This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/703f00-7f39-4d95-8c58-4bbb838a2779/1/wxu0Tt4q_gv6nXi6KTJJVff8YJE.mft
File: wxu0Tt4q_gv6nXi6KTJJVff8YJE.mft (raw, json)
Hash identifier: FwhCBIaU0LHhwKvd/iS+nXS80MMylqx2Se5vB69b2Y8=
Subject key identifier: 3A:AE:C9:74:09:74:CF:86:3F:AD:15:31:D7:DF:ED:4E:B3:41:DA:D9
Authority key identifier: C3:1B:B4:4E:DE:2A:FE:0B:FA:9D:78:BA:29:32:49:55:F7:FC:60:91
Certificate issuer: /CN=c31bb44ede2afe0bfa9d78ba29324955f7fc6091
Certificate serial: 019C43905395FF2C1BAA846C309AEE65AB38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wxu0Tt4q_gv6nXi6KTJJVff8YJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/703f00-7f39-4d95-8c58-4bbb838a2779/1/wxu0Tt4q_gv6nXi6KTJJVff8YJE.mft
Manifest number: 0EF3
Signing time: Mon 09 Feb 2026 18:00:57 +0000
Manifest this update: Mon 09 Feb 2026 18:00:57 +0000
Manifest next update: Tue 10 Feb 2026 18:00:57 +0000
Files and hashes: 1: SSYiDgD_3-1wMHqQrv7qO7JPevs.roa (hash: 1WfeKCTajb/KdbOomr3V7iu+Ay5TdD7m9U7zyCHhLwM=)
2: wxu0Tt4q_gv6nXi6KTJJVff8YJE.crl (hash: izTQh4EzsOhq6K07ClbwNJbvrqHB6guhm0G2eTLzL+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/703f00-7f39-4d95-8c58-4bbb838a2779/1/wxu0Tt4q_gv6nXi6KTJJVff8YJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/703f00-7f39-4d95-8c58-4bbb838a2779/1/wxu0Tt4q_gv6nXi6KTJJVff8YJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/wxu0Tt4q_gv6nXi6KTJJVff8YJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:90:53:95:ff:2c:1b:aa:84:6c:30:9a:ee:65:ab:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c31bb44ede2afe0bfa9d78ba29324955f7fc6091
Validity
Not Before: Feb 9 18:00:57 2026 GMT
Not After : Feb 10 18:00:57 2026 GMT
Subject: CN=3aaec9740974cf863fad1531d7dfed4eb341dad9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:67:05:87:f8:e1:21:06:8a:ed:c5:06:61:5e:
2d:c3:df:79:2d:22:19:bf:33:9d:0a:f2:72:4f:5b:
1d:26:8e:f9:34:2b:2f:5a:51:6a:9c:f3:52:aa:6a:
99:45:70:ea:1b:eb:7d:dd:be:98:c8:03:d6:25:16:
a5:6b:dc:21:47:df:16:93:c0:7a:e0:f6:59:ae:de:
83:96:d8:43:8c:5f:72:16:88:cd:b0:eb:fd:1b:17:
8d:ec:ad:a0:79:be:c1:ed:75:de:b6:1f:14:4e:63:
25:cc:57:55:0c:bc:e0:4d:75:a1:06:a4:6e:96:28:
cc:22:82:83:b9:d6:50:63:3d:45:30:99:92:99:a6:
56:e4:01:80:e5:57:36:cc:6d:da:8d:43:8e:fd:0a:
47:3d:ca:05:21:37:67:f2:95:f6:97:54:c0:d5:82:
be:5b:d1:27:94:76:98:d2:81:d9:89:6f:28:90:0d:
eb:4d:83:75:40:3d:ca:9c:92:89:69:a8:b9:d5:cc:
f2:f9:71:79:87:78:a4:85:bc:e7:ea:47:19:7d:07:
c6:41:dd:c4:f7:22:2f:cf:4a:0b:9c:5e:a6:85:16:
1b:30:0c:98:5c:f2:36:11:a6:64:66:f6:67:be:1f:
38:28:66:13:e1:39:d7:d4:45:1b:61:0c:8c:09:37:
21:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:AE:C9:74:09:74:CF:86:3F:AD:15:31:D7:DF:ED:4E:B3:41:DA:D9
X509v3 Authority Key Identifier:
keyid:C3:1B:B4:4E:DE:2A:FE:0B:FA:9D:78:BA:29:32:49:55:F7:FC:60:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wxu0Tt4q_gv6nXi6KTJJVff8YJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/703f00-7f39-4d95-8c58-4bbb838a2779/1/wxu0Tt4q_gv6nXi6KTJJVff8YJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/703f00-7f39-4d95-8c58-4bbb838a2779/1/wxu0Tt4q_gv6nXi6KTJJVff8YJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:2d:5f:d6:16:f7:67:58:7c:53:6b:ca:db:ad:68:15:6a:0e:
a5:28:62:7b:05:e6:a4:a9:90:e3:5b:cb:15:84:02:8e:a5:b0:
a3:14:1b:eb:34:7c:b4:e5:72:fa:95:8b:b8:1b:be:45:a6:5f:
91:4d:b9:6a:86:13:48:3a:5c:22:6e:e3:52:5e:7f:83:3e:0d:
94:17:01:cc:66:f4:f9:d1:51:c4:4b:b4:62:30:d2:e5:76:b2:
4f:10:67:6e:65:ae:69:c7:db:57:2d:ec:08:c5:40:16:ce:fd:
26:f7:13:c8:c9:53:2c:ef:2b:e7:b1:65:12:2e:0a:00:ea:74:
dc:06:a2:dc:d8:d2:57:1b:57:07:63:ba:62:54:6b:ba:fd:f9:
6b:60:cb:34:c2:b7:16:98:fe:cb:b6:bf:d6:c9:08:a2:b1:05:
b6:6f:3d:fc:96:49:2d:37:60:85:49:64:3d:3f:79:b4:5f:09:
76:95:29:4c:1b:64:0e:d2:74:7b:1f:de:26:50:ac:9e:27:a4:
29:24:d9:da:64:16:32:63:78:a3:1a:09:3a:6d:97:d4:f6:0a:
9a:c7:47:f3:89:1a:07:1f:9f:09:79:df:5b:d9:96:11:4f:6c:
21:50:6e:8b:86:bf:98:8f:27:f5:8f:7d:f9:e4:0b:c5:bd:eb:
7a:74:8f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:13:29 2026 by rpki-client