This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1540c1-9867-403d-8b9b-f3d9f63d5d97/1/W1t31kWP-tmE5R3zNPPo-YOCrCQ.mft File: W1t31kWP-tmE5R3zNPPo-YOCrCQ.mft (raw, json) Hash identifier: Q46pBy9ex7QmIdykjCjrBmw2OmsN5k8VvSCB66Mg9Rk= Subject key identifier: 63:F9:8D:D5:8C:99:4C:B3:C9:B9:ED:9A:94:65:4A:F7:C7:70:75:9B Authority key identifier: 5B:5B:77:D6:45:8F:FA:D9:84:E5:1D:F3:34:F3:E8:F9:83:82:AC:24 Certificate issuer: /CN=5b5b77d6458ffad984e51df334f3e8f98382ac24 Certificate serial: 019C427D0FDC243348FFD749EDB71D64DE8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W1t31kWP-tmE5R3zNPPo-YOCrCQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1540c1-9867-403d-8b9b-f3d9f63d5d97/1/W1t31kWP-tmE5R3zNPPo-YOCrCQ.mft Manifest number: 0659 Signing time: Mon 09 Feb 2026 13:00:18 +0000 Manifest this update: Mon 09 Feb 2026 13:00:18 +0000 Manifest next update: Tue 10 Feb 2026 13:00:18 +0000 Files and hashes: 1: W1t31kWP-tmE5R3zNPPo-YOCrCQ.crl (hash: rPqgRxpaB+aTNdZ1PONJauQVLwK4ipcjXFYEsi2HftY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1540c1-9867-403d-8b9b-f3d9f63d5d97/1/W1t31kWP-tmE5R3zNPPo-YOCrCQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/1540c1-9867-403d-8b9b-f3d9f63d5d97/1/W1t31kWP-tmE5R3zNPPo-YOCrCQ.mft rsync://rpki.ripe.net/repository/DEFAULT/W1t31kWP-tmE5R3zNPPo-YOCrCQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:0f:dc:24:33:48:ff:d7:49:ed:b7:1d:64:de:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b5b77d6458ffad984e51df334f3e8f98382ac24 Validity Not Before: Feb 9 13:00:18 2026 GMT Not After : Feb 10 13:00:18 2026 GMT Subject: CN=63f98dd58c994cb3c9b9ed9a94654af7c770759b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:78:12:1b:61:c3:df:ba:3f:e8:36:96:ad:37: 1b:58:6b:f7:1a:c4:88:20:d7:c6:de:04:6f:31:36: 07:59:85:62:b4:b8:53:cb:87:5c:ea:ec:17:8d:42: 23:d6:7d:43:80:f8:9b:b9:a6:f6:e7:ed:51:00:0c: ee:61:87:cb:93:6b:a3:49:10:6f:d5:98:3d:9b:76: ab:da:2b:0e:73:86:8c:04:51:f0:c2:36:03:b9:a8: 76:1b:0d:7e:65:a2:f8:b2:bd:ba:04:7e:cc:0b:12: d8:60:8c:12:b2:3b:34:ec:2f:45:ba:cb:7c:60:5a: b3:1d:90:f1:28:34:af:a0:a0:4d:24:7f:72:b2:0f: a4:b5:c7:02:80:22:fa:88:c3:40:d0:ae:22:be:63: d9:2a:fe:77:99:01:35:72:5b:94:fe:52:48:7a:0d: dd:3c:ee:55:b2:eb:ca:cd:1b:25:43:b1:91:51:72: dc:e1:40:24:00:a9:77:b3:b5:a5:ce:b7:d8:e5:5d: 31:d7:a3:b7:26:02:7a:e3:73:49:9e:08:41:09:a0: 7e:6c:ee:17:fc:37:5b:12:53:e7:3e:f5:07:54:c8: 65:19:c6:76:1c:ac:44:c9:ff:4f:15:e3:22:af:c7: 61:7f:04:e8:75:a9:93:e8:9b:84:96:0e:03:fa:0d: 87:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:F9:8D:D5:8C:99:4C:B3:C9:B9:ED:9A:94:65:4A:F7:C7:70:75:9B X509v3 Authority Key Identifier: keyid:5B:5B:77:D6:45:8F:FA:D9:84:E5:1D:F3:34:F3:E8:F9:83:82:AC:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1t31kWP-tmE5R3zNPPo-YOCrCQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1540c1-9867-403d-8b9b-f3d9f63d5d97/1/W1t31kWP-tmE5R3zNPPo-YOCrCQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1540c1-9867-403d-8b9b-f3d9f63d5d97/1/W1t31kWP-tmE5R3zNPPo-YOCrCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:bb:bd:37:8d:87:06:52:72:ad:d8:a5:fb:f7:fe:e7:94:58: 22:82:0c:13:0a:86:58:45:ad:0b:e1:36:51:eb:f3:99:0c:23: 8b:fb:aa:41:a8:02:d8:36:1c:a2:8b:65:3d:7c:41:6b:7e:87: b8:65:29:47:f8:83:43:71:62:d7:d0:84:5c:68:e9:30:42:7b: 61:d1:1e:bd:da:91:5d:e9:71:c7:6c:4e:3b:19:75:73:94:c7: 44:f9:18:7a:44:34:74:23:b5:22:d8:7b:21:9b:83:92:4a:a4: 89:c4:b5:3a:ce:45:47:01:13:83:9f:d7:a5:0d:a7:c2:4d:76: 78:9e:b5:8f:8f:d7:8c:61:c7:ee:69:f6:da:db:87:2b:09:27: dd:65:90:b8:18:33:c1:52:c0:ab:df:f8:d4:8b:0b:21:c8:ca: 5a:fc:06:2e:8a:dd:b9:84:bf:ce:eb:5a:08:2f:20:8f:d9:bf: 61:4c:8c:7f:3f:b4:f2:4a:a6:a5:08:b5:f6:9a:1c:60:40:50: 59:64:c3:c4:37:e0:7f:bc:e4:f8:9e:55:b5:24:47:44:b3:a0: b4:14:bc:c9:73:d4:e8:c0:85:27:11:6c:eb:b6:fe:cc:11:d4: a8:8e:d9:69:13:b4:11:87:ba:a7:6b:b8:30:42:34:18:71:12: 40:8e:88:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfQ/cJDNI/9dJ7bcdZN6MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViNWI3N2Q2NDU4ZmZhZDk4NGU1MWRmMzM0ZjNlOGY5ODM4 MmFjMjQwHhcNMjYwMjA5MTMwMDE4WhcNMjYwMjEwMTMwMDE4WjAzMTEwLwYDVQQD Eyg2M2Y5OGRkNThjOTk0Y2IzYzliOWVkOWE5NDY1NGFmN2M3NzA3NTliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0HgSG2HD37o/6DaWrTcbWGv3GsSI INfG3gRvMTYHWYVitLhTy4dc6uwXjUIj1n1DgPibuab25+1RAAzuYYfLk2ujSRBv 1Zg9m3ar2isOc4aMBFHwwjYDuah2Gw1+ZaL4sr26BH7MCxLYYIwSsjs07C9Fust8 YFqzHZDxKDSvoKBNJH9ysg+ktccCgCL6iMNA0K4ivmPZKv53mQE1cluU/lJIeg3d PO5VsuvKzRslQ7GRUXLc4UAkAKl3s7WlzrfY5V0x16O3JgJ643NJnghBCaB+bO4X /DdbElPnPvUHVMhlGcZ2HKxEyf9PFeMir8dhfwTodamT6JuElg4D+g2HlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGP5jdWMmUyzybntmpRlSvfHcHWbMB8GA1UdIwQY MBaAFFtbd9ZFj/rZhOUd8zTz6PmDgqwkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzF0MzFrV1AtdG1FNVIzek5QUG8tWU9DckNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8xNTQwYzEtOTg2Ny00MDNkLThiOWIt ZjNkOWY2M2Q1ZDk3LzEvVzF0MzFrV1AtdG1FNVIzek5QUG8tWU9DckNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS8xNTQwYzEtOTg2Ny00MDNkLThiOWItZjNkOWY2M2Q1ZDk3 LzEvVzF0MzFrV1AtdG1FNVIzek5QUG8tWU9DckNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZbu9N42H BlJyrdil+/f+55RYIoIMEwqGWEWtC+E2UevzmQwji/uqQagC2DYcootlPXxBa36H uGUpR/iDQ3Fi19CEXGjpMEJ7YdEevdqRXelxx2xOOxl1c5THRPkYekQ0dCO1Ith7 IZuDkkqkicS1Os5FRwETg5/XpQ2nwk12eJ61j4/XjGHH7mn22tuHKwkn3WWQuBgz wVLAq9/41IsLIcjKWvwGLorduYS/zutaCC8gj9m/YUyMfz+08kqmpQi19pocYEBQ WWTDxDfgf7zk+J5VtSRHRLOgtBS8yXPU6MCFJxFs67b+zBHUqI7ZaRO0EYe6p2u4 MEI0GHESQI6ITQ== -----END CERTIFICATE-----Generated at Mon Feb 9 16:57:15 2026 by rpki-client