This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/e10057-99bb-44f9-9774-2752b3759066/1/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.mft
File: WhoxkJeA6Bc0r2YHJy0YUl23ZX0.mft (raw, json)
Hash identifier: ipZTO1boIl0tSar5xfENnz7TuxLWRMndfhEotr4CQB4=
Subject key identifier: DB:30:81:25:9F:4F:55:A5:3F:31:BB:FC:B9:FF:D7:3C:C8:5D:BB:EE
Authority key identifier: 5A:1A:31:90:97:80:E8:17:34:AF:66:07:27:2D:18:52:5D:B7:65:7D
Certificate issuer: /CN=5a1a31909780e81734af6607272d18525db7657d
Certificate serial: 019C41A14A04475184563799981065BD15C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/e10057-99bb-44f9-9774-2752b3759066/1/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.mft
Manifest number: 0CE2
Signing time: Mon 09 Feb 2026 09:00:15 +0000
Manifest this update: Mon 09 Feb 2026 09:00:15 +0000
Manifest next update: Tue 10 Feb 2026 09:00:15 +0000
Files and hashes: 1: WhoxkJeA6Bc0r2YHJy0YUl23ZX0.crl (hash: +gQ86me2W5iTJX00l3OoAb0NR7ZmD+JLAkAnDwUP2yk=)
2: a3Lzw_FUmbYwiAPLTEPryzUOYTE.roa (hash: UT3xazFEWgxD4QE0HTQ3reWyQqUTm3ksXZVs3NOwPPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/e10057-99bb-44f9-9774-2752b3759066/1/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/e10057-99bb-44f9-9774-2752b3759066/1/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 09:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:a1:4a:04:47:51:84:56:37:99:98:10:65:bd:15:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a1a31909780e81734af6607272d18525db7657d
Validity
Not Before: Feb 9 09:00:15 2026 GMT
Not After : Feb 10 09:00:15 2026 GMT
Subject: CN=db3081259f4f55a53f31bbfcb9ffd73cc85dbbee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c2:10:9d:c3:a9:97:ed:5f:e8:5a:eb:c5:2f:
85:ff:78:65:d0:7e:7d:9e:89:69:34:71:59:96:f4:
39:cd:b8:87:8d:d7:66:91:ec:a3:00:39:7c:21:51:
f2:44:70:7f:d4:51:00:3f:93:f8:c9:e5:95:20:5b:
a0:70:8c:0c:26:38:e4:fa:13:f6:7e:49:57:40:b2:
7b:9c:be:61:5f:48:42:bb:75:90:d2:fe:10:ae:d4:
e0:7b:f0:c5:87:1b:c0:26:a6:16:0f:83:49:eb:36:
65:c4:07:b9:b3:73:0e:93:54:ba:6e:c5:08:b8:ca:
a7:aa:37:bf:0c:e1:ed:07:69:6f:c8:8f:d0:e6:bd:
43:fd:c9:1c:dd:6d:a7:20:11:96:88:10:fe:5c:f0:
33:f1:d4:55:93:4b:dc:6c:c9:34:68:3c:5d:de:be:
57:29:32:56:57:e7:19:bc:09:c7:82:cd:02:71:fe:
4b:ca:f5:87:83:83:9d:cc:05:75:2a:ab:86:f0:44:
d0:22:71:40:f0:4b:c2:4a:8d:79:06:d3:3a:c8:6f:
ca:d2:d4:4a:66:10:d2:81:d2:6a:3e:dd:64:09:73:
20:e6:eb:34:5e:8b:c6:17:01:61:02:27:78:d7:b4:
f9:16:42:bf:38:12:83:a0:c1:30:cf:c9:fb:63:f0:
39:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:30:81:25:9F:4F:55:A5:3F:31:BB:FC:B9:FF:D7:3C:C8:5D:BB:EE
X509v3 Authority Key Identifier:
keyid:5A:1A:31:90:97:80:E8:17:34:AF:66:07:27:2D:18:52:5D:B7:65:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/e10057-99bb-44f9-9774-2752b3759066/1/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/e10057-99bb-44f9-9774-2752b3759066/1/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:a4:8a:64:da:82:52:78:94:d9:76:ed:fd:e2:24:bf:08:32:
c5:03:7c:47:46:2f:56:93:3d:e3:3e:0a:a4:12:f5:4c:eb:12:
8e:27:15:bb:54:b5:6c:92:4d:6e:c5:b8:7d:82:91:5d:6e:07:
a6:92:f2:81:fb:2b:6c:af:40:26:7c:2d:7e:a9:00:bf:a5:0b:
30:39:bb:da:e9:d1:65:ad:5c:04:8e:98:52:80:59:5f:40:5b:
30:d9:90:a6:6a:59:a1:ee:25:8b:fe:e4:5b:f1:7b:03:64:26:
b6:66:2e:eb:70:d8:9d:6b:d4:6c:5e:21:bd:93:19:c3:f1:f8:
7c:90:9f:5c:2e:ee:2a:eb:dd:d3:1a:86:d6:e1:4f:00:ec:5d:
75:88:d8:69:50:a5:c4:68:b5:64:c6:d7:b6:c2:b7:60:84:f1:
9b:20:16:76:a4:dd:5d:1f:2a:12:12:66:ce:17:f6:13:85:13:
43:bf:8e:b6:e0:e1:22:94:9b:a7:2c:e1:0b:c0:4d:de:28:ce:
1d:26:a9:1e:86:d1:51:cf:a2:62:c3:05:da:a9:bd:0b:14:0e:
b2:3d:8d:62:3f:4a:80:95:44:f6:6f:e1:d2:a6:14:f2:b3:61:
25:5e:39:d1:ee:d3:45:ed:66:fd:73:5c:42:78:f8:4e:1a:36:
83:23:57:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:33:17 2026 by rpki-client