This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/9c64e2-4b64-43da-b904-10b907ffd08f/1/wZXJC6JdDegZV1eMeMt7JOjJPsk.mft File: wZXJC6JdDegZV1eMeMt7JOjJPsk.mft (raw, json) Hash identifier: wqZPugLs01aAjihM1IVgRbMYUjiy8L43a3h7MhSUk+I= Subject key identifier: 3C:8B:00:A7:E3:00:3B:C7:CE:1C:CE:DD:29:D7:E7:FF:CA:C3:EA:77 Authority key identifier: C1:95:C9:0B:A2:5D:0D:E8:19:57:57:8C:78:CB:7B:24:E8:C9:3E:C9 Certificate issuer: /CN=c195c90ba25d0de81957578c78cb7b24e8c93ec9 Certificate serial: 019C43226489B85DA1E009E95C6C55B4CA11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wZXJC6JdDegZV1eMeMt7JOjJPsk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/9c64e2-4b64-43da-b904-10b907ffd08f/1/wZXJC6JdDegZV1eMeMt7JOjJPsk.mft Manifest number: 032C Signing time: Mon 09 Feb 2026 16:00:53 +0000 Manifest this update: Mon 09 Feb 2026 16:00:53 +0000 Manifest next update: Tue 10 Feb 2026 16:00:53 +0000 Files and hashes: 1: wZXJC6JdDegZV1eMeMt7JOjJPsk.crl (hash: Big5sR85uigxb6uCN5dVnBKpNo00L8/+4vOYG2OK4bQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/9c64e2-4b64-43da-b904-10b907ffd08f/1/wZXJC6JdDegZV1eMeMt7JOjJPsk.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/9c64e2-4b64-43da-b904-10b907ffd08f/1/wZXJC6JdDegZV1eMeMt7JOjJPsk.mft rsync://rpki.ripe.net/repository/DEFAULT/wZXJC6JdDegZV1eMeMt7JOjJPsk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 16:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:64:89:b8:5d:a1:e0:09:e9:5c:6c:55:b4:ca:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c195c90ba25d0de81957578c78cb7b24e8c93ec9 Validity Not Before: Feb 9 16:00:53 2026 GMT Not After : Feb 10 16:00:53 2026 GMT Subject: CN=3c8b00a7e3003bc7ce1ccedd29d7e7ffcac3ea77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f4:9f:4a:b2:cb:af:9f:a1:4d:49:c3:c5:e6: e0:3d:67:05:19:67:b2:6c:7b:49:09:be:34:a0:2e: 9f:be:8a:91:c2:63:cc:74:f2:84:db:fd:f1:6b:b1: 4d:d2:e6:de:09:fd:3c:1b:b2:94:87:9b:7d:63:3f: 8f:88:ae:e7:76:28:ec:bb:b7:7e:d5:e6:99:55:30: 04:ba:7e:64:41:84:2c:18:3a:88:a4:dd:11:a3:64: fa:ed:91:b5:40:22:2b:2b:ef:f2:cb:40:e6:e2:d8: 48:7e:0d:b9:d7:19:42:b9:a7:a1:79:ca:cf:1d:56: 99:d4:cc:3b:b7:88:62:5a:a3:e3:f9:b3:6b:d0:a9: db:ab:7e:11:d6:bc:99:bd:c7:45:5f:33:e1:66:37: 2a:81:98:77:30:d6:e0:78:e8:0d:09:08:4e:c4:4f: 6a:61:62:a3:e2:c2:43:ec:f6:9e:3d:92:44:79:1a: f2:5c:19:dc:03:9e:ae:03:fa:be:72:5b:9f:44:e7: 3a:3f:8a:b4:e6:05:4a:cb:04:2a:d6:76:67:15:13: 67:37:30:b7:e8:d9:a7:53:c8:01:4b:c5:22:23:f7: ec:d3:a0:6e:b8:86:36:ae:31:5a:6b:46:0c:71:46: 1c:29:e4:09:8c:71:bd:14:43:20:77:8b:36:34:79: 6f:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:8B:00:A7:E3:00:3B:C7:CE:1C:CE:DD:29:D7:E7:FF:CA:C3:EA:77 X509v3 Authority Key Identifier: keyid:C1:95:C9:0B:A2:5D:0D:E8:19:57:57:8C:78:CB:7B:24:E8:C9:3E:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wZXJC6JdDegZV1eMeMt7JOjJPsk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9c64e2-4b64-43da-b904-10b907ffd08f/1/wZXJC6JdDegZV1eMeMt7JOjJPsk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9c64e2-4b64-43da-b904-10b907ffd08f/1/wZXJC6JdDegZV1eMeMt7JOjJPsk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e5:6b:33:ac:52:a8:20:60:1e:63:ae:68:3c:e7:b0:06:58:39: 8a:6d:2a:5e:bf:41:8f:a2:be:3e:bd:59:28:82:e6:2a:3e:14: 19:ec:41:94:21:de:bc:65:a8:ca:a2:cb:94:2a:57:77:07:53: 29:d7:55:a5:02:7f:6b:df:1a:81:98:53:bb:9e:30:97:4e:fe: df:52:52:55:87:4e:91:1a:a9:6f:e8:13:dc:13:29:5f:5c:1b: e1:f4:f6:74:d4:9c:41:d1:12:3d:30:c4:6a:bf:61:a5:14:59: 68:5a:5c:53:2d:f3:77:7f:9f:5e:ef:80:2a:f6:69:e8:ee:d4: 70:b1:6f:91:15:3d:f1:00:93:bd:72:a0:2c:ba:1c:07:ca:de: bf:b5:71:c2:88:34:86:95:d9:ba:d6:de:fe:15:8b:fd:aa:df: bb:83:d3:4c:8b:4b:ad:2a:0e:0f:a8:53:00:b1:e3:2b:0f:2d: 1d:8c:2d:9c:2a:67:c6:27:65:82:6f:b5:df:e0:00:4a:3f:64: 86:d0:49:d9:93:08:4d:36:ee:0f:83:50:9f:fe:a6:bb:07:e5: fc:e4:82:7e:28:bc:7b:e6:48:60:d6:2f:32:48:2c:5c:95:c2: 05:cd:2d:79:2e:fb:ee:36:dd:e3:83:ed:2b:9e:a6:8d:ca:d0: 19:dd:83:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDImSJuF2h4AnpXGxVtMoRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxOTVjOTBiYTI1ZDBkZTgxOTU3NTc4Yzc4Y2I3YjI0ZThj OTNlYzkwHhcNMjYwMjA5MTYwMDUzWhcNMjYwMjEwMTYwMDUzWjAzMTEwLwYDVQQD EygzYzhiMDBhN2UzMDAzYmM3Y2UxY2NlZGQyOWQ3ZTdmZmNhYzNlYTc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufSfSrLLr5+hTUnDxebgPWcFGWey bHtJCb40oC6fvoqRwmPMdPKE2/3xa7FN0ubeCf08G7KUh5t9Yz+PiK7ndijsu7d+ 1eaZVTAEun5kQYQsGDqIpN0Ro2T67ZG1QCIrK+/yy0Dm4thIfg251xlCuaehecrP HVaZ1Mw7t4hiWqPj+bNr0Knbq34R1ryZvcdFXzPhZjcqgZh3MNbgeOgNCQhOxE9q YWKj4sJD7PaePZJEeRryXBncA56uA/q+clufROc6P4q05gVKywQq1nZnFRNnNzC3 6NmnU8gBS8UiI/fs06BuuIY2rjFaa0YMcUYcKeQJjHG9FEMgd4s2NHlvSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDyLAKfjADvHzhzO3SnX5//Kw+p3MB8GA1UdIwQY MBaAFMGVyQuiXQ3oGVdXjHjLeyToyT7JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1pYSkM2SmREZWdaVjFlTWVNdDdKT2pKUHNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy85YzY0ZTItNGI2NC00M2RhLWI5MDQt MTBiOTA3ZmZkMDhmLzEvd1pYSkM2SmREZWdaVjFlTWVNdDdKT2pKUHNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy85YzY0ZTItNGI2NC00M2RhLWI5MDQtMTBiOTA3ZmZkMDhm LzEvd1pYSkM2SmREZWdaVjFlTWVNdDdKT2pKUHNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA5WszrFKo IGAeY65oPOewBlg5im0qXr9Bj6K+Pr1ZKILmKj4UGexBlCHevGWoyqLLlCpXdwdT KddVpQJ/a98agZhTu54wl07+31JSVYdOkRqpb+gT3BMpX1wb4fT2dNScQdESPTDE ar9hpRRZaFpcUy3zd3+fXu+AKvZp6O7UcLFvkRU98QCTvXKgLLocB8rev7Vxwog0 hpXZutbe/hWL/arfu4PTTItLrSoOD6hTALHjKw8tHYwtnCpnxidlgm+13+AASj9k htBJ2ZMITTbuD4NQn/6muwfl/OSCfii8e+ZIYNYvMkgsXJXCBc0teS777jbd44Pt K56mjcrQGd2DfQ== -----END CERTIFICATE-----Generated at Tue Feb 10 01:42:48 2026 by rpki-client