This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/11cc2a-ad66-4d2a-9e30-1f59bc7287cd/1/Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.mft
File: Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.mft (raw, json)
Hash identifier: KIV5v5V83z15zL8TAJHhKjBIyGV+BAD/o2EniREQNa4=
Subject key identifier: 19:60:3A:A4:B7:0C:9F:C7:36:13:D8:11:23:CC:2C:20:C5:11:23:B1
Authority key identifier: 5A:0E:48:8B:B0:9D:28:73:D6:62:E2:84:6A:22:88:A4:25:DE:D9:46
Certificate issuer: /CN=5a0e488bb09d2873d662e2846a2288a425ded946
Certificate serial: 019C4322D29A306D8E5E9A4162A7E25967C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/11cc2a-ad66-4d2a-9e30-1f59bc7287cd/1/Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.mft
Manifest number: 0426
Signing time: Mon 09 Feb 2026 16:01:21 +0000
Manifest this update: Mon 09 Feb 2026 16:01:21 +0000
Manifest next update: Tue 10 Feb 2026 16:01:21 +0000
Files and hashes: 1: Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.crl (hash: 7sESk8MJsxzM42/mvVvpf3SDWZP3Aq5v3TilYK1ksEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/11cc2a-ad66-4d2a-9e30-1f59bc7287cd/1/Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/11cc2a-ad66-4d2a-9e30-1f59bc7287cd/1/Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:22:d2:9a:30:6d:8e:5e:9a:41:62:a7:e2:59:67:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a0e488bb09d2873d662e2846a2288a425ded946
Validity
Not Before: Feb 9 16:01:21 2026 GMT
Not After : Feb 10 16:01:21 2026 GMT
Subject: CN=19603aa4b70c9fc73613d81123cc2c20c51123b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:27:5a:de:1f:68:e0:6d:5a:1a:e8:fa:6c:d8:
8d:55:9c:a7:0b:f8:64:ea:74:e0:77:6c:1e:a2:6d:
61:b3:45:ea:10:eb:2b:71:7d:f1:a7:3f:99:92:d7:
9f:19:7c:14:7a:d5:56:9b:f7:09:52:6d:75:07:da:
62:07:a7:2c:97:79:d0:81:cc:b8:b2:c8:50:1f:2e:
1c:bb:63:76:95:f1:a0:9c:c9:de:10:29:4c:69:58:
08:e8:db:fe:05:77:d7:fe:0d:11:64:db:31:62:dd:
ea:fb:0b:4c:44:00:8a:f0:22:0d:f4:19:8d:0b:84:
73:cb:24:c7:4e:d2:9f:37:81:a7:bb:23:e9:ec:05:
39:27:06:de:12:dd:78:62:9e:49:69:49:93:a1:d3:
f6:eb:44:c4:bb:1f:3b:1c:fb:bc:20:51:7c:a8:f9:
2c:47:ef:71:fb:d3:df:f2:54:b7:3b:64:83:29:51:
ab:05:ca:7c:00:ab:33:50:ff:3c:2f:af:db:32:e4:
1c:5a:a7:5f:d9:bc:2a:c9:61:77:0d:56:1a:fe:18:
31:a5:1c:79:8d:68:69:d7:6e:3f:7c:1f:d3:e8:18:
2e:da:33:ae:f2:e2:61:07:05:4f:85:36:e6:76:dc:
bc:cd:cb:26:38:71:c8:59:3f:58:e1:df:96:a9:ff:
77:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:60:3A:A4:B7:0C:9F:C7:36:13:D8:11:23:CC:2C:20:C5:11:23:B1
X509v3 Authority Key Identifier:
keyid:5A:0E:48:8B:B0:9D:28:73:D6:62:E2:84:6A:22:88:A4:25:DE:D9:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/11cc2a-ad66-4d2a-9e30-1f59bc7287cd/1/Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/11cc2a-ad66-4d2a-9e30-1f59bc7287cd/1/Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:ea:4a:2e:86:f6:6b:a2:a4:a8:21:90:76:75:40:54:ae:8d:
81:26:d6:a5:e8:23:77:60:b0:91:47:7f:4c:3c:a2:5f:a5:3a:
ed:51:d2:18:3c:88:ae:a2:bb:34:63:c7:d6:49:95:3d:28:64:
c0:f8:e8:0c:6b:e0:76:d9:72:26:1a:a9:53:4c:89:fd:37:9c:
8c:fb:d1:51:40:85:75:ae:2b:a4:d0:47:97:8a:24:51:dc:a1:
2e:3e:4b:90:12:0d:55:88:3a:1b:d0:40:3e:86:a8:d5:88:8d:
23:97:8c:34:4f:01:ba:89:ab:e2:2e:5e:55:6d:09:9a:2d:c9:
9d:9d:88:e2:65:53:bd:55:3c:dc:66:db:4d:fd:0d:89:84:ac:
65:ae:72:da:e3:e4:54:c7:53:c6:c2:a2:95:b3:0e:b9:e8:c0:
de:0c:f7:c4:2c:59:64:76:1d:35:92:9e:83:fb:4c:07:c4:10:
5f:bc:27:ba:da:10:3d:36:fc:f6:1c:26:99:14:9a:90:57:49:
a0:6f:96:6f:8c:10:b6:e3:3d:f6:01:0f:b7:bc:da:fa:0f:20:
99:98:f8:c7:ba:49:08:70:fc:f8:bb:57:56:8f:ec:6e:ea:26:
4d:11:28:bb:94:4d:15:97:39:2d:1b:41:52:66:50:24:7a:67:
52:e5:40:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:05:46 2026 by rpki-client