This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/2fa707-dad6-4f95-b5de-fc99d33d3344/1/WdWQ4swUythErvFa1fLUZ96KN_4.mft
File: WdWQ4swUythErvFa1fLUZ96KN_4.mft (raw, json)
Hash identifier: 9w+tqVlHkbEzp/tPRkDXIFJr3fUHscpHIrqbHzsA/T4=
Subject key identifier: 74:30:84:72:2E:2B:8C:FE:DA:A4:4D:B5:79:28:D8:E7:0C:34:C6:88
Authority key identifier: 59:D5:90:E2:CC:14:CA:D8:44:AE:F1:5A:D5:F2:D4:67:DE:8A:37:FE
Certificate issuer: /CN=59d590e2cc14cad844aef15ad5f2d467de8a37fe
Certificate serial: 019BF688010E7579CB87D0E6695E04E72CFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WdWQ4swUythErvFa1fLUZ96KN_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/2fa707-dad6-4f95-b5de-fc99d33d3344/1/WdWQ4swUythErvFa1fLUZ96KN_4.mft
Manifest number: 17E9
Signing time: Sun 25 Jan 2026 19:01:06 +0000
Manifest this update: Sun 25 Jan 2026 19:01:06 +0000
Manifest next update: Mon 26 Jan 2026 19:01:06 +0000
Files and hashes: 1: 1-orLpEPEs0pgT7FpYR_WYjCKwWs.roa (hash: n5Ym14rFpr095FaL9IAhfRYei5cEd9AMJCR8kIq3vSc=)
2: WdWQ4swUythErvFa1fLUZ96KN_4.crl (hash: zQgVFXSH9Az/RqKVSi13r6ftf5EPoeFTkDo/J2YlV2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/2fa707-dad6-4f95-b5de-fc99d33d3344/1/WdWQ4swUythErvFa1fLUZ96KN_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/2fa707-dad6-4f95-b5de-fc99d33d3344/1/WdWQ4swUythErvFa1fLUZ96KN_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WdWQ4swUythErvFa1fLUZ96KN_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 19:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f6:88:01:0e:75:79:cb:87:d0:e6:69:5e:04:e7:2c:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59d590e2cc14cad844aef15ad5f2d467de8a37fe
Validity
Not Before: Jan 25 19:01:06 2026 GMT
Not After : Jan 26 19:01:06 2026 GMT
Subject: CN=743084722e2b8cfedaa44db57928d8e70c34c688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b5:6a:e4:c8:7e:39:1d:28:64:ae:09:86:f9:
1b:26:be:91:c9:ed:b0:a0:d8:b2:9a:19:fe:d8:2f:
bd:cb:97:91:65:37:1e:53:cb:d9:1d:8c:ca:37:3a:
56:dc:c6:e3:33:44:92:c1:cd:9d:6c:9e:df:ad:b7:
31:fa:c1:7d:9b:1c:e1:8e:64:82:52:3d:79:51:ec:
09:ce:33:aa:a5:52:89:f6:62:19:68:82:2c:51:7a:
72:7b:16:87:91:72:3a:d5:d6:1f:8f:ba:b0:7a:45:
dc:e4:3d:8f:ea:c5:9d:70:d3:ac:b5:4b:96:a2:50:
2b:12:74:24:b2:df:58:b8:c9:4e:40:60:f4:99:4e:
fc:d9:b4:ac:dc:4c:06:76:83:7f:ab:36:c5:d7:2e:
4d:fd:4e:d3:57:1d:8b:c7:93:05:a3:34:3c:04:a8:
c3:ea:6c:96:83:d1:36:0f:d6:48:bc:44:36:14:6d:
14:0c:4b:18:a9:3a:ca:2c:4f:30:2b:32:17:78:40:
2c:69:b9:17:58:58:cb:7c:32:a8:77:01:1d:c2:b5:
84:42:7b:29:f2:8a:e4:9c:29:37:ec:83:6a:59:2b:
d3:3d:3d:57:ea:85:16:ca:df:0b:fc:c1:d0:35:a7:
a0:72:a5:cc:e4:32:06:9b:0a:f0:57:c0:5b:85:87:
c7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:30:84:72:2E:2B:8C:FE:DA:A4:4D:B5:79:28:D8:E7:0C:34:C6:88
X509v3 Authority Key Identifier:
keyid:59:D5:90:E2:CC:14:CA:D8:44:AE:F1:5A:D5:F2:D4:67:DE:8A:37:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WdWQ4swUythErvFa1fLUZ96KN_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2fa707-dad6-4f95-b5de-fc99d33d3344/1/WdWQ4swUythErvFa1fLUZ96KN_4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2fa707-dad6-4f95-b5de-fc99d33d3344/1/WdWQ4swUythErvFa1fLUZ96KN_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:7f:68:9b:5e:79:15:71:f6:1c:2c:0f:18:2f:5f:7c:28:63:
10:a6:9d:3a:e9:71:59:68:0f:c2:51:61:74:70:a6:ff:9a:b7:
6e:9d:fe:ca:82:a9:44:c3:f4:89:49:3f:41:85:72:d7:6f:8d:
e1:16:1a:19:f6:39:75:40:df:99:34:43:cd:51:54:f7:53:db:
a5:73:cd:ed:50:58:e8:e4:73:77:30:38:f8:08:8b:f4:90:0f:
fd:8d:f3:32:53:a4:64:d5:8d:5d:da:54:ac:99:75:6f:c8:dd:
db:d0:8e:0f:a0:9c:27:c1:f0:71:38:9b:90:ab:8b:fd:be:48:
95:89:05:e7:f1:ac:87:80:9e:30:93:c0:5b:56:6a:e1:ca:c6:
48:8d:02:6a:ac:53:8b:a1:ff:30:f2:9c:fe:0d:02:eb:3a:0b:
fb:2e:b3:5e:a8:da:a3:d4:58:15:f5:ce:dd:eb:04:c7:b9:f0:
bc:3b:fc:69:22:b9:57:cb:03:dc:22:59:ef:e0:be:b6:cc:35:
07:3b:1a:09:6d:5c:17:42:90:f1:56:3d:c8:89:84:36:e6:12:
c8:cb:7b:91:15:f7:7a:f5:cf:5d:28:88:3b:34:80:b9:37:9f:
b5:eb:91:72:00:cc:03:97:05:0d:72:c8:b3:0d:05:e6:59:f0:
87:db:14:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:36:44 2026 by rpki-client