This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/3e50ff-a566-4cb1-a110-3a8af02951ee/1/wrAFQRuLMhCDQsn3BZUCIGuYJME.mft
File: wrAFQRuLMhCDQsn3BZUCIGuYJME.mft (raw, json)
Hash identifier: VA4BPdjJw+ZzomchA9WJ4qGHEtGYEfi0IMGVVDUlqQs=
Subject key identifier: 13:7D:41:CE:15:5B:5A:E9:1B:C9:95:14:DD:B5:E6:ED:40:79:9E:91
Authority key identifier: C2:B0:05:41:1B:8B:32:10:83:42:C9:F7:05:95:02:20:6B:98:24:C1
Certificate issuer: /CN=c2b005411b8b32108342c9f7059502206b9824c1
Certificate serial: 019C43595A24D036E2241E2D7588AB2AC49E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wrAFQRuLMhCDQsn3BZUCIGuYJME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/3e50ff-a566-4cb1-a110-3a8af02951ee/1/wrAFQRuLMhCDQsn3BZUCIGuYJME.mft
Manifest number: 180E
Signing time: Mon 09 Feb 2026 17:00:55 +0000
Manifest this update: Mon 09 Feb 2026 17:00:55 +0000
Manifest next update: Tue 10 Feb 2026 17:00:55 +0000
Files and hashes: 1: wrAFQRuLMhCDQsn3BZUCIGuYJME.crl (hash: IJ8Lfon48Koc7HYfn340sxI/nUsTO+HIn44c5FzV7Zs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/3e50ff-a566-4cb1-a110-3a8af02951ee/1/wrAFQRuLMhCDQsn3BZUCIGuYJME.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/3e50ff-a566-4cb1-a110-3a8af02951ee/1/wrAFQRuLMhCDQsn3BZUCIGuYJME.mft
rsync://rpki.ripe.net/repository/DEFAULT/wrAFQRuLMhCDQsn3BZUCIGuYJME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 17:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:59:5a:24:d0:36:e2:24:1e:2d:75:88:ab:2a:c4:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2b005411b8b32108342c9f7059502206b9824c1
Validity
Not Before: Feb 9 17:00:55 2026 GMT
Not After : Feb 10 17:00:55 2026 GMT
Subject: CN=137d41ce155b5ae91bc99514ddb5e6ed40799e91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:62:9d:48:ca:c9:f5:bc:5d:67:95:2e:df:e2:
bd:81:35:a3:52:ea:e6:3a:74:01:42:fa:0a:d9:fa:
7a:58:93:84:74:d9:71:45:e3:4e:1c:39:a1:aa:aa:
ec:4e:40:85:87:26:77:24:c6:33:db:87:87:41:9d:
c1:8c:c7:78:2a:3a:35:1c:c3:b0:18:50:43:53:cd:
14:ce:a3:b0:0d:c4:06:88:fd:da:4a:47:45:c1:1c:
af:cf:d3:f4:16:ea:a0:5e:20:6f:bc:bf:8c:e9:9d:
96:69:fd:c7:eb:0c:14:d6:63:cf:14:89:6e:98:32:
e0:9b:db:dd:3a:9d:98:8e:3a:ea:cc:84:4b:1d:4a:
af:98:54:e5:19:2b:92:6f:ef:2f:b0:39:ec:71:02:
7e:f4:a7:fd:8e:de:a6:30:1c:0b:3b:2f:19:3d:60:
56:43:75:d5:b7:15:76:98:98:06:26:10:c7:8c:53:
72:95:48:96:85:75:35:cf:38:95:d2:ca:52:58:d5:
4c:7c:2e:e5:4d:cc:c5:23:1c:b4:32:d5:09:b6:19:
37:3e:d2:1c:a0:52:70:56:c0:d6:f6:d3:56:65:8c:
f9:c6:6e:8e:78:9b:b1:0f:2d:6f:80:5b:16:c2:db:
99:c7:2c:75:b3:1a:e4:e8:5d:b0:1c:b7:dc:87:9a:
e6:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:7D:41:CE:15:5B:5A:E9:1B:C9:95:14:DD:B5:E6:ED:40:79:9E:91
X509v3 Authority Key Identifier:
keyid:C2:B0:05:41:1B:8B:32:10:83:42:C9:F7:05:95:02:20:6B:98:24:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wrAFQRuLMhCDQsn3BZUCIGuYJME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/3e50ff-a566-4cb1-a110-3a8af02951ee/1/wrAFQRuLMhCDQsn3BZUCIGuYJME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/3e50ff-a566-4cb1-a110-3a8af02951ee/1/wrAFQRuLMhCDQsn3BZUCIGuYJME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:fb:dd:c1:7b:31:55:71:f6:eb:a3:9e:e3:4c:42:95:7e:05:
5b:23:67:fd:42:21:9d:a1:6c:91:74:2e:e0:d4:0e:7a:1a:fd:
aa:4b:c5:0e:ec:fd:4f:56:24:0b:d6:92:25:65:a5:34:5f:1a:
71:f7:6b:a2:ce:58:69:71:9e:ac:71:91:de:7e:e8:1c:be:8b:
8e:bb:f3:db:5f:a7:60:a1:cb:c2:84:09:73:cb:79:90:04:fe:
2a:37:91:65:ba:0e:52:f9:18:ad:f3:6a:2b:3d:81:9f:7e:5a:
e2:44:9b:93:d0:57:b3:2d:9a:79:af:6a:5c:8e:9c:3a:68:28:
e3:b7:0e:16:e3:e1:c7:4e:f7:06:ca:25:24:fd:0e:1b:5b:eb:
d7:51:27:f8:39:91:db:d1:dc:fb:cf:1b:20:28:f6:c9:06:ee:
56:e1:0b:e7:57:76:3d:1f:05:98:75:f9:3f:91:1c:28:42:1f:
b7:8e:02:df:06:ab:95:63:7c:16:c7:79:4b:4d:bf:62:5d:61:
b5:09:7a:cc:a7:65:04:5d:26:4a:50:5b:35:2d:9b:df:f4:cc:
fb:09:d0:9d:c2:1c:43:bd:38:0f:98:7c:31:4c:19:d8:59:72:
50:84:d0:24:db:eb:72:2c:53:41:0d:a7:4b:49:db:e0:f2:e0:
a6:b3:23:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 02:52:14 2026 by rpki-client