This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/b2e4bf-17ac-4690-86c7-a40ea47b69cc/1/W1mW18RE1mpSvKEBsGynOKf8qps.mft File: W1mW18RE1mpSvKEBsGynOKf8qps.mft (raw, json) Hash identifier: Kvbwn8RtBUEsCSj0/91T/Uvqx5uBORXefThOI2x8Jk4= Subject key identifier: 17:C3:2D:C6:E0:48:50:D6:1C:2E:79:2A:6F:B6:AB:AA:D2:C8:74:62 Authority key identifier: 5B:59:96:D7:C4:44:D6:6A:52:BC:A1:01:B0:6C:A7:38:A7:FC:AA:9B Certificate issuer: /CN=5b5996d7c444d66a52bca101b06ca738a7fcaa9b Certificate serial: 019C43224E668F342235E28B3D4C2A9C91F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W1mW18RE1mpSvKEBsGynOKf8qps.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/b2e4bf-17ac-4690-86c7-a40ea47b69cc/1/W1mW18RE1mpSvKEBsGynOKf8qps.mft Manifest number: 03B9 Signing time: Mon 09 Feb 2026 16:00:47 +0000 Manifest this update: Mon 09 Feb 2026 16:00:47 +0000 Manifest next update: Tue 10 Feb 2026 16:00:47 +0000 Files and hashes: 1: W1mW18RE1mpSvKEBsGynOKf8qps.crl (hash: Cs5uA9iTJLgZEB+vea8VMyaKmjzSRlLl9RGJAbMZ7Fw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/b2e4bf-17ac-4690-86c7-a40ea47b69cc/1/W1mW18RE1mpSvKEBsGynOKf8qps.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/b2e4bf-17ac-4690-86c7-a40ea47b69cc/1/W1mW18RE1mpSvKEBsGynOKf8qps.mft rsync://rpki.ripe.net/repository/DEFAULT/W1mW18RE1mpSvKEBsGynOKf8qps.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:4e:66:8f:34:22:35:e2:8b:3d:4c:2a:9c:91:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b5996d7c444d66a52bca101b06ca738a7fcaa9b Validity Not Before: Feb 9 16:00:47 2026 GMT Not After : Feb 10 16:00:47 2026 GMT Subject: CN=17c32dc6e04850d61c2e792a6fb6abaad2c87462 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c4:fe:86:df:b2:43:f1:f2:20:0f:34:99:79: 92:1b:3b:61:cf:44:65:8a:46:d6:14:eb:88:0c:ac: 7c:b7:ed:d7:ca:2e:99:f6:ab:ff:f8:ce:81:1c:62: 67:d8:95:0a:c7:3e:94:03:03:f5:ff:94:fd:59:83: de:5b:0c:ed:d0:6e:6e:07:c5:a2:6d:32:15:cc:35: 76:a7:8c:f5:45:32:9f:ff:3c:9e:1e:be:fa:86:40: 29:90:96:07:63:70:13:1c:ce:72:dc:08:27:30:5b: fb:08:92:44:22:b0:07:d3:f2:9d:a7:2a:57:1a:fd: ed:6b:fd:94:49:b5:34:75:8c:b6:4b:e0:d2:fc:71: 68:c8:a1:d0:cf:d2:77:4c:13:c2:5e:8e:39:29:b4: c8:0b:5d:86:ef:7e:dc:f8:c2:59:f9:d9:b8:ab:4d: 7e:2c:da:d2:f9:3a:56:a9:40:ce:7d:52:45:50:96: 01:7b:6d:3c:a5:89:02:a1:83:c6:d4:8d:90:20:60: 8d:9b:78:87:52:2b:b1:0e:ab:13:26:6c:a0:e0:35: be:28:02:75:5d:30:3c:0a:af:70:1e:94:a9:1d:d4: 09:56:31:54:17:41:ca:6a:c3:c6:15:5e:7d:06:6c: 67:c9:0f:df:51:e1:30:4b:96:50:cb:cd:d4:cf:a1: ff:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:C3:2D:C6:E0:48:50:D6:1C:2E:79:2A:6F:B6:AB:AA:D2:C8:74:62 X509v3 Authority Key Identifier: keyid:5B:59:96:D7:C4:44:D6:6A:52:BC:A1:01:B0:6C:A7:38:A7:FC:AA:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1mW18RE1mpSvKEBsGynOKf8qps.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b2e4bf-17ac-4690-86c7-a40ea47b69cc/1/W1mW18RE1mpSvKEBsGynOKf8qps.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b2e4bf-17ac-4690-86c7-a40ea47b69cc/1/W1mW18RE1mpSvKEBsGynOKf8qps.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:8c:16:7c:ec:b8:d7:9b:e1:33:1e:59:50:ea:d9:2a:e9:dd: 94:ca:55:6b:e7:f5:54:94:14:43:43:39:47:3d:11:5f:22:3b: 08:37:ee:4a:84:e9:23:08:ce:71:55:89:74:02:85:56:4d:d8: a0:66:bf:e8:1d:7a:f2:68:8f:48:16:7f:9d:fb:ee:a6:64:01: e2:f6:78:30:a7:38:0c:eb:08:9c:75:06:91:39:e2:38:46:62: 42:ed:23:96:2d:8f:40:c5:5b:3f:99:d1:f6:f1:49:e9:e9:e3: 9f:d3:f3:e7:db:73:8b:ce:9c:c4:4b:98:fb:27:12:b4:5b:39: a4:b8:50:fe:ef:fd:90:c5:fa:b4:23:c9:84:e2:68:b0:8c:74: 99:53:ee:6f:4a:30:be:27:76:86:dc:6e:dd:96:13:75:d0:d9: b1:71:cd:f1:38:f0:7c:f1:df:91:47:52:3c:7a:05:1b:69:20: 91:d3:2a:a2:e9:af:e7:60:36:6d:28:f6:5c:3b:39:53:ca:21: 83:48:a2:87:f7:5c:c0:c3:5d:ae:99:4f:9a:6f:93:fd:51:ba: 02:0f:6a:bf:26:d7:c1:8e:e5:ae:39:d0:7e:ea:ab:fd:c3:12: d2:9e:f5:ec:fa:27:2d:a7:e3:78:f5:52:f4:7b:b8:67:3e:c0: eb:7d:f5:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIk5mjzQiNeKLPUwqnJH4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViNTk5NmQ3YzQ0NGQ2NmE1MmJjYTEwMWIwNmNhNzM4YTdm Y2FhOWIwHhcNMjYwMjA5MTYwMDQ3WhcNMjYwMjEwMTYwMDQ3WjAzMTEwLwYDVQQD EygxN2MzMmRjNmUwNDg1MGQ2MWMyZTc5MmE2ZmI2YWJhYWQyYzg3NDYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8T+ht+yQ/HyIA80mXmSGzthz0Rl ikbWFOuIDKx8t+3Xyi6Z9qv/+M6BHGJn2JUKxz6UAwP1/5T9WYPeWwzt0G5uB8Wi bTIVzDV2p4z1RTKf/zyeHr76hkApkJYHY3ATHM5y3AgnMFv7CJJEIrAH0/KdpypX Gv3ta/2USbU0dYy2S+DS/HFoyKHQz9J3TBPCXo45KbTIC12G737c+MJZ+dm4q01+ LNrS+TpWqUDOfVJFUJYBe208pYkCoYPG1I2QIGCNm3iHUiuxDqsTJmyg4DW+KAJ1 XTA8Cq9wHpSpHdQJVjFUF0HKasPGFV59BmxnyQ/fUeEwS5ZQy83Uz6H/XwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBfDLcbgSFDWHC55Km+2q6rSyHRiMB8GA1UdIwQY MBaAFFtZltfERNZqUryhAbBspzin/KqbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzFtVzE4UkUxbXBTdktFQnNHeW5PS2Y4cXBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9iMmU0YmYtMTdhYy00NjkwLTg2Yzct YTQwZWE0N2I2OWNjLzEvVzFtVzE4UkUxbXBTdktFQnNHeW5PS2Y4cXBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi9iMmU0YmYtMTdhYy00NjkwLTg2YzctYTQwZWE0N2I2OWNj LzEvVzFtVzE4UkUxbXBTdktFQnNHeW5PS2Y4cXBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmIwWfOy4 15vhMx5ZUOrZKundlMpVa+f1VJQUQ0M5Rz0RXyI7CDfuSoTpIwjOcVWJdAKFVk3Y oGa/6B168miPSBZ/nfvupmQB4vZ4MKc4DOsInHUGkTniOEZiQu0jli2PQMVbP5nR 9vFJ6enjn9Pz59tzi86cxEuY+ycStFs5pLhQ/u/9kMX6tCPJhOJosIx0mVPub0ow vid2htxu3ZYTddDZsXHN8TjwfPHfkUdSPHoFG2kgkdMqoumv52A2bSj2XDs5U8oh g0iih/dcwMNdrplPmm+T/VG6Ag9qvybXwY7lrjnQfuqr/cMS0p717PonLafjePVS 9Hu4Zz7A63312g== -----END CERTIFICATE-----Generated at Mon Feb 9 21:07:40 2026 by rpki-client