This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/300bd4-0356-4c44-83cf-38efcfdc417b/1/wh4y0EfF0bniZ3DDhAMEz2lx3hw.mft File: wh4y0EfF0bniZ3DDhAMEz2lx3hw.mft (raw, json) Hash identifier: nbYGOkuzpavCwEnt/SXGGTuVH2aHfxfDCvk9KI+HkZk= Subject key identifier: E4:3D:4C:A0:AF:10:F3:35:91:A1:75:09:C2:92:ED:44:8E:DF:28:C9 Authority key identifier: C2:1E:32:D0:47:C5:D1:B9:E2:67:70:C3:84:03:04:CF:69:71:DE:1C Certificate issuer: /CN=c21e32d047c5d1b9e26770c3840304cf6971de1c Certificate serial: 019C42EB07F838822C15931B98BAC9ACED37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wh4y0EfF0bniZ3DDhAMEz2lx3hw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/300bd4-0356-4c44-83cf-38efcfdc417b/1/wh4y0EfF0bniZ3DDhAMEz2lx3hw.mft Manifest number: 0B33 Signing time: Mon 09 Feb 2026 15:00:25 +0000 Manifest this update: Mon 09 Feb 2026 15:00:25 +0000 Manifest next update: Tue 10 Feb 2026 15:00:25 +0000 Files and hashes: 1: Y8cmMZQvMnJkziqHhszvZV_UjeQ.roa (hash: cYgGX/s9jr31rZGmmaEtyXpNrfjq8EGIHIKPU1pqwxk=) 2: wh4y0EfF0bniZ3DDhAMEz2lx3hw.crl (hash: iR8bghv/d9QI6d9lkX2SR5rJ08PBQ4Ys99Rqq7uR9cE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/300bd4-0356-4c44-83cf-38efcfdc417b/1/wh4y0EfF0bniZ3DDhAMEz2lx3hw.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/300bd4-0356-4c44-83cf-38efcfdc417b/1/wh4y0EfF0bniZ3DDhAMEz2lx3hw.mft rsync://rpki.ripe.net/repository/DEFAULT/wh4y0EfF0bniZ3DDhAMEz2lx3hw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:07:f8:38:82:2c:15:93:1b:98:ba:c9:ac:ed:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c21e32d047c5d1b9e26770c3840304cf6971de1c Validity Not Before: Feb 9 15:00:25 2026 GMT Not After : Feb 10 15:00:25 2026 GMT Subject: CN=e43d4ca0af10f33591a17509c292ed448edf28c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:33:eb:88:2d:bb:5e:a7:d8:14:de:d7:42:c1: 48:c6:b5:84:24:2c:7c:e6:90:aa:39:2d:0f:40:b6: de:60:89:f1:8f:ae:f1:86:d2:e8:f2:09:34:ae:2f: 35:52:68:28:a1:7f:65:9f:74:1d:83:62:a2:98:71: 6f:53:ef:57:74:6f:f8:fd:4b:f3:44:43:a4:bb:bd: 58:2f:c7:15:da:5d:b5:3c:56:a4:bf:cf:f8:11:88: 7d:75:88:87:4b:64:4d:71:9c:82:f4:06:76:08:f5: b1:5b:9f:ba:d3:23:3b:9e:d0:b7:e1:c8:16:de:25: c3:66:c8:5a:35:9a:ef:ca:27:dd:bc:b7:3f:5c:1c: 49:59:0d:92:af:62:8d:55:0c:c0:08:94:56:99:c3: 66:29:c9:68:40:89:91:67:ed:6f:db:19:73:41:f4: 65:b3:af:f0:ef:fb:aa:44:f8:a2:b7:63:fd:6e:13: f5:18:66:9c:3a:69:67:61:b7:61:98:36:a6:8b:65: 61:68:57:75:96:e3:d9:99:fd:ac:02:b2:34:41:f8: f8:74:f5:36:f9:94:be:b8:91:9e:3f:6a:57:b5:91: 33:fb:0a:d0:dd:67:0b:85:9f:ac:39:ab:b8:c0:67: e1:3c:97:8c:35:c4:01:a1:bc:bc:ca:e5:55:87:1e: a0:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:3D:4C:A0:AF:10:F3:35:91:A1:75:09:C2:92:ED:44:8E:DF:28:C9 X509v3 Authority Key Identifier: keyid:C2:1E:32:D0:47:C5:D1:B9:E2:67:70:C3:84:03:04:CF:69:71:DE:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wh4y0EfF0bniZ3DDhAMEz2lx3hw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/300bd4-0356-4c44-83cf-38efcfdc417b/1/wh4y0EfF0bniZ3DDhAMEz2lx3hw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/300bd4-0356-4c44-83cf-38efcfdc417b/1/wh4y0EfF0bniZ3DDhAMEz2lx3hw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:78:48:70:03:73:65:0a:21:d0:ea:fc:1c:10:6a:8f:f1:d0: 08:2f:5e:94:54:b6:ef:23:ad:9a:60:57:74:5b:59:c0:47:21: 1f:b8:fa:67:85:25:76:f1:c6:a2:a6:ca:71:70:68:0b:7c:66: 43:56:8b:62:60:8e:cf:4b:3a:22:c7:81:dd:74:f8:5a:14:b6: b2:4f:26:d4:f6:b1:40:c4:50:31:67:e1:fa:ae:7a:b2:da:71: 17:80:73:1f:51:e0:44:8f:ba:fa:a1:c9:09:a4:24:a4:a6:25: ed:f0:a1:52:ea:79:5e:a0:27:b9:a5:1d:43:eb:89:05:39:97: 15:48:ce:28:ee:45:e2:c0:0c:e8:fa:be:ac:d8:05:0c:bb:f7: 24:04:de:61:f8:34:bf:67:9c:4d:b2:46:71:dc:ed:f3:9f:4a: a3:34:6f:11:11:98:4c:01:7d:5a:fb:ab:74:12:71:79:a6:9b: 90:5a:6b:aa:0b:d1:09:ee:ee:49:56:b8:52:b9:ef:c8:60:f2: d7:e1:d6:c5:f0:ab:11:6d:ea:e7:8f:09:fb:6a:ff:80:33:4c: e5:84:1c:6c:81:c1:3e:95:17:1a:5a:46:99:50:33:10:ab:b2: e7:99:e7:98:8c:46:4d:7c:d0:4d:f3:bc:ea:63:1a:21:47:4c: 21:58:88:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC6wf4OIIsFZMbmLrJrO03MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyMWUzMmQwNDdjNWQxYjllMjY3NzBjMzg0MDMwNGNmNjk3 MWRlMWMwHhcNMjYwMjA5MTUwMDI1WhcNMjYwMjEwMTUwMDI1WjAzMTEwLwYDVQQD EyhlNDNkNGNhMGFmMTBmMzM1OTFhMTc1MDljMjkyZWQ0NDhlZGYyOGM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDPriC27XqfYFN7XQsFIxrWEJCx8 5pCqOS0PQLbeYInxj67xhtLo8gk0ri81UmgooX9ln3Qdg2KimHFvU+9XdG/4/Uvz REOku71YL8cV2l21PFakv8/4EYh9dYiHS2RNcZyC9AZ2CPWxW5+60yM7ntC34cgW 3iXDZshaNZrvyifdvLc/XBxJWQ2Sr2KNVQzACJRWmcNmKcloQImRZ+1v2xlzQfRl s6/w7/uqRPiit2P9bhP1GGacOmlnYbdhmDami2VhaFd1luPZmf2sArI0Qfj4dPU2 +ZS+uJGeP2pXtZEz+wrQ3WcLhZ+sOau4wGfhPJeMNcQBoby8yuVVhx6ghwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOQ9TKCvEPM1kaF1CcKS7USO3yjJMB8GA1UdIwQY MBaAFMIeMtBHxdG54mdww4QDBM9pcd4cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2g0eTBFZkYwYm5pWjNERGhBTUV6Mmx4M2h3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8zMDBiZDQtMDM1Ni00YzQ0LTgzY2Yt MzhlZmNmZGM0MTdiLzEvd2g0eTBFZkYwYm5pWjNERGhBTUV6Mmx4M2h3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy8zMDBiZDQtMDM1Ni00YzQ0LTgzY2YtMzhlZmNmZGM0MTdi LzEvd2g0eTBFZkYwYm5pWjNERGhBTUV6Mmx4M2h3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI3hIcANz ZQoh0Or8HBBqj/HQCC9elFS27yOtmmBXdFtZwEchH7j6Z4UldvHGoqbKcXBoC3xm Q1aLYmCOz0s6IseB3XT4WhS2sk8m1PaxQMRQMWfh+q56stpxF4BzH1HgRI+6+qHJ CaQkpKYl7fChUup5XqAnuaUdQ+uJBTmXFUjOKO5F4sAM6Pq+rNgFDLv3JATeYfg0 v2ecTbJGcdzt859KozRvERGYTAF9WvurdBJxeaabkFprqgvRCe7uSVa4UrnvyGDy 1+HWxfCrEW3q548J+2r/gDNM5YQcbIHBPpUXGlpGmVAzEKuy55nnmIxGTXzQTfO8 6mMaIUdMIViI1Q== -----END CERTIFICATE-----Generated at Mon Feb 9 18:40:39 2026 by rpki-client