This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/1073e6-c487-478f-b9d9-3c1e0518f9e5/1/W8PKDWOo_M3A6SqIprrO_ydecEY.mft
File: W8PKDWOo_M3A6SqIprrO_ydecEY.mft (raw, json)
Hash identifier: RXbDMub8Pmr94RQyMtZZyeJxEAxpuTLqnlF+pYwuV08=
Subject key identifier: C2:D7:F8:52:C4:5D:39:D6:9A:94:06:23:60:9C:30:BE:37:9C:89:8C
Authority key identifier: 5B:C3:CA:0D:63:A8:FC:CD:C0:E9:2A:88:A6:BA:CE:FF:27:5E:70:46
Certificate issuer: /CN=5bc3ca0d63a8fccdc0e92a88a6baceff275e7046
Certificate serial: 019C427D45D1EB521AF7F9FB637BC8D2F305
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W8PKDWOo_M3A6SqIprrO_ydecEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/1073e6-c487-478f-b9d9-3c1e0518f9e5/1/W8PKDWOo_M3A6SqIprrO_ydecEY.mft
Manifest number: 180B
Signing time: Mon 09 Feb 2026 13:00:31 +0000
Manifest this update: Mon 09 Feb 2026 13:00:31 +0000
Manifest next update: Tue 10 Feb 2026 13:00:31 +0000
Files and hashes: 1: W8PKDWOo_M3A6SqIprrO_ydecEY.crl (hash: BzqvSQ3J4KdytDrlIzk2C3YSdRfX4jR2EOyX0iuFbkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/1073e6-c487-478f-b9d9-3c1e0518f9e5/1/W8PKDWOo_M3A6SqIprrO_ydecEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/1073e6-c487-478f-b9d9-3c1e0518f9e5/1/W8PKDWOo_M3A6SqIprrO_ydecEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/W8PKDWOo_M3A6SqIprrO_ydecEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7d:45:d1:eb:52:1a:f7:f9:fb:63:7b:c8:d2:f3:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bc3ca0d63a8fccdc0e92a88a6baceff275e7046
Validity
Not Before: Feb 9 13:00:31 2026 GMT
Not After : Feb 10 13:00:31 2026 GMT
Subject: CN=c2d7f852c45d39d69a940623609c30be379c898c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:88:9a:f8:e2:17:6e:63:28:fe:12:8b:45:7f:
c0:ba:d9:d9:0a:e7:c4:dc:78:9a:55:61:7f:90:9c:
e5:7b:d9:49:7c:72:32:29:ff:6c:4a:2a:7c:e3:77:
d9:1e:5d:27:06:96:56:14:4d:60:61:02:48:1c:4a:
f4:90:63:8e:47:0d:59:5b:3e:a5:c5:ef:ff:68:a5:
6c:47:d1:7f:c3:27:44:15:80:62:7c:29:cf:d5:fb:
e6:a9:d9:ce:88:18:68:61:cf:ee:44:0a:da:81:06:
5f:d1:f2:30:6b:fd:76:0a:76:f6:35:a0:e4:53:1a:
ed:39:04:4a:fd:9c:c9:9a:4e:a4:40:7c:25:96:4d:
04:8b:06:4f:72:ed:47:22:9c:e9:f8:2f:f8:2d:18:
15:d2:c5:1a:bd:11:eb:17:b3:21:3d:da:bd:a8:64:
4b:df:65:24:9c:ce:19:61:ad:92:ef:1f:db:31:cc:
9c:3d:d1:f2:81:0c:73:49:ed:0f:7f:55:3a:ee:af:
c1:b6:e5:42:f4:a4:6b:f7:4b:e0:c9:32:a9:f0:63:
ac:40:7d:08:ff:6f:e8:87:a0:fd:e8:88:a8:6d:98:
a0:48:42:2e:10:a2:d4:b1:3d:eb:b1:b5:e7:47:0e:
cb:d2:74:31:36:57:9c:8a:66:cc:c8:4f:10:c8:9c:
4f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:D7:F8:52:C4:5D:39:D6:9A:94:06:23:60:9C:30:BE:37:9C:89:8C
X509v3 Authority Key Identifier:
keyid:5B:C3:CA:0D:63:A8:FC:CD:C0:E9:2A:88:A6:BA:CE:FF:27:5E:70:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W8PKDWOo_M3A6SqIprrO_ydecEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1073e6-c487-478f-b9d9-3c1e0518f9e5/1/W8PKDWOo_M3A6SqIprrO_ydecEY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1073e6-c487-478f-b9d9-3c1e0518f9e5/1/W8PKDWOo_M3A6SqIprrO_ydecEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:4e:93:c4:8f:63:f7:25:1f:26:16:a3:f5:43:45:90:35:1a:
62:cd:1b:51:4b:fa:ca:d0:0e:42:7b:c1:31:39:8f:2c:32:7f:
95:c7:a3:3c:82:9c:35:c3:0a:56:c6:55:e9:69:c2:4d:58:ef:
ad:13:1d:7c:81:0e:ad:74:3b:9c:90:49:26:f5:ff:c5:71:e4:
d1:1c:5e:96:6b:09:b3:76:75:1e:f1:5e:18:33:24:7b:30:b9:
48:24:25:33:a1:e1:36:2c:3b:14:19:17:42:c7:9c:10:ce:cc:
c2:7d:60:fe:75:9d:8b:90:60:a7:a9:71:80:35:68:c6:af:91:
b6:2a:6f:25:9a:49:30:be:ea:86:b9:91:fa:25:59:01:60:df:
7c:e4:94:35:61:ae:97:dd:ca:1a:44:8b:ff:88:33:e5:f9:15:
53:03:04:72:e8:35:c9:62:4c:18:cd:6c:49:06:f4:f7:7e:6a:
10:ef:07:d7:46:70:7b:55:a8:69:47:aa:83:bb:c9:12:5a:a1:
ac:53:68:ee:7e:2d:57:96:c8:a6:e3:ad:31:45:83:a7:eb:69:
45:01:a3:c7:79:9e:41:4f:a5:c8:0d:c0:56:2f:de:7b:29:5a:
d2:41:f9:8d:f3:92:8f:10:6f:db:4f:97:3c:b1:09:4a:89:90:
68:07:ca:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:32:33 2026 by rpki-client