This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.mft
File: _wF_h4Qysv4x9YFTtEqBZZ1QuiA.mft (raw, json)
Hash identifier: 9sjI3OtrotRGpneFmfg6nTu2Qbky4kWYMTAq3FWkdx4=
Subject key identifier: A0:80:A9:0B:91:44:34:EA:B9:0B:1D:31:5B:0A:59:28:5F:D6:9F:10
Authority key identifier: FF:01:7F:87:84:32:B2:FE:31:F5:81:53:B4:4A:81:65:9D:50:BA:20
Certificate issuer: /CN=ff017f878432b2fe31f58153b44a81659d50ba20
Certificate serial: 019C420F9367C620D3E7FE058AFF6ED7FC09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.mft
Manifest number: 1505
Signing time: Mon 09 Feb 2026 11:00:42 +0000
Manifest this update: Mon 09 Feb 2026 11:00:42 +0000
Manifest next update: Tue 10 Feb 2026 11:00:42 +0000
Files and hashes: 1: OBjM2iKRMxSjqa98ychsixD6X5g.roa (hash: q2aIFop5k0Cp3GYeaHHvGFWE530UcdAx8s7zzr0tPgM=)
2: _wF_h4Qysv4x9YFTtEqBZZ1QuiA.crl (hash: YjtWXD9VdzL5tQ/n6HDilMK4Fziew7MoJCxVQGrmMhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:0f:93:67:c6:20:d3:e7:fe:05:8a:ff:6e:d7:fc:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff017f878432b2fe31f58153b44a81659d50ba20
Validity
Not Before: Feb 9 11:00:42 2026 GMT
Not After : Feb 10 11:00:42 2026 GMT
Subject: CN=a080a90b914434eab90b1d315b0a59285fd69f10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:aa:e0:62:87:61:d2:49:45:15:4d:6c:7b:19:
c1:a0:73:f4:39:51:c9:aa:53:2a:d6:53:58:46:c5:
54:88:a8:a0:cf:33:dc:5b:51:cb:31:da:da:59:47:
36:93:da:09:b2:ed:64:5f:35:f6:04:10:60:d8:49:
a5:d8:4a:d0:c5:1e:45:e0:bc:5e:a8:67:a2:52:a2:
10:bc:ab:e8:90:86:ca:23:f1:df:6c:92:4c:ed:b2:
c4:de:93:56:ca:9e:ce:f8:8f:55:b3:4d:69:2d:cd:
fb:da:f4:14:7c:e5:02:56:10:f1:ce:d3:07:2d:ff:
26:df:87:93:e5:21:cb:d1:ea:05:5d:50:bb:d7:d9:
1c:86:c4:ae:c9:c7:1e:ac:d4:8b:69:09:55:34:9f:
97:72:56:73:16:24:b7:4b:5e:66:5b:a2:c7:33:31:
5b:58:f2:b8:c2:8a:aa:88:e2:ad:49:83:60:df:1f:
a2:70:44:05:be:16:7d:6f:09:5d:11:49:27:89:93:
74:55:c9:21:27:5e:ba:9b:5e:50:16:41:51:2b:87:
bb:65:b0:06:01:23:59:41:e6:c4:4e:1c:b1:2a:53:
ab:e2:3c:eb:83:7f:86:38:f8:33:9f:97:20:55:a6:
0f:20:50:f2:61:84:99:c9:d2:84:0d:e7:4d:4c:b2:
95:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:80:A9:0B:91:44:34:EA:B9:0B:1D:31:5B:0A:59:28:5F:D6:9F:10
X509v3 Authority Key Identifier:
keyid:FF:01:7F:87:84:32:B2:FE:31:F5:81:53:B4:4A:81:65:9D:50:BA:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:ec:a4:3c:35:64:4b:20:d1:cf:01:ae:e0:36:a8:77:9a:9d:
ec:23:89:b5:8d:dc:fa:71:87:fc:60:14:8e:cf:32:b0:ac:d1:
e6:43:37:af:f8:22:bb:70:40:f8:6d:b1:16:e3:0c:50:d5:4f:
89:f8:3e:a4:87:76:89:d1:1a:02:8c:b6:51:4e:3f:98:1c:1d:
b3:16:c6:c0:8f:6b:9c:62:f3:bd:99:6d:79:06:b3:63:ff:73:
bc:74:99:04:9a:53:6a:c2:73:7d:b4:09:e4:f4:41:24:15:3c:
4c:40:12:f4:ba:49:fd:c2:98:8c:bd:6b:1b:1a:f8:dd:9e:d4:
96:d2:a1:f3:ab:fa:30:8c:22:b7:30:f5:84:22:14:bb:ad:b0:
98:8e:4a:cf:9e:7d:92:d8:30:a3:b0:1b:6d:6a:8e:68:c1:82:
79:df:89:e4:69:f2:a6:19:9e:1b:c0:46:52:fd:c8:ee:da:c6:
e2:87:38:93:63:f2:92:8d:45:63:85:ab:f8:3f:b6:6f:ed:29:
e2:db:a6:43:4b:69:af:69:e6:c2:57:20:c8:d3:5d:fc:0a:f5:
25:e4:2d:e5:f7:c0:52:71:93:30:d1:52:e2:88:16:8d:bd:39:
77:af:9a:d9:c7:cc:79:80:4e:31:c4:56:28:82:76:cd:c7:ab:
7f:68:71:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:32:38 2026 by rpki-client