This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/f4d345-5ff3-4b0a-8dd9-7a4e3340a491/1/WROOPbd2QL6t8dpbFRlLk4ShRE4.mft File: WROOPbd2QL6t8dpbFRlLk4ShRE4.mft (raw, json) Hash identifier: G+HIvGXouovZf09KCZoukML1tn3H3AK/zqZZlq81JwI= Subject key identifier: 3F:08:72:B6:04:2A:BA:C9:1A:92:83:39:D3:3D:27:92:CA:4E:43:D1 Authority key identifier: 59:13:8E:3D:B7:76:40:BE:AD:F1:DA:5B:15:19:4B:93:84:A1:44:4E Certificate issuer: /CN=59138e3db77640beadf1da5b15194b9384a1444e Certificate serial: 019C420F9806D64E0AEA5D6A217CED1CB1B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WROOPbd2QL6t8dpbFRlLk4ShRE4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/f4d345-5ff3-4b0a-8dd9-7a4e3340a491/1/WROOPbd2QL6t8dpbFRlLk4ShRE4.mft Manifest number: 0C72 Signing time: Mon 09 Feb 2026 11:00:44 +0000 Manifest this update: Mon 09 Feb 2026 11:00:44 +0000 Manifest next update: Tue 10 Feb 2026 11:00:44 +0000 Files and hashes: 1: ISoN8Hz1Tt-g6dokZBe32zhY29I.roa (hash: jqVnvsymB8ypbwPu5QGw3Kqpgjs5LT+P+1zvgA/xIZg=) 2: WROOPbd2QL6t8dpbFRlLk4ShRE4.crl (hash: tGfTBIfscAU1w9Oz+U15iZEOh67iuS+Mkb3VclEYTXo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/f4d345-5ff3-4b0a-8dd9-7a4e3340a491/1/WROOPbd2QL6t8dpbFRlLk4ShRE4.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/f4d345-5ff3-4b0a-8dd9-7a4e3340a491/1/WROOPbd2QL6t8dpbFRlLk4ShRE4.mft rsync://rpki.ripe.net/repository/DEFAULT/WROOPbd2QL6t8dpbFRlLk4ShRE4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:98:06:d6:4e:0a:ea:5d:6a:21:7c:ed:1c:b1:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59138e3db77640beadf1da5b15194b9384a1444e Validity Not Before: Feb 9 11:00:44 2026 GMT Not After : Feb 10 11:00:44 2026 GMT Subject: CN=3f0872b6042abac91a928339d33d2792ca4e43d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:db:3b:6a:37:ac:1f:39:97:88:57:14:99:a6: 5a:e5:b7:7c:23:a5:39:ee:2c:0b:49:50:e1:65:9d: 78:75:1e:23:9f:c3:a4:32:1c:b4:bf:3b:2b:95:ff: e4:da:26:33:12:32:62:59:9c:2b:6c:5b:b2:45:68: bb:42:34:28:d6:97:30:88:52:56:25:59:32:3e:4b: 4e:38:2f:97:51:35:8a:cd:f4:1c:e9:d5:73:36:2a: 92:43:a4:5c:f2:54:8f:69:33:a1:7a:9a:5e:93:db: e2:76:44:f3:6a:2c:3a:50:d0:de:95:89:d7:df:f0: c7:a0:03:92:1f:2a:c1:95:0b:a6:3e:33:49:2c:c7: c9:0d:8b:34:b1:b4:80:1d:99:d1:79:98:fc:f4:84: 04:39:ac:7a:e0:85:df:a1:46:a1:73:19:cc:34:5c: e8:77:45:2b:a7:ca:92:68:d8:d3:e8:95:77:8f:8a: 71:36:1e:6c:bd:16:bb:f6:6f:8e:ba:dd:f1:d4:f2: 77:a4:aa:5d:a4:b5:47:e0:68:d0:4d:13:86:ba:2a: e8:7e:30:68:2f:03:29:2f:af:45:f3:8a:9e:c3:40: ea:db:e3:2f:b6:b5:4b:b2:45:07:75:fc:fb:e8:53: 2d:f3:14:8c:7b:a2:4c:a1:cc:dc:99:47:8b:2e:90: 5f:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:08:72:B6:04:2A:BA:C9:1A:92:83:39:D3:3D:27:92:CA:4E:43:D1 X509v3 Authority Key Identifier: keyid:59:13:8E:3D:B7:76:40:BE:AD:F1:DA:5B:15:19:4B:93:84:A1:44:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WROOPbd2QL6t8dpbFRlLk4ShRE4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/f4d345-5ff3-4b0a-8dd9-7a4e3340a491/1/WROOPbd2QL6t8dpbFRlLk4ShRE4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/f4d345-5ff3-4b0a-8dd9-7a4e3340a491/1/WROOPbd2QL6t8dpbFRlLk4ShRE4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:3a:7d:33:5d:94:93:82:2e:7f:3d:16:0a:5f:a7:31:28:7a: 0b:1e:f7:c2:9c:9b:16:e9:ae:aa:6b:d9:de:ff:60:a7:6a:fd: f2:a1:2f:79:19:05:4e:cb:ff:5a:a5:89:98:79:85:f5:4a:a1: 1b:de:aa:74:51:b1:f5:6e:42:7c:32:5e:fc:90:f0:ff:03:12: 78:1a:62:7d:1c:dc:46:71:91:78:40:22:6f:f2:8a:4f:af:7b: e6:b9:0e:b1:85:d4:47:10:34:2d:fa:e7:30:65:59:ef:ca:2f: 17:65:6e:0c:aa:2c:be:47:dd:72:0a:94:40:87:06:55:93:e7: 87:30:ed:83:93:ed:06:e5:47:6d:c8:b1:43:b0:4f:25:4c:c1: 67:ee:c5:7c:44:78:b6:57:e5:42:2b:a7:36:03:87:83:a8:2f: 4c:56:64:7b:ec:fe:2c:e2:ff:0f:7e:b0:b3:f4:0d:4a:57:5d: 3d:d3:52:a0:5c:73:8b:1f:d6:ca:23:af:3f:65:52:e5:08:9f: ed:67:48:f3:06:5b:f5:c7:4f:11:d9:51:13:1f:4e:a2:7f:ba: 4b:d1:d1:53:a2:10:8c:a3:f1:19:2c:26:39:a6:7d:0c:81:9d: 5f:20:83:37:f4:54:fd:1d:41:c3:2a:6d:76:40:12:f9:a7:74: 5e:54:25:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD5gG1k4K6l1qIXztHLGwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5MTM4ZTNkYjc3NjQwYmVhZGYxZGE1YjE1MTk0YjkzODRh MTQ0NGUwHhcNMjYwMjA5MTEwMDQ0WhcNMjYwMjEwMTEwMDQ0WjAzMTEwLwYDVQQD EygzZjA4NzJiNjA0MmFiYWM5MWE5MjgzMzlkMzNkMjc5MmNhNGU0M2QxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz9s7ajesHzmXiFcUmaZa5bd8I6U5 7iwLSVDhZZ14dR4jn8OkMhy0vzsrlf/k2iYzEjJiWZwrbFuyRWi7QjQo1pcwiFJW JVkyPktOOC+XUTWKzfQc6dVzNiqSQ6Rc8lSPaTOheppek9vidkTzaiw6UNDelYnX 3/DHoAOSHyrBlQumPjNJLMfJDYs0sbSAHZnReZj89IQEOax64IXfoUahcxnMNFzo d0Urp8qSaNjT6JV3j4pxNh5svRa79m+Out3x1PJ3pKpdpLVH4GjQTROGuirofjBo LwMpL69F84qew0Dq2+MvtrVLskUHdfz76FMt8xSMe6JMoczcmUeLLpBfmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD8IcrYEKrrJGpKDOdM9J5LKTkPRMB8GA1UdIwQY MBaAFFkTjj23dkC+rfHaWxUZS5OEoUROMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1JPT1BiZDJRTDZ0OGRwYkZSbExrNFNoUkU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9mNGQzNDUtNWZmMy00YjBhLThkZDkt N2E0ZTMzNDBhNDkxLzEvV1JPT1BiZDJRTDZ0OGRwYkZSbExrNFNoUkU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS9mNGQzNDUtNWZmMy00YjBhLThkZDktN2E0ZTMzNDBhNDkx LzEvV1JPT1BiZDJRTDZ0OGRwYkZSbExrNFNoUkU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQjp9M12U k4Iufz0WCl+nMSh6Cx73wpybFumuqmvZ3v9gp2r98qEveRkFTsv/WqWJmHmF9Uqh G96qdFGx9W5CfDJe/JDw/wMSeBpifRzcRnGReEAib/KKT6975rkOsYXURxA0Lfrn MGVZ78ovF2VuDKosvkfdcgqUQIcGVZPnhzDtg5PtBuVHbcixQ7BPJUzBZ+7FfER4 tlflQiunNgOHg6gvTFZke+z+LOL/D36ws/QNSlddPdNSoFxzix/WyiOvP2VS5Qif 7WdI8wZb9cdPEdlREx9Oon+6S9HRU6IQjKPxGSwmOaZ9DIGdXyCDN/RU/R1Bwypt dkAS+ad0XlQlpw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:27:16 2026 by rpki-client