This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/d734fa-6e83-4683-bf49-87122b514e69/1/WYjwhVxEeNG5Srio1tnZxRHzFCY.mft File: WYjwhVxEeNG5Srio1tnZxRHzFCY.mft (raw, json) Hash identifier: EfiYacwO8qF8Hgt3OAmEF455eEDocQQrx4FbUKvVkhg= Subject key identifier: D7:48:9A:99:E6:F1:92:D1:CD:91:A4:44:02:92:0A:76:B0:64:40:D7 Authority key identifier: 59:88:F0:85:5C:44:78:D1:B9:4A:B8:A8:D6:D9:D9:C5:11:F3:14:26 Certificate issuer: /CN=5988f0855c4478d1b94ab8a8d6d9d9c511f31426 Certificate serial: 019C43226F3B7456BF7343AD2DC8AB512B78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WYjwhVxEeNG5Srio1tnZxRHzFCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/d734fa-6e83-4683-bf49-87122b514e69/1/WYjwhVxEeNG5Srio1tnZxRHzFCY.mft Manifest number: 0EC6 Signing time: Mon 09 Feb 2026 16:00:56 +0000 Manifest this update: Mon 09 Feb 2026 16:00:56 +0000 Manifest next update: Tue 10 Feb 2026 16:00:56 +0000 Files and hashes: 1: WYjwhVxEeNG5Srio1tnZxRHzFCY.crl (hash: bywk8TDJEU7thCGA+EY3+V9hReOtiAdxKHtxX/YsIMY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/d734fa-6e83-4683-bf49-87122b514e69/1/WYjwhVxEeNG5Srio1tnZxRHzFCY.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/d734fa-6e83-4683-bf49-87122b514e69/1/WYjwhVxEeNG5Srio1tnZxRHzFCY.mft rsync://rpki.ripe.net/repository/DEFAULT/WYjwhVxEeNG5Srio1tnZxRHzFCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 16:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:6f:3b:74:56:bf:73:43:ad:2d:c8:ab:51:2b:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5988f0855c4478d1b94ab8a8d6d9d9c511f31426 Validity Not Before: Feb 9 16:00:56 2026 GMT Not After : Feb 10 16:00:56 2026 GMT Subject: CN=d7489a99e6f192d1cd91a44402920a76b06440d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:bc:89:33:fe:e1:9e:13:cc:8b:89:80:b6:f9: 53:12:19:d2:68:fd:43:03:87:85:b5:52:4a:95:e3: fd:06:62:4a:65:2b:6d:89:5f:58:ee:9c:dd:02:8c: cb:12:5e:3b:03:ba:9f:f5:07:dd:4f:c7:a0:4c:27: c1:23:eb:a8:4c:03:e4:62:af:1c:79:19:d5:99:60: dd:d5:5a:b4:dd:b7:c1:4e:83:84:f6:58:66:82:57: af:7e:56:f9:2a:f1:58:bc:e6:ae:37:24:1d:c6:e8: 91:8a:5a:6b:c1:b1:8b:6f:0e:f8:00:4c:50:94:c0: 1f:81:12:4b:8c:9b:9d:78:84:91:17:ee:ef:ba:e6: 89:be:40:ea:63:a6:5b:e4:3c:3f:28:c2:86:d3:9f: c7:23:c6:07:ca:df:3a:ec:30:c7:18:53:34:e1:79: a5:d4:f5:78:11:60:06:dd:de:31:d5:0e:c2:98:57: 51:c1:1a:21:8d:5c:f4:39:bb:bf:45:20:00:dc:e4: c4:f6:84:9d:76:0f:49:c9:aa:c0:dd:7f:a8:d3:ac: 34:87:40:70:ec:c9:94:fb:fb:15:50:8b:4e:ac:c4: 0a:a3:c9:ec:94:bb:30:35:8b:7f:8c:ea:5f:62:61: 4f:3f:78:d3:70:cf:a6:a0:49:f7:fc:64:d1:32:03: eb:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:48:9A:99:E6:F1:92:D1:CD:91:A4:44:02:92:0A:76:B0:64:40:D7 X509v3 Authority Key Identifier: keyid:59:88:F0:85:5C:44:78:D1:B9:4A:B8:A8:D6:D9:D9:C5:11:F3:14:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WYjwhVxEeNG5Srio1tnZxRHzFCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d734fa-6e83-4683-bf49-87122b514e69/1/WYjwhVxEeNG5Srio1tnZxRHzFCY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d734fa-6e83-4683-bf49-87122b514e69/1/WYjwhVxEeNG5Srio1tnZxRHzFCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:44:e5:e1:f9:d4:1f:48:03:38:1a:27:80:0f:33:ae:92:48: ac:5c:0e:07:10:d0:52:ba:2a:72:50:ce:a4:0a:15:fb:2c:b5: 84:b7:07:c0:2e:82:e2:1b:61:df:fd:48:f5:f1:d1:ea:13:3f: b3:0c:61:da:3c:39:a4:97:da:d1:3a:d4:63:c9:49:22:03:b8: fd:40:f9:7b:09:1d:bf:2b:4c:4d:7b:c0:95:56:6b:f7:5a:4e: 6b:4e:41:6a:8c:6d:f5:5b:9d:1d:a1:76:50:c9:c9:26:ad:34: 05:02:dc:d6:b0:95:f6:a1:4e:d6:a8:f6:b4:de:c6:bd:e2:f5: 11:c2:8a:99:0c:3b:7e:4e:c3:20:d9:f0:a9:87:a6:0e:f6:85: b7:db:89:4f:5d:1e:73:60:06:d3:1d:9c:3b:a6:c5:af:67:ca: 1a:fe:ff:73:05:80:93:ff:bd:1d:36:5a:b9:fd:36:37:89:68: 6c:e0:b2:4e:b9:ca:b9:05:f0:64:6e:67:1c:68:f5:76:9a:7c: 26:a5:49:c1:92:10:55:9b:2d:50:5c:dd:c9:87:0d:ff:d2:a9: e7:57:dd:b5:f3:c7:eb:9e:13:88:98:17:3a:23:bf:8e:cc:b0: 77:7d:2f:27:3c:63:e2:ca:9e:c0:99:a0:17:96:ea:fe:a5:df: 3a:a1:dc:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIm87dFa/c0OtLcirUSt4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5ODhmMDg1NWM0NDc4ZDFiOTRhYjhhOGQ2ZDlkOWM1MTFm MzE0MjYwHhcNMjYwMjA5MTYwMDU2WhcNMjYwMjEwMTYwMDU2WjAzMTEwLwYDVQQD EyhkNzQ4OWE5OWU2ZjE5MmQxY2Q5MWE0NDQwMjkyMGE3NmIwNjQ0MGQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLyJM/7hnhPMi4mAtvlTEhnSaP1D A4eFtVJKleP9BmJKZSttiV9Y7pzdAozLEl47A7qf9QfdT8egTCfBI+uoTAPkYq8c eRnVmWDd1Vq03bfBToOE9lhmglevflb5KvFYvOauNyQdxuiRilprwbGLbw74AExQ lMAfgRJLjJudeISRF+7vuuaJvkDqY6Zb5Dw/KMKG05/HI8YHyt867DDHGFM04Xml 1PV4EWAG3d4x1Q7CmFdRwRohjVz0Obu/RSAA3OTE9oSddg9JyarA3X+o06w0h0Bw 7MmU+/sVUItOrMQKo8nslLswNYt/jOpfYmFPP3jTcM+moEn3/GTRMgPrCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNdImpnm8ZLRzZGkRAKSCnawZEDXMB8GA1UdIwQY MBaAFFmI8IVcRHjRuUq4qNbZ2cUR8xQmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1lqd2hWeEVlTkc1U3JpbzF0blp4Ukh6RkNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9kNzM0ZmEtNmU4My00NjgzLWJmNDkt ODcxMjJiNTE0ZTY5LzEvV1lqd2hWeEVlTkc1U3JpbzF0blp4Ukh6RkNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS9kNzM0ZmEtNmU4My00NjgzLWJmNDktODcxMjJiNTE0ZTY5 LzEvV1lqd2hWeEVlTkc1U3JpbzF0blp4Ukh6RkNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbkTl4fnU H0gDOBongA8zrpJIrFwOBxDQUroqclDOpAoV+yy1hLcHwC6C4hth3/1I9fHR6hM/ swxh2jw5pJfa0TrUY8lJIgO4/UD5ewkdvytMTXvAlVZr91pOa05Baoxt9VudHaF2 UMnJJq00BQLc1rCV9qFO1qj2tN7GveL1EcKKmQw7fk7DINnwqYemDvaFt9uJT10e c2AG0x2cO6bFr2fKGv7/cwWAk/+9HTZauf02N4lobOCyTrnKuQXwZG5nHGj1dpp8 JqVJwZIQVZstUFzdyYcN/9Kp51fdtfPH654TiJgXOiO/jsywd30vJzxj4sqewJmg F5bq/qXfOqHcrg== -----END CERTIFICATE-----Generated at Tue Feb 10 01:26:52 2026 by rpki-client