This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.mft
File: WFPmWjCHtMqFyIArYP8PArQQbZc.mft (raw, json)
Hash identifier: GOPKsPN7q+Als3FlpHibfTmV+NU/KZh2picoyo9OLZw=
Subject key identifier: 0D:1C:D8:38:72:52:E1:97:D8:E9:BA:6D:CF:7A:C5:77:CA:8B:02:6E
Authority key identifier: 58:53:E6:5A:30:87:B4:CA:85:C8:80:2B:60:FF:0F:02:B4:10:6D:97
Certificate issuer: /CN=5853e65a3087b4ca85c8802b60ff0f02b4106d97
Certificate serial: 019BF8ACD073A95BD7345DD3B2EC8506D98C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WFPmWjCHtMqFyIArYP8PArQQbZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.mft
Manifest number: 17EC
Signing time: Mon 26 Jan 2026 05:00:33 +0000
Manifest this update: Mon 26 Jan 2026 05:00:33 +0000
Manifest next update: Tue 27 Jan 2026 05:00:33 +0000
Files and hashes: 1: DlsgUx_zkNi2pPjWqZwrQw6D24o.roa (hash: EVqGILzQxIxgUUNelK85PnHTo4kqqnsSyA/DvDkmwWs=)
2: Ev3rmxRidqYnZfMQSlLC-Dhz2FU.roa (hash: T8qErGjhlycgYZldrRbrFryAuFGEKdte6aYXXPvklds=)
3: IuiY9XwgtBBm0mMcl-Xq8bOHNRU.roa (hash: XWTII6LxqzZdBssyoVpR4SzyATC5Jy429E4WpR2BVcA=)
4: WFPmWjCHtMqFyIArYP8PArQQbZc.crl (hash: Fxx11ESU2c50y9oW2/vksXf7/Hk+s0ZNX4H3tBj48a0=)
5: liXHqxDKW9rov90i198klg0eTO4.roa (hash: RxCaACto/lUWWczrW9p1uUcWLXs9X7YOE0qlRt7M2kM=)
6: nSQ4UZ-by9gRAicLs5JgR2Rs_6A.roa (hash: Gra3zwoakBGSkCcu16wzOodm0VWbtqrQgGrX7oS3hXo=)
7: nf_G4qFgrBWhWiUbJTn1rMwWnX8.roa (hash: PcWHMPz7nWBOqD5CBhgFwkGq6i8u3owR4SDy4BG6U4I=)
8: oSHcrJoHQTnsgntMnrCNm4AWAlA.roa (hash: a3cCgw339HSCSt92rk1/y/YUB3elccT+VxUcVU9x2aI=)
9: z1v_CqVe5ZwJ1gQtmOYLBo6UsVs.roa (hash: HaP1DsKf8T5Q7ZQlqy2eroqHMykQQFoPO6mXCoW8Rzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/WFPmWjCHtMqFyIArYP8PArQQbZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f8:ac:d0:73:a9:5b:d7:34:5d:d3:b2:ec:85:06:d9:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5853e65a3087b4ca85c8802b60ff0f02b4106d97
Validity
Not Before: Jan 26 05:00:33 2026 GMT
Not After : Jan 27 05:00:33 2026 GMT
Subject: CN=0d1cd8387252e197d8e9ba6dcf7ac577ca8b026e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:96:66:0c:c2:14:ca:a5:04:e7:ac:95:b2:87:
cc:df:14:f0:7b:61:f1:c0:76:00:dc:d7:47:af:45:
f9:ca:d9:d3:4d:bb:34:25:7c:9c:6c:33:9c:88:be:
97:88:e1:51:78:5e:e5:ab:e8:00:8d:7d:7c:b6:45:
73:0b:f0:b8:2d:a8:e2:61:3b:b0:09:1e:15:2b:9d:
94:b3:2d:b8:cf:5f:10:61:30:77:2b:f6:0c:bd:e6:
bd:92:6b:d8:5d:6a:7a:3d:68:5a:88:65:af:b4:f7:
e4:d6:f0:c8:2b:00:38:f7:0e:14:a2:ce:d9:45:fe:
75:21:63:58:19:1f:0f:76:d7:3e:f4:e7:38:fb:90:
22:01:bd:50:ca:a8:4b:34:09:63:b6:2e:3f:17:0d:
ce:b3:2a:76:94:a1:dc:8e:3f:9c:f9:ea:70:5f:51:
27:b3:ee:6a:0d:0e:43:3e:e7:8d:0b:28:0a:10:1f:
29:a0:9d:af:ff:cc:0b:62:1b:3d:46:7d:16:eb:e8:
d4:06:4d:3a:02:0e:b0:d2:57:c0:9e:a8:12:38:46:
bc:ee:3c:9d:9e:28:4c:cd:cf:dd:38:a5:80:06:67:
2d:f7:e8:1c:46:40:2c:14:00:09:4b:9c:77:a8:32:
33:37:e4:8f:52:fb:1a:2c:21:32:56:cf:05:3a:b9:
fd:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:1C:D8:38:72:52:E1:97:D8:E9:BA:6D:CF:7A:C5:77:CA:8B:02:6E
X509v3 Authority Key Identifier:
keyid:58:53:E6:5A:30:87:B4:CA:85:C8:80:2B:60:FF:0F:02:B4:10:6D:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WFPmWjCHtMqFyIArYP8PArQQbZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:b4:1e:d7:51:b1:1e:e7:c4:f0:ab:40:4e:30:07:26:7c:ad:
ee:de:f9:af:aa:ba:64:e6:03:61:c4:5e:1b:fd:02:7e:38:0e:
56:ba:99:64:b4:ff:34:ac:ba:b2:a1:46:2e:7e:24:34:cf:80:
ab:19:91:a7:22:d9:29:55:1b:6d:c7:84:24:da:02:9f:07:5c:
c1:d6:51:5f:21:69:e8:1d:b8:6d:cf:a6:f8:e9:aa:cb:ed:6d:
65:28:8c:d9:b6:72:88:21:52:06:65:cc:5b:9e:3c:71:bf:72:
ae:dc:37:8b:ae:d4:c6:aa:26:37:fa:40:81:2b:f4:00:84:ff:
b8:84:0c:46:83:de:9b:8f:de:0e:57:c6:ec:74:90:d0:9e:99:
26:1c:97:6d:e5:ad:eb:95:8d:08:f0:2e:c7:97:84:0e:ff:64:
cb:34:51:f2:8f:c6:77:5e:ab:46:fa:e9:d7:cc:09:b4:e3:33:
29:c9:26:d7:20:2b:21:f3:55:34:95:1c:b0:b8:9e:ec:60:f9:
ca:79:7e:b7:3a:74:f2:bd:66:de:93:a5:45:50:8f:c3:98:62:
af:a2:60:18:68:69:1d:0f:4a:aa:f6:99:44:b1:f8:89:78:3c:
08:d8:9f:a6:ac:e8:38:8d:2e:fc:a0:1f:62:e0:45:6c:a1:6f:
84:a7:a3:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 08:41:51 2026 by rpki-client