This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/9f8728-335e-4f7b-a1dc-d48d13a4de38/1/WOAvLKgauAKTlTAVbpYxsY9RWEA.mft File: WOAvLKgauAKTlTAVbpYxsY9RWEA.mft (raw, json) Hash identifier: wmVgsjCtRnQjA854L3zqNYkYXfiKCW71RC2MViRd0qg= Subject key identifier: CF:C5:1C:9A:09:84:66:A8:2B:CB:FA:E6:6D:D0:DA:A0:85:07:E8:33 Authority key identifier: 58:E0:2F:2C:A8:1A:B8:02:93:95:30:15:6E:96:31:B1:8F:51:58:40 Certificate issuer: /CN=58e02f2ca81ab802939530156e9631b18f515840 Certificate serial: 019C43C6B14BB0C9073E537A071092CE152F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WOAvLKgauAKTlTAVbpYxsY9RWEA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/9f8728-335e-4f7b-a1dc-d48d13a4de38/1/WOAvLKgauAKTlTAVbpYxsY9RWEA.mft Manifest number: 0342 Signing time: Mon 09 Feb 2026 19:00:20 +0000 Manifest this update: Mon 09 Feb 2026 19:00:20 +0000 Manifest next update: Tue 10 Feb 2026 19:00:20 +0000 Files and hashes: 1: WOAvLKgauAKTlTAVbpYxsY9RWEA.crl (hash: JYWV1dUVd2I9VzBnAi97qc2ELphoVAWmK55zXYa3QlM=) 2: iCGtMcKWAgHtdBjYxb9RAqEOB7w.roa (hash: guUNmnJF7IxeIWyJsGQHdkbHY/AzsyJbtsB8emR784k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/9f8728-335e-4f7b-a1dc-d48d13a4de38/1/WOAvLKgauAKTlTAVbpYxsY9RWEA.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/9f8728-335e-4f7b-a1dc-d48d13a4de38/1/WOAvLKgauAKTlTAVbpYxsY9RWEA.mft rsync://rpki.ripe.net/repository/DEFAULT/WOAvLKgauAKTlTAVbpYxsY9RWEA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:c6:b1:4b:b0:c9:07:3e:53:7a:07:10:92:ce:15:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58e02f2ca81ab802939530156e9631b18f515840 Validity Not Before: Feb 9 19:00:20 2026 GMT Not After : Feb 10 19:00:20 2026 GMT Subject: CN=cfc51c9a098466a82bcbfae66dd0daa08507e833 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:1e:6f:50:82:14:f6:f5:b1:05:f9:6d:07:0e: ed:ab:5f:86:75:24:8c:0a:a5:14:19:c2:c5:88:9f: 76:f0:31:55:e4:fd:9b:fc:d5:dc:8a:2b:c6:43:91: 73:71:56:44:f9:53:6d:bb:62:34:93:7d:f3:d9:8e: 5e:a6:0c:28:be:00:f5:83:90:74:c2:2a:03:79:21: 7c:06:aa:41:24:a0:1e:55:2e:1a:ec:a0:27:4a:d5: 9d:c1:ae:5b:ad:ad:03:9a:58:0c:b1:74:38:d8:e4: 83:6d:e5:9e:72:3e:70:51:3e:7f:62:6c:35:d4:62: ca:84:3b:c3:88:c6:06:27:42:2a:df:5f:be:b9:a6: ba:8a:d4:b9:23:98:90:b2:d0:54:f7:d9:0b:57:fb: a7:23:67:9e:a8:06:88:8a:61:be:ee:72:6a:37:b9: cb:c8:51:e9:46:87:17:84:88:91:c4:0e:4c:11:b6: 66:1d:8d:db:a6:f0:3f:dd:ed:49:6f:ab:19:75:30: b7:c7:02:a0:e9:33:84:33:c1:eb:e2:83:d8:d1:93: 25:75:06:d3:92:bc:69:3e:94:71:b8:63:17:22:cd: e4:bb:5e:ef:c4:44:77:cb:d2:63:7c:22:e9:d7:2d: 82:fc:90:7b:d9:a4:c8:67:81:c8:03:38:a0:4b:e4: e5:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:C5:1C:9A:09:84:66:A8:2B:CB:FA:E6:6D:D0:DA:A0:85:07:E8:33 X509v3 Authority Key Identifier: keyid:58:E0:2F:2C:A8:1A:B8:02:93:95:30:15:6E:96:31:B1:8F:51:58:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WOAvLKgauAKTlTAVbpYxsY9RWEA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/9f8728-335e-4f7b-a1dc-d48d13a4de38/1/WOAvLKgauAKTlTAVbpYxsY9RWEA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/9f8728-335e-4f7b-a1dc-d48d13a4de38/1/WOAvLKgauAKTlTAVbpYxsY9RWEA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:34:fa:4d:0d:9d:e5:59:ca:69:52:17:03:45:6a:1e:25:8f: b0:2e:f3:72:2e:a0:39:98:3f:62:e4:9d:fa:ce:5f:d2:5c:85: b9:7f:98:bb:cd:56:dd:86:ce:9c:d6:70:a1:80:fe:01:c9:a2: e3:1c:9c:c7:0b:f5:71:6f:83:1a:01:ee:51:1f:17:68:e3:02: ae:d3:9a:c9:78:33:d1:34:db:2f:0e:f1:fa:d8:54:31:0c:73: 0d:80:c2:34:a7:0b:75:9f:2c:aa:e3:5b:32:bd:01:96:23:c7: 82:68:2c:68:1c:12:6f:bd:bf:30:d8:39:5f:c7:12:aa:3f:6f: 5e:55:24:01:f6:8d:75:bd:51:fd:71:4a:9d:bb:3b:12:24:97: 02:28:46:c4:79:57:08:cf:46:86:c7:7d:e6:c7:a3:23:b9:5a: c2:c6:93:a9:30:7b:d0:95:35:1f:31:dc:9a:45:22:0c:de:5a: e6:59:4d:39:41:c0:36:2f:e0:fb:59:af:ce:a3:13:6a:21:4b: 9f:4b:4d:60:4c:43:fc:9a:60:45:69:86:38:50:d9:1d:19:e2: 05:3f:b8:f1:8e:1f:47:80:b1:4f:82:a1:60:b1:3a:8c:24:47: ac:cd:14:7a:76:2a:cb:39:09:c3:3c:b6:94:9f:7e:1e:e0:fb: 19:3e:64:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDxrFLsMkHPlN6BxCSzhUvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4ZTAyZjJjYTgxYWI4MDI5Mzk1MzAxNTZlOTYzMWIxOGY1 MTU4NDAwHhcNMjYwMjA5MTkwMDIwWhcNMjYwMjEwMTkwMDIwWjAzMTEwLwYDVQQD EyhjZmM1MWM5YTA5ODQ2NmE4MmJjYmZhZTY2ZGQwZGFhMDg1MDdlODMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyh5vUIIU9vWxBfltBw7tq1+GdSSM CqUUGcLFiJ928DFV5P2b/NXciivGQ5FzcVZE+VNtu2I0k33z2Y5epgwovgD1g5B0 wioDeSF8BqpBJKAeVS4a7KAnStWdwa5bra0DmlgMsXQ42OSDbeWecj5wUT5/Ymw1 1GLKhDvDiMYGJ0Iq31++uaa6itS5I5iQstBU99kLV/unI2eeqAaIimG+7nJqN7nL yFHpRocXhIiRxA5MEbZmHY3bpvA/3e1Jb6sZdTC3xwKg6TOEM8Hr4oPY0ZMldQbT krxpPpRxuGMXIs3ku17vxER3y9JjfCLp1y2C/JB72aTIZ4HIAzigS+Tl4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM/FHJoJhGaoK8v65m3Q2qCFB+gzMB8GA1UdIwQY MBaAFFjgLyyoGrgCk5UwFW6WMbGPUVhAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV09BdkxLZ2F1QUtUbFRBVmJwWXhzWTlSV0VBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC85Zjg3MjgtMzM1ZS00ZjdiLWExZGMt ZDQ4ZDEzYTRkZTM4LzEvV09BdkxLZ2F1QUtUbFRBVmJwWXhzWTlSV0VBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC85Zjg3MjgtMzM1ZS00ZjdiLWExZGMtZDQ4ZDEzYTRkZTM4 LzEvV09BdkxLZ2F1QUtUbFRBVmJwWXhzWTlSV0VBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAajT6TQ2d 5VnKaVIXA0VqHiWPsC7zci6gOZg/YuSd+s5f0lyFuX+Yu81W3YbOnNZwoYD+Acmi 4xycxwv1cW+DGgHuUR8XaOMCrtOayXgz0TTbLw7x+thUMQxzDYDCNKcLdZ8squNb Mr0BliPHgmgsaBwSb72/MNg5X8cSqj9vXlUkAfaNdb1R/XFKnbs7EiSXAihGxHlX CM9Ghsd95sejI7lawsaTqTB70JU1HzHcmkUiDN5a5llNOUHANi/g+1mvzqMTaiFL n0tNYExD/JpgRWmGOFDZHRniBT+48Y4fR4CxT4KhYLE6jCRHrM0UenYqyzkJwzy2 lJ9+HuD7GT5kXg== -----END CERTIFICATE-----Generated at Tue Feb 10 01:31:34 2026 by rpki-client