This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft File: 9WdppC5EJm8Dfss5DUEV_r44YaQ.mft (raw, json) Hash identifier: 8tJNPPbReHIR9WKL8q7vm0SF5FJMPzTHCzo4nyb8MSI= Subject key identifier: 3C:19:C5:4E:18:AB:85:CC:D3:C2:6B:39:C1:1E:FD:EF:7A:AA:AC:95 Authority key identifier: F5:67:69:A4:2E:44:26:6F:03:7E:CB:39:0D:41:15:FE:BE:38:61:A4 Certificate issuer: /CN=f56769a42e44266f037ecb390d4115febe3861a4 Certificate serial: 019C2F2D2DAD991BF0D91E39485D07091306 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WdppC5EJm8Dfss5DUEV_r44YaQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft Manifest number: 1799 Signing time: Thu 05 Feb 2026 19:00:15 +0000 Manifest this update: Thu 05 Feb 2026 19:00:15 +0000 Manifest next update: Fri 06 Feb 2026 19:00:15 +0000 Files and hashes: 1: 9WdppC5EJm8Dfss5DUEV_r44YaQ.crl (hash: 4YkEeIgi/M6DfxjCGCNETQr4W89ojXDyir5Fv0ZEw00=) 2: PmvPeyfuH32uVVKqSfQ5RmaGzZA.roa (hash: 9iQB+r4y8DYdCOUHJllDHq/E35qdiIubyMUUaFVIXsY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft rsync://rpki.ripe.net/repository/DEFAULT/9WdppC5EJm8Dfss5DUEV_r44YaQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Feb 2026 19:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:2f:2d:2d:ad:99:1b:f0:d9:1e:39:48:5d:07:09:13:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f56769a42e44266f037ecb390d4115febe3861a4 Validity Not Before: Feb 5 19:00:15 2026 GMT Not After : Feb 6 19:00:15 2026 GMT Subject: CN=3c19c54e18ab85ccd3c26b39c11efdef7aaaac95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c9:d6:3c:a9:7b:c7:32:a4:51:4e:22:2c:02: 71:64:62:5d:4f:b3:d8:9f:6c:5d:c5:e0:c3:30:4d: b4:30:94:62:ed:fd:e3:39:f6:49:9e:38:e6:54:42: 0f:f5:6b:2f:71:31:6c:9f:ac:1e:cb:86:69:fc:4d: dd:a1:83:25:fb:b0:c2:96:eb:49:82:fb:2c:82:b4: 1c:d6:a4:7d:70:e2:75:60:31:5d:0f:6e:70:ec:b3: de:f1:ac:81:d0:95:95:9a:ed:d8:51:6c:9d:fe:fb: c5:20:7a:78:d3:1f:66:b0:5e:75:00:38:4d:3f:f4: f4:fa:98:41:1e:d0:aa:5c:18:86:94:97:0e:a9:67: 33:a1:50:19:4b:b9:ba:2e:d3:52:0b:ae:54:1e:18: 54:de:76:ab:fa:d4:67:18:4e:bd:f5:c4:d9:a5:89: 77:78:c5:fb:86:fe:cf:ce:2e:63:c5:20:e6:5e:83: fd:b7:fa:a1:bd:b4:f0:a7:a3:30:1b:ea:5f:0f:91: c7:2c:b8:02:6a:76:3c:1b:99:1a:18:f0:32:3d:24: 6f:64:d9:24:4b:7c:cf:e3:d2:30:94:c1:30:3a:15: 2e:37:14:0a:69:68:55:7e:e3:f8:1e:7f:4d:ab:c3: 4a:03:f5:c4:8d:cf:08:5b:ca:22:ad:43:67:9c:94: ec:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:19:C5:4E:18:AB:85:CC:D3:C2:6B:39:C1:1E:FD:EF:7A:AA:AC:95 X509v3 Authority Key Identifier: keyid:F5:67:69:A4:2E:44:26:6F:03:7E:CB:39:0D:41:15:FE:BE:38:61:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WdppC5EJm8Dfss5DUEV_r44YaQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:03:6e:7b:b3:de:61:5d:50:8e:b4:c8:18:2f:c0:72:dd:f9: 5a:d4:90:5f:09:84:9e:df:90:17:e3:db:79:f3:72:56:8c:c8: da:0d:01:9a:46:87:2c:ec:ad:dd:b0:e3:c9:e4:47:83:ea:bd: 3d:79:ad:ea:b1:c6:06:d8:4b:6b:59:bd:7e:9c:9c:43:c3:98: 78:70:89:92:4d:fc:46:a1:01:48:c6:e3:f6:2b:4a:99:6f:46: fb:1a:51:9a:f2:c4:d2:33:bc:2d:60:c5:33:79:a5:25:95:71: 07:8e:d0:13:d2:00:e6:bc:b8:9d:78:28:d0:5a:71:9b:e9:df: d6:37:54:9e:ba:48:a7:bf:58:c5:8e:33:cb:94:b1:bb:6a:26: 54:ed:bf:4f:0e:e9:e0:23:0a:be:81:2e:89:a1:74:5a:ff:bb: 74:9a:91:ac:5b:e8:e6:84:97:8a:41:8b:44:be:76:01:f2:82: 6a:76:e8:f2:6a:d8:66:9c:86:ba:7b:cc:f6:e9:f7:e9:2c:34: 78:fc:6e:6f:35:ec:98:33:2f:d9:86:2e:42:35:30:06:11:b6: 4a:47:f4:4a:e6:06:15:ba:d4:0b:cf:af:e4:bf:70:98:65:eb: 72:aa:90:61:6a:5e:7e:55:8f:41:02:4e:64:fd:3b:b1:9a:58: 66:be:2f:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwvLS2tmRvw2R45SF0HCRMGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1Njc2OWE0MmU0NDI2NmYwMzdlY2IzOTBkNDExNWZlYmUz ODYxYTQwHhcNMjYwMjA1MTkwMDE1WhcNMjYwMjA2MTkwMDE1WjAzMTEwLwYDVQQD EygzYzE5YzU0ZTE4YWI4NWNjZDNjMjZiMzljMTFlZmRlZjdhYWFhYzk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMnWPKl7xzKkUU4iLAJxZGJdT7PY n2xdxeDDME20MJRi7f3jOfZJnjjmVEIP9WsvcTFsn6wey4Zp/E3doYMl+7DClutJ gvssgrQc1qR9cOJ1YDFdD25w7LPe8ayB0JWVmu3YUWyd/vvFIHp40x9msF51ADhN P/T0+phBHtCqXBiGlJcOqWczoVAZS7m6LtNSC65UHhhU3nar+tRnGE699cTZpYl3 eMX7hv7Pzi5jxSDmXoP9t/qhvbTwp6MwG+pfD5HHLLgCanY8G5kaGPAyPSRvZNkk S3zP49IwlMEwOhUuNxQKaWhVfuP4Hn9Nq8NKA/XEjc8IW8oirUNnnJTsowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDwZxU4Yq4XM08JrOcEe/e96qqyVMB8GA1UdIwQY MBaAFPVnaaQuRCZvA37LOQ1BFf6+OGGkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVdkcHBDNUVKbThEZnNzNURVRVZfcjQ0WWFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9hMWQyZmQtNGRiZC00MzYyLWFjN2It N2EzZmZiMDBiNzE2LzEvOVdkcHBDNUVKbThEZnNzNURVRVZfcjQ0WWFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS9hMWQyZmQtNGRiZC00MzYyLWFjN2ItN2EzZmZiMDBiNzE2 LzEvOVdkcHBDNUVKbThEZnNzNURVRVZfcjQ0WWFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATgNue7Pe YV1QjrTIGC/Act35WtSQXwmEnt+QF+PbefNyVozI2g0BmkaHLOyt3bDjyeRHg+q9 PXmt6rHGBthLa1m9fpycQ8OYeHCJkk38RqEBSMbj9itKmW9G+xpRmvLE0jO8LWDF M3mlJZVxB47QE9IA5ry4nXgo0Fpxm+nf1jdUnrpIp79YxY4zy5Sxu2omVO2/Tw7p 4CMKvoEuiaF0Wv+7dJqRrFvo5oSXikGLRL52AfKCanbo8mrYZpyGunvM9un36Sw0 ePxubzXsmDMv2YYuQjUwBhG2Skf0SuYGFbrUC8+v5L9wmGXrcqqQYWpeflWPQQJO ZP07sZpYZr4vLg== -----END CERTIFICATE-----Generated at Fri Feb 6 03:47:09 2026 by rpki-client