This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.mft
File: waTRQtQQqrCQURLErleQdsDm3IE.mft (raw, json)
Hash identifier: CIhSxokG6Exntp72rm1J4JMq/dB04L68hv7ddA+zxNQ=
Subject key identifier: C9:92:FE:DD:B6:22:64:6F:EA:7D:D9:4D:15:86:EA:D0:6E:27:2D:FA
Authority key identifier: C1:A4:D1:42:D4:10:AA:B0:90:51:12:C4:AE:57:90:76:C0:E6:DC:81
Certificate issuer: /CN=c1a4d142d410aab0905112c4ae579076c0e6dc81
Certificate serial: 019BF951DE29472295B99C5C365395E1B617
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/waTRQtQQqrCQURLErleQdsDm3IE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.mft
Manifest number: 02ED
Signing time: Mon 26 Jan 2026 08:00:50 +0000
Manifest this update: Mon 26 Jan 2026 08:00:50 +0000
Manifest next update: Tue 27 Jan 2026 08:00:50 +0000
Files and hashes: 1: 5Y6TfMJt3WV-rSYPCVPuolmkiEU.roa (hash: aA1cheHSXU3ZXRWSB1cMe0LjsBi3PbxACt6z6wY0hOo=)
2: MQFENrSJ1O4w3uEj0bWNmnIJkM0.roa (hash: UuO+blZ8L5SvAquXtKTJbCjgf78czS4jixgCuN8yZR0=)
3: waTRQtQQqrCQURLErleQdsDm3IE.crl (hash: frVKG4i8vKZSQNcnKut/DAK/SlhRJxIVTMunmpLWWeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.mft
rsync://rpki.ripe.net/repository/DEFAULT/waTRQtQQqrCQURLErleQdsDm3IE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 08:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f9:51:de:29:47:22:95:b9:9c:5c:36:53:95:e1:b6:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1a4d142d410aab0905112c4ae579076c0e6dc81
Validity
Not Before: Jan 26 08:00:50 2026 GMT
Not After : Jan 27 08:00:50 2026 GMT
Subject: CN=c992feddb622646fea7dd94d1586ead06e272dfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:21:4d:35:e2:7f:af:57:60:ec:2e:c3:ee:33:
4e:79:14:ec:55:e5:77:b3:5d:bb:2d:ae:e5:16:44:
36:4f:0e:81:09:00:b3:5e:3f:b0:06:ae:ed:58:a7:
61:24:d4:b5:08:1d:49:3f:0f:bd:78:ff:36:9a:bf:
17:dd:b7:5e:40:8a:40:8c:72:0a:c8:24:59:e5:7f:
43:20:b9:98:2c:d6:a0:9d:bd:9a:92:99:07:41:5f:
b3:25:ae:af:35:85:37:4c:6c:58:28:be:3c:3f:9d:
0e:39:53:96:aa:65:0c:a0:15:8b:4a:09:d2:55:e6:
a2:ad:7e:18:e9:fa:ec:00:7b:26:7c:16:90:f8:92:
11:5a:a2:a5:ba:fc:9d:8d:6c:9a:7c:67:47:3b:7b:
58:41:a9:d9:a5:fa:59:2a:a7:01:95:87:16:bc:90:
a9:64:59:9f:a2:c1:f3:0a:86:bb:79:b3:d6:f0:f7:
77:7a:ef:1d:8c:59:0a:7d:e0:f2:e2:ad:b3:5e:d1:
e3:86:2c:92:0a:3d:70:de:5b:b8:df:68:9a:ab:80:
70:1c:1d:1e:f6:3c:d9:37:f6:10:80:bb:4e:b2:5d:
b0:d6:df:81:23:45:73:cf:93:26:15:d7:7b:72:90:
2a:cb:e1:b8:e3:65:5d:0f:f8:68:ff:e3:1a:a8:06:
9b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:92:FE:DD:B6:22:64:6F:EA:7D:D9:4D:15:86:EA:D0:6E:27:2D:FA
X509v3 Authority Key Identifier:
keyid:C1:A4:D1:42:D4:10:AA:B0:90:51:12:C4:AE:57:90:76:C0:E6:DC:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/waTRQtQQqrCQURLErleQdsDm3IE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:4a:61:1f:a1:b2:78:35:c3:c1:91:3d:a8:91:7a:4c:c8:f1:
9f:00:fd:70:d5:2c:45:1a:0f:c2:6e:63:77:6c:30:80:3f:99:
52:17:c4:63:a2:c2:cf:3e:4c:d2:ee:84:a7:66:a1:a9:f3:27:
af:0a:fe:7e:9d:49:44:88:b3:00:4a:69:04:ee:d0:bc:89:04:
94:c1:a7:d4:69:6e:26:ab:d5:f5:20:0b:ca:5c:56:45:69:c4:
66:04:8f:42:62:9a:fe:c1:59:77:79:fc:cf:e6:a1:68:cd:01:
69:f4:8c:9d:66:41:23:70:7c:94:af:c6:ff:ec:c8:6b:a3:98:
e4:9c:9b:14:c8:4e:64:12:b4:12:75:b1:87:df:cf:85:c8:fc:
42:58:eb:6c:84:b0:44:41:52:66:7c:06:d4:2d:5a:10:b9:8d:
11:37:7c:e7:a3:37:b7:57:e4:a9:b2:a1:b2:f2:04:49:5e:55:
a8:c0:63:e6:8c:67:41:51:a9:fb:3c:e5:ad:d2:c1:97:5e:2a:
77:76:46:ad:09:e0:6f:32:17:eb:99:db:93:ed:7a:1f:9b:fa:
7a:86:b7:dd:aa:0f:1c:1c:eb:06:8d:1c:9b:7e:13:ea:c4:a1:
db:9f:c1:59:1d:bf:96:cc:ad:85:91:78:40:47:94:d7:b0:8d:
59:ca:8f:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 13:35:31 2026 by rpki-client