This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/WsRmzIn5204xxUANKueiv_2yJUc.mft
File: WsRmzIn5204xxUANKueiv_2yJUc.mft (raw, json)
Hash identifier: JLHIBqunLUrhnZaKf/NF/pfNju1+ehanTo51OHmh5N8=
Subject key identifier: 87:58:52:AC:F6:B6:9A:F8:55:5E:41:D4:19:BE:59:D7:28:B9:42:A3
Authority key identifier: 5A:C4:66:CC:89:F9:DB:4E:31:C5:40:0D:2A:E7:A2:BF:FD:B2:25:47
Certificate issuer: /CN=5ac466cc89f9db4e31c5400d2ae7a2bffdb22547
Certificate serial: 019BF506F60EAA7FE39F0CBDEE9BECD37ECA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WsRmzIn5204xxUANKueiv_2yJUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/WsRmzIn5204xxUANKueiv_2yJUc.mft
Manifest number: 17EA
Signing time: Sun 25 Jan 2026 12:00:32 +0000
Manifest this update: Sun 25 Jan 2026 12:00:32 +0000
Manifest next update: Mon 26 Jan 2026 12:00:32 +0000
Files and hashes: 1: F8BqFfZoIsv5x2t_rO_S_NuJemg.roa (hash: PB4J+IoKo4T7Q6QAGzoR44UFBrvbvOiTrydpAGnj8mc=)
2: GLHvXz2R1lOAHX7TzyDNoCB2iBY.roa (hash: OBjA+NNWsAq34/o+6Q0m7vwkANLJOuwcO5B1z9txcvU=)
3: Mhx6o1fkBIaHppe4Wr-KMaDvEQQ.roa (hash: QSZtykOf++sIkuecLt/sSggguVhjdeR5YjW9l7cEQV8=)
4: OiPpCjAu5jHi_GLkLs3C7MkVLWI.roa (hash: HQ35g8yBDULlIp8ua3XKzN1vR0rEMHW47KubxInNm2g=)
5: QYAIVSd2tgwed65DPiU0ds85aB0.roa (hash: g9cZELqfkNNkZkS/ZARd962rG7NHC+bpHrVh18iN6TI=)
6: WsRmzIn5204xxUANKueiv_2yJUc.crl (hash: WKQsYsKcFxuKB5xelKOHJL2VMhFze+pynZg7coGR594=)
7: jtMzBFE51Hs7CGAjXcUUEIsH5mQ.roa (hash: fp8xX6qHENJp/r7Mh6H1TsYEX2pKIdlfsNezIS3fbdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/WsRmzIn5204xxUANKueiv_2yJUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/WsRmzIn5204xxUANKueiv_2yJUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/WsRmzIn5204xxUANKueiv_2yJUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f5:06:f6:0e:aa:7f:e3:9f:0c:bd:ee:9b:ec:d3:7e:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ac466cc89f9db4e31c5400d2ae7a2bffdb22547
Validity
Not Before: Jan 25 12:00:32 2026 GMT
Not After : Jan 26 12:00:32 2026 GMT
Subject: CN=875852acf6b69af8555e41d419be59d728b942a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e1:cd:e1:67:30:4b:28:75:f5:44:5d:c1:e7:
84:09:fa:f8:e3:1e:55:37:6c:ed:81:df:c5:ea:b5:
d0:51:84:8f:cc:ec:1c:07:81:16:c1:b4:a9:55:33:
24:39:55:77:bb:bb:2d:d6:83:2e:a0:6b:5c:a6:20:
e4:7e:54:be:d1:11:09:4c:3e:29:ca:69:fc:d4:ed:
a2:7a:ed:8d:7c:b7:aa:3a:c6:d9:f3:15:7c:28:76:
57:76:18:3d:ec:e3:05:ef:4a:8b:3f:11:ec:ff:4f:
8a:af:80:de:6c:8d:09:86:e1:52:0d:c5:76:4c:b5:
6d:d7:4a:e1:66:af:54:60:2f:bd:1d:17:27:ee:46:
80:ef:5f:4e:17:2e:c3:a6:f8:6a:d4:9f:4d:d0:0d:
09:ee:93:4c:69:7f:6e:4a:38:05:37:9d:51:6d:a1:
7e:c0:d0:3b:8a:b2:98:e0:37:86:55:75:b2:d5:35:
14:16:9b:4c:31:f8:c9:2b:c3:c9:55:7c:cf:ed:4b:
7b:8f:23:14:38:c1:b9:dd:e1:0a:5f:da:92:35:4f:
18:7b:8e:90:7f:3a:d3:04:35:1d:d3:40:2b:fb:87:
57:b6:19:d1:3d:6c:49:b6:ef:d3:ca:f4:af:df:a7:
7d:ae:d3:b4:2b:b9:63:b4:fc:d7:64:12:0f:93:f0:
c4:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:58:52:AC:F6:B6:9A:F8:55:5E:41:D4:19:BE:59:D7:28:B9:42:A3
X509v3 Authority Key Identifier:
keyid:5A:C4:66:CC:89:F9:DB:4E:31:C5:40:0D:2A:E7:A2:BF:FD:B2:25:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WsRmzIn5204xxUANKueiv_2yJUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/WsRmzIn5204xxUANKueiv_2yJUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/WsRmzIn5204xxUANKueiv_2yJUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:20:03:b4:d3:f1:3c:bd:a2:7f:24:7a:14:1e:16:c0:5c:aa:
8e:d5:36:68:0e:31:d1:b1:fe:ec:29:ab:11:96:8b:8a:74:8e:
a1:27:36:14:70:69:34:2e:16:71:07:ac:5f:28:f0:45:33:73:
de:8e:90:1b:a5:76:1d:c4:a3:ed:b2:dc:b8:69:ae:5e:69:f7:
d0:05:3d:5a:78:dd:87:ca:7a:14:6c:3f:ea:fa:a1:97:b2:ad:
ee:23:f3:d2:41:38:ab:0a:e3:b0:bd:53:ab:38:77:0d:e1:82:
c5:4d:75:b0:64:59:41:70:46:bd:2c:a4:85:7b:5b:6b:33:e5:
0a:fa:62:30:e4:a9:0a:93:aa:2c:bd:43:75:a9:e3:fb:45:ba:
b0:ab:df:f4:16:0b:94:55:dc:38:eb:2d:6f:af:90:57:ab:6c:
cf:9b:2c:ec:16:6f:26:d6:2e:b1:48:90:75:50:69:bc:00:fc:
92:4d:66:b5:3a:23:36:bc:54:60:51:8b:6c:80:ca:88:fe:75:
63:34:ff:92:ee:9a:22:c4:7c:ae:75:f9:85:46:9d:fd:0f:8a:
5a:8e:24:d7:01:bc:24:21:e9:39:4e:ee:27:4f:ee:39:35:20:
cd:b1:23:ca:1c:c4:53:6c:cf:7b:b0:90:3b:23:50:48:cc:4a:
79:ab:b7:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:45:19 2026 by rpki-client