This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/1d4e06-4faa-49a9-849b-e950699157e1/1/wKqzltZQgmAnwr2KBiByEJIQnik.mft File: wKqzltZQgmAnwr2KBiByEJIQnik.mft (raw, json) Hash identifier: kPMpiGBfXSHTcMJ1Z8pQ88QKrXXTDDcPzKLCdHPdLGQ= Subject key identifier: AA:AB:73:9F:51:58:F2:AA:D8:64:C8:80:B9:54:92:63:99:81:0B:CD Authority key identifier: C0:AA:B3:96:D6:50:82:60:27:C2:BD:8A:06:20:72:10:92:10:9E:29 Certificate issuer: /CN=c0aab396d650826027c2bd8a0620721092109e29 Certificate serial: 019C4358FC8E750D6676187393D8498AAC8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wKqzltZQgmAnwr2KBiByEJIQnik.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/1d4e06-4faa-49a9-849b-e950699157e1/1/wKqzltZQgmAnwr2KBiByEJIQnik.mft Manifest number: 02C7 Signing time: Mon 09 Feb 2026 17:00:31 +0000 Manifest this update: Mon 09 Feb 2026 17:00:31 +0000 Manifest next update: Tue 10 Feb 2026 17:00:31 +0000 Files and hashes: 1: wKqzltZQgmAnwr2KBiByEJIQnik.crl (hash: GVg5CbRmmlVfkyRVDYgSaHczYKmOxg5y5h1NZjB4THc=) 2: zc3uA_Kqejq-ynl5hw7DgsICqZs.roa (hash: J23fc0kk/YQdneIepC92Zz7vs5gfl3zjCFcARQvJKXo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/1d4e06-4faa-49a9-849b-e950699157e1/1/wKqzltZQgmAnwr2KBiByEJIQnik.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/1d4e06-4faa-49a9-849b-e950699157e1/1/wKqzltZQgmAnwr2KBiByEJIQnik.mft rsync://rpki.ripe.net/repository/DEFAULT/wKqzltZQgmAnwr2KBiByEJIQnik.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:58:fc:8e:75:0d:66:76:18:73:93:d8:49:8a:ac:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0aab396d650826027c2bd8a0620721092109e29 Validity Not Before: Feb 9 17:00:31 2026 GMT Not After : Feb 10 17:00:31 2026 GMT Subject: CN=aaab739f5158f2aad864c880b954926399810bcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f2:75:ce:79:fe:ce:81:8b:dc:8f:0f:38:fc: 14:ca:d8:30:d8:b9:94:73:36:b9:f5:e7:76:f9:4a: 95:9e:31:7c:90:88:57:4e:1f:bb:ba:54:4f:d0:a9: f4:35:24:13:56:3b:01:49:ce:f6:da:8e:14:b8:16: 3d:ab:ad:4c:e0:ed:9d:f0:51:92:80:c6:ee:c1:81: 12:2e:98:4b:56:0e:51:52:89:5e:ec:e5:72:9e:7e: 17:98:86:dd:c9:55:e3:c2:40:1f:12:06:ce:35:09: 4e:90:b6:60:b9:66:cf:c6:57:56:58:ab:34:e1:a7: f4:07:fc:59:f7:48:f5:ec:2c:05:2b:2e:6f:a9:be: 17:99:3e:db:f9:2d:7c:20:74:89:9f:84:d1:2e:f9: 7d:b8:15:61:67:06:69:da:61:25:84:58:27:a7:3f: fe:e9:64:9c:f4:55:50:d6:fe:e1:e9:5f:55:70:c7: 41:d8:f7:e1:5a:93:3c:b5:e3:1f:49:fe:12:8a:41: ac:39:04:7e:55:73:cb:73:a6:5c:59:8f:3e:9e:25: 91:8b:0a:2d:56:30:40:42:36:e5:40:b0:a7:4c:f7: 92:1b:44:ee:1a:96:f8:e0:d7:8d:4d:3d:5a:ab:cf: 1d:85:09:44:10:b0:48:74:d3:df:0d:22:95:54:30: f6:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:AB:73:9F:51:58:F2:AA:D8:64:C8:80:B9:54:92:63:99:81:0B:CD X509v3 Authority Key Identifier: keyid:C0:AA:B3:96:D6:50:82:60:27:C2:BD:8A:06:20:72:10:92:10:9E:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wKqzltZQgmAnwr2KBiByEJIQnik.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/1d4e06-4faa-49a9-849b-e950699157e1/1/wKqzltZQgmAnwr2KBiByEJIQnik.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/1d4e06-4faa-49a9-849b-e950699157e1/1/wKqzltZQgmAnwr2KBiByEJIQnik.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:03:f6:ad:be:1c:55:59:93:0e:23:18:40:89:e8:29:9b:08: e7:0e:db:e2:60:6f:29:da:30:71:d6:88:42:3f:a5:19:61:55: 8a:e2:4b:52:92:6b:3f:eb:16:be:ad:bc:d2:fd:2b:ea:4a:bc: de:f8:0a:a3:17:67:6c:9e:5a:11:cd:b8:d6:54:37:2a:41:3a: d8:a2:9d:5a:20:d5:91:ee:fd:45:17:a1:2e:fe:5d:c7:ca:43: 3d:b6:ab:52:70:2e:29:5b:97:07:72:fa:00:12:23:5d:fa:11: e8:fc:f6:72:03:4c:e6:f4:f3:0c:1c:9a:02:47:9d:67:9f:dd: 7e:6e:47:7d:b5:fb:e1:76:65:8a:a3:84:bb:51:a9:29:4c:83: 37:4f:23:d6:d9:18:e5:ed:d5:e9:6b:5b:50:5a:16:8f:2a:a2: 82:49:48:f2:e9:43:de:1e:6f:15:e0:8f:a2:a4:5a:d3:3e:ce: 14:ea:80:35:22:68:34:23:b3:1e:b0:26:44:3c:6d:5f:65:db: 4a:77:0a:37:ba:77:d7:a8:37:d3:c0:31:16:ea:6c:39:28:ce: 28:d4:83:90:7f:35:7c:46:87:33:31:9c:5d:50:c3:6d:22:54: 7b:64:50:1b:15:ce:d9:d4:fd:9b:3a:4a:ed:b3:ea:d8:8c:ab: 54:34:1f:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWPyOdQ1mdhhzk9hJiqyMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwYWFiMzk2ZDY1MDgyNjAyN2MyYmQ4YTA2MjA3MjEwOTIx MDllMjkwHhcNMjYwMjA5MTcwMDMxWhcNMjYwMjEwMTcwMDMxWjAzMTEwLwYDVQQD EyhhYWFiNzM5ZjUxNThmMmFhZDg2NGM4ODBiOTU0OTI2Mzk5ODEwYmNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvJ1znn+zoGL3I8POPwUytgw2LmU cza59ed2+UqVnjF8kIhXTh+7ulRP0Kn0NSQTVjsBSc722o4UuBY9q61M4O2d8FGS gMbuwYESLphLVg5RUole7OVynn4XmIbdyVXjwkAfEgbONQlOkLZguWbPxldWWKs0 4af0B/xZ90j17CwFKy5vqb4XmT7b+S18IHSJn4TRLvl9uBVhZwZp2mElhFgnpz/+ 6WSc9FVQ1v7h6V9VcMdB2PfhWpM8teMfSf4SikGsOQR+VXPLc6ZcWY8+niWRiwot VjBAQjblQLCnTPeSG0TuGpb44NeNTT1aq88dhQlEELBIdNPfDSKVVDD2TwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKqrc59RWPKq2GTIgLlUkmOZgQvNMB8GA1UdIwQY MBaAFMCqs5bWUIJgJ8K9igYgchCSEJ4pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0txemx0WlFnbUFud3IyS0JpQnlFSklRbmlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8xZDRlMDYtNGZhYS00OWE5LTg0OWIt ZTk1MDY5OTE1N2UxLzEvd0txemx0WlFnbUFud3IyS0JpQnlFSklRbmlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi8xZDRlMDYtNGZhYS00OWE5LTg0OWItZTk1MDY5OTE1N2Ux LzEvd0txemx0WlFnbUFud3IyS0JpQnlFSklRbmlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHQP2rb4c VVmTDiMYQInoKZsI5w7b4mBvKdowcdaIQj+lGWFViuJLUpJrP+sWvq280v0r6kq8 3vgKoxdnbJ5aEc241lQ3KkE62KKdWiDVke79RRehLv5dx8pDPbarUnAuKVuXB3L6 ABIjXfoR6Pz2cgNM5vTzDByaAkedZ5/dfm5HfbX74XZliqOEu1GpKUyDN08j1tkY 5e3V6WtbUFoWjyqigklI8ulD3h5vFeCPoqRa0z7OFOqANSJoNCOzHrAmRDxtX2Xb SncKN7p316g308AxFupsOSjOKNSDkH81fEaHMzGcXVDDbSJUe2RQGxXO2dT9mzpK 7bPq2IyrVDQfOg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:53:52 2026 by rpki-client