This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.mft File: wHDujcg3gIaWAYLjMJImcX6D5Ac.mft (raw, json) Hash identifier: Q2ZI9nFbbt8LLDU/5NB5HEykSzRlprQR5mPWQ3f7w28= Subject key identifier: FA:64:EF:6D:A7:1B:39:C7:E6:07:01:DC:0D:4E:56:E3:57:52:5D:2B Authority key identifier: C0:70:EE:8D:C8:37:80:86:96:01:82:E3:30:92:26:71:7E:83:E4:07 Certificate issuer: /CN=c070ee8dc8378086960182e3309226717e83e407 Certificate serial: 019C42EAFC075A03D7B0B7B7BB15A5E8529E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wHDujcg3gIaWAYLjMJImcX6D5Ac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.mft Manifest number: 0B2C Signing time: Mon 09 Feb 2026 15:00:21 +0000 Manifest this update: Mon 09 Feb 2026 15:00:21 +0000 Manifest next update: Tue 10 Feb 2026 15:00:21 +0000 Files and hashes: 1: vkcxD7RlYQaCcDI-vzTByrPDVXM.roa (hash: VaHKrcguytDLQ9rU2AHRe/i6wcDVPVfp2bPe50gYiYQ=) 2: wHDujcg3gIaWAYLjMJImcX6D5Ac.crl (hash: h5/4rKR74A5933sfSTY06yZQdJZUWiKiT8bI7oVTPFc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.mft rsync://rpki.ripe.net/repository/DEFAULT/wHDujcg3gIaWAYLjMJImcX6D5Ac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:ea:fc:07:5a:03:d7:b0:b7:b7:bb:15:a5:e8:52:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c070ee8dc8378086960182e3309226717e83e407 Validity Not Before: Feb 9 15:00:21 2026 GMT Not After : Feb 10 15:00:21 2026 GMT Subject: CN=fa64ef6da71b39c7e60701dc0d4e56e357525d2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:75:f7:8e:79:04:42:32:4a:96:17:a0:4c:de: 60:a2:d6:11:50:bb:4d:52:12:8a:5d:9f:f5:8e:73: 26:5d:48:25:59:5c:dd:8a:07:89:73:42:79:b8:5f: 49:73:37:af:27:2f:94:d0:83:c1:1e:e3:84:8a:4e: 79:92:73:4c:d1:42:59:8e:82:6c:04:46:6d:c5:89: 04:c5:1c:33:69:61:94:90:0d:c0:a0:be:92:0a:9f: 6b:69:2c:2c:09:88:f5:55:82:9b:d5:26:83:a7:ca: 57:71:4a:27:8e:e1:07:ab:d2:14:6a:fd:54:a1:34: a4:6a:3f:1d:6c:ae:9f:f9:60:24:69:7e:a2:e8:26: 3d:e5:06:df:64:9c:3f:43:c4:8a:01:e2:a5:14:57: 66:82:e7:83:3c:b7:fa:bd:c1:18:8a:7f:3a:94:d9: 01:db:6d:54:48:f3:7b:4b:e1:f5:33:45:b1:2f:b7: 75:e0:85:a2:1c:f6:65:a2:cb:e0:c3:d7:7f:98:d9: 75:8b:b2:73:29:d7:fa:0d:ce:5c:18:93:09:8a:59: 99:02:d7:93:8d:0e:12:f2:78:d8:bd:6f:f5:81:ed: 36:59:01:69:3e:c6:16:bb:64:d6:4b:a3:3d:a4:7c: 87:f0:fd:db:37:84:36:68:59:d9:1c:25:ef:ba:2a: e3:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:64:EF:6D:A7:1B:39:C7:E6:07:01:DC:0D:4E:56:E3:57:52:5D:2B X509v3 Authority Key Identifier: keyid:C0:70:EE:8D:C8:37:80:86:96:01:82:E3:30:92:26:71:7E:83:E4:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wHDujcg3gIaWAYLjMJImcX6D5Ac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:b4:b0:0d:80:23:68:2c:f7:53:65:02:1c:77:74:3b:65:13: 5d:2c:94:a8:b8:74:a1:ed:00:ba:f4:dd:d7:5b:b9:6d:f7:fd: 3a:12:aa:e7:69:93:28:5a:54:43:99:50:a8:26:a9:29:a1:49: c4:dd:45:74:02:be:44:81:f2:d6:8f:ad:b0:7c:4a:1b:5c:49: ed:a4:1b:5a:46:35:c8:0c:cd:c4:1d:0f:d0:a4:95:fd:a2:41: 42:57:9e:cb:91:ea:85:69:82:1a:8b:9a:c7:24:37:ee:06:1a: 62:1e:ba:85:ed:76:ad:99:8b:cc:77:91:56:44:34:cd:22:b1: fb:5e:cd:e1:ef:5c:e7:c5:5f:91:88:fa:e5:fc:b6:17:7e:f7: 85:43:8f:32:c9:e9:49:5b:00:ae:f1:a4:71:85:67:77:2a:b9: d9:74:93:15:3e:36:a9:b8:f3:7a:31:2e:72:0b:8b:a1:6d:a3: 81:80:2f:09:6d:e5:ff:0c:fd:7c:13:b8:6d:84:a0:2d:19:f1: 53:db:35:f8:8f:1e:ac:9b:71:3e:3e:6c:83:ff:21:fa:cd:7a: 91:bb:43:36:d2:80:0c:c5:ab:49:9b:f9:97:bb:20:e3:4f:af: 04:91:d3:7d:46:95:5c:4d:11:39:5e:4e:15:20:0e:1a:c2:1b: 99:71:57:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC6vwHWgPXsLe3uxWl6FKeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwNzBlZThkYzgzNzgwODY5NjAxODJlMzMwOTIyNjcxN2U4 M2U0MDcwHhcNMjYwMjA5MTUwMDIxWhcNMjYwMjEwMTUwMDIxWjAzMTEwLwYDVQQD EyhmYTY0ZWY2ZGE3MWIzOWM3ZTYwNzAxZGMwZDRlNTZlMzU3NTI1ZDJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5HX3jnkEQjJKlhegTN5gotYRULtN UhKKXZ/1jnMmXUglWVzdigeJc0J5uF9JczevJy+U0IPBHuOEik55knNM0UJZjoJs BEZtxYkExRwzaWGUkA3AoL6SCp9raSwsCYj1VYKb1SaDp8pXcUonjuEHq9IUav1U oTSkaj8dbK6f+WAkaX6i6CY95QbfZJw/Q8SKAeKlFFdmgueDPLf6vcEYin86lNkB 221USPN7S+H1M0WxL7d14IWiHPZlosvgw9d/mNl1i7JzKdf6Dc5cGJMJilmZAteT jQ4S8njYvW/1ge02WQFpPsYWu2TWS6M9pHyH8P3bN4Q2aFnZHCXvuirjnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPpk722nGznH5gcB3A1OVuNXUl0rMB8GA1UdIwQY MBaAFMBw7o3IN4CGlgGC4zCSJnF+g+QHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0hEdWpjZzNnSWFXQVlMak1KSW1jWDZENUFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8yYTM2NTUtOTQxYi00NmQ4LTg3ODkt NDVhN2I2OTc4NDkzLzEvd0hEdWpjZzNnSWFXQVlMak1KSW1jWDZENUFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS8yYTM2NTUtOTQxYi00NmQ4LTg3ODktNDVhN2I2OTc4NDkz LzEvd0hEdWpjZzNnSWFXQVlMak1KSW1jWDZENUFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFLSwDYAj aCz3U2UCHHd0O2UTXSyUqLh0oe0AuvTd11u5bff9OhKq52mTKFpUQ5lQqCapKaFJ xN1FdAK+RIHy1o+tsHxKG1xJ7aQbWkY1yAzNxB0P0KSV/aJBQleey5HqhWmCGoua xyQ37gYaYh66he12rZmLzHeRVkQ0zSKx+17N4e9c58VfkYj65fy2F373hUOPMsnp SVsArvGkcYVndyq52XSTFT42qbjzejEucguLoW2jgYAvCW3l/wz9fBO4bYSgLRnx U9s1+I8erJtxPj5sg/8h+s16kbtDNtKADMWrSZv5l7sg40+vBJHTfUaVXE0ROV5O FSAOGsIbmXFX7w== -----END CERTIFICATE-----Generated at Mon Feb 9 22:19:10 2026 by rpki-client