This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.mft
File: wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.mft (raw, json)
Hash identifier: +IEaXbRU8g8wegBpHhkMQOJY+fbuK9WYdF1LHDuwJXs=
Subject key identifier: 78:96:B3:8E:EF:15:87:63:62:D3:78:D1:66:BC:7E:B8:8F:C3:93:C7
Authority key identifier: C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
Certificate issuer: /CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Certificate serial: 019BF4997050DB4319E217E39D1D69DD300B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.mft
Manifest number: 0A00
Signing time: Sun 25 Jan 2026 10:00:54 +0000
Manifest this update: Sun 25 Jan 2026 10:00:54 +0000
Manifest next update: Mon 26 Jan 2026 10:00:54 +0000
Files and hashes: 1: 1abhrlOuSKnZ708WnL5sdHK1Ie0.roa (hash: /NbpRcPbPMObQ6oF2HglXE8t2NqbPyxSqMDeYEigMy8=)
2: 2ersDEYbQtg4l5m9V8r0SieR8Vo.roa (hash: aUuOBsE01fiLcyj9TfP/Qu1NPe+7XiHnxfWsVnOH0VI=)
3: 3FZlUz7uoucCzaZmPG0U58fB6SA.roa (hash: LGcv5ZIogTyxDleJRKQb2SPMT566dCH0f2NqyWLWYyA=)
4: 3UAZ9rdQ7CQL1hhCNvVOCg9iO4o.roa (hash: 63VmVtm/xbRBRuJte8hk1vPrq7aNoUtneWqvYwJNXks=)
5: 4RzlaE4IATIyocr-VUzpEUSO7Mo.roa (hash: zDqUG2mBRxI6CuLzFrAEFvPmBc+dGZskWKeVJphaxsI=)
6: 4ae5_6Oq1qgP_qVzyJIPMEZlDls.roa (hash: Pz3KHgE7nt62CyJZQAWq1/cmKNewix+faz+oFpRFRns=)
7: H0pm5nRm7rZf-XNfTL4WUT-TmS0.roa (hash: iUjioUBVoEzH96c/q4TBCiakeu8zjGr+CpQ/f6uz5RE=)
8: OgghXDjyjDqnxRl611PNnUIg8gc.roa (hash: nx8X3I9R1T0jK3t8FirNFx0YohQgACVLB9CPv39jV04=)
9: Ov3GDifgE-i6cGCKg9qwgB5MUqE.roa (hash: 89f0cgjBZ2lHNAyH+JzH9w9hR0/NzmZ9fcdY/7jNHRo=)
10: Sk9ag2YHmKJcp4CwUZ7utaM8xmA.roa (hash: qh4mq4MdyV9B/rSa6KdwSUIcjfbHQUKuH4MZ7aEP/nU=)
11: UwVIBu2jxBDiFJTytgK8RUzy-Cs.roa (hash: ltWrsmWOaH+qQhwZyDVBUFqGoWpky9At3HwYToazYgw=)
12: YPUBKOKTPiEmiP59Xe8MEIRR4Pw.roa (hash: PWQfhcGH7jngcQ70GlQ11H+FIx0EvbMhWzfDH/DhN10=)
13: aYMmtg2F_--bVu8hSyKAFciGf7U.roa (hash: CxDcGIhoZfPolf9XmBJFl0rGdo9uyrgJav1ZUiVhwxo=)
14: cIV9JudTZTeo9lnx0IX_Ab60GOI.roa (hash: GAzyxWMmilZxJ4YPCp2wTRguWAAeRpdhD/FOnsIN73s=)
15: hvdGPqGZACKBGf93rntej67lv54.roa (hash: Zz0VuDlVsJON1ndmUKaTXSvLDIjjSSZLp4ke0HjSjws=)
16: iFIpSvQSW1RGvQvGhAG9Or8gNdQ.roa (hash: AKoFVd13S9dMKwOd2Np277Q02eWKDsmmGTyxPX7hYBA=)
17: lHY7We2BrbFc-eXXkRgJlJbdX3A.roa (hash: zHm1Mi17ZuiEgkgBNzNI9u7E4SsR3QzuY1xCaT9FLZo=)
18: oxu0GmrQ5_piXLI7Mf7_jeVm9eU.roa (hash: GJ6aUk4H8magSU3n7bIt4f5oeneg+QR+DzjJ9j+ifeE=)
19: rkni80Or2w2QygXy0RTlNsvlL8E.roa (hash: gMQ3ViXeTKyCOOddnGlJIocGpXYE80FbVoVgkMfQtjU=)
20: tw-WBHaNJZuGE7q9LknpcfdIUzA.roa (hash: 4zJGXt4udsl6SmucJzDYHgeK3Njjb1y+erXlqa1Ud6M=)
21: vIWIV4oXAuGiXUkF2YHYJ3cotXI.roa (hash: Ru1bWNukTkXSCygvXpMUB0wX3ITs/41hlno7KHqordo=)
22: vt0ElRQTTQDbtawurQTq5naKklI.roa (hash: sTZaSlh1WeFZN4xDhr5tgce7SkNVNhyZN7/S1+Uq2OY=)
23: wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl (hash: i05xL8TbfQ8r+kkWixQPU/dm0jZz6wxZCxXBfJQ7pkU=)
24: xWBdF-suhv_AQ_y3QjjvHjJhVNY.roa (hash: 8ersIxCy3Vp1+jKmiBqzidC6ha48xZVgqBacD5foNJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f4:99:70:50:db:43:19:e2:17:e3:9d:1d:69:dd:30:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Validity
Not Before: Jan 25 10:00:54 2026 GMT
Not After : Jan 26 10:00:54 2026 GMT
Subject: CN=7896b38eef15876362d378d166bc7eb88fc393c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:49:70:6e:71:06:8b:71:2a:36:97:68:7d:b6:
1c:29:00:ec:f8:a2:01:61:47:21:9e:5b:91:e5:fc:
68:d6:7e:ee:b0:03:49:26:9b:b6:31:8b:c6:63:52:
21:86:90:03:80:f8:db:b5:50:2d:46:e3:50:da:7e:
0b:01:2d:7d:3d:dd:c1:ed:93:42:b6:40:7a:8d:b3:
2e:aa:02:d7:fb:71:cc:2b:70:9b:bf:c4:fc:6f:4d:
61:87:65:a5:1d:75:e4:e6:b7:0d:e5:1b:2b:78:71:
fc:35:d2:1a:1b:fc:e5:1f:b4:b5:72:47:27:03:5a:
21:82:94:9e:0b:01:ff:b3:a3:3c:93:cc:58:a2:41:
9f:aa:c6:1f:5d:37:e1:97:88:16:56:e5:87:fc:67:
85:c8:5b:29:e5:37:13:1d:55:75:15:f5:a4:88:d6:
bc:73:ed:ca:d2:43:bc:ed:f4:84:9a:8a:d0:a0:70:
9d:6e:04:c1:45:ee:8d:58:97:5f:85:35:b5:e3:de:
06:0e:40:13:3c:64:93:a7:83:53:9a:fc:f4:38:73:
fa:3b:cd:24:f8:4d:29:48:0e:61:92:50:a3:c1:44:
6b:f1:46:71:de:ce:bf:68:d9:17:60:51:37:73:55:
b5:e0:fc:39:2f:07:a4:45:e8:0b:20:00:73:73:22:
d1:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:96:B3:8E:EF:15:87:63:62:D3:78:D1:66:BC:7E:B8:8F:C3:93:C7
X509v3 Authority Key Identifier:
keyid:C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:48:7c:ea:c7:11:93:c9:18:06:53:bd:be:03:cc:2d:c0:e3:
b4:ff:25:e4:89:d3:d8:e2:60:31:e1:a5:41:a8:39:4e:f6:3d:
4b:20:0f:5d:05:1e:97:01:1d:9b:1b:15:c9:71:2b:dd:2f:16:
c2:73:33:f3:39:7e:c1:e4:d8:b4:ea:b5:8b:9b:38:8a:f8:34:
0f:db:72:e5:2e:be:8d:39:3a:f2:37:03:da:72:44:e9:96:b1:
4d:fe:ed:fd:5c:35:1f:08:fd:03:39:a6:52:b6:de:78:8f:e7:
19:34:aa:8e:53:7f:1b:84:3c:62:eb:c5:44:65:6b:e7:ee:34:
85:6b:d1:d6:11:82:e5:98:d1:b8:fa:60:17:aa:62:c5:72:65:
fb:03:05:87:59:f5:5c:98:f1:f1:c3:b1:01:c6:c1:78:74:bd:
c4:48:f0:4c:8f:fb:d2:30:1e:57:7f:03:87:d4:e5:cd:84:03:
43:ae:34:23:1f:ec:6f:89:7c:94:70:80:84:0b:1c:75:6d:43:
13:85:85:37:ad:08:f2:c6:14:5a:8b:24:10:cc:64:17:c9:c9:
7a:d4:4b:18:a3:71:70:e5:7f:e9:a2:9b:fc:9b:c9:1d:5b:c9:
bb:6f:5e:d2:14:29:a9:60:dc:52:ab:8a:9e:77:69:7d:84:df:
b6:24:d2:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:45:00 2026 by rpki-client