This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/bd98c9-fce3-4bba-b49b-4cae325c0e28/1/rWUjcvDl0WnCAPfR0IDoVw_-23E.mft File: rWUjcvDl0WnCAPfR0IDoVw_-23E.mft (raw, json) Hash identifier: YczR44+Vd78rnhRK2mq8I6abFxqUSLFIYWRIS17RX8M= Subject key identifier: 0F:AD:B2:69:36:DA:97:CF:D8:FD:CE:B7:D1:D9:18:BD:E5:DE:B8:42 Authority key identifier: AD:65:23:72:F0:E5:D1:69:C2:00:F7:D1:D0:80:E8:57:0F:FE:DB:71 Certificate issuer: /CN=ad652372f0e5d169c200f7d1d080e8570ffedb71 Certificate serial: 019C2E528FEF5D11EE5621BA9F998884C36E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rWUjcvDl0WnCAPfR0IDoVw_-23E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/bd98c9-fce3-4bba-b49b-4cae325c0e28/1/rWUjcvDl0WnCAPfR0IDoVw_-23E.mft Manifest number: 0571 Signing time: Thu 05 Feb 2026 15:01:28 +0000 Manifest this update: Thu 05 Feb 2026 15:01:28 +0000 Manifest next update: Fri 06 Feb 2026 15:01:28 +0000 Files and hashes: 1: TVDGXyDJKjGf9M2l61hPydz0GW8.roa (hash: GPBRCtJGeJYsInHOu3V8vVubHvszvLhmWvGPlsGdKsk=) 2: rWUjcvDl0WnCAPfR0IDoVw_-23E.crl (hash: 3Y/+D07/nBudNEBGmwo82EYTt596PBaE4BOtwQDey4w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/bd98c9-fce3-4bba-b49b-4cae325c0e28/1/rWUjcvDl0WnCAPfR0IDoVw_-23E.crl rsync://rpki.ripe.net/repository/DEFAULT/db/bd98c9-fce3-4bba-b49b-4cae325c0e28/1/rWUjcvDl0WnCAPfR0IDoVw_-23E.mft rsync://rpki.ripe.net/repository/DEFAULT/rWUjcvDl0WnCAPfR0IDoVw_-23E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Feb 2026 12:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:2e:52:8f:ef:5d:11:ee:56:21:ba:9f:99:88:84:c3:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad652372f0e5d169c200f7d1d080e8570ffedb71 Validity Not Before: Feb 5 15:01:28 2026 GMT Not After : Feb 6 15:01:28 2026 GMT Subject: CN=0fadb26936da97cfd8fdceb7d1d918bde5deb842 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:76:18:f3:cc:53:90:4a:38:4e:f1:3c:d2:7c: 57:32:4d:f9:79:29:29:86:87:e3:0f:9e:4e:0e:c0: 13:dd:4f:3b:c9:a5:23:c9:38:4f:e6:bf:21:3b:85: 0d:c6:3f:97:0e:52:84:53:1a:84:80:17:fd:53:25: fd:4d:07:58:96:12:5f:21:fe:4a:9c:04:30:bd:50: e9:98:c6:31:2c:57:e0:9a:bd:73:82:f4:25:cb:24: 09:cf:c2:e0:0a:54:fc:71:73:36:6e:9d:5e:bc:af: c7:1c:d9:bd:b9:bb:57:33:0a:e1:eb:dc:5a:a7:fb: 4c:83:f7:5c:13:9f:b1:24:69:35:88:35:91:c7:a7: b0:34:b5:5c:ae:91:fa:78:8f:bd:1f:97:df:86:af: ca:c7:10:b1:2d:9a:01:98:57:1c:2d:1c:21:0b:96: 77:c8:77:b5:a4:49:dc:6b:7b:28:85:9c:92:7f:d0: a3:d7:5c:e3:a5:66:80:93:bf:41:2d:0b:90:7d:f8: b5:c0:0d:38:d8:1d:a4:61:c1:3e:cd:11:bd:32:8f: 42:05:40:d6:75:4e:ec:30:f0:b3:af:4f:b7:c0:ee: 18:1a:67:6d:e6:64:a0:45:a3:90:e0:60:63:53:2a: 7f:df:ce:b6:93:c6:87:61:69:c0:f1:60:ba:0c:8e: 15:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:AD:B2:69:36:DA:97:CF:D8:FD:CE:B7:D1:D9:18:BD:E5:DE:B8:42 X509v3 Authority Key Identifier: keyid:AD:65:23:72:F0:E5:D1:69:C2:00:F7:D1:D0:80:E8:57:0F:FE:DB:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rWUjcvDl0WnCAPfR0IDoVw_-23E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/bd98c9-fce3-4bba-b49b-4cae325c0e28/1/rWUjcvDl0WnCAPfR0IDoVw_-23E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/bd98c9-fce3-4bba-b49b-4cae325c0e28/1/rWUjcvDl0WnCAPfR0IDoVw_-23E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:14:c8:c0:2d:6a:ac:ca:39:29:6d:12:26:00:96:91:fe:d9: d4:9f:04:30:d9:b7:e5:95:39:35:40:32:1a:73:18:92:98:b8: cb:c5:3e:bf:1e:0a:7b:24:9b:06:7e:78:41:e8:fa:33:b5:40: 34:6c:f5:4b:5e:7a:65:e0:6a:05:6d:b9:f7:0d:c7:1b:a5:15: fd:7e:04:d2:64:0e:d2:02:fe:f2:a4:10:0b:85:9c:2b:e1:ba: 25:de:fc:24:90:87:81:63:ae:3c:49:11:dd:0c:fd:9d:e6:67: 0b:da:ad:17:0f:d6:05:74:0b:83:be:99:14:4a:f6:68:36:a3: f0:57:21:ac:fc:eb:08:61:89:3e:72:65:3f:d8:ed:84:07:8a: 51:92:38:51:c3:9a:22:ff:3a:74:68:14:0c:86:a0:0f:06:3e: ad:25:50:02:c5:36:d9:2f:1a:5e:31:80:c4:c3:9c:f7:72:09: 0e:f6:e3:0c:15:7f:0d:af:8f:8b:21:39:ab:16:32:20:dc:21: 90:d7:a8:a4:5c:d3:64:29:cb:14:79:0e:80:db:ab:15:2e:01: 7f:72:5d:6e:f2:ce:fc:1a:25:41:5f:34:1f:5c:73:41:d3:01: 02:b9:e6:dd:7b:e6:aa:6b:6b:23:d0:00:b3:ce:13:12:6a:6e: 09:c8:63:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwuUo/vXRHuViG6n5mIhMNuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkNjUyMzcyZjBlNWQxNjljMjAwZjdkMWQwODBlODU3MGZm ZWRiNzEwHhcNMjYwMjA1MTUwMTI4WhcNMjYwMjA2MTUwMTI4WjAzMTEwLwYDVQQD EygwZmFkYjI2OTM2ZGE5N2NmZDhmZGNlYjdkMWQ5MThiZGU1ZGViODQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXYY88xTkEo4TvE80nxXMk35eSkp hofjD55ODsAT3U87yaUjyThP5r8hO4UNxj+XDlKEUxqEgBf9UyX9TQdYlhJfIf5K nAQwvVDpmMYxLFfgmr1zgvQlyyQJz8LgClT8cXM2bp1evK/HHNm9ubtXMwrh69xa p/tMg/dcE5+xJGk1iDWRx6ewNLVcrpH6eI+9H5ffhq/KxxCxLZoBmFccLRwhC5Z3 yHe1pEnca3sohZySf9Cj11zjpWaAk79BLQuQffi1wA042B2kYcE+zRG9Mo9CBUDW dU7sMPCzr0+3wO4YGmdt5mSgRaOQ4GBjUyp/3862k8aHYWnA8WC6DI4VmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA+tsmk22pfP2P3Ot9HZGL3l3rhCMB8GA1UdIwQY MBaAFK1lI3Lw5dFpwgD30dCA6FcP/ttxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcldVamN2RGwwV25DQVBmUjBJRG9Wd18tMjNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9iZDk4YzktZmNlMy00YmJhLWI0OWIt NGNhZTMyNWMwZTI4LzEvcldVamN2RGwwV25DQVBmUjBJRG9Wd18tMjNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9iZDk4YzktZmNlMy00YmJhLWI0OWItNGNhZTMyNWMwZTI4 LzEvcldVamN2RGwwV25DQVBmUjBJRG9Wd18tMjNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGRTIwC1q rMo5KW0SJgCWkf7Z1J8EMNm35ZU5NUAyGnMYkpi4y8U+vx4KeySbBn54Qej6M7VA NGz1S156ZeBqBW259w3HG6UV/X4E0mQO0gL+8qQQC4WcK+G6Jd78JJCHgWOuPEkR 3Qz9neZnC9qtFw/WBXQLg76ZFEr2aDaj8FchrPzrCGGJPnJlP9jthAeKUZI4UcOa Iv86dGgUDIagDwY+rSVQAsU22S8aXjGAxMOc93IJDvbjDBV/Da+PiyE5qxYyINwh kNeopFzTZCnLFHkOgNurFS4Bf3JdbvLO/BolQV80H1xzQdMBArnm3XvmqmtrI9AA s84TEmpuCchjkQ== -----END CERTIFICATE-----Generated at Thu Feb 5 19:49:24 2026 by rpki-client