This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/eae1f3-884f-48f9-88c8-edc325ae7b18/1/wK1Je4BBY5xLPSIQeCy10ZgUxOA.mft File: wK1Je4BBY5xLPSIQeCy10ZgUxOA.mft (raw, json) Hash identifier: xsoKpkmabKM+U9sWrZMwhtBO9FBB6fXi8q30S3/lDfE= Subject key identifier: CF:11:91:DE:A9:A2:BB:68:8D:48:8F:86:37:C7:C3:6D:36:50:99:89 Authority key identifier: C0:AD:49:7B:80:41:63:9C:4B:3D:22:10:78:2C:B5:D1:98:14:C4:E0 Certificate issuer: /CN=c0ad497b8041639c4b3d2210782cb5d19814c4e0 Certificate serial: 019C42B453E30E22E3788698DC3E6639428B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wK1Je4BBY5xLPSIQeCy10ZgUxOA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/eae1f3-884f-48f9-88c8-edc325ae7b18/1/wK1Je4BBY5xLPSIQeCy10ZgUxOA.mft Manifest number: 03A2 Signing time: Mon 09 Feb 2026 14:00:40 +0000 Manifest this update: Mon 09 Feb 2026 14:00:40 +0000 Manifest next update: Tue 10 Feb 2026 14:00:40 +0000 Files and hashes: 1: wK1Je4BBY5xLPSIQeCy10ZgUxOA.crl (hash: Q91d3OR0TE+mJU25nLo3Xdf9tYHG444lqNI3yvPxD6M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/eae1f3-884f-48f9-88c8-edc325ae7b18/1/wK1Je4BBY5xLPSIQeCy10ZgUxOA.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/eae1f3-884f-48f9-88c8-edc325ae7b18/1/wK1Je4BBY5xLPSIQeCy10ZgUxOA.mft rsync://rpki.ripe.net/repository/DEFAULT/wK1Je4BBY5xLPSIQeCy10ZgUxOA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:53:e3:0e:22:e3:78:86:98:dc:3e:66:39:42:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0ad497b8041639c4b3d2210782cb5d19814c4e0 Validity Not Before: Feb 9 14:00:40 2026 GMT Not After : Feb 10 14:00:40 2026 GMT Subject: CN=cf1191dea9a2bb688d488f8637c7c36d36509989 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:2d:5a:db:8c:aa:c4:85:e1:63:31:ed:8a:08: d7:04:40:58:3d:ac:85:eb:43:fe:b1:ba:68:ba:25: 28:93:e2:8e:bb:87:ae:9a:0d:d2:82:ec:14:71:7e: 68:1a:af:8e:49:d5:27:1a:2b:52:dd:8d:fe:7f:6c: 56:e0:67:c3:3b:cf:74:59:10:9e:c2:a2:84:45:7b: bc:42:bb:24:2d:7e:2c:f3:71:ec:f3:81:bc:0c:7e: e1:1f:7e:07:89:66:40:8b:e8:e3:a1:46:fe:f5:db: 02:3b:42:0e:75:25:44:6f:fd:cb:2f:36:9e:82:ad: b0:e2:fa:db:df:96:77:4d:a5:98:35:8c:c3:66:fe: 59:67:e4:d4:96:23:ef:e2:61:96:03:a7:c4:e8:02: d0:2d:4f:23:99:7d:3c:6d:0b:12:03:50:1b:23:b3: cb:33:8d:ef:81:60:d7:06:a1:22:72:85:cc:18:4b: ac:d8:8b:8a:a7:5c:91:46:2d:cc:1e:05:af:87:5d: 15:f2:2b:df:f8:c8:15:b8:07:b6:ec:3a:57:2c:07: 4b:65:d8:2b:68:ae:6a:ad:7f:cd:f4:c9:41:a9:29: 70:bf:74:09:81:ee:33:ec:2c:59:cd:c3:44:d6:f4: 05:70:e3:55:ad:5f:41:c1:e7:8d:f6:68:a5:b8:f2: c7:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:11:91:DE:A9:A2:BB:68:8D:48:8F:86:37:C7:C3:6D:36:50:99:89 X509v3 Authority Key Identifier: keyid:C0:AD:49:7B:80:41:63:9C:4B:3D:22:10:78:2C:B5:D1:98:14:C4:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wK1Je4BBY5xLPSIQeCy10ZgUxOA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/eae1f3-884f-48f9-88c8-edc325ae7b18/1/wK1Je4BBY5xLPSIQeCy10ZgUxOA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/eae1f3-884f-48f9-88c8-edc325ae7b18/1/wK1Je4BBY5xLPSIQeCy10ZgUxOA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:14:4a:72:20:6e:c9:fa:e7:86:6d:b6:2a:6b:cc:de:f1:ff: 13:65:95:65:40:a5:df:ed:4c:c9:5b:9e:9f:db:86:b1:30:8a: 59:42:2f:d6:83:18:a6:c6:17:97:61:58:80:ab:2d:8a:69:38: 05:e3:26:ec:3a:49:91:0d:c6:e2:85:e6:56:1d:97:e2:39:4f: a0:41:fc:77:05:b7:07:2e:15:2b:d6:5a:fe:b9:4e:fa:0e:ff: 73:4e:6f:32:a8:11:04:e2:53:b4:93:14:fc:17:96:f6:32:20: 6e:eb:4b:52:4f:00:51:49:06:8e:a0:57:f6:8f:cc:76:ff:10: 67:a1:1f:f0:ac:42:af:3f:aa:df:9a:90:fd:fc:32:3d:50:17: ee:c1:8a:5b:f4:6d:8b:83:fa:30:e9:c0:45:64:6b:fb:51:76: 97:3a:a2:56:64:40:8c:33:99:f5:90:26:b1:58:3f:a0:a9:4d: 61:a6:91:fe:ea:5a:b1:76:7c:fe:23:14:ee:12:82:16:cd:a2: fa:67:ab:27:14:8d:36:8e:63:ad:fa:22:62:ad:8c:61:0c:fb: ef:7d:0e:7b:42:46:03:3a:41:c2:1b:d4:8e:e5:97:8b:cd:59: f1:bc:82:9b:40:5d:0e:68:51:c8:18:4e:a9:d7:d0:1d:80:a0: e7:7c:34:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtFPjDiLjeIaY3D5mOUKLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwYWQ0OTdiODA0MTYzOWM0YjNkMjIxMDc4MmNiNWQxOTgx NGM0ZTAwHhcNMjYwMjA5MTQwMDQwWhcNMjYwMjEwMTQwMDQwWjAzMTEwLwYDVQQD EyhjZjExOTFkZWE5YTJiYjY4OGQ0ODhmODYzN2M3YzM2ZDM2NTA5OTg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgy1a24yqxIXhYzHtigjXBEBYPayF 60P+sbpouiUok+KOu4eumg3SguwUcX5oGq+OSdUnGitS3Y3+f2xW4GfDO890WRCe wqKERXu8QrskLX4s83Hs84G8DH7hH34HiWZAi+jjoUb+9dsCO0IOdSVEb/3LLzae gq2w4vrb35Z3TaWYNYzDZv5ZZ+TUliPv4mGWA6fE6ALQLU8jmX08bQsSA1AbI7PL M43vgWDXBqEicoXMGEus2IuKp1yRRi3MHgWvh10V8ivf+MgVuAe27DpXLAdLZdgr aK5qrX/N9MlBqSlwv3QJge4z7CxZzcNE1vQFcONVrV9BweeN9miluPLHGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM8Rkd6portojUiPhjfHw202UJmJMB8GA1UdIwQY MBaAFMCtSXuAQWOcSz0iEHgstdGYFMTgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0sxSmU0QkJZNXhMUFNJUWVDeTEwWmdVeE9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9lYWUxZjMtODg0Zi00OGY5LTg4Yzgt ZWRjMzI1YWU3YjE4LzEvd0sxSmU0QkJZNXhMUFNJUWVDeTEwWmdVeE9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9lYWUxZjMtODg0Zi00OGY5LTg4YzgtZWRjMzI1YWU3YjE4 LzEvd0sxSmU0QkJZNXhMUFNJUWVDeTEwWmdVeE9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXBRKciBu yfrnhm22KmvM3vH/E2WVZUCl3+1MyVuen9uGsTCKWUIv1oMYpsYXl2FYgKstimk4 BeMm7DpJkQ3G4oXmVh2X4jlPoEH8dwW3By4VK9Za/rlO+g7/c05vMqgRBOJTtJMU /BeW9jIgbutLUk8AUUkGjqBX9o/Mdv8QZ6Ef8KxCrz+q35qQ/fwyPVAX7sGKW/Rt i4P6MOnARWRr+1F2lzqiVmRAjDOZ9ZAmsVg/oKlNYaaR/upasXZ8/iMU7hKCFs2i +merJxSNNo5jrfoiYq2MYQz7730Oe0JGAzpBwhvUjuWXi81Z8byCm0BdDmhRyBhO qdfQHYCg53w0tQ== -----END CERTIFICATE-----Generated at Mon Feb 9 23:52:45 2026 by rpki-client