This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.mft
File: WpObDO0411zGPtUNblznK7tbSxA.mft (raw, json)
Hash identifier: CrZHTmKGHFBw9x3mIpbPoZLYyTJ+YowCLYuUE6t5dEM=
Subject key identifier: BB:2A:14:C2:C5:3E:3C:B8:AF:DB:2D:39:E0:B0:D3:17:6B:AC:98:3E
Authority key identifier: 5A:93:9B:0C:ED:38:D7:5C:C6:3E:D5:0D:6E:5C:E7:2B:BB:5B:4B:10
Certificate issuer: /CN=5a939b0ced38d75cc63ed50d6e5ce72bbb5b4b10
Certificate serial: 019BF53EF9E3C73B0B2FB9220FD7650F49F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.mft
Manifest number: 13EF
Signing time: Sun 25 Jan 2026 13:01:43 +0000
Manifest this update: Sun 25 Jan 2026 13:01:43 +0000
Manifest next update: Mon 26 Jan 2026 13:01:43 +0000
Files and hashes: 1: 1-p3GaZwRO9jfKawDJzz47GPuQSc.roa (hash: YWz9caLfMP3MMMBH9IlzmyFwN7OLPKk+weX6Mx+6mkQ=)
2: 6iTvmc7lV2G7YIaiQMU-s4NK7GE.roa (hash: v/QGU12lL7jXnFdRXhuFEp2CT8RQFfRo1Ne+cIb2yis=)
3: 7Hdw2u3hiJ4vIGdAEemq-AuHjoQ.roa (hash: tdF9cvYcrSflZW0VHOueUUHd70D7YSrYI0MRat9d7ZQ=)
4: LadPVgBxnNqFC9976JvE11j-gNg.roa (hash: yFgPWknHVTOnyec0qjzk/ZkvvdjvamZAOLBRpm7y7A0=)
5: NtzsNYpCi4I-ALT3pdij0HNI5X4.roa (hash: sZM09RI1aUqFM8NR4Fi35S4yM5mstrmczWkiB8o3R6c=)
6: ROfnr-yW-JBi8THaR14ceYEf5UU.roa (hash: OKDpfOdHzWNWGSjSI9fchvAxY4jaCD6LSkpW8oCJUZ4=)
7: WpObDO0411zGPtUNblznK7tbSxA.crl (hash: qXyP2VHjvgKwhkuYQKz3zUHuZ8pDwWdihV/o2JGtigU=)
8: hgWgZNc93uMr4yIUUsOmk6c3_6c.roa (hash: HYxllMj2uGmGcr+jWdxWHj+UutuKRJTs4dBAArVNUp0=)
9: kX6HBv8bKss7E55RJ8Xb_Z-T8vM.roa (hash: VAHe2vNiQZyVVFn+EahLrIyER1ZRuiA94NXfpN51Ums=)
10: s7qOGCNt1YlavyCtrINDfG5Iclo.roa (hash: dkfi/hWY26Eq50poHDL/01Ci/Ijw2YceFre97ktTfrE=)
11: ykX411maDM_hoQQSeoWB0H-jloc.roa (hash: PqUBGKaIrQdj/K09XPKqO3Gzxr9j5HkAFLnQMItff0c=)
12: zBuGPx4Oa1EfV-XsCGY-bD9zp_c.roa (hash: azMbt2aXDQ87R+GfFTp0MD3Qjfmbg3Ev6eygwzq9yrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f5:3e:f9:e3:c7:3b:0b:2f:b9:22:0f:d7:65:0f:49:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a939b0ced38d75cc63ed50d6e5ce72bbb5b4b10
Validity
Not Before: Jan 25 13:01:43 2026 GMT
Not After : Jan 26 13:01:43 2026 GMT
Subject: CN=bb2a14c2c53e3cb8afdb2d39e0b0d3176bac983e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:1e:78:ba:b0:88:1b:32:db:9b:3b:cd:3e:4e:
3e:28:a6:e6:f7:f3:ce:fd:28:ef:9a:1b:27:eb:8c:
e9:7c:a2:ac:24:b3:71:6e:c7:00:f8:54:eb:8d:07:
fd:8f:18:33:c5:c3:4f:77:05:65:03:1b:35:9d:4d:
c2:d6:cc:69:62:98:c8:0a:3f:d5:82:ca:f6:68:d2:
df:26:b3:0b:a0:34:6b:fa:7d:23:82:8f:48:48:bc:
d8:a5:fc:d1:ac:ee:f9:3a:73:cd:58:a3:a7:33:dd:
2f:b5:38:54:d8:5b:26:0d:45:5b:af:1c:b2:0d:d9:
45:fd:15:2b:87:6e:fe:6c:7e:9b:13:8f:7e:b3:2c:
d3:0d:ab:7b:85:33:2a:be:91:93:2d:83:ad:7e:4d:
3c:d1:7d:a1:e9:14:75:15:a8:8c:a7:72:6c:1d:59:
3d:b7:2b:d7:1c:cb:dd:8c:6a:c6:93:2e:89:24:18:
1e:da:47:18:64:f2:9c:db:cb:1c:d3:6a:73:27:da:
90:9a:4d:a0:47:91:c9:f7:ca:a7:db:29:12:79:50:
a5:f3:8d:2a:62:6a:11:98:22:da:fb:d3:64:d6:18:
e9:14:ba:13:f1:0f:19:21:86:f8:21:e7:85:0c:bb:
2f:20:99:c5:29:c7:2a:95:3e:35:2a:a1:17:12:e6:
32:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:2A:14:C2:C5:3E:3C:B8:AF:DB:2D:39:E0:B0:D3:17:6B:AC:98:3E
X509v3 Authority Key Identifier:
keyid:5A:93:9B:0C:ED:38:D7:5C:C6:3E:D5:0D:6E:5C:E7:2B:BB:5B:4B:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:32:8a:1a:c5:1e:c2:33:bd:d6:f1:9f:d5:7b:78:89:57:bd:
c3:b5:c8:df:69:41:cb:5e:c5:f4:65:02:cc:f0:23:b7:77:da:
1d:80:3b:71:6b:04:c5:6d:91:1c:83:3a:51:28:45:17:11:66:
38:89:c4:ee:77:f7:59:65:cf:86:23:57:76:1a:f3:57:d5:b5:
06:4c:fb:6a:68:0a:7c:f9:36:30:79:c8:bb:ff:1e:14:0f:bc:
13:26:1c:a2:71:a4:3a:4d:1d:3a:51:af:ed:7e:e9:d4:e7:02:
93:d2:eb:a1:f5:2e:db:eb:8b:69:ae:56:bd:c1:6d:43:3b:54:
e2:5d:87:db:20:1e:b0:22:47:5f:5a:35:79:66:95:54:90:34:
bf:7f:c5:30:56:64:5f:33:8c:55:f5:8d:1f:26:b1:92:f8:0b:
b4:ec:17:2f:20:a9:59:c0:28:df:9d:33:86:4a:b9:c2:61:71:
10:27:5f:5e:13:f3:b9:6a:e5:c3:5a:b1:a0:10:58:df:c2:3a:
64:25:5b:95:4a:b7:dd:34:46:ce:1e:4d:d1:ab:26:e0:db:5d:
4f:1b:01:f4:2f:19:ca:d2:24:a0:14:fb:9c:c0:a7:dd:3e:b5:
df:ad:60:59:b6:9e:42:ea:fb:88:ff:c5:bb:18:ce:7c:7d:80:
7e:26:49:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:01:09 2026 by rpki-client