This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/ae4fb1-5c16-4ce8-9eee-447cfcb5e688/1/WTkvkfQ6Z_UKp5oBFuqk3pvXNR4.mft
File: WTkvkfQ6Z_UKp5oBFuqk3pvXNR4.mft (raw, json)
Hash identifier: HqBKEiK03FwRA5LV23twoLWOt2BeuAJ4Hyhlkmgg1Mw=
Subject key identifier: 7C:5D:34:64:9D:87:89:AA:41:13:7B:5E:5C:36:0F:F4:D7:04:00:32
Authority key identifier: 59:39:2F:91:F4:3A:67:F5:0A:A7:9A:01:16:EA:A4:DE:9B:D7:35:1E
Certificate issuer: /CN=59392f91f43a67f50aa79a0116eaa4de9bd7351e
Certificate serial: 019C42101F5074315835D9DEF5410C429847
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WTkvkfQ6Z_UKp5oBFuqk3pvXNR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/ae4fb1-5c16-4ce8-9eee-447cfcb5e688/1/WTkvkfQ6Z_UKp5oBFuqk3pvXNR4.mft
Manifest number: 036D
Signing time: Mon 09 Feb 2026 11:01:18 +0000
Manifest this update: Mon 09 Feb 2026 11:01:18 +0000
Manifest next update: Tue 10 Feb 2026 11:01:18 +0000
Files and hashes: 1: WTkvkfQ6Z_UKp5oBFuqk3pvXNR4.crl (hash: ayjbgql7iTXfdQ4SNK6hAnfZGUpqzGNKoE7KLnZff8g=)
2: zyPfwNzuMJJJDuYOn0Bgo058YW0.roa (hash: IKRTWNsdeOseZqcj2LOpmcRYiO5dx0jyp5Cgu9585p8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/ae4fb1-5c16-4ce8-9eee-447cfcb5e688/1/WTkvkfQ6Z_UKp5oBFuqk3pvXNR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/ae4fb1-5c16-4ce8-9eee-447cfcb5e688/1/WTkvkfQ6Z_UKp5oBFuqk3pvXNR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WTkvkfQ6Z_UKp5oBFuqk3pvXNR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:10:1f:50:74:31:58:35:d9:de:f5:41:0c:42:98:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59392f91f43a67f50aa79a0116eaa4de9bd7351e
Validity
Not Before: Feb 9 11:01:18 2026 GMT
Not After : Feb 10 11:01:18 2026 GMT
Subject: CN=7c5d34649d8789aa41137b5e5c360ff4d7040032
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:df:41:1d:16:24:05:70:b2:18:89:d3:f5:15:
75:d2:20:2f:b0:09:95:fd:11:bc:29:f0:64:01:61:
93:41:8e:c2:e3:83:77:dd:e6:0c:b1:63:47:0b:cc:
8c:a4:2a:f1:cc:d8:fa:56:46:52:d0:dd:fe:39:54:
72:0c:5a:e4:ae:02:31:54:88:3f:45:d1:9d:47:8c:
06:6a:0b:f8:c1:56:50:78:54:8b:cd:fe:7f:55:66:
65:f9:07:d8:d4:e8:36:c9:67:ce:61:69:da:53:a2:
11:01:52:e4:01:58:61:14:5c:34:5a:af:73:2b:21:
c6:62:57:66:f7:91:0b:19:2f:99:62:4c:7a:b7:df:
1f:cb:a0:a9:d7:23:5d:aa:c7:0b:00:45:45:7c:ac:
58:90:be:ee:3a:4e:30:39:ca:a7:80:a3:a9:fb:77:
b0:3f:e6:da:5f:5d:16:05:6c:8e:f7:a0:f6:bd:e1:
d0:1b:33:f0:d0:2f:d3:e8:ea:9f:11:c7:0d:42:07:
ef:6a:6a:5d:32:ef:03:2f:9e:0f:11:17:09:3a:4a:
ce:5e:7b:68:74:d9:32:ba:1e:e1:c1:4b:24:6e:bf:
e2:78:17:9c:be:b2:b0:7f:5f:a9:40:6f:39:ab:db:
08:8b:c4:9c:2c:63:94:8c:c5:cd:7c:32:3e:dc:21:
e8:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:5D:34:64:9D:87:89:AA:41:13:7B:5E:5C:36:0F:F4:D7:04:00:32
X509v3 Authority Key Identifier:
keyid:59:39:2F:91:F4:3A:67:F5:0A:A7:9A:01:16:EA:A4:DE:9B:D7:35:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WTkvkfQ6Z_UKp5oBFuqk3pvXNR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/ae4fb1-5c16-4ce8-9eee-447cfcb5e688/1/WTkvkfQ6Z_UKp5oBFuqk3pvXNR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/ae4fb1-5c16-4ce8-9eee-447cfcb5e688/1/WTkvkfQ6Z_UKp5oBFuqk3pvXNR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:88:91:f4:30:01:d6:15:d3:f7:e3:2c:3f:21:3e:bd:47:a1:
7d:ea:0e:bb:3e:0e:e8:5a:d4:71:c3:df:33:5b:97:d1:b4:74:
08:1b:79:7c:89:99:a4:7e:db:6e:ad:27:87:5e:5a:33:fb:62:
cd:3d:e1:1a:af:ac:5d:21:5f:66:56:18:17:39:af:b5:60:9e:
52:63:b4:c4:4a:0b:5e:97:15:a0:ee:db:2e:6e:63:28:b7:4c:
f4:c4:a6:9d:b1:74:23:17:17:28:b2:94:5a:9b:3f:e8:4f:68:
4a:0c:b3:4b:52:60:f4:f3:24:2f:35:52:97:0a:6e:ef:e1:8b:
ea:56:1f:90:72:14:4d:70:b1:4c:e4:56:f4:cc:5b:55:8d:ac:
c6:01:13:32:73:d3:00:b7:be:7c:81:b3:4f:23:a7:b0:17:66:
d2:37:83:56:f3:c7:b7:09:a5:3a:6e:ea:98:30:07:b0:a4:d2:
44:fc:a2:99:67:c7:b8:a0:10:b7:47:4d:26:60:2e:1d:82:28:
75:55:88:51:15:99:f6:5e:69:de:df:b6:b9:b8:ba:cd:5c:6a:
c8:2e:e3:de:41:28:12:9e:e3:ba:45:70:d9:c7:be:7c:05:02:
10:98:05:e1:4f:47:2f:43:83:59:48:d3:66:2b:eb:4d:85:e7:
82:b2:8b:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCEB9QdDFYNdne9UEMQphHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5MzkyZjkxZjQzYTY3ZjUwYWE3OWEwMTE2ZWFhNGRlOWJk
NzM1MWUwHhcNMjYwMjA5MTEwMTE4WhcNMjYwMjEwMTEwMTE4WjAzMTEwLwYDVQQD
Eyg3YzVkMzQ2NDlkODc4OWFhNDExMzdiNWU1YzM2MGZmNGQ3MDQwMDMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmd9BHRYkBXCyGInT9RV10iAvsAmV
/RG8KfBkAWGTQY7C44N33eYMsWNHC8yMpCrxzNj6VkZS0N3+OVRyDFrkrgIxVIg/
RdGdR4wGagv4wVZQeFSLzf5/VWZl+QfY1Og2yWfOYWnaU6IRAVLkAVhhFFw0Wq9z
KyHGYldm95ELGS+ZYkx6t98fy6Cp1yNdqscLAEVFfKxYkL7uOk4wOcqngKOp+3ew
P+baX10WBWyO96D2veHQGzPw0C/T6OqfEccNQgfvampdMu8DL54PERcJOkrOXnto
dNkyuh7hwUskbr/ieBecvrKwf1+pQG85q9sIi8ScLGOUjMXNfDI+3CHoqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHxdNGSdh4mqQRN7Xlw2D/TXBAAyMB8GA1UdIwQY
MBaAFFk5L5H0Omf1CqeaARbqpN6b1zUeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1RrdmtmUTZaX1VLcDVvQkZ1cWszcHZYTlI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9hZTRmYjEtNWMxNi00Y2U4LTllZWUt
NDQ3Y2ZjYjVlNjg4LzEvV1RrdmtmUTZaX1VLcDVvQkZ1cWszcHZYTlI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS9hZTRmYjEtNWMxNi00Y2U4LTllZWUtNDQ3Y2ZjYjVlNjg4
LzEvV1RrdmtmUTZaX1VLcDVvQkZ1cWszcHZYTlI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJIiR9DAB
1hXT9+MsPyE+vUehfeoOuz4O6FrUccPfM1uX0bR0CBt5fImZpH7bbq0nh15aM/ti
zT3hGq+sXSFfZlYYFzmvtWCeUmO0xEoLXpcVoO7bLm5jKLdM9MSmnbF0IxcXKLKU
Wps/6E9oSgyzS1Jg9PMkLzVSlwpu7+GL6lYfkHIUTXCxTORW9MxbVY2sxgETMnPT
ALe+fIGzTyOnsBdm0jeDVvPHtwmlOm7qmDAHsKTSRPyimWfHuKAQt0dNJmAuHYIo
dVWIURWZ9l5p3t+2ubi6zVxqyC7j3kEoEp7jukVw2ce+fAUCEJgF4U9HL0ODWUjT
ZivrTYXngrKLeQ==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:46:10 2026 by rpki-client