This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/WM1WOirmUpyfQ_5LXGfbcOd5oJs.mft
File: WM1WOirmUpyfQ_5LXGfbcOd5oJs.mft (raw, json)
Hash identifier: EUjcMeEGXOB25BrSihf65Jrj/QVYaLbV0Obc+kSQzBQ=
Subject key identifier: 98:05:A7:CB:98:73:D9:44:39:F3:61:04:5B:6E:AE:EE:F0:A1:1F:32
Authority key identifier: 58:CD:56:3A:2A:E6:52:9C:9F:43:FE:4B:5C:67:DB:70:E7:79:A0:9B
Certificate issuer: /CN=58cd563a2ae6529c9f43fe4b5c67db70e779a09b
Certificate serial: 019BF31961C51516B19B3185826C4E8DAC00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WM1WOirmUpyfQ_5LXGfbcOd5oJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/WM1WOirmUpyfQ_5LXGfbcOd5oJs.mft
Manifest number: 0340
Signing time: Sun 25 Jan 2026 03:01:25 +0000
Manifest this update: Sun 25 Jan 2026 03:01:25 +0000
Manifest next update: Mon 26 Jan 2026 03:01:25 +0000
Files and hashes: 1: 3LKBFi7qK9-mH9zvi-Ys8DrPyCc.roa (hash: 3n/tlWwRztOB/Yu2+sFP0seUelZYfaMtfMJ5VRgA2p0=)
2: 3lscwPyVq0HwpYOhe1qOH376GbY.roa (hash: ABURxSq0W7iaabEt0YGRwE5xtvDmIVi3eCKYaDM6tzo=)
3: AnOV32OnLS7vzP0Ic_vNsSbH3VU.roa (hash: 2+tbTXLyonVPPU5Qc4ONeo44MFYnrVJPmBUJMwxiq4M=)
4: WM1WOirmUpyfQ_5LXGfbcOd5oJs.crl (hash: w07/oUXtbLqqusGqmz+vFNaf25bTjor2nBxXjXZ39qs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/WM1WOirmUpyfQ_5LXGfbcOd5oJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/WM1WOirmUpyfQ_5LXGfbcOd5oJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/WM1WOirmUpyfQ_5LXGfbcOd5oJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f3:19:61:c5:15:16:b1:9b:31:85:82:6c:4e:8d:ac:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58cd563a2ae6529c9f43fe4b5c67db70e779a09b
Validity
Not Before: Jan 25 03:01:25 2026 GMT
Not After : Jan 26 03:01:25 2026 GMT
Subject: CN=9805a7cb9873d94439f361045b6eaeeef0a11f32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b3:95:11:ab:77:d8:6d:8f:cb:ac:cb:ca:dc:
5d:5a:45:32:34:ab:29:df:84:d1:4d:1e:a9:de:e3:
ed:2e:c6:f7:a8:a2:2f:0c:34:86:7e:7e:b4:63:34:
08:e0:da:33:71:94:f9:d4:06:be:5f:92:27:b5:7c:
8f:45:82:af:23:d4:fc:10:ec:5f:6f:cf:cf:d3:af:
a9:90:24:38:57:29:33:39:cd:ff:07:4c:35:86:87:
30:61:43:db:7b:f1:95:72:d1:17:38:d2:be:72:59:
9d:6c:12:a2:89:e6:e0:6e:17:e0:da:a8:8c:b8:14:
f6:46:8b:30:ab:48:53:6d:a6:8b:b0:c9:1a:c7:5a:
cd:48:8e:20:19:32:14:74:ca:21:95:5b:d1:da:6a:
9f:ce:de:29:a0:34:89:02:e1:5c:3f:81:67:08:be:
c9:c4:53:22:69:a8:f6:f1:56:72:67:9f:95:2d:c3:
3d:65:16:3d:5f:dd:73:d8:7b:29:b3:4e:65:68:c2:
e3:ee:ff:18:77:1b:bb:f2:ca:06:45:b6:9b:d5:f1:
c9:b8:32:3e:4e:d9:42:da:2b:b5:c9:77:2f:8d:25:
dd:2a:da:9f:ee:e6:c6:b6:ea:c0:19:f7:f4:be:47:
0c:0a:51:bf:49:ed:1f:47:d5:e8:63:12:f4:d1:d5:
b3:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:05:A7:CB:98:73:D9:44:39:F3:61:04:5B:6E:AE:EE:F0:A1:1F:32
X509v3 Authority Key Identifier:
keyid:58:CD:56:3A:2A:E6:52:9C:9F:43:FE:4B:5C:67:DB:70:E7:79:A0:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WM1WOirmUpyfQ_5LXGfbcOd5oJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/WM1WOirmUpyfQ_5LXGfbcOd5oJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/WM1WOirmUpyfQ_5LXGfbcOd5oJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:64:b1:2f:fd:c3:ce:83:f9:ca:03:ff:53:7a:0c:26:34:fd:
d0:d8:94:fa:54:b0:20:18:e9:37:fb:d5:47:d9:4a:77:28:9c:
cb:6e:67:77:d7:18:a0:1f:72:d0:56:05:36:d6:7c:c6:d8:50:
48:e5:d0:76:b2:3f:14:b7:95:57:e7:d5:60:5b:5e:33:de:6b:
73:fa:f9:05:5d:de:90:db:d4:c4:53:d1:e4:9b:c4:a0:f2:d2:
64:85:7e:bd:b0:e7:49:0d:23:6f:d9:9a:eb:27:30:a7:aa:88:
bd:0d:9d:48:31:0f:23:e2:12:2d:f0:e8:e9:c1:8a:72:7b:d5:
ba:6e:81:02:fb:5f:85:7f:03:99:46:9e:a8:b5:d4:88:31:3b:
ce:ce:06:8c:22:ff:d0:81:64:57:eb:27:2d:59:40:99:f7:69:
ee:a5:86:3d:10:c2:12:58:27:36:78:11:a8:29:aa:78:cc:e3:
7c:e1:31:bc:7b:f2:e5:50:7a:42:1b:ca:ad:88:5b:22:18:e8:
f5:e1:15:e6:e7:20:9d:a6:ad:01:4a:7e:98:cc:d2:03:1e:38:
6b:e8:b5:4b:f7:f9:f9:b0:7e:d7:f2:7a:91:18:75:c5:cd:f2:
e8:31:f3:ec:fc:ba:2c:d6:c5:8b:a2:d5:27:a4:ad:ce:a9:a5:
a5:bf:e5:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:06:29 2026 by rpki-client