This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/b33a4d-db94-4963-8ce4-a04370874d16/1/w0S4v8CjT0cEZFKpIb8BuYFjaik.mft
File: w0S4v8CjT0cEZFKpIb8BuYFjaik.mft (raw, json)
Hash identifier: k87aI5tlF2cjkHgtmPlcnINpL3ZNz8LBr+kD64DUN28=
Subject key identifier: E5:14:D4:32:5E:76:0B:95:47:51:77:14:22:C2:1D:D2:48:47:36:8C
Authority key identifier: C3:44:B8:BF:C0:A3:4F:47:04:64:52:A9:21:BF:01:B9:81:63:6A:29
Certificate issuer: /CN=c344b8bfc0a34f47046452a921bf01b981636a29
Certificate serial: 019C420F9AA6A032403DC3A0FE548EBF9A6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w0S4v8CjT0cEZFKpIb8BuYFjaik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/b33a4d-db94-4963-8ce4-a04370874d16/1/w0S4v8CjT0cEZFKpIb8BuYFjaik.mft
Manifest number: 13B4
Signing time: Mon 09 Feb 2026 11:00:44 +0000
Manifest this update: Mon 09 Feb 2026 11:00:44 +0000
Manifest next update: Tue 10 Feb 2026 11:00:44 +0000
Files and hashes: 1: w0S4v8CjT0cEZFKpIb8BuYFjaik.crl (hash: 6Zur0nQnmZav2AM7mi3T+9PT991NhRq0YQNTaMLI2go=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/b33a4d-db94-4963-8ce4-a04370874d16/1/w0S4v8CjT0cEZFKpIb8BuYFjaik.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/b33a4d-db94-4963-8ce4-a04370874d16/1/w0S4v8CjT0cEZFKpIb8BuYFjaik.mft
rsync://rpki.ripe.net/repository/DEFAULT/w0S4v8CjT0cEZFKpIb8BuYFjaik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:0f:9a:a6:a0:32:40:3d:c3:a0:fe:54:8e:bf:9a:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c344b8bfc0a34f47046452a921bf01b981636a29
Validity
Not Before: Feb 9 11:00:44 2026 GMT
Not After : Feb 10 11:00:44 2026 GMT
Subject: CN=e514d4325e760b954751771422c21dd24847368c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6e:57:33:fd:33:48:9a:00:e7:27:df:8b:2d:
2d:24:cb:9a:f6:b4:c3:b4:72:fe:e5:ae:60:9e:da:
83:b7:70:24:c6:e7:9b:f3:d5:ae:1a:17:03:aa:93:
c7:4e:f1:c5:59:ba:23:2d:29:12:26:66:1a:0c:c3:
b7:dc:69:7d:12:d8:46:7b:48:be:b7:8c:6a:cd:af:
26:6d:c9:f1:21:1b:72:b4:e7:23:05:42:b9:1d:95:
ea:2a:cf:0f:4e:a1:23:06:14:5e:ff:94:57:42:0d:
bb:78:61:93:2f:af:9a:15:18:20:d9:bd:f4:e7:d9:
fb:8b:de:54:57:ab:ee:c9:d2:dc:c6:63:fe:e9:3e:
f4:27:e3:9f:2d:8f:13:7c:ec:33:4a:c3:c4:d3:af:
94:a8:d1:2a:35:4a:2a:11:56:3c:fe:ad:39:28:fd:
ef:c1:44:f1:a9:c7:aa:e4:24:ad:11:0f:b8:c2:9c:
bf:10:ba:8c:c7:99:ab:63:dc:5d:bd:6b:b0:3b:49:
2e:56:0c:cc:f2:1e:1f:a7:7c:3e:77:f2:a7:3c:3f:
c0:49:0d:01:85:66:1a:8a:44:ab:1a:86:02:f7:7c:
4a:9b:36:d0:6f:3a:ce:ba:82:f0:e2:f3:6e:88:a3:
f6:3c:97:44:6e:06:6e:6c:fd:c0:75:0a:fa:3b:d9:
d0:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:14:D4:32:5E:76:0B:95:47:51:77:14:22:C2:1D:D2:48:47:36:8C
X509v3 Authority Key Identifier:
keyid:C3:44:B8:BF:C0:A3:4F:47:04:64:52:A9:21:BF:01:B9:81:63:6A:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w0S4v8CjT0cEZFKpIb8BuYFjaik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b33a4d-db94-4963-8ce4-a04370874d16/1/w0S4v8CjT0cEZFKpIb8BuYFjaik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b33a4d-db94-4963-8ce4-a04370874d16/1/w0S4v8CjT0cEZFKpIb8BuYFjaik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:bd:c6:e8:f8:46:61:b1:09:07:6f:e0:aa:45:81:81:47:ad:
30:28:b0:eb:01:c7:1a:ca:4b:6f:bd:5f:08:1b:7f:9f:54:bc:
a7:a6:16:99:a0:2b:51:82:00:df:88:90:63:c6:7d:9e:79:cd:
5f:47:00:08:a6:4c:09:0d:62:44:4b:c8:a5:24:2b:c6:41:0a:
f9:35:e2:71:eb:9b:26:d8:e0:bf:b0:83:2b:e5:36:4b:b7:7d:
6c:52:23:7d:58:23:13:74:04:a7:c4:c5:78:9d:9b:f2:dc:41:
fb:4d:ac:3b:56:a8:5c:a6:14:3d:13:a1:3f:b2:1c:56:b1:52:
e0:19:94:2f:95:7e:f5:6a:41:96:02:a0:f6:38:39:08:ab:bc:
e5:bb:d0:81:95:e4:74:77:fa:66:1a:e9:3a:aa:b9:37:0f:81:
70:a7:5a:83:cc:4e:4a:d9:58:12:96:cc:ea:ac:d1:32:3e:11:
43:ba:a1:e7:3a:86:d0:35:9b:5a:58:0e:33:b8:b8:74:70:51:
83:02:18:f8:f9:7f:ae:21:2f:88:0d:01:d4:a6:46:5b:2d:5c:
4f:a3:e1:dc:cd:8a:8a:a2:fb:a7:47:73:66:fe:d1:3e:d8:d4:
ae:03:d3:c0:73:ba:22:54:ef:fa:ef:07:b4:b0:97:69:e0:31:
d1:d3:7b:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:58:21 2026 by rpki-client