This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/895117-a0f8-4145-bdaa-88cec2f95513/1/WSh1E_SesUCO5BsoHIsnczB6iRA.mft File: WSh1E_SesUCO5BsoHIsnczB6iRA.mft (raw, json) Hash identifier: g/zoUQ1HZsdSck4IcNQz82rsRbR0lphqKyGmbkiVtAw= Subject key identifier: 3F:6A:71:34:1E:3C:98:3E:F5:F5:F7:5C:DB:D6:FA:33:28:5B:CD:04 Authority key identifier: 59:28:75:13:F4:9E:B1:40:8E:E4:1B:28:1C:8B:27:73:30:7A:89:10 Certificate issuer: /CN=59287513f49eb1408ee41b281c8b2773307a8910 Certificate serial: 019C41A2260FC1743DC0DD3021FC7B99802A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WSh1E_SesUCO5BsoHIsnczB6iRA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/895117-a0f8-4145-bdaa-88cec2f95513/1/WSh1E_SesUCO5BsoHIsnczB6iRA.mft Manifest number: 180C Signing time: Mon 09 Feb 2026 09:01:11 +0000 Manifest this update: Mon 09 Feb 2026 09:01:11 +0000 Manifest next update: Tue 10 Feb 2026 09:01:11 +0000 Files and hashes: 1: WSh1E_SesUCO5BsoHIsnczB6iRA.crl (hash: uFGRw6bJ26PNDMXYrIeh7pTrUn2bU+mt64DywNafsS4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/895117-a0f8-4145-bdaa-88cec2f95513/1/WSh1E_SesUCO5BsoHIsnczB6iRA.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/895117-a0f8-4145-bdaa-88cec2f95513/1/WSh1E_SesUCO5BsoHIsnczB6iRA.mft rsync://rpki.ripe.net/repository/DEFAULT/WSh1E_SesUCO5BsoHIsnczB6iRA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a2:26:0f:c1:74:3d:c0:dd:30:21:fc:7b:99:80:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59287513f49eb1408ee41b281c8b2773307a8910 Validity Not Before: Feb 9 09:01:11 2026 GMT Not After : Feb 10 09:01:11 2026 GMT Subject: CN=3f6a71341e3c983ef5f5f75cdbd6fa33285bcd04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a6:f9:e2:91:fb:8a:33:10:3a:77:3b:80:0b: ac:32:84:89:55:42:2a:ae:be:12:41:37:9d:32:d4: 75:07:a7:b9:a0:92:be:1c:1c:8e:ab:57:7a:47:08: f2:0f:48:b6:18:aa:99:c4:b0:68:36:b5:44:51:07: a7:a9:9b:ba:5d:f2:72:94:fb:ed:7c:7d:0f:29:ad: 0b:98:af:81:a4:3f:47:2d:0a:e9:74:d1:ac:92:d1: 49:b8:29:23:ba:16:19:c2:13:6b:76:4f:76:9a:38: 47:77:1f:c2:63:e5:38:34:b3:88:b5:92:d5:81:58: 5d:91:9e:78:0b:1b:44:90:3d:05:2a:91:a5:ea:04: ff:95:9a:c4:cd:0f:bc:59:d9:77:2c:e6:6f:2f:59: 98:53:4e:b9:44:e2:2e:bc:db:3b:1d:56:5c:74:27: 52:7c:d8:f7:5b:7d:41:b4:25:66:87:dc:d1:a3:42: a4:97:14:6c:bf:a0:40:c3:78:b6:e8:76:7f:03:ec: d7:23:2a:e6:37:c0:df:e3:84:8a:04:88:13:d2:6c: 3a:63:52:d6:d4:7a:3a:ff:3c:4d:67:35:68:72:ad: 82:49:25:a9:a6:bc:78:14:18:e9:1b:ac:b1:7c:86: fa:c3:32:cc:28:57:99:f1:c2:4e:ac:2c:10:34:96: 01:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:6A:71:34:1E:3C:98:3E:F5:F5:F7:5C:DB:D6:FA:33:28:5B:CD:04 X509v3 Authority Key Identifier: keyid:59:28:75:13:F4:9E:B1:40:8E:E4:1B:28:1C:8B:27:73:30:7A:89:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WSh1E_SesUCO5BsoHIsnczB6iRA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/895117-a0f8-4145-bdaa-88cec2f95513/1/WSh1E_SesUCO5BsoHIsnczB6iRA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/895117-a0f8-4145-bdaa-88cec2f95513/1/WSh1E_SesUCO5BsoHIsnczB6iRA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:ae:c6:e6:92:2d:31:e4:70:64:7f:4b:bc:a0:26:66:c8:0c: 99:4a:bc:88:22:26:27:51:66:45:20:5e:45:2c:f0:15:ff:3f: 1d:58:80:26:54:d1:1f:5a:db:fe:14:ec:0e:c8:bd:64:da:34: 61:61:b3:45:31:fd:8e:56:c5:0d:cd:ed:2e:3a:e1:13:f6:c1: a3:ba:ec:c3:f5:ac:6c:82:c1:f3:f5:f4:9e:e5:98:67:5b:d7: 23:c8:40:e3:6d:97:0b:bf:ac:0e:48:0b:14:07:22:a2:95:77: d4:fa:15:06:9d:65:90:cc:92:08:9d:7e:1f:4d:77:18:2d:71: 5f:ae:fc:4c:26:f4:2f:de:8b:66:e1:fa:a0:93:11:b3:9d:0b: fc:60:76:30:3d:ea:18:de:37:66:8c:e9:66:1c:fc:eb:3b:8e: e3:5f:89:2a:08:9f:2e:5d:26:7b:bc:c9:c3:9c:a4:e7:11:f7: aa:e2:4a:09:d1:46:e6:17:04:e1:67:13:53:18:93:38:1c:a0: b9:16:88:ae:f1:67:42:c9:d9:8f:53:e6:df:3f:1a:08:bb:1c: 26:1b:77:2e:37:c1:23:14:a7:be:fb:b9:e4:5d:58:40:55:c9: 73:92:58:dc:24:cd:df:4c:15:45:d5:3a:1b:bb:08:38:0e:22: ff:2a:e6:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBoiYPwXQ9wN0wIfx7mYAqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5Mjg3NTEzZjQ5ZWIxNDA4ZWU0MWIyODFjOGIyNzczMzA3 YTg5MTAwHhcNMjYwMjA5MDkwMTExWhcNMjYwMjEwMDkwMTExWjAzMTEwLwYDVQQD EygzZjZhNzEzNDFlM2M5ODNlZjVmNWY3NWNkYmQ2ZmEzMzI4NWJjZDA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqab54pH7ijMQOnc7gAusMoSJVUIq rr4SQTedMtR1B6e5oJK+HByOq1d6RwjyD0i2GKqZxLBoNrVEUQenqZu6XfJylPvt fH0PKa0LmK+BpD9HLQrpdNGsktFJuCkjuhYZwhNrdk92mjhHdx/CY+U4NLOItZLV gVhdkZ54CxtEkD0FKpGl6gT/lZrEzQ+8Wdl3LOZvL1mYU065ROIuvNs7HVZcdCdS fNj3W31BtCVmh9zRo0KklxRsv6BAw3i26HZ/A+zXIyrmN8Df44SKBIgT0mw6Y1LW 1Ho6/zxNZzVocq2CSSWpprx4FBjpG6yxfIb6wzLMKFeZ8cJOrCwQNJYB/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD9qcTQePJg+9fX3XNvW+jMoW80EMB8GA1UdIwQY MBaAFFkodRP0nrFAjuQbKByLJ3MweokQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1NoMUVfU2VzVUNPNUJzb0hJc25jekI2aVJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi84OTUxMTctYTBmOC00MTQ1LWJkYWEt ODhjZWMyZjk1NTEzLzEvV1NoMUVfU2VzVUNPNUJzb0hJc25jekI2aVJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi84OTUxMTctYTBmOC00MTQ1LWJkYWEtODhjZWMyZjk1NTEz LzEvV1NoMUVfU2VzVUNPNUJzb0hJc25jekI2aVJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF67G5pIt MeRwZH9LvKAmZsgMmUq8iCImJ1FmRSBeRSzwFf8/HViAJlTRH1rb/hTsDsi9ZNo0 YWGzRTH9jlbFDc3tLjrhE/bBo7rsw/WsbILB8/X0nuWYZ1vXI8hA422XC7+sDkgL FAciopV31PoVBp1lkMySCJ1+H013GC1xX678TCb0L96LZuH6oJMRs50L/GB2MD3q GN43ZozpZhz86zuO41+JKgifLl0me7zJw5yk5xH3quJKCdFG5hcE4WcTUxiTOByg uRaIrvFnQsnZj1Pm3z8aCLscJht3LjfBIxSnvvu55F1YQFXJc5JY3CTN30wVRdU6 G7sIOA4i/yrmtA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:33:00 2026 by rpki-client