This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/wArEVewO3ikw6lgQV-4f9Z9b9sc.mft
File: wArEVewO3ikw6lgQV-4f9Z9b9sc.mft (raw, json)
Hash identifier: BnMH6Dk/XsnXoSK61qM4VqMPGG7y9Snflha8/lfTTO4=
Subject key identifier: C9:C5:BA:CF:97:19:AD:D7:25:BF:EF:ED:7A:F7:B2:58:77:F6:16:3C
Authority key identifier: C0:0A:C4:55:EC:0E:DE:29:30:EA:58:10:57:EE:1F:F5:9F:5B:F6:C7
Certificate issuer: /CN=c00ac455ec0ede2930ea581057ee1ff59f5bf6c7
Certificate serial: 019C42B43C5F3E1155138CE316B02A4D375D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wArEVewO3ikw6lgQV-4f9Z9b9sc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/wArEVewO3ikw6lgQV-4f9Z9b9sc.mft
Manifest number: 1299
Signing time: Mon 09 Feb 2026 14:00:34 +0000
Manifest this update: Mon 09 Feb 2026 14:00:34 +0000
Manifest next update: Tue 10 Feb 2026 14:00:34 +0000
Files and hashes: 1: IYD48FobX2QtW7l4Nlux0f3C9cQ.roa (hash: HnyhMFK+hrRQqY1dmM0kJ8BUc9CaYhp0OvPZ/NcZJXc=)
2: wArEVewO3ikw6lgQV-4f9Z9b9sc.crl (hash: gOY8LBkaNyNx1vHV5Fgz58pyk9yxuriCTpFoTtKFdNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/wArEVewO3ikw6lgQV-4f9Z9b9sc.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/wArEVewO3ikw6lgQV-4f9Z9b9sc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wArEVewO3ikw6lgQV-4f9Z9b9sc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:b4:3c:5f:3e:11:55:13:8c:e3:16:b0:2a:4d:37:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c00ac455ec0ede2930ea581057ee1ff59f5bf6c7
Validity
Not Before: Feb 9 14:00:34 2026 GMT
Not After : Feb 10 14:00:34 2026 GMT
Subject: CN=c9c5bacf9719add725bfefed7af7b25877f6163c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7d:bc:be:fe:56:75:c3:17:b6:e8:f7:bc:fb:
f1:88:74:c0:2c:bb:a5:31:ef:37:a0:43:68:6b:56:
59:9f:50:aa:f3:84:9d:df:a3:15:dd:53:1c:41:39:
60:bd:0f:25:dd:31:4d:ed:a7:50:da:6a:57:56:c8:
bc:f5:bc:1d:cf:c8:7d:c3:24:b5:ce:03:2e:57:b3:
9f:f2:82:dd:e7:4f:14:0d:cf:f5:7e:fb:a9:7f:c1:
e3:95:5a:12:df:73:d9:b7:f6:63:6e:5a:ba:18:1b:
d3:37:f5:dc:99:a2:9e:0a:7f:f2:e1:b9:0d:5c:11:
3b:65:71:87:eb:a2:c3:5d:a9:92:ab:f2:e9:66:54:
62:e2:96:41:af:50:be:a0:2c:66:d3:e8:61:fa:60:
04:d7:8c:6f:28:df:df:bf:16:7e:16:9e:e1:a9:2e:
87:bc:ad:e8:28:20:96:c7:ad:bf:64:17:a1:be:69:
85:73:a9:e3:1f:c2:b5:8b:f4:a1:40:92:62:5d:4a:
00:4b:5a:f7:c4:22:ee:3e:95:11:b8:ef:e7:b3:18:
72:ef:9d:ff:2f:31:ac:54:6e:63:f5:a8:9a:22:53:
eb:89:94:97:90:a0:8d:c9:cc:2c:0e:ee:39:9a:d6:
b8:14:89:5c:3f:c7:e9:24:ad:51:3e:eb:c3:ff:53:
91:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:C5:BA:CF:97:19:AD:D7:25:BF:EF:ED:7A:F7:B2:58:77:F6:16:3C
X509v3 Authority Key Identifier:
keyid:C0:0A:C4:55:EC:0E:DE:29:30:EA:58:10:57:EE:1F:F5:9F:5B:F6:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wArEVewO3ikw6lgQV-4f9Z9b9sc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/wArEVewO3ikw6lgQV-4f9Z9b9sc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/wArEVewO3ikw6lgQV-4f9Z9b9sc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:8a:a8:10:ad:69:b6:3c:9e:f2:1d:77:04:b0:a9:34:6d:f2:
4a:f2:b4:81:de:4e:e4:e5:88:c6:ce:be:f3:32:4b:d4:84:5b:
74:b0:a0:ee:e4:41:00:09:be:0e:16:46:35:ae:8b:f5:5d:b9:
4e:b7:58:c5:67:47:cd:9b:1b:ed:7d:12:9f:94:7a:80:c6:b4:
9b:45:42:48:39:e2:be:64:fb:d0:f9:9d:5d:86:12:2c:f5:2a:
ed:6d:fa:32:8e:83:6f:b2:f8:38:7b:b7:71:e7:fe:81:0c:c3:
61:64:04:96:fd:c6:91:85:54:cf:ac:3d:d7:a2:1d:cf:46:a9:
2f:9e:ed:8e:53:f1:3c:c0:d2:74:cc:33:4c:c1:fe:8c:21:c9:
cf:ef:e0:0f:47:c6:90:50:bd:81:d2:67:53:52:74:f5:89:44:
bd:fc:f9:1e:dd:a4:d4:a1:07:1b:c5:ea:22:31:c3:bb:6f:84:
ea:6a:94:df:fa:1d:1f:ac:44:5a:76:cc:7e:4c:51:bf:e2:30:
2a:5f:e7:c5:03:a7:27:72:42:d8:ab:40:cf:c0:bf:24:54:81:
bf:bd:10:cc:20:b7:e1:f8:da:90:30:91:83:07:41:17:fd:b7:
a7:20:b5:dd:ae:f0:ae:c8:38:79:27:00:82:9c:94:66:f3:d2:
1a:14:ec:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCtDxfPhFVE4zjFrAqTTddMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwMGFjNDU1ZWMwZWRlMjkzMGVhNTgxMDU3ZWUxZmY1OWY1
YmY2YzcwHhcNMjYwMjA5MTQwMDM0WhcNMjYwMjEwMTQwMDM0WjAzMTEwLwYDVQQD
EyhjOWM1YmFjZjk3MTlhZGQ3MjViZmVmZWQ3YWY3YjI1ODc3ZjYxNjNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqn28vv5WdcMXtuj3vPvxiHTALLul
Me83oENoa1ZZn1Cq84Sd36MV3VMcQTlgvQ8l3TFN7adQ2mpXVsi89bwdz8h9wyS1
zgMuV7Of8oLd508UDc/1fvupf8HjlVoS33PZt/Zjblq6GBvTN/XcmaKeCn/y4bkN
XBE7ZXGH66LDXamSq/LpZlRi4pZBr1C+oCxm0+hh+mAE14xvKN/fvxZ+Fp7hqS6H
vK3oKCCWx62/ZBehvmmFc6njH8K1i/ShQJJiXUoAS1r3xCLuPpURuO/nsxhy753/
LzGsVG5j9aiaIlPriZSXkKCNycwsDu45mta4FIlcP8fpJK1RPuvD/1ORsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMnFus+XGa3XJb/v7Xr3slh39hY8MB8GA1UdIwQY
MBaAFMAKxFXsDt4pMOpYEFfuH/WfW/bHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0FyRVZld08zaWt3NmxnUVYtNGY5WjliOXNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9lODFkMjYtODBmNC00MGYyLWJkYmQt
MDJjZjZiMGRiNjNiLzEvd0FyRVZld08zaWt3NmxnUVYtNGY5WjliOXNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9lODFkMjYtODBmNC00MGYyLWJkYmQtMDJjZjZiMGRiNjNi
LzEvd0FyRVZld08zaWt3NmxnUVYtNGY5WjliOXNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASIqoEK1p
tjye8h13BLCpNG3ySvK0gd5O5OWIxs6+8zJL1IRbdLCg7uRBAAm+DhZGNa6L9V25
TrdYxWdHzZsb7X0Sn5R6gMa0m0VCSDnivmT70PmdXYYSLPUq7W36Mo6Db7L4OHu3
cef+gQzDYWQElv3GkYVUz6w916Idz0apL57tjlPxPMDSdMwzTMH+jCHJz+/gD0fG
kFC9gdJnU1J09YlEvfz5Ht2k1KEHG8XqIjHDu2+E6mqU3/odH6xEWnbMfkxRv+Iw
Kl/nxQOnJ3JC2KtAz8C/JFSBv70QzCC34fjakDCRgwdBF/23pyC13a7wrsg4eScA
gpyUZvPSGhTsUg==
-----END CERTIFICATE-----
Generated at Mon Feb 9 22:41:28 2026 by rpki-client