This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/d67b7b-c798-4901-80f9-e3834516fc08/1/WNLScV9D90e-p2Lc4Wa8pLjpZes.mft
File: WNLScV9D90e-p2Lc4Wa8pLjpZes.mft (raw, json)
Hash identifier: mt8Sac1hzIbl5xL+cpvCvhPwK9pe0sCIw7BiqQxJSfE=
Subject key identifier: 37:85:78:86:F2:73:E7:17:75:D3:83:3D:25:82:24:CE:6C:C7:F3:70
Authority key identifier: 58:D2:D2:71:5F:43:F7:47:BE:A7:62:DC:E1:66:BC:A4:B8:E9:65:EB
Certificate issuer: /CN=58d2d2715f43f747bea762dce166bca4b8e965eb
Certificate serial: 019BFF543F41EF89D023570A0381C60AF8B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WNLScV9D90e-p2Lc4Wa8pLjpZes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/d67b7b-c798-4901-80f9-e3834516fc08/1/WNLScV9D90e-p2Lc4Wa8pLjpZes.mft
Manifest number: 17FD
Signing time: Tue 27 Jan 2026 12:01:09 +0000
Manifest this update: Tue 27 Jan 2026 12:01:09 +0000
Manifest next update: Wed 28 Jan 2026 12:01:09 +0000
Files and hashes: 1: B0GjFFho4L3mRU1i2gZen9fWf8o.roa (hash: 0wLIwQSadFn+t/oVNRPg5fGLqnyacncDio6VpgbB62M=)
2: WNLScV9D90e-p2Lc4Wa8pLjpZes.crl (hash: PK/JnDi70goqKxFArn3133c26+LK0klwxhbRZyajdr8=)
3: jDqKUZBODUjBnVNebvS0O1uTYVg.roa (hash: +/llkkAW3JdOUYZ8UHsLUQJmNLSLCBnzHv87Ol04gZU=)
4: vjjNirlV9YoXstARjswGH3SkSGs.roa (hash: chn0/YJ36zUfQlB64u8vlgqzqY6hyVXARJHun9FywnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/d67b7b-c798-4901-80f9-e3834516fc08/1/WNLScV9D90e-p2Lc4Wa8pLjpZes.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/d67b7b-c798-4901-80f9-e3834516fc08/1/WNLScV9D90e-p2Lc4Wa8pLjpZes.mft
rsync://rpki.ripe.net/repository/DEFAULT/WNLScV9D90e-p2Lc4Wa8pLjpZes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Jan 2026 12:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:ff:54:3f:41:ef:89:d0:23:57:0a:03:81:c6:0a:f8:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58d2d2715f43f747bea762dce166bca4b8e965eb
Validity
Not Before: Jan 27 12:01:09 2026 GMT
Not After : Jan 28 12:01:09 2026 GMT
Subject: CN=37857886f273e71775d3833d258224ce6cc7f370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:24:c6:e2:2f:76:4b:34:4d:81:5c:2d:fb:5a:
47:73:fd:d8:cd:b5:10:19:75:be:7d:b3:f9:4d:5c:
fc:97:dc:e9:24:bd:65:82:65:a0:24:05:5d:00:c8:
d1:13:c7:69:73:11:a0:7c:51:cb:fa:98:fd:24:f0:
77:42:76:8b:06:c1:89:21:c7:a0:54:d6:3d:74:07:
bd:14:8b:bd:36:9d:4a:15:68:f9:cb:5a:9d:de:a5:
06:7a:25:2e:51:51:4f:c8:03:4e:0e:98:ec:5b:eb:
25:a9:21:d2:16:c0:ff:94:64:52:ab:cc:13:64:fa:
a4:a8:b5:27:83:a3:8a:7f:5a:ed:f6:25:1e:04:cc:
63:9e:1e:aa:83:ca:bc:21:b8:33:b5:fe:af:55:e1:
34:ba:a2:80:05:fe:64:14:c3:13:db:c0:09:d9:1d:
fb:74:fe:55:30:00:26:02:93:73:f9:c9:ee:b9:c6:
61:5a:58:39:ad:51:be:27:1a:a6:c9:66:02:1d:8e:
b6:9f:2b:07:84:1b:53:71:85:7d:12:73:16:f7:5b:
bb:5f:c7:4b:68:ba:d9:92:43:fc:3a:6b:94:7e:f2:
56:1a:68:64:96:99:0f:cd:93:e5:98:2f:6a:e1:de:
47:67:80:83:48:73:a3:20:98:6c:43:16:73:51:59:
49:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:85:78:86:F2:73:E7:17:75:D3:83:3D:25:82:24:CE:6C:C7:F3:70
X509v3 Authority Key Identifier:
keyid:58:D2:D2:71:5F:43:F7:47:BE:A7:62:DC:E1:66:BC:A4:B8:E9:65:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WNLScV9D90e-p2Lc4Wa8pLjpZes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d67b7b-c798-4901-80f9-e3834516fc08/1/WNLScV9D90e-p2Lc4Wa8pLjpZes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d67b7b-c798-4901-80f9-e3834516fc08/1/WNLScV9D90e-p2Lc4Wa8pLjpZes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:b9:72:fc:b0:64:a4:fd:4c:7c:30:3b:80:e9:0d:92:c6:61:
86:78:c3:79:0a:87:d8:d9:40:54:5d:fb:63:fc:9c:ab:0c:49:
85:50:9b:f8:dd:d9:f0:20:c7:14:67:cf:fe:7d:ea:9b:03:95:
7f:df:36:66:bc:76:89:a6:4e:90:5d:da:c9:41:18:9a:e8:1f:
11:73:bf:c9:b7:bb:cb:b8:7f:04:c8:41:78:bb:36:80:54:71:
23:4c:d1:40:77:2b:e4:7b:d2:9e:17:fb:9e:b8:d9:67:d9:c8:
e4:dd:1a:2e:dd:36:a6:7e:aa:94:a9:db:24:9c:73:b9:ee:80:
de:2f:e4:76:04:9b:86:10:2a:f2:1d:29:a7:b2:94:04:25:cd:
10:26:c1:17:5e:86:68:63:bf:5e:06:95:0c:e4:63:0c:b5:10:
d7:20:ed:a0:65:6d:01:b1:e4:a2:c1:b8:4c:c1:91:f1:c2:d4:
0f:ac:2d:f8:79:9e:ce:97:6c:9e:76:84:27:4b:66:8e:19:41:
40:80:3f:ed:b4:37:57:7c:7c:84:99:aa:ef:50:61:6c:15:84:
74:f7:2a:92:58:ba:ff:6c:fe:6e:52:c5:85:51:b6:63:61:c4:
38:81:14:55:fa:a4:62:b8:dd:b4:f0:c0:32:08:7a:bd:58:fc:
01:de:4e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 17:11:33 2026 by rpki-client