This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/e2e048-2788-49b8-9ed5-453bd8995bca/1/wrXTr9C3Lrc0wh7XgjKetufBzkE.mft File: wrXTr9C3Lrc0wh7XgjKetufBzkE.mft (raw, json) Hash identifier: YTV6IN3fn7ZZyTLm3AZOtllaoslfxuOt9wv2FNAux5s= Subject key identifier: 4A:6D:84:D8:61:88:6C:9C:41:1D:A8:EB:0F:05:34:98:74:44:D0:23 Authority key identifier: C2:B5:D3:AF:D0:B7:2E:B7:34:C2:1E:D7:82:32:9E:B6:E7:C1:CE:41 Certificate issuer: /CN=c2b5d3afd0b72eb734c21ed782329eb6e7c1ce41 Certificate serial: 019C435925E79B2F306B1D268B5850A76712 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wrXTr9C3Lrc0wh7XgjKetufBzkE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/e2e048-2788-49b8-9ed5-453bd8995bca/1/wrXTr9C3Lrc0wh7XgjKetufBzkE.mft Manifest number: 0ADC Signing time: Mon 09 Feb 2026 17:00:41 +0000 Manifest this update: Mon 09 Feb 2026 17:00:41 +0000 Manifest next update: Tue 10 Feb 2026 17:00:41 +0000 Files and hashes: 1: eObhnSgoClkZSg4OphnzH9Kih4s.roa (hash: suuBBjjjYm5X0ydrhy9hau3hPxlzgCy0q7n74RUKwk4=) 2: wrXTr9C3Lrc0wh7XgjKetufBzkE.crl (hash: UHrc2Q/b0nxU6akU71READd0B0e4PxHyGkusg97Aee4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/e2e048-2788-49b8-9ed5-453bd8995bca/1/wrXTr9C3Lrc0wh7XgjKetufBzkE.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/e2e048-2788-49b8-9ed5-453bd8995bca/1/wrXTr9C3Lrc0wh7XgjKetufBzkE.mft rsync://rpki.ripe.net/repository/DEFAULT/wrXTr9C3Lrc0wh7XgjKetufBzkE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:59:25:e7:9b:2f:30:6b:1d:26:8b:58:50:a7:67:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2b5d3afd0b72eb734c21ed782329eb6e7c1ce41 Validity Not Before: Feb 9 17:00:41 2026 GMT Not After : Feb 10 17:00:41 2026 GMT Subject: CN=4a6d84d861886c9c411da8eb0f0534987444d023 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8c:d2:28:ab:1b:0a:d5:3f:5a:c3:7d:ac:d7: 92:c7:a9:f6:f8:71:98:e7:4e:b4:be:f7:41:a9:df: 43:1e:9b:b0:13:e5:ad:e7:e2:08:e3:c5:76:e3:cd: b9:f8:f7:8a:f5:d1:19:55:02:d9:f0:fb:f6:34:b8: 29:27:ea:02:d2:98:fa:d2:d8:80:3f:9f:c2:e6:5f: 31:88:b1:55:db:ee:2d:a3:7d:d4:2d:8a:b8:d8:5b: 67:e7:8a:fc:8f:e0:e6:19:ba:8e:5b:80:94:0e:8e: c1:14:7d:2d:ba:da:76:00:93:2c:89:b0:9c:8f:f2: 6c:fd:e8:e5:0f:5a:55:5e:cf:8c:49:ee:76:ff:b3: 6f:c5:5c:89:01:2d:b7:e9:2d:fc:cc:18:7d:e6:d1: 50:5d:34:e1:f9:73:f7:88:74:9c:fc:61:68:d9:d9: ef:e2:77:a7:1b:32:6c:4a:e8:0f:27:b3:36:2b:7c: fd:f3:ca:59:dd:29:dc:53:4e:d9:1f:3d:57:50:6b: 41:b7:9d:ae:df:4f:27:cd:5f:2a:d3:38:ad:9c:b9: 94:20:d7:81:c5:96:9c:5b:d9:bd:d7:c3:86:1b:66: 3b:38:c3:93:4c:d1:f8:19:dd:8b:4b:95:52:fd:ee: 29:c4:85:e6:36:74:7e:14:70:72:1d:ad:2a:fd:3a: 94:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:6D:84:D8:61:88:6C:9C:41:1D:A8:EB:0F:05:34:98:74:44:D0:23 X509v3 Authority Key Identifier: keyid:C2:B5:D3:AF:D0:B7:2E:B7:34:C2:1E:D7:82:32:9E:B6:E7:C1:CE:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wrXTr9C3Lrc0wh7XgjKetufBzkE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/e2e048-2788-49b8-9ed5-453bd8995bca/1/wrXTr9C3Lrc0wh7XgjKetufBzkE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/e2e048-2788-49b8-9ed5-453bd8995bca/1/wrXTr9C3Lrc0wh7XgjKetufBzkE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:70:62:8a:62:07:1a:1e:33:53:c0:7d:63:4a:91:bf:29:f5: e4:74:9f:35:b8:54:cd:9f:07:d1:df:46:6e:80:29:62:57:d4: 18:e7:a9:c0:e7:df:50:cf:6b:bb:45:fc:4d:1f:18:3b:fc:99: 54:5e:9a:a3:99:b5:ea:46:07:9e:10:cc:53:3d:d4:a3:be:d8: 21:ca:9c:b1:cf:14:4a:77:ca:18:1b:ba:b5:34:6c:e1:1c:7c: fd:a3:21:6f:c1:c2:75:6d:11:d3:de:75:e7:33:1b:7f:93:1d: cd:33:cc:fa:46:b9:7e:92:c1:02:fd:05:5c:6b:e0:1a:00:19: dd:c9:70:1f:2d:e0:4d:41:77:bb:21:6d:16:87:bb:01:00:c8: 8d:78:b5:a3:66:37:a5:50:86:68:2d:bb:9d:06:ac:eb:7c:c8: 5f:d6:df:7b:02:0d:2b:57:f8:79:4b:8b:39:10:b2:d8:56:cf: cf:d3:0a:25:9a:1f:cd:b6:97:47:4c:f4:15:b9:22:c4:4c:bc: b5:01:7b:05:44:94:4c:dc:96:19:70:7f:1a:ad:4a:af:8a:df: ca:46:14:2e:6b:b0:4e:69:a0:81:0e:48:0d:80:3d:91:74:bc: 30:2a:26:ef:f8:b6:02:2a:87:ef:ca:3b:20:dc:51:5f:26:3c: 75:ef:24:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWSXnmy8wax0mi1hQp2cSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyYjVkM2FmZDBiNzJlYjczNGMyMWVkNzgyMzI5ZWI2ZTdj MWNlNDEwHhcNMjYwMjA5MTcwMDQxWhcNMjYwMjEwMTcwMDQxWjAzMTEwLwYDVQQD Eyg0YTZkODRkODYxODg2YzljNDExZGE4ZWIwZjA1MzQ5ODc0NDRkMDIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsozSKKsbCtU/WsN9rNeSx6n2+HGY 5060vvdBqd9DHpuwE+Wt5+II48V24825+PeK9dEZVQLZ8Pv2NLgpJ+oC0pj60tiA P5/C5l8xiLFV2+4to33ULYq42Ftn54r8j+DmGbqOW4CUDo7BFH0tutp2AJMsibCc j/Js/ejlD1pVXs+MSe52/7NvxVyJAS236S38zBh95tFQXTTh+XP3iHSc/GFo2dnv 4nenGzJsSugPJ7M2K3z988pZ3SncU07ZHz1XUGtBt52u308nzV8q0zitnLmUINeB xZacW9m918OGG2Y7OMOTTNH4Gd2LS5VS/e4pxIXmNnR+FHByHa0q/TqUHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEpthNhhiGycQR2o6w8FNJh0RNAjMB8GA1UdIwQY MBaAFMK106/Qty63NMIe14Iynrbnwc5BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3JYVHI5QzNMcmMwd2g3WGdqS2V0dWZCemtFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9lMmUwNDgtMjc4OC00OWI4LTllZDUt NDUzYmQ4OTk1YmNhLzEvd3JYVHI5QzNMcmMwd2g3WGdqS2V0dWZCemtFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS9lMmUwNDgtMjc4OC00OWI4LTllZDUtNDUzYmQ4OTk1YmNh LzEvd3JYVHI5QzNMcmMwd2g3WGdqS2V0dWZCemtFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApHBiimIH Gh4zU8B9Y0qRvyn15HSfNbhUzZ8H0d9GboApYlfUGOepwOffUM9ru0X8TR8YO/yZ VF6ao5m16kYHnhDMUz3Uo77YIcqcsc8USnfKGBu6tTRs4Rx8/aMhb8HCdW0R0951 5zMbf5MdzTPM+ka5fpLBAv0FXGvgGgAZ3clwHy3gTUF3uyFtFoe7AQDIjXi1o2Y3 pVCGaC27nQas63zIX9bfewINK1f4eUuLORCy2FbPz9MKJZofzbaXR0z0FbkixEy8 tQF7BUSUTNyWGXB/Gq1Kr4rfykYULmuwTmmggQ5IDYA9kXS8MCom7/i2AiqH78o7 INxRXyY8de8kDg== -----END CERTIFICATE-----Generated at Mon Feb 9 22:44:58 2026 by rpki-client