This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/81dc62-b3cc-4f99-aa42-c10f782fb07f/1/WH2LDnVGNRF2zAxuUe1FIKvgTvE.mft
File: WH2LDnVGNRF2zAxuUe1FIKvgTvE.mft (raw, json)
Hash identifier: OG4RM76VgWNp9/yCP9KhAdldX9asem34fhxfugKr3yk=
Subject key identifier: 9D:5F:A5:4B:8A:09:E3:21:A1:D6:AC:11:52:94:72:B2:E3:BF:93:96
Authority key identifier: 58:7D:8B:0E:75:46:35:11:76:CC:0C:6E:51:ED:45:20:AB:E0:4E:F1
Certificate issuer: /CN=587d8b0e7546351176cc0c6e51ed4520abe04ef1
Certificate serial: 019BF3508B871C9280AA457D4172022C9534
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WH2LDnVGNRF2zAxuUe1FIKvgTvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/81dc62-b3cc-4f99-aa42-c10f782fb07f/1/WH2LDnVGNRF2zAxuUe1FIKvgTvE.mft
Manifest number: 097E
Signing time: Sun 25 Jan 2026 04:01:40 +0000
Manifest this update: Sun 25 Jan 2026 04:01:40 +0000
Manifest next update: Mon 26 Jan 2026 04:01:40 +0000
Files and hashes: 1: 6cN6nhFqlJSDVgIjOl3TycQtV6k.roa (hash: sgH5lKfufrchfpVAD0K9/jz6mZi6QmMqB/TNXEsdDxk=)
2: WH2LDnVGNRF2zAxuUe1FIKvgTvE.crl (hash: kdqwfB5d32FtueTej85MEYXJDLNpPoWnIGQw1LxXrbw=)
3: axq7mHJm2Hnm-H9JADqzbawUKIA.roa (hash: pXMV2sY+byn88wNA/ocyULAR0qZzmlc5Pn6ZSaCAZWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/81dc62-b3cc-4f99-aa42-c10f782fb07f/1/WH2LDnVGNRF2zAxuUe1FIKvgTvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/81dc62-b3cc-4f99-aa42-c10f782fb07f/1/WH2LDnVGNRF2zAxuUe1FIKvgTvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/WH2LDnVGNRF2zAxuUe1FIKvgTvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 04:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f3:50:8b:87:1c:92:80:aa:45:7d:41:72:02:2c:95:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=587d8b0e7546351176cc0c6e51ed4520abe04ef1
Validity
Not Before: Jan 25 04:01:40 2026 GMT
Not After : Jan 26 04:01:40 2026 GMT
Subject: CN=9d5fa54b8a09e321a1d6ac11529472b2e3bf9396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:2f:f3:6d:b2:6d:84:a3:13:f2:dd:55:a1:39:
81:f5:1d:dc:a9:38:ab:dd:3c:99:49:f3:5c:55:21:
cd:4e:94:af:d7:bf:8c:3e:37:26:bf:85:0f:86:c7:
ea:51:ae:03:1f:f6:cc:9d:ee:9c:60:64:aa:66:7c:
18:de:bd:dc:c1:0e:3c:52:3f:f9:b5:c9:54:9c:76:
76:4e:93:fe:9b:e6:a1:20:0b:f0:8a:34:58:b4:d6:
36:4d:41:8b:b5:00:58:3f:be:3a:e7:77:b7:b8:d5:
c8:eb:2c:fc:ff:ef:1a:70:1d:71:fd:7d:18:40:fa:
83:c4:33:fa:ea:cd:0d:43:18:b2:cc:4a:9b:4c:de:
44:53:78:2e:f6:ae:b2:01:80:14:38:78:2a:12:ec:
64:b5:13:f7:95:6d:ff:9d:cf:83:79:d0:a1:12:43:
2c:53:8d:a8:42:5c:13:13:a9:6b:ce:52:9a:ac:49:
95:49:bf:48:9b:20:e0:d9:ff:22:f5:0b:1f:f6:73:
fe:8a:3a:2c:d2:eb:f9:ec:65:b0:f6:e6:cb:f9:26:
74:b5:88:89:d5:69:35:ca:4b:69:f2:65:91:09:0d:
1e:03:5b:67:29:79:df:cd:a3:0b:bc:91:a7:9a:8d:
4a:a3:01:82:e4:23:5f:b0:f3:af:dc:34:47:f4:fb:
e7:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:5F:A5:4B:8A:09:E3:21:A1:D6:AC:11:52:94:72:B2:E3:BF:93:96
X509v3 Authority Key Identifier:
keyid:58:7D:8B:0E:75:46:35:11:76:CC:0C:6E:51:ED:45:20:AB:E0:4E:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WH2LDnVGNRF2zAxuUe1FIKvgTvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/81dc62-b3cc-4f99-aa42-c10f782fb07f/1/WH2LDnVGNRF2zAxuUe1FIKvgTvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/81dc62-b3cc-4f99-aa42-c10f782fb07f/1/WH2LDnVGNRF2zAxuUe1FIKvgTvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:fe:40:56:87:66:02:71:ac:9a:98:dd:87:86:2c:59:87:2a:
54:c0:cf:e7:0b:c7:c3:46:32:07:78:b2:eb:20:f7:21:e0:a9:
a8:47:d3:b6:75:77:f3:50:37:37:8b:90:8b:7b:ae:d1:33:62:
b1:78:8e:06:49:76:d2:d3:00:59:49:4b:2d:94:b5:63:dc:d9:
83:dc:dc:5c:4e:d0:29:a8:47:a6:ca:8e:f5:3b:40:da:1b:8b:
67:6b:76:5f:34:65:68:07:a8:9b:a2:b9:4c:c8:9f:48:65:1b:
1e:c8:2b:1d:be:30:0e:17:a6:c5:1f:6a:1f:f6:6f:47:4a:6b:
86:0e:00:e2:65:bb:3d:e5:f9:af:77:5a:38:8c:bd:dc:44:b3:
8b:45:b9:f1:f2:97:c1:83:8f:8d:69:f6:41:ea:6f:e4:35:0b:
f7:ea:56:1b:75:5a:d4:33:12:9d:c3:38:bb:f0:1d:7d:d6:84:
88:0f:e8:dc:11:8d:0b:0d:c5:02:a1:94:a5:ba:bb:42:df:14:
ee:e2:38:68:b0:2d:ae:9c:9c:59:4c:b2:df:a5:b4:28:a9:4d:
b7:e9:21:29:59:c7:94:31:12:46:1e:de:c6:7e:3e:63:90:64:
0d:a3:0b:7b:22:e7:7c:f1:ed:f8:c5:77:a2:1c:25:63:50:e9:
6e:1f:ab:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:46:43 2026 by rpki-client