This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/a744c4-5c24-48c2-ab06-60736859c0c4/1/WCBDwB163q3Zb1a9u-8nSOAIAjQ.mft File: WCBDwB163q3Zb1a9u-8nSOAIAjQ.mft (raw, json) Hash identifier: Jt9+lPCkaCE2dPHYd1FLduelfpjNKZf72auKeh8bjag= Subject key identifier: AB:2F:8F:C8:F9:49:81:12:C1:2A:D7:5A:DF:17:8A:68:78:FC:DD:1D Authority key identifier: 58:20:43:C0:1D:7A:DE:AD:D9:6F:56:BD:BB:EF:27:48:E0:08:02:34 Certificate issuer: /CN=582043c01d7adeadd96f56bdbbef2748e0080234 Certificate serial: 019C421031C2F9693EF23E6FB04007166C5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WCBDwB163q3Zb1a9u-8nSOAIAjQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/a744c4-5c24-48c2-ab06-60736859c0c4/1/WCBDwB163q3Zb1a9u-8nSOAIAjQ.mft Manifest number: 0487 Signing time: Mon 09 Feb 2026 11:01:23 +0000 Manifest this update: Mon 09 Feb 2026 11:01:23 +0000 Manifest next update: Tue 10 Feb 2026 11:01:23 +0000 Files and hashes: 1: WCBDwB163q3Zb1a9u-8nSOAIAjQ.crl (hash: hQ/KXZ5obHmRndh6MbfBWIYZZQhp2pZZv0pAIXO6ohE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/a744c4-5c24-48c2-ab06-60736859c0c4/1/WCBDwB163q3Zb1a9u-8nSOAIAjQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/a744c4-5c24-48c2-ab06-60736859c0c4/1/WCBDwB163q3Zb1a9u-8nSOAIAjQ.mft rsync://rpki.ripe.net/repository/DEFAULT/WCBDwB163q3Zb1a9u-8nSOAIAjQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:10:31:c2:f9:69:3e:f2:3e:6f:b0:40:07:16:6c:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=582043c01d7adeadd96f56bdbbef2748e0080234 Validity Not Before: Feb 9 11:01:23 2026 GMT Not After : Feb 10 11:01:23 2026 GMT Subject: CN=ab2f8fc8f9498112c12ad75adf178a6878fcdd1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:1e:53:c3:3c:45:6d:33:29:0e:48:81:09:93: 20:ad:6f:4a:59:21:34:0f:e2:b6:bb:e9:c2:0a:2f: 7b:a5:46:75:26:fd:06:2d:ce:55:99:16:e4:c2:ed: 93:a8:71:76:28:11:ae:7a:9c:f6:2d:5f:17:ac:79: 23:e5:b4:68:69:e9:12:32:3d:e7:70:26:83:11:97: a5:a5:8b:c3:2f:d8:cb:d8:ec:78:5c:10:4a:db:a9: 44:21:60:e3:56:5a:e1:ef:83:9d:c7:97:3a:22:c7: a7:4e:c4:b2:3e:3c:25:bb:65:05:fc:7a:3e:e6:a6: 13:16:c7:bc:88:41:a7:d0:70:e2:35:c7:ff:d0:80: 4b:32:39:91:c9:31:74:bb:17:ce:52:89:d5:bf:96: da:cd:ac:93:e3:ab:14:41:9a:f0:0e:30:06:97:1c: b1:f6:72:da:27:7b:ae:ec:95:39:85:38:8e:15:bd: 2e:7d:fc:4f:76:1e:bf:49:21:8e:92:22:62:d0:45: b5:da:7d:6d:68:2d:34:ef:97:90:85:51:f8:f2:71: 8b:d6:b0:fe:3c:19:b6:98:67:12:55:e4:a6:ea:d4: d8:f5:31:d6:d0:6a:5e:70:b4:c5:0c:15:f3:57:2f: a1:8a:e3:9b:ff:a7:52:d8:45:6d:66:17:6c:3d:e8: 19:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:2F:8F:C8:F9:49:81:12:C1:2A:D7:5A:DF:17:8A:68:78:FC:DD:1D X509v3 Authority Key Identifier: keyid:58:20:43:C0:1D:7A:DE:AD:D9:6F:56:BD:BB:EF:27:48:E0:08:02:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WCBDwB163q3Zb1a9u-8nSOAIAjQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/a744c4-5c24-48c2-ab06-60736859c0c4/1/WCBDwB163q3Zb1a9u-8nSOAIAjQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/a744c4-5c24-48c2-ab06-60736859c0c4/1/WCBDwB163q3Zb1a9u-8nSOAIAjQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:13:d6:6f:24:20:1c:cb:11:99:5f:78:27:44:ba:d9:8b:34: c4:0e:13:d4:1f:15:b8:b0:6a:94:86:ea:05:70:09:7a:e6:05: 74:12:18:d8:5a:8a:1b:57:c4:21:40:c2:e2:b3:40:ee:e8:ff: 44:fb:bc:41:03:2c:63:b5:ae:17:42:13:6d:de:b8:49:46:f4: 74:77:5b:fd:8e:1a:c2:41:64:bf:a6:7b:5a:2b:39:33:a4:33: 80:3f:29:20:38:4b:c4:16:8c:45:b6:cf:13:d7:33:38:ad:ac: c1:ee:97:aa:6b:56:dc:85:91:be:6d:cd:2f:d7:d4:38:81:4c: 52:6a:75:7e:3b:96:43:7d:f2:36:b3:11:90:f7:bd:85:01:38: dc:25:45:40:06:fd:56:49:4e:a0:68:f4:dc:b5:78:a9:55:4c: b1:10:f7:de:ed:0c:8c:cb:32:23:00:01:33:aa:08:50:df:01: 2d:c2:a9:09:70:31:71:7c:33:6a:08:15:d7:ee:f1:ea:6c:1f: 0a:d2:4e:20:77:f6:1e:a2:e7:e9:3f:15:93:66:20:50:e7:4a: dc:6c:5a:d0:0b:5d:c1:fb:ec:12:b2:cc:9c:2a:16:3a:49:0d: c8:9f:08:d5:c9:94:5a:e1:fe:45:96:d7:85:28:3d:5c:9b:a1: 6b:70:d9:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCEDHC+Wk+8j5vsEAHFmxcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4MjA0M2MwMWQ3YWRlYWRkOTZmNTZiZGJiZWYyNzQ4ZTAw ODAyMzQwHhcNMjYwMjA5MTEwMTIzWhcNMjYwMjEwMTEwMTIzWjAzMTEwLwYDVQQD EyhhYjJmOGZjOGY5NDk4MTEyYzEyYWQ3NWFkZjE3OGE2ODc4ZmNkZDFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAux5TwzxFbTMpDkiBCZMgrW9KWSE0 D+K2u+nCCi97pUZ1Jv0GLc5VmRbkwu2TqHF2KBGuepz2LV8XrHkj5bRoaekSMj3n cCaDEZelpYvDL9jL2Ox4XBBK26lEIWDjVlrh74Odx5c6IsenTsSyPjwlu2UF/Ho+ 5qYTFse8iEGn0HDiNcf/0IBLMjmRyTF0uxfOUonVv5bazayT46sUQZrwDjAGlxyx 9nLaJ3uu7JU5hTiOFb0uffxPdh6/SSGOkiJi0EW12n1taC0075eQhVH48nGL1rD+ PBm2mGcSVeSm6tTY9THW0GpecLTFDBXzVy+hiuOb/6dS2EVtZhdsPegZVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKsvj8j5SYESwSrXWt8Ximh4/N0dMB8GA1UdIwQY MBaAFFggQ8Adet6t2W9WvbvvJ0jgCAI0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0NCRHdCMTYzcTNaYjFhOXUtOG5TT0FJQWpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9hNzQ0YzQtNWMyNC00OGMyLWFiMDYt NjA3MzY4NTljMGM0LzEvV0NCRHdCMTYzcTNaYjFhOXUtOG5TT0FJQWpRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS9hNzQ0YzQtNWMyNC00OGMyLWFiMDYtNjA3MzY4NTljMGM0 LzEvV0NCRHdCMTYzcTNaYjFhOXUtOG5TT0FJQWpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkhPWbyQg HMsRmV94J0S62Ys0xA4T1B8VuLBqlIbqBXAJeuYFdBIY2FqKG1fEIUDC4rNA7uj/ RPu8QQMsY7WuF0ITbd64SUb0dHdb/Y4awkFkv6Z7Wis5M6QzgD8pIDhLxBaMRbbP E9czOK2swe6XqmtW3IWRvm3NL9fUOIFMUmp1fjuWQ33yNrMRkPe9hQE43CVFQAb9 VklOoGj03LV4qVVMsRD33u0MjMsyIwABM6oIUN8BLcKpCXAxcXwzaggV1+7x6mwf CtJOIHf2HqLn6T8Vk2YgUOdK3Gxa0AtdwfvsErLMnCoWOkkNyJ8I1cmUWuH+RZbX hSg9XJuha3DZ9A== -----END CERTIFICATE-----Generated at Mon Feb 9 21:10:11 2026 by rpki-client