a0797cefeea91377c4d2f09b2bbf5b8a40f875 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:87:e0:0e:22:e7:09:d3:4f:2f:88:bc:f0:12: 4b:35:09:98:64:c8:2e:b9:9b:9a:1f:1a:05:f5:87: 27:ea:3e:1c:95:ac:40:7c:eb:cb:46:b2:01:54:ac: 2e:51:33:9d:bb:ad:51:da:cd:b6:5b:c5:e2:97:9b: eb:f6:c8:60:9f:0a:52:54:a9:a2:e3:b2:f9:60:dd: 0e:07:6a:cb:2f:54:5f:cf:11:f7:a8:7e:ce:60:e8: 3b:ff:f9:20:6d:c5:d0:b3:ea:01:21:3d:eb:b0:cb: 02:7e:45:f2:17:8f:e0:f8:6d:45:57:a8:1e:20:c5: 93:fd:57:b5:bd:e3:cf:b0:73:f9:c2:62:f9:36:4f: c7:fe:c2:3a:33:4c:26:72:88:c5:71:9f:85:83:b8: 6c:3a:6b:16:56:66:45:89:98:f1:84:f3:7a:84:1f: 6a:a5:a1:de:f3:06:d2:3c:fc:02:21:42:f2:7b:ae: b1:43:e3:b3:a1:eb:62:bc:ed:72:9c:e4:df:b3:40: 4a:2c:81:91:8d:77:71:bd:79:e1:a8:db:b8:b6:ba: 99:40:ce:9f:51:e5:83:91:fd:e6:36:49:69:fa:3d: 32:7a:24:bb:24:49:8a:da:43:69:b6:65:e8:e2:f8: fe:74:f9:93:13:2b:ed:4b:43:08:bb:12:b3:01:f6: 2f:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:A0:79:7C:EF:EE:A9:13:77:C4:D2:F0:9B:2B:BF:5B:8A:40:F8:75 X509v3 Authority Key Identifier: keyid:5B:1D:92:FE:50:12:BD:65:BE:0C:32:B0:EE:39:17:19:C8:82:94:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wx2S_lASvWW-DDKw7jkXGciClCw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6597cc-8b03-49b8-a761-887015b396f1/1/Wx2S_lASvWW-DDKw7jkXGciClCw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6597cc-8b03-49b8-a761-887015b396f1/1/Wx2S_lASvWW-DDKw7jkXGciClCw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:9a:e8:d4:11:4c:f6:d4:e0:a3:fd:26:db:de:de:b7:0a:a7: 55:d7:55:90:3f:57:32:a4:fb:82:d0:f4:e5:7e:dc:a2:62:ad: 35:ca:1d:37:c6:92:dd:d9:b0:0b:9c:79:ce:63:16:45:01:ca: 9c:97:0f:74:78:23:35:4b:8f:aa:fc:04:5a:e2:65:b6:c2:48: 4a:5c:f4:11:73:a7:bf:2b:c8:ca:8d:24:2a:d7:c0:79:06:4f: 62:2d:b6:f5:d1:43:72:76:29:3e:e6:e6:75:11:27:b4:f4:15: f6:36:39:cb:05:44:e3:fc:5c:78:c5:bf:ee:2f:20:7c:75:c2: 7f:77:45:5d:37:9b:c2:c5:a6:56:b2:34:84:e9:0f:d9:4b:ec: 16:74:29:9f:f7:5a:25:98:4e:69:e6:d5:4a:c3:b2:4e:ea:81: 71:b7:d6:c1:75:5d:19:fe:dd:50:cd:21:d4:c0:65:d4:02:5d: d6:3f:da:3c:39:46:69:5d:99:86:1a:9e:c9:20:f3:cc:7f:03: fd:70:62:c8:13:1a:43:23:bc:67:91:fa:ce:ab:a5:bc:46:96: 84:7d:19:f3:2d:31:36:60:2f:f8:f4:3d:bd:c3:93:18:62:e2: bb:4e:72:8f:b8:99:41:aa:f0:32:b6:a1:f3:a0:7b:c7:5a:ad: 18:a8:6a:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBNA5Eu6Ldm0oVSdRmXCtMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViMWQ5MmZlNTAxMmJkNjViZTBjMzJiMGVlMzkxNzE5Yzg4 Mjk0MmMwHhcNMjYwMjA5MDcwMDU2WhcNMjYwMjEwMDcwMDU2WjAzMTEwLwYDVQQD Eyg2MGEwNzk3Y2VmZWVhOTEzNzdjNGQyZjA5YjJiYmY1YjhhNDBmODc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4fgDiLnCdNPL4i88BJLNQmYZMgu uZuaHxoF9Ycn6j4claxAfOvLRrIBVKwuUTOdu61R2s22W8Xil5vr9shgnwpSVKmi 47L5YN0OB2rLL1RfzxH3qH7OYOg7//kgbcXQs+oBIT3rsMsCfkXyF4/g+G1FV6ge IMWT/Ve1vePPsHP5wmL5Nk/H/sI6M0wmcojFcZ+Fg7hsOmsWVmZFiZjxhPN6hB9q paHe8wbSPPwCIULye66xQ+OzoetivO1ynOTfs0BKLIGRjXdxvXnhqNu4trqZQM6f UeWDkf3mNklp+j0yeiS7JEmK2kNptmXo4vj+dPmTEyvtS0MIuxKzAfYvVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGCgeXzv7qkTd8TS8Jsrv1uKQPh1MB8GA1UdIwQY MBaAFFsdkv5QEr1lvgwysO45FxnIgpQsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3gyU19sQVN2V1ctRERLdzdqa1hHY2lDbEN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC82NTk3Y2MtOGIwMy00OWI4LWE3NjEt ODg3MDE1YjM5NmYxLzEvV3gyU19sQVN2V1ctRERLdzdqa1hHY2lDbEN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC82NTk3Y2MtOGIwMy00OWI4LWE3NjEtODg3MDE1YjM5NmYx LzEvV3gyU19sQVN2V1ctRERLdzdqa1hHY2lDbEN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANZro1BFM 9tTgo/0m297etwqnVddVkD9XMqT7gtD05X7comKtNcodN8aS3dmwC5x5zmMWRQHK nJcPdHgjNUuPqvwEWuJltsJISlz0EXOnvyvIyo0kKtfAeQZPYi229dFDcnYpPubm dREntPQV9jY5ywVE4/xceMW/7i8gfHXCf3dFXTebwsWmVrI0hOkP2UvsFnQpn/da JZhOaebVSsOyTuqBcbfWwXVdGf7dUM0h1MBl1AJd1j/aPDlGaV2ZhhqeySDzzH8D /XBiyBMaQyO8Z5H6zqulvEaWhH0Z8y0xNmAv+PQ9vcOTGGLiu05yj7iZQarwMrah 86B7x1qtGKhqxA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:54:55 2026 by rpki-client