This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/WXhaIeLQfGj_MXVYxp7xGMx1gFo.mft
File: WXhaIeLQfGj_MXVYxp7xGMx1gFo.mft (raw, json)
Hash identifier: 6ORceFKBCzkixG45Lfw90u9c5wRCHNmJeVwvww8uku0=
Subject key identifier: EA:A9:D9:DF:EC:30:F0:76:F4:DC:F5:9B:43:F3:5A:54:40:00:DE:99
Authority key identifier: 59:78:5A:21:E2:D0:7C:68:FF:31:75:58:C6:9E:F1:18:CC:75:80:5A
Certificate issuer: /CN=59785a21e2d07c68ff317558c69ef118cc75805a
Certificate serial: 019C427D97D59B3F3467676638B97D0B992B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXhaIeLQfGj_MXVYxp7xGMx1gFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/WXhaIeLQfGj_MXVYxp7xGMx1gFo.mft
Manifest number: 0EB4
Signing time: Mon 09 Feb 2026 13:00:52 +0000
Manifest this update: Mon 09 Feb 2026 13:00:52 +0000
Manifest next update: Tue 10 Feb 2026 13:00:52 +0000
Files and hashes: 1: 6ePIa-n2ggJpskh1MNyAjjyaLCs.roa (hash: AZboyWjW8sQjb7GYwQbshy3odhKN/mtrnuXail1eVS4=)
2: WXhaIeLQfGj_MXVYxp7xGMx1gFo.crl (hash: cugm5J1G39Z9BvWPUtI5ZX6ZFrPTUIhpWIp/baRE+4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/WXhaIeLQfGj_MXVYxp7xGMx1gFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/WXhaIeLQfGj_MXVYxp7xGMx1gFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WXhaIeLQfGj_MXVYxp7xGMx1gFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7d:97:d5:9b:3f:34:67:67:66:38:b9:7d:0b:99:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59785a21e2d07c68ff317558c69ef118cc75805a
Validity
Not Before: Feb 9 13:00:52 2026 GMT
Not After : Feb 10 13:00:52 2026 GMT
Subject: CN=eaa9d9dfec30f076f4dcf59b43f35a544000de99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ed:65:40:06:4b:e6:72:1f:04:31:4e:4a:5f:
72:b3:04:ad:d8:25:a3:82:14:51:4a:c8:1f:66:63:
96:8f:89:40:b9:a7:1e:0a:20:00:16:f2:71:90:ff:
35:44:d8:a5:fb:c3:a2:d3:e4:ec:4c:27:48:92:d4:
be:c3:f3:ec:2b:d5:3a:91:cb:4d:e0:64:39:36:2f:
7c:bb:b0:da:a8:63:d3:ad:2f:a6:65:f7:e3:cf:34:
38:c9:d2:ef:4c:a5:0e:c9:44:67:a8:34:42:04:2f:
86:8f:c2:11:68:ca:5e:73:b5:f9:76:67:6c:90:ab:
75:9b:33:93:82:02:cf:9f:ee:26:97:59:bb:98:12:
32:9f:e3:36:d7:d9:f4:4c:e7:5e:08:05:90:44:c5:
98:fc:9b:10:2a:f4:fc:93:80:81:b2:a9:c4:b9:9f:
59:12:b2:91:f0:3a:34:03:4b:d3:b8:77:44:ad:08:
fe:ca:a2:0b:b5:44:d1:4f:ed:34:07:e7:ac:3e:3b:
8c:eb:95:4f:96:0e:62:f4:1d:9b:46:2d:4b:f6:f6:
f8:80:e3:86:53:73:82:35:bd:87:4b:96:71:68:39:
b6:af:ad:97:90:65:bb:ab:24:12:74:2e:40:0a:e8:
3c:37:0e:4a:2a:aa:82:17:92:25:e7:7f:9c:62:81:
06:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:A9:D9:DF:EC:30:F0:76:F4:DC:F5:9B:43:F3:5A:54:40:00:DE:99
X509v3 Authority Key Identifier:
keyid:59:78:5A:21:E2:D0:7C:68:FF:31:75:58:C6:9E:F1:18:CC:75:80:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXhaIeLQfGj_MXVYxp7xGMx1gFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/WXhaIeLQfGj_MXVYxp7xGMx1gFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/WXhaIeLQfGj_MXVYxp7xGMx1gFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:a4:11:48:bf:e0:7f:47:56:bd:d2:13:ce:82:5e:d2:b3:19:
0f:84:b0:15:56:21:91:59:24:a7:67:5b:3f:50:ec:3f:34:12:
10:94:3a:78:9c:59:b8:c3:da:0d:f7:12:f3:91:14:4d:29:5a:
e8:8f:2a:7b:4c:b5:f7:cf:ee:d3:93:bb:b7:43:ca:a4:b3:7c:
77:ad:6e:28:c2:c0:39:99:eb:fe:1c:8e:e8:4c:87:94:3c:28:
d0:aa:d1:74:64:83:64:e0:a8:ec:9a:c6:a5:57:cf:88:31:45:
d5:6a:dd:94:45:76:45:60:88:f9:32:6e:d7:e5:53:40:d3:a9:
de:33:76:98:69:20:83:90:a9:03:78:eb:fd:34:1f:db:4d:79:
b2:3f:cf:67:35:36:67:16:c5:3a:da:5b:9e:cd:96:80:a5:c8:
ad:cb:b3:3f:f0:9a:95:6a:48:88:83:0d:4c:77:4f:26:d0:4f:
11:72:15:9c:c8:bf:43:f4:62:41:d4:b3:74:5a:d7:4d:eb:69:
bc:33:a6:af:00:4e:94:06:ed:47:34:6d:d3:fd:86:f1:8c:1c:
28:bb:59:29:41:17:dd:80:1e:3b:35:5b:9c:6c:b8:f7:a1:a5:
44:39:55:44:0b:5d:5c:fe:20:df:46:6e:a6:c2:4c:25:d5:84:
b9:3b:85:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:02:38 2026 by rpki-client