This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/fa825b-cae6-477b-abfc-d5c6ae2625aa/1/WCXq-3jz1WkmUXwqPNUzmqUTht4.mft File: WCXq-3jz1WkmUXwqPNUzmqUTht4.mft (raw, json) Hash identifier: rh1k116n8kR2pzSZd2rsZBhzx3s+WbEtxbUMkrIQud0= Subject key identifier: 23:48:A1:95:15:6A:C4:49:70:42:11:B8:3E:32:D5:3D:CA:F8:28:5D Authority key identifier: 58:25:EA:FB:78:F3:D5:69:26:51:7C:2A:3C:D5:33:9A:A5:13:86:DE Certificate issuer: /CN=5825eafb78f3d56926517c2a3cd5339aa51386de Certificate serial: 019C41A1F70545446210936AE9E3F2C6F3AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WCXq-3jz1WkmUXwqPNUzmqUTht4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/fa825b-cae6-477b-abfc-d5c6ae2625aa/1/WCXq-3jz1WkmUXwqPNUzmqUTht4.mft Manifest number: 03B6 Signing time: Mon 09 Feb 2026 09:00:59 +0000 Manifest this update: Mon 09 Feb 2026 09:00:59 +0000 Manifest next update: Tue 10 Feb 2026 09:00:59 +0000 Files and hashes: 1: WCXq-3jz1WkmUXwqPNUzmqUTht4.crl (hash: UN8I3bmPxfjTDZkFLuC+PVCrK1ET44EtjBe5RbyMm8U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/fa825b-cae6-477b-abfc-d5c6ae2625aa/1/WCXq-3jz1WkmUXwqPNUzmqUTht4.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/fa825b-cae6-477b-abfc-d5c6ae2625aa/1/WCXq-3jz1WkmUXwqPNUzmqUTht4.mft rsync://rpki.ripe.net/repository/DEFAULT/WCXq-3jz1WkmUXwqPNUzmqUTht4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:f7:05:45:44:62:10:93:6a:e9:e3:f2:c6:f3:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5825eafb78f3d56926517c2a3cd5339aa51386de Validity Not Before: Feb 9 09:00:59 2026 GMT Not After : Feb 10 09:00:59 2026 GMT Subject: CN=2348a195156ac449704211b83e32d53dcaf8285d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c9:14:06:fa:d5:c6:ac:c1:ab:d4:6a:11:b7: 88:49:2f:28:2a:71:f1:90:14:5f:bb:19:c3:7e:4b: 35:1a:27:0b:37:ba:b9:bd:3c:c7:b5:fe:30:99:10: ec:df:ef:a2:43:50:fd:4c:fb:86:37:df:3d:16:6d: 3f:d0:71:72:77:4a:e0:ab:5e:e0:c9:2d:0d:9e:8d: 35:21:6f:2f:13:59:59:29:4d:f3:9d:5d:f1:e9:eb: ae:68:0e:73:d3:13:78:4b:1e:39:37:15:7c:99:7f: 69:a5:a4:d0:b9:ef:40:4c:25:d7:e0:1a:c0:82:6d: 9b:39:75:b5:e8:37:4b:bd:bd:f1:34:56:a0:50:b4: 08:fa:cf:65:4e:fc:2f:71:bc:ca:da:48:15:be:a6: 08:e0:38:71:de:52:82:00:66:8f:3c:8a:8c:b4:09: 2e:83:58:43:3f:d0:67:64:34:97:4f:78:af:ad:a6: b1:fd:13:27:4e:c6:33:92:05:de:9e:0f:fe:c3:85: 8b:2b:03:a5:21:c2:82:9e:f3:15:43:70:67:7a:0d: 33:58:d4:ee:9e:db:54:77:37:a9:1d:1a:07:09:dc: 4e:a1:b9:f9:9d:e3:ef:96:cf:05:27:73:f4:67:6c: 8a:3a:e4:84:a9:7b:2d:90:d1:45:43:4f:a0:5a:6c: 2e:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:48:A1:95:15:6A:C4:49:70:42:11:B8:3E:32:D5:3D:CA:F8:28:5D X509v3 Authority Key Identifier: keyid:58:25:EA:FB:78:F3:D5:69:26:51:7C:2A:3C:D5:33:9A:A5:13:86:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WCXq-3jz1WkmUXwqPNUzmqUTht4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fa825b-cae6-477b-abfc-d5c6ae2625aa/1/WCXq-3jz1WkmUXwqPNUzmqUTht4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fa825b-cae6-477b-abfc-d5c6ae2625aa/1/WCXq-3jz1WkmUXwqPNUzmqUTht4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:48:f5:3e:92:59:69:ec:cf:0c:86:a6:e8:70:66:17:50:0a: 55:99:1a:21:1b:b5:b8:6b:db:41:c1:57:23:bb:bd:42:d4:2d: 76:90:f7:b4:e4:14:ce:ad:6f:49:ad:99:06:32:c4:94:93:76: f2:08:3f:38:b9:2e:1b:60:be:29:dc:48:ef:ef:49:4c:f4:c0: ae:22:7c:0f:1d:e6:7d:12:5a:02:eb:19:47:e1:05:dd:71:82: 60:59:d3:55:a0:55:fe:15:7d:11:44:22:48:bc:36:1f:c9:db: 75:a5:63:44:ed:68:d4:b3:b7:0b:51:40:85:86:90:77:3d:5f: fc:64:c0:4e:11:55:52:34:85:6d:6f:08:58:33:2b:16:11:4e: ca:6d:0c:89:ff:9b:a4:f5:20:a5:87:e5:97:2b:d5:74:20:20: 9a:cb:1b:59:6b:ed:cb:e5:09:04:fc:1b:1a:23:99:d0:b7:66: 19:d7:01:93:1a:3b:17:c8:a8:de:09:60:db:d6:2b:cf:f1:c7: 0f:46:3d:2f:07:35:5f:03:ad:a4:b3:5d:1a:10:8c:8a:6b:62: c9:a8:10:95:62:a1:f9:08:ff:30:5f:f2:31:5a:1e:0e:0a:0b: f6:22:53:8c:19:16:81:8c:4c:0c:73:80:42:08:3c:ae:a6:2e: a7:f5:da:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBofcFRURiEJNq6ePyxvOsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4MjVlYWZiNzhmM2Q1NjkyNjUxN2MyYTNjZDUzMzlhYTUx Mzg2ZGUwHhcNMjYwMjA5MDkwMDU5WhcNMjYwMjEwMDkwMDU5WjAzMTEwLwYDVQQD EygyMzQ4YTE5NTE1NmFjNDQ5NzA0MjExYjgzZTMyZDUzZGNhZjgyODVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArskUBvrVxqzBq9RqEbeISS8oKnHx kBRfuxnDfks1GicLN7q5vTzHtf4wmRDs3++iQ1D9TPuGN989Fm0/0HFyd0rgq17g yS0Nno01IW8vE1lZKU3znV3x6euuaA5z0xN4Sx45NxV8mX9ppaTQue9ATCXX4BrA gm2bOXW16DdLvb3xNFagULQI+s9lTvwvcbzK2kgVvqYI4Dhx3lKCAGaPPIqMtAku g1hDP9BnZDSXT3ivraax/RMnTsYzkgXeng/+w4WLKwOlIcKCnvMVQ3Bneg0zWNTu nttUdzepHRoHCdxOobn5nePvls8FJ3P0Z2yKOuSEqXstkNFFQ0+gWmwu3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCNIoZUVasRJcEIRuD4y1T3K+ChdMB8GA1UdIwQY MBaAFFgl6vt489VpJlF8KjzVM5qlE4beMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0NYcS0zanoxV2ttVVh3cVBOVXptcVVUaHQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9mYTgyNWItY2FlNi00NzdiLWFiZmMt ZDVjNmFlMjYyNWFhLzEvV0NYcS0zanoxV2ttVVh3cVBOVXptcVVUaHQ0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9mYTgyNWItY2FlNi00NzdiLWFiZmMtZDVjNmFlMjYyNWFh LzEvV0NYcS0zanoxV2ttVVh3cVBOVXptcVVUaHQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAekj1PpJZ aezPDIam6HBmF1AKVZkaIRu1uGvbQcFXI7u9QtQtdpD3tOQUzq1vSa2ZBjLElJN2 8gg/OLkuG2C+KdxI7+9JTPTAriJ8Dx3mfRJaAusZR+EF3XGCYFnTVaBV/hV9EUQi SLw2H8nbdaVjRO1o1LO3C1FAhYaQdz1f/GTAThFVUjSFbW8IWDMrFhFOym0Mif+b pPUgpYfllyvVdCAgmssbWWvty+UJBPwbGiOZ0LdmGdcBkxo7F8io3glg29Yrz/HH D0Y9Lwc1XwOtpLNdGhCMimtiyagQlWKh+Qj/MF/yMVoeDgoL9iJTjBkWgYxMDHOA Qgg8rqYup/XaPQ== -----END CERTIFICATE-----Generated at Mon Feb 9 17:01:59 2026 by rpki-client