This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/wc2HDWChpsQgZxWK7rzA4_1t2B8.mft File: wc2HDWChpsQgZxWK7rzA4_1t2B8.mft (raw, json) Hash identifier: 3k7hITquyMbLyrHEmTysjYalxrPnoc6PisU9efVduu8= Subject key identifier: D5:C6:EE:02:8B:D9:62:7E:AB:7D:19:28:F3:6B:A2:06:43:2B:09:16 Authority key identifier: C1:CD:87:0D:60:A1:A6:C4:20:67:15:8A:EE:BC:C0:E3:FD:6D:D8:1F Certificate issuer: /CN=c1cd870d60a1a6c42067158aeebcc0e3fd6dd81f Certificate serial: 019C42EAEF8DEC04FAF90950EA4DEE4AF94E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wc2HDWChpsQgZxWK7rzA4_1t2B8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/wc2HDWChpsQgZxWK7rzA4_1t2B8.mft Manifest number: 04F4 Signing time: Mon 09 Feb 2026 15:00:18 +0000 Manifest this update: Mon 09 Feb 2026 15:00:18 +0000 Manifest next update: Tue 10 Feb 2026 15:00:18 +0000 Files and hashes: 1: idDaY1VTvrLRkWidrdXliwIuIzI.roa (hash: EWX8rnTiEBVz0Xovhy0D3aDV6ClMyz5OVPYjQXf/BgY=) 2: wc2HDWChpsQgZxWK7rzA4_1t2B8.crl (hash: JrXLQDD/VJthQVf05419A1YNNGzkDSHciAe+z4BV5CI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/wc2HDWChpsQgZxWK7rzA4_1t2B8.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/wc2HDWChpsQgZxWK7rzA4_1t2B8.mft rsync://rpki.ripe.net/repository/DEFAULT/wc2HDWChpsQgZxWK7rzA4_1t2B8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:ea:ef:8d:ec:04:fa:f9:09:50:ea:4d:ee:4a:f9:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1cd870d60a1a6c42067158aeebcc0e3fd6dd81f Validity Not Before: Feb 9 15:00:18 2026 GMT Not After : Feb 10 15:00:18 2026 GMT Subject: CN=d5c6ee028bd9627eab7d1928f36ba206432b0916 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:12:f6:0b:48:89:2d:d4:7e:49:ee:83:a3:5d: c7:16:88:ba:a5:2a:bc:3c:76:3b:6b:48:18:2a:8d: 2d:ea:50:d6:fb:3c:bb:47:79:dc:9b:93:2b:31:6c: 3e:1f:b2:6e:8f:25:c4:a6:9c:1e:a3:42:37:d9:74: 33:ed:7b:48:19:52:44:ab:a4:8e:47:e2:d9:bb:e8: 48:31:12:b5:08:31:ce:89:bb:fd:a9:8c:f2:bb:39: 25:2f:eb:34:3f:8a:ff:0e:d0:4c:c3:df:14:8e:d9: b1:9d:79:31:15:08:2f:e6:4b:b2:93:22:2d:3d:3f: 9e:c4:2b:48:96:e3:fa:94:1e:52:4e:54:e2:47:36: 59:76:b4:87:d7:33:6a:96:1a:f9:99:06:3d:a4:51: 1d:64:29:1b:4e:48:59:d6:07:bc:d2:0c:60:64:27: 0a:b4:5e:ad:22:aa:6d:65:b6:3c:98:7a:d5:51:26: 92:5c:dc:75:42:5c:7e:30:73:7b:7a:5c:01:b3:e8: ca:48:e6:b9:4a:97:35:9c:12:b9:cb:5a:c9:90:bc: fa:8a:d7:8b:fe:a8:d2:9f:55:05:43:ac:7a:8a:08: 12:1d:5d:8a:3a:0b:20:76:9f:cb:e8:f0:c3:e6:69: c8:83:20:71:1a:67:d5:eb:02:47:9a:e3:7f:91:3e: 61:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:C6:EE:02:8B:D9:62:7E:AB:7D:19:28:F3:6B:A2:06:43:2B:09:16 X509v3 Authority Key Identifier: keyid:C1:CD:87:0D:60:A1:A6:C4:20:67:15:8A:EE:BC:C0:E3:FD:6D:D8:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wc2HDWChpsQgZxWK7rzA4_1t2B8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/wc2HDWChpsQgZxWK7rzA4_1t2B8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/wc2HDWChpsQgZxWK7rzA4_1t2B8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:d1:65:4e:c3:9c:bb:74:e0:ee:df:0b:b7:c2:6f:ac:3a:4a: a0:db:11:7b:db:e3:de:d3:2b:f8:26:11:ac:6b:98:1b:5f:e9: a1:4e:f3:4a:50:03:62:b4:61:00:d9:61:38:2e:35:2a:d6:56: e8:6c:ef:b8:90:c2:e7:ce:37:e8:f8:90:52:2c:bc:d4:be:fe: 2b:ec:85:cf:06:fb:c2:2f:3d:fa:cd:d7:2f:ec:73:66:0a:85: bf:b5:cf:e3:46:f4:13:00:84:1e:b0:7c:4a:66:a1:fc:e3:3a: 15:d6:7e:57:e2:b8:71:b9:f3:3f:06:b3:1a:8c:be:c1:70:e4: 7e:d5:27:19:c4:fe:18:c7:d2:69:2f:af:c9:e8:1f:20:63:4c: 29:3d:ef:9f:15:80:75:9e:97:65:25:1f:3e:70:b1:f6:d4:1f: 85:6d:38:8d:da:93:a6:a7:6c:3d:d6:e5:8d:40:16:36:5d:09: b7:6a:98:f6:b3:e9:f6:d8:31:d3:88:65:cf:0e:6b:35:80:e0: c5:da:cb:62:a5:79:d1:2a:c1:4e:b3:ee:3b:06:f8:0a:2c:28: 67:3a:10:c3:53:76:94:63:12:a6:f6:1f:a4:c1:1e:0b:1f:3f: 7c:f1:4f:a6:ea:0e:23:e2:c8:87:68:c0:e6:f1:1d:13:50:1f: 21:ae:b2:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC6u+N7AT6+QlQ6k3uSvlOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxY2Q4NzBkNjBhMWE2YzQyMDY3MTU4YWVlYmNjMGUzZmQ2 ZGQ4MWYwHhcNMjYwMjA5MTUwMDE4WhcNMjYwMjEwMTUwMDE4WjAzMTEwLwYDVQQD EyhkNWM2ZWUwMjhiZDk2MjdlYWI3ZDE5MjhmMzZiYTIwNjQzMmIwOTE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihL2C0iJLdR+Se6Do13HFoi6pSq8 PHY7a0gYKo0t6lDW+zy7R3ncm5MrMWw+H7JujyXEppweo0I32XQz7XtIGVJEq6SO R+LZu+hIMRK1CDHOibv9qYzyuzklL+s0P4r/DtBMw98UjtmxnXkxFQgv5kuykyIt PT+exCtIluP6lB5STlTiRzZZdrSH1zNqlhr5mQY9pFEdZCkbTkhZ1ge80gxgZCcK tF6tIqptZbY8mHrVUSaSXNx1Qlx+MHN7elwBs+jKSOa5Spc1nBK5y1rJkLz6iteL /qjSn1UFQ6x6iggSHV2KOgsgdp/L6PDD5mnIgyBxGmfV6wJHmuN/kT5hMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNXG7gKL2WJ+q30ZKPNrogZDKwkWMB8GA1UdIwQY MBaAFMHNhw1goabEIGcViu68wOP9bdgfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2MySERXQ2hwc1FnWnhXSzdyekE0XzF0MkI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy84MzVhODItOGJiZS00MGIyLWIyZDQt MDQ4MWM2NmMyYjVhLzEvd2MySERXQ2hwc1FnWnhXSzdyekE0XzF0MkI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy84MzVhODItOGJiZS00MGIyLWIyZDQtMDQ4MWM2NmMyYjVh LzEvd2MySERXQ2hwc1FnWnhXSzdyekE0XzF0MkI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP9FlTsOc u3Tg7t8Lt8JvrDpKoNsRe9vj3tMr+CYRrGuYG1/poU7zSlADYrRhANlhOC41KtZW 6GzvuJDC58436PiQUiy81L7+K+yFzwb7wi89+s3XL+xzZgqFv7XP40b0EwCEHrB8 Smah/OM6FdZ+V+K4cbnzPwazGoy+wXDkftUnGcT+GMfSaS+vyegfIGNMKT3vnxWA dZ6XZSUfPnCx9tQfhW04jdqTpqdsPdbljUAWNl0Jt2qY9rPp9tgx04hlzw5rNYDg xdrLYqV50SrBTrPuOwb4CiwoZzoQw1N2lGMSpvYfpMEeCx8/fPFPpuoOI+LIh2jA 5vEdE1AfIa6yjw== -----END CERTIFICATE-----Generated at Mon Feb 9 22:43:42 2026 by rpki-client