This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/6b7485-a265-4e29-b27d-1bc0c7baf5e3/1/w_W0TiSnGM-yONFLvHVe8VLylcE.mft File: w_W0TiSnGM-yONFLvHVe8VLylcE.mft (raw, json) Hash identifier: +ljMmA7tiwcC+yGqja4DVfqTppCLh2ijWPbPFUgHBCM= Subject key identifier: 09:1D:BD:AC:FE:3C:83:21:6B:91:FB:76:5F:23:18:01:D2:A9:1B:2B Authority key identifier: C3:F5:B4:4E:24:A7:18:CF:B2:38:D1:4B:BC:75:5E:F1:52:F2:95:C1 Certificate issuer: /CN=c3f5b44e24a718cfb238d14bbc755ef152f295c1 Certificate serial: 019C438FB0C1CF00F86C154F4EF0F923E46E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w_W0TiSnGM-yONFLvHVe8VLylcE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/6b7485-a265-4e29-b27d-1bc0c7baf5e3/1/w_W0TiSnGM-yONFLvHVe8VLylcE.mft Manifest number: 0DEA Signing time: Mon 09 Feb 2026 18:00:16 +0000 Manifest this update: Mon 09 Feb 2026 18:00:16 +0000 Manifest next update: Tue 10 Feb 2026 18:00:16 +0000 Files and hashes: 1: w_W0TiSnGM-yONFLvHVe8VLylcE.crl (hash: 7nYEb0QjCgsy8EzVQgwZpzfIX0MyzlSzJ8xlZW5FoPw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/6b7485-a265-4e29-b27d-1bc0c7baf5e3/1/w_W0TiSnGM-yONFLvHVe8VLylcE.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/6b7485-a265-4e29-b27d-1bc0c7baf5e3/1/w_W0TiSnGM-yONFLvHVe8VLylcE.mft rsync://rpki.ripe.net/repository/DEFAULT/w_W0TiSnGM-yONFLvHVe8VLylcE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:8f:b0:c1:cf:00:f8:6c:15:4f:4e:f0:f9:23:e4:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3f5b44e24a718cfb238d14bbc755ef152f295c1 Validity Not Before: Feb 9 18:00:16 2026 GMT Not After : Feb 10 18:00:16 2026 GMT Subject: CN=091dbdacfe3c83216b91fb765f231801d2a91b2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:fb:c3:74:34:0e:a0:7e:af:6b:d7:cf:8e:7f: 6f:95:5f:5e:b4:8b:29:86:be:67:4d:6c:75:66:5f: 88:e6:65:ec:8b:be:18:bf:1b:6d:de:36:bc:91:e2: dd:65:99:98:08:8f:01:ba:f6:c6:cb:20:d4:4c:a0: 59:b3:23:88:4b:79:61:71:de:0d:d0:8d:ea:02:30: 5f:48:63:65:60:1e:07:b4:49:f4:7e:15:e0:5a:e8: 10:4b:0b:c7:51:d4:6b:c4:b2:c7:50:44:38:71:6b: 03:c1:1e:9f:26:0d:80:9e:9b:9e:f6:6a:60:a9:04: 40:e2:bc:cf:39:f6:1f:34:5b:a8:8f:d4:81:ec:d8: 2d:2b:d0:a1:a4:43:8d:44:f1:4b:12:c7:f4:5a:db: df:5c:40:33:68:50:ca:69:37:b4:7c:ed:d2:25:f2: 44:46:9b:32:6a:7e:30:45:81:7d:50:16:67:bc:19: 4c:47:13:04:5e:7b:83:94:1e:10:c3:78:d2:ed:80: 77:d0:00:c3:4a:1f:84:3c:93:af:6b:c6:5e:3c:9e: 18:85:a7:cf:64:e4:13:bd:83:20:0d:b8:71:10:0a: 7b:be:ea:9a:e6:6d:a2:54:88:1e:0b:ff:90:c3:b5: 07:99:74:2e:eb:22:09:a9:f4:f2:b2:e7:a6:3c:d8: b7:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:1D:BD:AC:FE:3C:83:21:6B:91:FB:76:5F:23:18:01:D2:A9:1B:2B X509v3 Authority Key Identifier: keyid:C3:F5:B4:4E:24:A7:18:CF:B2:38:D1:4B:BC:75:5E:F1:52:F2:95:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w_W0TiSnGM-yONFLvHVe8VLylcE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6b7485-a265-4e29-b27d-1bc0c7baf5e3/1/w_W0TiSnGM-yONFLvHVe8VLylcE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6b7485-a265-4e29-b27d-1bc0c7baf5e3/1/w_W0TiSnGM-yONFLvHVe8VLylcE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:9e:d2:69:5f:9f:85:01:d9:1b:ae:c3:87:22:39:ac:6b:c6: b9:d8:aa:d0:da:1b:cf:3e:e8:90:84:32:74:81:52:b7:44:dd: b0:63:85:c7:c5:72:87:ed:d9:ae:1c:62:11:89:b0:2d:40:cf: 53:b9:a4:01:34:b8:61:a0:3b:83:8e:c6:93:f7:b8:9a:1d:dd: 93:d5:09:24:c8:ec:31:6a:f3:92:07:2d:5e:9a:73:ff:90:71: 59:b7:3b:68:a2:6c:ae:2b:40:24:23:cd:02:29:ba:f3:b4:e5: ba:f7:8f:4e:9a:05:4f:f4:ea:86:1e:1f:73:d2:08:97:f1:6e: 7a:04:df:67:b0:ef:50:43:22:55:bb:6f:e8:bf:67:df:4e:bf: 0b:2b:20:ca:20:0f:7b:7a:a2:36:81:05:44:84:1e:29:e8:ca: a4:0c:0a:fe:aa:32:a7:e4:86:d5:bb:bf:a2:17:4c:34:f5:41: 3e:5e:c2:2b:54:ea:1b:6b:1a:be:d7:1c:58:d5:ab:72:9e:32: 4c:ef:40:4b:ff:a6:1c:f9:91:e2:56:d2:e2:82:d5:bd:03:cb: d9:64:ff:da:eb:fc:5d:2c:52:0e:da:0d:eb:b5:df:a3:1d:62: 87:4c:08:ee:f8:f6:ca:ea:ba:1a:6c:e8:d3:f7:c5:34:a4:58: f9:3f:49:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDj7DBzwD4bBVPTvD5I+RuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzZjViNDRlMjRhNzE4Y2ZiMjM4ZDE0YmJjNzU1ZWYxNTJm Mjk1YzEwHhcNMjYwMjA5MTgwMDE2WhcNMjYwMjEwMTgwMDE2WjAzMTEwLwYDVQQD EygwOTFkYmRhY2ZlM2M4MzIxNmI5MWZiNzY1ZjIzMTgwMWQyYTkxYjJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvvDdDQOoH6va9fPjn9vlV9etIsp hr5nTWx1Zl+I5mXsi74Yvxtt3ja8keLdZZmYCI8BuvbGyyDUTKBZsyOIS3lhcd4N 0I3qAjBfSGNlYB4HtEn0fhXgWugQSwvHUdRrxLLHUEQ4cWsDwR6fJg2Anpue9mpg qQRA4rzPOfYfNFuoj9SB7NgtK9ChpEONRPFLEsf0WtvfXEAzaFDKaTe0fO3SJfJE Rpsyan4wRYF9UBZnvBlMRxMEXnuDlB4Qw3jS7YB30ADDSh+EPJOva8ZePJ4YhafP ZOQTvYMgDbhxEAp7vuqa5m2iVIgeC/+Qw7UHmXQu6yIJqfTysuemPNi3fwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAkdvaz+PIMha5H7dl8jGAHSqRsrMB8GA1UdIwQY MBaAFMP1tE4kpxjPsjjRS7x1XvFS8pXBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd19XMFRpU25HTS15T05GTHZIVmU4Vkx5bGNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC82Yjc0ODUtYTI2NS00ZTI5LWIyN2Qt MWJjMGM3YmFmNWUzLzEvd19XMFRpU25HTS15T05GTHZIVmU4Vkx5bGNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC82Yjc0ODUtYTI2NS00ZTI5LWIyN2QtMWJjMGM3YmFmNWUz LzEvd19XMFRpU25HTS15T05GTHZIVmU4Vkx5bGNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHp7SaV+f hQHZG67DhyI5rGvGudiq0Nobzz7okIQydIFSt0TdsGOFx8Vyh+3ZrhxiEYmwLUDP U7mkATS4YaA7g47Gk/e4mh3dk9UJJMjsMWrzkgctXppz/5BxWbc7aKJsritAJCPN Aim687TluvePTpoFT/Tqhh4fc9IIl/FuegTfZ7DvUEMiVbtv6L9n306/CysgyiAP e3qiNoEFRIQeKejKpAwK/qoyp+SG1bu/ohdMNPVBPl7CK1TqG2savtccWNWrcp4y TO9AS/+mHPmR4lbS4oLVvQPL2WT/2uv8XSxSDtoN67Xfox1ih0wI7vj2yuq6Gmzo 0/fFNKRY+T9Jdw== -----END CERTIFICATE-----Generated at Tue Feb 10 02:59:27 2026 by rpki-client