This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/807954-aa7e-48e9-87fa-5ebf2a54eb6d/1/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.mft
File: wnlkqr9ATdo_Xg7MHHBqsyfG-TE.mft (raw, json)
Hash identifier: FIHfdZIGUjH82KVhF0RUjKU8UAeUYAM4i3QcWap8BK4=
Subject key identifier: AD:87:03:2B:9E:2E:94:B2:5F:6E:DD:61:39:E4:E3:E0:46:0B:46:08
Authority key identifier: C2:79:64:AA:BF:40:4D:DA:3F:5E:0E:CC:1C:70:6A:B3:27:C6:F9:31
Certificate issuer: /CN=c27964aabf404dda3f5e0ecc1c706ab327c6f931
Certificate serial: 019BF8081B9AEC24B715A338ED41685C8803
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/807954-aa7e-48e9-87fa-5ebf2a54eb6d/1/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.mft
Manifest number: 17E9
Signing time: Mon 26 Jan 2026 02:00:39 +0000
Manifest this update: Mon 26 Jan 2026 02:00:39 +0000
Manifest next update: Tue 27 Jan 2026 02:00:39 +0000
Files and hashes: 1: FC3W89E7lPxHMttdKdqwUZ8ayGo.roa (hash: P2wT7iaUIOeyGlWOhw0T1qRlFG0Wm2TszirFqNtZ4G8=)
2: wnlkqr9ATdo_Xg7MHHBqsyfG-TE.crl (hash: fekkIyv0PmbQBmcQOe9tj4p5JVdpjiWflmA2LC1et6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/807954-aa7e-48e9-87fa-5ebf2a54eb6d/1/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/807954-aa7e-48e9-87fa-5ebf2a54eb6d/1/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.mft
rsync://rpki.ripe.net/repository/DEFAULT/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f8:08:1b:9a:ec:24:b7:15:a3:38:ed:41:68:5c:88:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c27964aabf404dda3f5e0ecc1c706ab327c6f931
Validity
Not Before: Jan 26 02:00:39 2026 GMT
Not After : Jan 27 02:00:39 2026 GMT
Subject: CN=ad87032b9e2e94b25f6edd6139e4e3e0460b4608
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2f:18:fd:82:27:b8:ab:73:ec:0c:cd:0f:2a:
8e:6e:f0:ac:52:04:bd:26:56:c3:43:83:e6:d0:06:
ec:f7:a4:de:ea:7e:9e:14:2b:6f:3f:ed:83:34:bd:
ab:81:73:be:45:54:70:e9:29:15:e6:9a:32:cb:96:
6f:73:b7:98:58:2f:5e:74:06:20:0e:18:35:10:d6:
e5:df:0e:8d:d9:28:08:4b:16:32:5f:98:5c:3c:a4:
33:0a:6b:b7:0d:6c:f4:27:98:fe:78:c1:28:2f:af:
eb:19:20:3f:42:79:a7:8d:dc:f9:d3:45:e6:2c:0f:
77:f5:43:17:46:55:6e:2d:33:ae:26:41:7f:09:d5:
3e:da:ce:67:b7:87:e8:23:c7:b6:0c:a0:f7:ed:ef:
e9:74:98:8e:da:91:5d:0e:01:29:b9:cb:63:ff:63:
27:0e:dc:f7:77:cc:d8:95:c2:87:21:d8:bf:6c:21:
92:0d:44:d4:90:e8:3d:45:6f:8b:17:8d:b8:49:8b:
08:62:8e:89:f4:1b:c5:e4:f1:00:69:65:1f:cf:cf:
a6:00:60:4a:27:ed:b6:d7:29:02:95:ce:20:38:27:
6b:b6:8f:23:f9:3d:a8:12:f1:03:bf:01:32:7f:8c:
2e:81:d6:23:a6:74:ce:8e:29:ae:40:c2:9b:7b:10:
1d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:87:03:2B:9E:2E:94:B2:5F:6E:DD:61:39:E4:E3:E0:46:0B:46:08
X509v3 Authority Key Identifier:
keyid:C2:79:64:AA:BF:40:4D:DA:3F:5E:0E:CC:1C:70:6A:B3:27:C6:F9:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/807954-aa7e-48e9-87fa-5ebf2a54eb6d/1/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/807954-aa7e-48e9-87fa-5ebf2a54eb6d/1/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:e1:90:bb:ef:79:25:22:8b:67:7d:dc:20:fb:c3:f1:f0:d9:
3e:ec:bd:49:a4:a5:a5:c0:79:ba:21:5f:74:62:8a:f4:65:c0:
7a:cf:5c:db:c7:44:37:f4:1c:13:19:69:7b:af:ff:ea:e1:cc:
45:0a:cb:29:fd:3c:51:97:fb:f4:e9:2e:b5:89:4d:3a:7b:99:
3f:fa:70:cb:41:fa:d9:c7:d3:0f:a8:57:f3:b6:bb:8f:5f:9e:
47:ca:c6:73:d4:c9:ca:c6:77:ce:19:0e:4d:2c:0f:04:47:7f:
1e:89:0d:55:61:63:ae:1f:b6:47:75:c7:a2:f6:63:2a:06:f9:
7f:09:f3:80:3b:bc:ff:30:13:a9:24:96:eb:85:a8:56:07:59:
c4:d5:89:94:5b:4d:a7:47:1d:44:f5:00:ab:d5:e9:54:eb:15:
98:08:23:9d:85:4c:c5:a8:98:5c:52:5a:ce:2f:87:7c:f3:65:
8f:40:29:69:c8:5d:a8:2b:79:36:e0:85:08:36:e5:82:f9:17:
ed:65:00:1f:e9:90:88:91:1b:78:11:92:28:36:8c:53:01:ca:
ad:33:2c:5f:b9:dd:93:34:b1:e6:83:c4:fd:ea:75:97:c6:d4:
89:d1:01:62:7e:c7:1f:1b:27:2c:0a:2d:d6:34:7c:69:b1:aa:
e4:9f:2f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:08:55 2026 by rpki-client