This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/13f984-a000-4efb-9430-cfa97384bc9a/1/W71p2ZhITBOfrBJlpkV0XzMzzx0.mft
File: W71p2ZhITBOfrBJlpkV0XzMzzx0.mft (raw, json)
Hash identifier: MzvUQ2jmbUyOqF1IakDCaB/W4bhlWas3ze/W+q1nE3I=
Subject key identifier: F9:42:FC:91:44:AB:DC:07:D2:AF:50:E8:83:9F:C7:5C:14:2E:33:A7
Authority key identifier: 5B:BD:69:D9:98:48:4C:13:9F:AC:12:65:A6:45:74:5F:33:33:CF:1D
Certificate issuer: /CN=5bbd69d998484c139fac1265a645745f3333cf1d
Certificate serial: 019C4510655B6CF0EB5783BCA74568495D47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W71p2ZhITBOfrBJlpkV0XzMzzx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/13f984-a000-4efb-9430-cfa97384bc9a/1/W71p2ZhITBOfrBJlpkV0XzMzzx0.mft
Manifest number: 180F
Signing time: Tue 10 Feb 2026 01:00:28 +0000
Manifest this update: Tue 10 Feb 2026 01:00:28 +0000
Manifest next update: Wed 11 Feb 2026 01:00:28 +0000
Files and hashes: 1: W71p2ZhITBOfrBJlpkV0XzMzzx0.crl (hash: ioeEReYcGws6U2VZ4sLQ/Imtz3WI0gM0IGcDWoDCoog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/13f984-a000-4efb-9430-cfa97384bc9a/1/W71p2ZhITBOfrBJlpkV0XzMzzx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/13f984-a000-4efb-9430-cfa97384bc9a/1/W71p2ZhITBOfrBJlpkV0XzMzzx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/W71p2ZhITBOfrBJlpkV0XzMzzx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:45:10:65:5b:6c:f0:eb:57:83:bc:a7:45:68:49:5d:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bbd69d998484c139fac1265a645745f3333cf1d
Validity
Not Before: Feb 10 01:00:28 2026 GMT
Not After : Feb 11 01:00:28 2026 GMT
Subject: CN=f942fc9144abdc07d2af50e8839fc75c142e33a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:bc:cb:1c:68:fb:05:1a:f0:68:25:bd:3b:bd:
6c:e1:e8:a3:02:27:c8:14:97:f2:2f:52:ff:79:16:
f9:84:27:97:09:68:9a:a1:2d:1c:0f:38:e4:07:e9:
12:34:bb:11:eb:3b:e1:f1:78:5c:cd:ec:3b:cb:86:
4f:2f:b7:32:0d:3a:59:a5:fc:3e:81:4b:1b:1f:e3:
e2:f0:ba:b4:ca:27:b4:7d:e4:93:31:7d:01:de:51:
46:d4:8a:38:72:3c:77:a4:d5:c9:d1:97:d9:6d:1a:
51:b6:ae:09:68:6c:a9:49:de:af:a0:52:0f:80:80:
fe:96:f0:65:a9:07:30:a6:c3:c9:cd:b6:1d:de:cd:
16:fb:bc:e8:da:62:97:9a:76:c6:32:e6:32:99:59:
c2:00:40:60:08:ad:8a:19:f3:af:a8:8c:62:e2:94:
e0:56:f0:a5:b4:5c:b0:57:db:5f:91:3b:df:54:14:
6a:d9:57:b4:b6:66:0a:33:5f:e0:77:98:56:5a:18:
39:d9:98:9f:cf:0d:a3:13:0d:a5:a6:f4:e6:e7:3d:
57:7e:50:4b:81:3d:df:c6:a9:1c:bd:97:44:80:f1:
f6:d1:7b:35:82:26:9a:cc:c3:c2:fa:33:63:47:af:
a7:8e:9c:dc:3c:9c:2f:37:76:c8:27:de:37:c7:ce:
cc:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:42:FC:91:44:AB:DC:07:D2:AF:50:E8:83:9F:C7:5C:14:2E:33:A7
X509v3 Authority Key Identifier:
keyid:5B:BD:69:D9:98:48:4C:13:9F:AC:12:65:A6:45:74:5F:33:33:CF:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W71p2ZhITBOfrBJlpkV0XzMzzx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/13f984-a000-4efb-9430-cfa97384bc9a/1/W71p2ZhITBOfrBJlpkV0XzMzzx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/13f984-a000-4efb-9430-cfa97384bc9a/1/W71p2ZhITBOfrBJlpkV0XzMzzx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:76:8b:c3:17:b5:5d:6c:9b:33:4e:51:94:d7:c4:13:02:1c:
86:6c:00:1b:48:d8:09:0b:87:d4:61:75:33:73:a1:26:df:dd:
34:64:0c:53:36:e0:99:d5:45:6a:24:e0:dc:c9:2e:61:06:4b:
3d:1b:89:ae:c5:15:a3:5a:48:c3:9a:a0:e8:d0:46:83:25:c0:
4b:6e:3a:3e:be:d3:12:5a:80:b6:3e:b2:8c:6c:bc:da:07:68:
49:12:5c:79:fc:dd:b8:aa:87:40:3f:e7:bf:2d:42:a0:6d:f2:
23:2e:da:6d:be:72:be:fa:98:a1:ea:26:68:91:f0:e0:d5:6e:
d3:d0:bb:35:f2:a7:5e:82:4d:37:f8:84:cc:80:cd:19:87:00:
7d:69:c9:40:4d:36:46:4b:3a:ab:6d:bc:75:53:98:66:38:8e:
24:18:d7:05:ff:67:4c:ae:6f:6b:41:7b:a0:24:a4:91:31:68:
76:1c:56:3f:d2:83:68:4a:c8:b9:d6:77:fe:f5:ee:97:3c:f9:
32:35:d4:9d:23:57:00:bf:ee:22:71:91:78:48:ab:c9:60:ce:
db:8e:7e:19:4a:80:7a:3e:97:de:ff:20:5b:c5:01:70:24:e3:
b8:7a:5f:59:b6:4d:00:1b:30:f6:ab:a2:22:f9:42:78:ee:e3:
e2:0c:c0:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:20:32 2026 by rpki-client