This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/cc8ffe-36b4-4c80-a907-aeaa9df01a9d/1/wCS9ve1uXS_g-1JlALP_h2ZbYA4.mft
File: wCS9ve1uXS_g-1JlALP_h2ZbYA4.mft (raw, json)
Hash identifier: cj1W6KThbTbtPxRmJBk7qC/ui0DF0NaVS+Rg+OdZDLI=
Subject key identifier: 53:2A:BA:09:FC:06:33:36:DB:FC:38:15:F0:A3:DF:43:C0:95:D7:92
Authority key identifier: C0:24:BD:BD:ED:6E:5D:2F:E0:FB:52:65:00:B3:FF:87:66:5B:60:0E
Certificate issuer: /CN=c024bdbded6e5d2fe0fb526500b3ff87665b600e
Certificate serial: 019C42B3E9BBBD063E70B3E969BF325942D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wCS9ve1uXS_g-1JlALP_h2ZbYA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/cc8ffe-36b4-4c80-a907-aeaa9df01a9d/1/wCS9ve1uXS_g-1JlALP_h2ZbYA4.mft
Manifest number: 1813
Signing time: Mon 09 Feb 2026 14:00:12 +0000
Manifest this update: Mon 09 Feb 2026 14:00:12 +0000
Manifest next update: Tue 10 Feb 2026 14:00:12 +0000
Files and hashes: 1: iBoAHfS4BZvaUqr3t62slrnAKc4.roa (hash: j3qBODNziooOMWyPw2hbhVtBrkM/eb4LDIHDcyPEIv8=)
2: wCS9ve1uXS_g-1JlALP_h2ZbYA4.crl (hash: l9yVyE+ZtdRojQVN9Y30XItidO3ZJVSD1ullAFkZlJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/cc8ffe-36b4-4c80-a907-aeaa9df01a9d/1/wCS9ve1uXS_g-1JlALP_h2ZbYA4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/cc8ffe-36b4-4c80-a907-aeaa9df01a9d/1/wCS9ve1uXS_g-1JlALP_h2ZbYA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wCS9ve1uXS_g-1JlALP_h2ZbYA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 14:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:b3:e9:bb:bd:06:3e:70:b3:e9:69:bf:32:59:42:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c024bdbded6e5d2fe0fb526500b3ff87665b600e
Validity
Not Before: Feb 9 14:00:12 2026 GMT
Not After : Feb 10 14:00:12 2026 GMT
Subject: CN=532aba09fc063336dbfc3815f0a3df43c095d792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c8:2c:02:c2:ae:5c:d8:d9:60:ae:86:d5:5a:
2e:15:4d:bc:eb:ee:19:be:d8:e6:2d:08:b4:b5:1a:
cd:f7:59:d0:57:2e:ab:b1:81:47:08:6b:41:58:39:
61:cd:5e:74:f3:00:d5:8e:84:56:bd:6f:35:54:95:
df:a3:6f:1f:99:a2:6c:b6:58:6e:49:aa:0d:1f:08:
24:6d:05:f9:b3:35:c8:e0:80:a8:72:ed:3c:28:d8:
48:50:5f:3a:f4:04:ef:2c:d1:7f:a2:86:48:8c:61:
0b:ed:4c:6e:23:f4:5b:96:57:da:90:6e:51:ea:4e:
cb:00:cf:ba:4a:8e:76:30:8e:66:71:b2:f5:cc:58:
2d:f4:c6:0e:df:19:7f:f3:6a:77:98:06:8c:0b:85:
59:c0:64:88:3c:0b:cb:dc:ed:ee:10:d1:bf:35:57:
83:da:10:18:4f:d8:2a:f7:ed:05:dd:f0:25:9c:7c:
bc:75:0d:53:ba:5e:0c:59:22:63:f1:34:0b:3d:64:
b6:64:3e:30:c2:49:9b:b4:79:d8:43:81:6d:96:3a:
8d:8d:3a:aa:70:eb:6f:27:bf:3f:8e:0f:f5:66:a0:
23:23:d6:a5:df:89:b7:a2:09:5e:5d:a9:7b:e9:db:
08:6a:19:3f:6c:5b:ed:5b:00:08:79:01:08:0d:12:
7d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:2A:BA:09:FC:06:33:36:DB:FC:38:15:F0:A3:DF:43:C0:95:D7:92
X509v3 Authority Key Identifier:
keyid:C0:24:BD:BD:ED:6E:5D:2F:E0:FB:52:65:00:B3:FF:87:66:5B:60:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wCS9ve1uXS_g-1JlALP_h2ZbYA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/cc8ffe-36b4-4c80-a907-aeaa9df01a9d/1/wCS9ve1uXS_g-1JlALP_h2ZbYA4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/cc8ffe-36b4-4c80-a907-aeaa9df01a9d/1/wCS9ve1uXS_g-1JlALP_h2ZbYA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:d6:ed:a1:2e:87:c3:c7:40:e7:0c:38:1e:cb:82:aa:56:8d:
c6:3e:09:65:55:d6:44:93:63:a3:ce:f0:47:dc:37:6a:1e:5a:
fd:20:ea:2e:0f:82:80:1c:5d:73:08:c3:a3:8c:ae:36:c9:4b:
c7:af:20:6b:0a:1b:42:ba:86:ca:63:69:77:51:64:7b:27:5d:
5b:f3:e6:4f:97:db:87:74:a7:a1:e3:31:ea:38:0b:0d:96:14:
da:18:3b:ca:62:13:fa:8d:d7:35:fa:96:ab:07:22:4e:2b:04:
20:6c:28:4e:44:ce:30:c1:13:b2:2d:ad:71:16:b8:23:e9:4d:
db:92:e7:d4:ab:1d:ec:c4:39:da:59:f6:3a:c5:44:60:75:5c:
02:da:f4:f3:73:bf:33:ee:ce:63:f9:dd:96:f7:99:21:b3:da:
33:a8:ad:3d:2f:4c:5d:a3:f0:fb:ea:99:5e:22:a8:79:07:6f:
5d:2a:73:61:da:19:6a:bd:b3:85:a3:74:35:44:d9:15:42:d8:
3a:41:1d:a4:be:e2:15:28:f6:43:06:a1:16:af:02:12:f1:16:
99:a5:36:ea:8a:c3:76:83:61:a9:82:f1:11:35:a5:28:ca:98:
d8:84:da:bb:78:56:6e:a8:d1:d6:b2:13:f9:00:9b:ab:49:63:
8c:5d:3a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:48:23 2026 by rpki-client