This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/Wd2lOf64-KNyU0JgBnDAwVTkuqo.mft
File: Wd2lOf64-KNyU0JgBnDAwVTkuqo.mft (raw, json)
Hash identifier: ICnavbPy2CAT1omMKdk1Tskqxx9tYAYBA7gvx7s4Abo=
Subject key identifier: 55:27:1C:AF:58:6F:48:F6:A8:82:2D:0C:57:C0:21:05:FA:4F:73:B7
Authority key identifier: 59:DD:A5:39:FE:B8:F8:A3:72:53:42:60:06:70:C0:C1:54:E4:BA:AA
Certificate issuer: /CN=59dda539feb8f8a3725342600670c0c154e4baaa
Certificate serial: 019C41A2760D02143878CA2D4BBA5D8E6860
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wd2lOf64-KNyU0JgBnDAwVTkuqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/Wd2lOf64-KNyU0JgBnDAwVTkuqo.mft
Manifest number: 1641
Signing time: Mon 09 Feb 2026 09:01:31 +0000
Manifest this update: Mon 09 Feb 2026 09:01:31 +0000
Manifest next update: Tue 10 Feb 2026 09:01:31 +0000
Files and hashes: 1: Wd2lOf64-KNyU0JgBnDAwVTkuqo.crl (hash: zZlG0CizI1i/CW7Ku6Qp/ZsCuPT24pUzkB4o+7dSqFQ=)
2: dNkHE3jPImN4EseW6DyqfCow5I0.roa (hash: X9y8DNM6+jX2FyF40QujMf5GG93s9rWer+VdTVcTHgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/Wd2lOf64-KNyU0JgBnDAwVTkuqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/Wd2lOf64-KNyU0JgBnDAwVTkuqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wd2lOf64-KNyU0JgBnDAwVTkuqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 09:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:a2:76:0d:02:14:38:78:ca:2d:4b:ba:5d:8e:68:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59dda539feb8f8a3725342600670c0c154e4baaa
Validity
Not Before: Feb 9 09:01:31 2026 GMT
Not After : Feb 10 09:01:31 2026 GMT
Subject: CN=55271caf586f48f6a8822d0c57c02105fa4f73b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4c:bd:73:8d:62:61:de:08:46:dd:29:77:f9:
77:66:53:e4:12:27:e1:2f:1b:03:ff:f4:7b:be:5b:
e7:7f:b5:6a:4e:d9:e4:b5:29:4b:6b:9e:f8:9e:7c:
bb:a4:70:32:69:9a:bf:dc:5c:c3:84:7b:99:71:f1:
5b:59:ee:15:ab:c9:6d:31:eb:5f:14:0f:15:26:31:
1e:ad:b6:68:27:d4:c1:18:e5:d5:4f:7c:d1:70:97:
5d:54:58:0d:e8:d4:35:14:a5:2c:9b:76:15:78:05:
78:fa:3e:93:66:6a:2c:56:b3:dd:01:16:3a:0b:01:
6b:a1:2f:80:5e:a6:85:c2:14:c2:ee:d6:2e:c4:97:
68:c6:d7:80:d2:96:76:ad:69:df:26:8f:e8:b6:82:
d7:26:f7:38:c3:b2:ee:54:f1:03:53:9a:43:3a:ed:
8b:a0:22:8f:8d:1d:c4:8b:63:b5:f2:9d:6a:1e:f7:
58:37:40:54:a6:9c:b6:9d:af:70:70:d9:b8:20:e1:
91:f1:59:41:9b:42:5b:4a:4d:d2:6c:af:10:d4:db:
18:f7:bb:2e:82:88:49:8f:d1:4f:0a:eb:f0:1e:4f:
f6:bb:a7:5e:e5:d0:22:c4:15:7e:eb:cf:5b:a3:d0:
7e:cb:91:b1:55:d8:07:85:e1:cc:34:80:6b:bf:41:
32:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:27:1C:AF:58:6F:48:F6:A8:82:2D:0C:57:C0:21:05:FA:4F:73:B7
X509v3 Authority Key Identifier:
keyid:59:DD:A5:39:FE:B8:F8:A3:72:53:42:60:06:70:C0:C1:54:E4:BA:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wd2lOf64-KNyU0JgBnDAwVTkuqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/Wd2lOf64-KNyU0JgBnDAwVTkuqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/Wd2lOf64-KNyU0JgBnDAwVTkuqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:f2:b5:27:b9:9a:78:b7:83:6b:a2:d9:ba:0f:bb:35:0f:5a:
b3:42:23:f5:8a:c9:ce:a4:3b:99:b3:1f:b2:16:04:f2:c0:82:
b3:a4:50:02:22:51:7a:32:d1:af:58:4f:ab:37:95:5d:2e:4c:
8d:49:60:3a:98:07:84:c1:47:51:ad:ce:13:4f:bc:7d:47:5f:
69:0c:b1:5c:1d:5a:bc:db:65:bb:1a:88:77:3f:11:ad:00:df:
22:92:99:2d:cf:1b:1c:cc:d7:1e:7a:8c:1d:23:3e:09:7a:1c:
9c:0a:29:90:ab:bc:33:2c:7d:47:47:11:2d:e8:10:82:39:c1:
4c:74:87:89:6a:ae:b3:fd:82:d2:68:b9:28:84:b0:52:3f:81:
71:dc:c9:c8:21:c4:2a:20:af:1b:5d:10:1b:3b:b0:9e:e7:f1:
25:62:fc:61:a6:d9:fa:fc:4f:15:2f:68:2e:2a:ff:07:96:74:
80:a8:47:cb:12:97:98:05:ae:1e:ed:af:23:97:14:0c:ea:cc:
84:00:8f:65:bf:57:2b:cb:b7:c8:d7:7e:7a:03:66:a4:3d:94:
99:6c:aa:12:63:e0:dd:b2:a6:aa:71:47:45:3d:84:83:0d:a0:
7a:81:b8:6a:1b:5a:04:ca:d7:3f:91:a3:21:52:f9:9a:2a:a7:
95:ca:08:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxBonYNAhQ4eMotS7pdjmhgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5ZGRhNTM5ZmViOGY4YTM3MjUzNDI2MDA2NzBjMGMxNTRl
NGJhYWEwHhcNMjYwMjA5MDkwMTMxWhcNMjYwMjEwMDkwMTMxWjAzMTEwLwYDVQQD
Eyg1NTI3MWNhZjU4NmY0OGY2YTg4MjJkMGM1N2MwMjEwNWZhNGY3M2I3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0y9c41iYd4IRt0pd/l3ZlPkEifh
LxsD//R7vlvnf7VqTtnktSlLa574nny7pHAyaZq/3FzDhHuZcfFbWe4Vq8ltMetf
FA8VJjEerbZoJ9TBGOXVT3zRcJddVFgN6NQ1FKUsm3YVeAV4+j6TZmosVrPdARY6
CwFroS+AXqaFwhTC7tYuxJdoxteA0pZ2rWnfJo/otoLXJvc4w7LuVPEDU5pDOu2L
oCKPjR3Ei2O18p1qHvdYN0BUppy2na9wcNm4IOGR8VlBm0JbSk3SbK8Q1NsY97su
gohJj9FPCuvwHk/2u6de5dAixBV+689bo9B+y5GxVdgHheHMNIBrv0EygQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFUnHK9Yb0j2qIItDFfAIQX6T3O3MB8GA1UdIwQY
MBaAFFndpTn+uPijclNCYAZwwMFU5LqqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2QybE9mNjQtS055VTBKZ0JuREF3VlRrdXFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9iZjJiYTUtZjI4MC00OWU1LTlhMzQt
ZmVjMjVkMmU5MThkLzEvV2QybE9mNjQtS055VTBKZ0JuREF3VlRrdXFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9iZjJiYTUtZjI4MC00OWU1LTlhMzQtZmVjMjVkMmU5MThk
LzEvV2QybE9mNjQtS055VTBKZ0JuREF3VlRrdXFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzPK1J7ma
eLeDa6LZug+7NQ9as0Ij9YrJzqQ7mbMfshYE8sCCs6RQAiJRejLRr1hPqzeVXS5M
jUlgOpgHhMFHUa3OE0+8fUdfaQyxXB1avNtluxqIdz8RrQDfIpKZLc8bHMzXHnqM
HSM+CXocnAopkKu8Myx9R0cRLegQgjnBTHSHiWqus/2C0mi5KISwUj+BcdzJyCHE
KiCvG10QGzuwnufxJWL8YabZ+vxPFS9oLir/B5Z0gKhHyxKXmAWuHu2vI5cUDOrM
hACPZb9XK8u3yNd+egNmpD2UmWyqEmPg3bKmqnFHRT2Egw2geoG4ahtaBMrXP5Gj
IVL5miqnlcoI+Q==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:33:28 2026 by rpki-client