This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a57805-a97f-4462-ae38-d86156e61c47/1/Wy17v8Kblv03I3vOZ4bFO604D70.mft File: Wy17v8Kblv03I3vOZ4bFO604D70.mft (raw, json) Hash identifier: 2uTaXZw9vbmbKyblhW/kqJc0re/Dm6Yulg/wELCupKs= Subject key identifier: FE:6D:33:BB:8A:73:29:74:DB:A4:42:6D:40:66:FE:23:56:2A:8B:D4 Authority key identifier: 5B:2D:7B:BF:C2:9B:96:FD:37:23:7B:CE:67:86:C5:3B:AD:38:0F:BD Certificate issuer: /CN=5b2d7bbfc29b96fd37237bce6786c53bad380fbd Certificate serial: 019C43FDCD95E5F9A22AD5B49FD26EC76F35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wy17v8Kblv03I3vOZ4bFO604D70.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a57805-a97f-4462-ae38-d86156e61c47/1/Wy17v8Kblv03I3vOZ4bFO604D70.mft Manifest number: 03E2 Signing time: Mon 09 Feb 2026 20:00:32 +0000 Manifest this update: Mon 09 Feb 2026 20:00:32 +0000 Manifest next update: Tue 10 Feb 2026 20:00:32 +0000 Files and hashes: 1: Wy17v8Kblv03I3vOZ4bFO604D70.crl (hash: Q2/KKR0vPQDkp+FTVy5nW4gp81sDsemy3B8lz9uaKL4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a57805-a97f-4462-ae38-d86156e61c47/1/Wy17v8Kblv03I3vOZ4bFO604D70.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/a57805-a97f-4462-ae38-d86156e61c47/1/Wy17v8Kblv03I3vOZ4bFO604D70.mft rsync://rpki.ripe.net/repository/DEFAULT/Wy17v8Kblv03I3vOZ4bFO604D70.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fd:cd:95:e5:f9:a2:2a:d5:b4:9f:d2:6e:c7:6f:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b2d7bbfc29b96fd37237bce6786c53bad380fbd Validity Not Before: Feb 9 20:00:32 2026 GMT Not After : Feb 10 20:00:32 2026 GMT Subject: CN=fe6d33bb8a732974dba4426d4066fe23562a8bd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:eb:58:c1:18:01:07:59:73:a1:22:db:2b:a3: 7e:3e:ff:82:39:10:b6:44:25:f5:f4:e3:c7:36:15: a0:fb:02:44:f8:d8:be:94:be:3e:b4:b9:40:90:ac: d7:a3:d2:92:4e:07:5e:28:7b:f1:86:0b:58:df:ba: b5:51:10:5b:27:b9:77:50:e8:18:83:12:b1:c2:f5: d6:46:8b:09:e7:cf:12:00:fe:06:e0:94:64:0a:b0: 82:c8:0a:42:5e:6e:d8:83:da:c0:8f:82:19:a0:13: e9:63:03:18:d2:c6:6e:a6:b6:2f:b8:0c:69:1e:25: 3c:fc:88:9b:13:0d:fb:02:e9:b5:53:1f:e1:9e:f7: a0:61:77:30:60:4d:f6:3b:82:50:75:7a:0f:83:e4: ca:86:0f:7e:6f:cc:7f:0b:3b:6d:d7:df:dd:dc:ad: 4a:68:63:ce:09:38:98:16:e0:6e:31:39:6a:60:dd: 2c:48:c0:c2:c5:82:88:5b:8b:c4:0e:8d:59:46:ce: b2:48:1e:a6:e1:8c:f8:d8:c0:a9:c8:9a:8d:ef:6f: 11:c8:e7:1f:25:d7:10:8e:b2:74:99:68:d2:87:8c: 91:e1:bf:93:21:52:1c:9b:1f:93:2e:22:6c:9c:86: a6:9e:a0:62:75:36:7a:e5:19:a3:dc:3f:a6:5b:8e: e5:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:6D:33:BB:8A:73:29:74:DB:A4:42:6D:40:66:FE:23:56:2A:8B:D4 X509v3 Authority Key Identifier: keyid:5B:2D:7B:BF:C2:9B:96:FD:37:23:7B:CE:67:86:C5:3B:AD:38:0F:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wy17v8Kblv03I3vOZ4bFO604D70.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a57805-a97f-4462-ae38-d86156e61c47/1/Wy17v8Kblv03I3vOZ4bFO604D70.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a57805-a97f-4462-ae38-d86156e61c47/1/Wy17v8Kblv03I3vOZ4bFO604D70.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:be:8f:bc:e1:7b:0e:46:18:cc:8d:2b:d1:19:a2:73:9b:a0: 27:53:cc:c0:82:76:66:5a:bb:69:08:ee:95:09:3a:c3:9b:7f: 3f:e0:39:8a:7c:73:3e:02:07:5b:1c:08:0a:a8:7c:fd:3f:81: be:df:09:3c:db:e1:86:e7:d2:60:a7:1e:ac:35:a1:10:e3:86: 94:d6:d6:e6:b7:9a:d8:cf:30:f6:f0:d4:f7:60:82:f1:c4:80: 42:d1:1c:be:0f:a5:b5:90:48:f3:7e:21:c7:3c:1f:46:9b:69: 36:cc:d5:04:01:98:e8:fa:c7:f0:3a:ae:c4:9a:c6:ff:48:4e: 32:31:ae:8b:66:12:d3:26:dc:54:fd:05:61:ba:bf:2a:f2:68: 88:5c:d3:54:a3:63:3a:e1:f3:54:3f:0d:41:4b:61:ad:62:95: 53:09:52:3d:00:0d:b7:8d:f2:0b:89:04:fe:b8:50:ab:fe:2a: 93:ea:bc:c6:c8:04:f9:d1:5c:fe:3e:b4:61:f2:50:70:8f:67: 3c:c6:14:34:5e:66:fb:47:97:1e:90:09:c4:b5:18:67:d4:6f: 0e:a4:42:42:84:69:b9:38:8d:db:bf:f0:0e:d4:fa:17:43:f5: 62:13:d8:9a:59:ad:c9:91:e7:43:46:70:b6:e8:8d:00:8c:ae: f8:64:9e:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/c2V5fmiKtW0n9Jux281MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViMmQ3YmJmYzI5Yjk2ZmQzNzIzN2JjZTY3ODZjNTNiYWQz ODBmYmQwHhcNMjYwMjA5MjAwMDMyWhcNMjYwMjEwMjAwMDMyWjAzMTEwLwYDVQQD EyhmZTZkMzNiYjhhNzMyOTc0ZGJhNDQyNmQ0MDY2ZmUyMzU2MmE4YmQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAputYwRgBB1lzoSLbK6N+Pv+CORC2 RCX19OPHNhWg+wJE+Ni+lL4+tLlAkKzXo9KSTgdeKHvxhgtY37q1URBbJ7l3UOgY gxKxwvXWRosJ588SAP4G4JRkCrCCyApCXm7Yg9rAj4IZoBPpYwMY0sZuprYvuAxp HiU8/IibEw37Aum1Ux/hnvegYXcwYE32O4JQdXoPg+TKhg9+b8x/Cztt19/d3K1K aGPOCTiYFuBuMTlqYN0sSMDCxYKIW4vEDo1ZRs6ySB6m4Yz42MCpyJqN728RyOcf JdcQjrJ0mWjSh4yR4b+TIVIcmx+TLiJsnIamnqBidTZ65Rmj3D+mW47l8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP5tM7uKcyl026RCbUBm/iNWKovUMB8GA1UdIwQY MBaAFFste7/Cm5b9NyN7zmeGxTutOA+9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3kxN3Y4S2JsdjAzSTN2T1o0YkZPNjA0RDcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9hNTc4MDUtYTk3Zi00NDYyLWFlMzgt ZDg2MTU2ZTYxYzQ3LzEvV3kxN3Y4S2JsdjAzSTN2T1o0YkZPNjA0RDcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9hNTc4MDUtYTk3Zi00NDYyLWFlMzgtZDg2MTU2ZTYxYzQ3 LzEvV3kxN3Y4S2JsdjAzSTN2T1o0YkZPNjA0RDcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr76PvOF7 DkYYzI0r0Rmic5ugJ1PMwIJ2Zlq7aQjulQk6w5t/P+A5inxzPgIHWxwICqh8/T+B vt8JPNvhhufSYKcerDWhEOOGlNbW5rea2M8w9vDU92CC8cSAQtEcvg+ltZBI834h xzwfRptpNszVBAGY6PrH8DquxJrG/0hOMjGui2YS0ybcVP0FYbq/KvJoiFzTVKNj OuHzVD8NQUthrWKVUwlSPQANt43yC4kE/rhQq/4qk+q8xsgE+dFc/j60YfJQcI9n PMYUNF5m+0eXHpAJxLUYZ9RvDqRCQoRpuTiN27/wDtT6F0P1YhPYmlmtyZHnQ0Zw tuiNAIyu+GSetg== -----END CERTIFICATE-----Generated at Mon Feb 9 22:44:51 2026 by rpki-client