This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/a8f8e1-dce2-47ef-824e-bef1034edbe5/1/WZDBVTdirJr1ffm1jZ3FCvQJxWY.mft
File: WZDBVTdirJr1ffm1jZ3FCvQJxWY.mft (raw, json)
Hash identifier: uf9iSrMqfXFMpi9pGi8M9GxoFSUymeNjwxC7dYIhdLM=
Subject key identifier: E7:A1:0C:31:1C:E1:73:02:D4:7C:31:BC:CC:E2:E5:FF:C1:80:C5:2B
Authority key identifier: 59:90:C1:55:37:62:AC:9A:F5:7D:F9:B5:8D:9D:C5:0A:F4:09:C5:66
Certificate issuer: /CN=5990c1553762ac9af57df9b58d9dc50af409c566
Certificate serial: 019BF9F6CA2F248470A6ECCE0CFD9F3253C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WZDBVTdirJr1ffm1jZ3FCvQJxWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/a8f8e1-dce2-47ef-824e-bef1034edbe5/1/WZDBVTdirJr1ffm1jZ3FCvQJxWY.mft
Manifest number: 1567
Signing time: Mon 26 Jan 2026 11:00:58 +0000
Manifest this update: Mon 26 Jan 2026 11:00:58 +0000
Manifest next update: Tue 27 Jan 2026 11:00:58 +0000
Files and hashes: 1: La1bk9hiAsFAmxgmoYU8D36An4I.roa (hash: prW1lY9yf0rsG8vbap4UWXcYjyAnNaggPXP/OIdFgHM=)
2: S7RcXMyiVxlze6GVvWUy2ASQtA4.roa (hash: 9nQ7JQOoqPESGeYG/+m0xunoEX7zzRQueykeebjY92Q=)
3: WZDBVTdirJr1ffm1jZ3FCvQJxWY.crl (hash: 4OYyr5WIpSlyMTJ0gweYLbvPk/d9g2eDOgKYERV3gCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/a8f8e1-dce2-47ef-824e-bef1034edbe5/1/WZDBVTdirJr1ffm1jZ3FCvQJxWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/a8f8e1-dce2-47ef-824e-bef1034edbe5/1/WZDBVTdirJr1ffm1jZ3FCvQJxWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/WZDBVTdirJr1ffm1jZ3FCvQJxWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 10:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f9:f6:ca:2f:24:84:70:a6:ec:ce:0c:fd:9f:32:53:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5990c1553762ac9af57df9b58d9dc50af409c566
Validity
Not Before: Jan 26 11:00:58 2026 GMT
Not After : Jan 27 11:00:58 2026 GMT
Subject: CN=e7a10c311ce17302d47c31bccce2e5ffc180c52b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ff:86:68:01:40:10:81:2f:f0:96:0d:a4:6a:
86:56:7d:35:af:1c:4d:72:62:e3:49:04:aa:9d:54:
bb:2d:fd:df:ee:49:41:6c:ce:77:6a:2a:99:ef:ea:
20:db:2b:72:3d:88:8e:d0:6b:4f:60:bf:c5:3e:82:
29:88:f4:43:b6:8b:31:72:3c:4d:0a:23:98:32:af:
8f:15:fe:54:53:56:17:40:31:d8:01:cb:6f:fb:c2:
42:a3:c0:7b:e4:b0:9d:b5:1e:0a:b1:f1:02:96:0a:
66:f0:c1:70:a6:d5:3e:8b:ee:a1:cb:62:33:1a:e8:
d5:33:b5:b4:8e:d0:2c:82:18:01:b0:55:97:49:d4:
3e:46:84:2b:41:02:b5:8b:14:15:55:87:60:0b:fd:
76:12:ad:0a:9f:77:4a:b6:b4:26:37:35:59:87:34:
14:8c:e5:42:e2:66:66:5d:c0:c5:6a:20:16:0b:a1:
d0:e6:3b:cf:03:78:e9:89:86:ed:3e:2e:8c:4a:6c:
51:60:28:bf:5e:62:dc:37:03:9b:6b:08:89:8e:72:
1f:4f:ee:97:91:21:d7:62:66:36:6f:3e:e6:df:ac:
73:35:ec:60:79:b3:91:77:15:72:f4:7e:30:4c:0c:
9c:ad:7f:40:08:73:a9:79:0b:4f:d3:02:e8:08:6d:
66:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:A1:0C:31:1C:E1:73:02:D4:7C:31:BC:CC:E2:E5:FF:C1:80:C5:2B
X509v3 Authority Key Identifier:
keyid:59:90:C1:55:37:62:AC:9A:F5:7D:F9:B5:8D:9D:C5:0A:F4:09:C5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WZDBVTdirJr1ffm1jZ3FCvQJxWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a8f8e1-dce2-47ef-824e-bef1034edbe5/1/WZDBVTdirJr1ffm1jZ3FCvQJxWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a8f8e1-dce2-47ef-824e-bef1034edbe5/1/WZDBVTdirJr1ffm1jZ3FCvQJxWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:4f:2e:2d:7f:97:e1:19:9c:55:c2:d1:84:49:bf:d1:9c:73:
bb:0a:65:54:dd:bb:2b:17:08:62:1f:e1:03:d9:cf:ee:32:78:
b0:db:39:e4:69:4a:0b:01:0b:bb:2f:de:0f:b7:e0:74:d7:05:
5f:73:69:78:ed:cb:28:08:42:13:82:74:8a:27:18:41:08:27:
cf:7f:94:9e:16:b1:51:4b:1a:5a:0c:a6:84:65:ab:fc:21:24:
eb:51:e9:71:22:f9:75:81:fd:3d:55:1a:b6:55:dc:e0:72:4e:
1e:4f:fb:7a:c3:59:ea:2d:b4:f2:bf:04:2a:02:69:44:65:ea:
1d:be:31:9e:54:c3:c9:10:03:93:e8:d0:ac:e0:70:cd:44:1a:
f6:e5:5e:f1:92:3d:0e:d7:ff:49:9d:b0:46:ec:d5:da:e5:e2:
99:21:65:7a:ec:eb:e8:4c:b4:b0:55:fe:b6:3a:bd:6e:ef:9f:
8a:59:6d:f1:8e:3e:9f:1d:ac:44:47:b0:8c:a0:8c:5c:84:4e:
97:7c:82:ba:d7:26:6b:72:b0:51:23:23:78:68:00:28:90:78:
5b:8e:1a:b9:94:5f:1e:ce:4d:1c:4e:c0:af:6c:85:26:8f:36:
5b:6b:af:e3:e4:4a:16:34:31:9e:d4:dd:7f:9d:cb:88:b3:df:
61:79:da:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 14:24:10 2026 by rpki-client