This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/035e8a-70e3-487b-a04d-3d461dade4a9/1/wZtaLEnhxkinDHCK4b3kC2RMeAI.mft
File: wZtaLEnhxkinDHCK4b3kC2RMeAI.mft (raw, json)
Hash identifier: 0QoTSS374C/dz//0GKQlNdjlFvLxJ3GOdWlqAdBh9Wk=
Subject key identifier: 9B:6D:3A:6B:DF:44:AC:63:A4:71:93:F8:E2:AA:CA:62:50:D8:08:6D
Authority key identifier: C1:9B:5A:2C:49:E1:C6:48:A7:0C:70:8A:E1:BD:E4:0B:64:4C:78:02
Certificate issuer: /CN=c19b5a2c49e1c648a70c708ae1bde40b644c7802
Certificate serial: 019C43591A7713570807AB3D8EDAE5C2E233
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wZtaLEnhxkinDHCK4b3kC2RMeAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/035e8a-70e3-487b-a04d-3d461dade4a9/1/wZtaLEnhxkinDHCK4b3kC2RMeAI.mft
Manifest number: 1810
Signing time: Mon 09 Feb 2026 17:00:38 +0000
Manifest this update: Mon 09 Feb 2026 17:00:38 +0000
Manifest next update: Tue 10 Feb 2026 17:00:38 +0000
Files and hashes: 1: ch32gMkwgIvhncaw2j6_w1rWqBM.roa (hash: 2zNuBXW5TRNjyq7/jYrllStnRO2aSpxPfwq4qZw6++Y=)
2: wZtaLEnhxkinDHCK4b3kC2RMeAI.crl (hash: nlNWotl0FQxbjjMZFsGxk0bPrjUDbPyg9irm+9Cp108=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/035e8a-70e3-487b-a04d-3d461dade4a9/1/wZtaLEnhxkinDHCK4b3kC2RMeAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/035e8a-70e3-487b-a04d-3d461dade4a9/1/wZtaLEnhxkinDHCK4b3kC2RMeAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/wZtaLEnhxkinDHCK4b3kC2RMeAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:59:1a:77:13:57:08:07:ab:3d:8e:da:e5:c2:e2:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c19b5a2c49e1c648a70c708ae1bde40b644c7802
Validity
Not Before: Feb 9 17:00:38 2026 GMT
Not After : Feb 10 17:00:38 2026 GMT
Subject: CN=9b6d3a6bdf44ac63a47193f8e2aaca6250d8086d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f2:de:df:93:83:87:1c:ff:61:ef:a6:e1:af:
0b:21:a8:3d:10:eb:b4:7d:0c:6f:74:f9:9f:87:70:
31:1c:67:b9:be:a0:ec:97:f7:22:b1:c9:21:de:b0:
93:0f:72:6f:70:d0:09:50:a7:f6:7d:8c:f6:5d:50:
f2:d3:74:41:c0:2e:72:31:b8:74:33:75:51:91:b8:
4f:4f:33:1e:0a:3c:de:ec:62:d3:be:dc:ee:76:95:
6d:89:2e:03:03:7e:20:b0:ba:b2:ab:42:7a:22:e6:
3f:bc:14:15:f7:de:95:8b:76:df:14:42:6b:51:8a:
88:ea:dd:1d:62:ec:79:ed:13:ca:80:6d:84:08:e3:
0b:69:c1:04:af:85:5a:73:ef:0d:56:bf:e1:08:21:
fb:14:d0:39:84:25:70:bf:50:1e:67:81:05:8b:31:
c0:5c:43:0d:41:76:71:34:7c:b5:d3:59:df:b3:c5:
99:5b:fc:f4:60:04:99:5e:59:24:b9:b7:e5:c8:7d:
1b:77:bc:7c:cb:2b:28:75:73:93:89:e2:37:6a:54:
e7:c8:8e:91:b7:5b:43:11:d1:69:f7:b1:29:84:e0:
8d:f9:14:24:3c:92:6b:02:8d:9a:7c:f4:c3:50:3d:
ea:68:95:3b:6b:09:45:72:6d:f0:17:79:9d:46:b0:
04:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:6D:3A:6B:DF:44:AC:63:A4:71:93:F8:E2:AA:CA:62:50:D8:08:6D
X509v3 Authority Key Identifier:
keyid:C1:9B:5A:2C:49:E1:C6:48:A7:0C:70:8A:E1:BD:E4:0B:64:4C:78:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wZtaLEnhxkinDHCK4b3kC2RMeAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/035e8a-70e3-487b-a04d-3d461dade4a9/1/wZtaLEnhxkinDHCK4b3kC2RMeAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/035e8a-70e3-487b-a04d-3d461dade4a9/1/wZtaLEnhxkinDHCK4b3kC2RMeAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:f4:b4:bc:2d:ac:e1:be:e9:1d:d8:f2:43:19:f2:e0:a7:a0:
1e:0a:8c:8b:b3:a4:3b:2b:c7:bd:52:a6:b6:f4:0f:f9:70:e8:
2b:85:e9:bc:d0:a5:c5:6b:ec:ef:5d:6f:9d:df:cf:f7:65:fe:
cc:a2:60:a7:a3:de:e6:50:be:c6:46:0c:92:c4:c3:39:2d:3c:
0f:3e:f3:ee:17:cc:2a:e1:7e:da:b5:0c:32:26:52:a6:ff:af:
6a:5d:d1:c9:89:2b:af:83:58:c7:e6:78:dd:67:3e:f0:88:5d:
e8:87:a4:71:0d:82:da:a5:be:7a:f7:1b:c9:f2:b4:20:03:14:
a9:ba:f5:e9:57:05:97:3a:03:df:a7:a3:1d:9a:26:0a:a4:6c:
2a:54:b9:18:29:32:d0:fe:9c:da:ab:76:03:40:df:1c:38:8e:
a2:11:ec:a0:9d:0e:57:7f:cd:b8:98:01:64:49:e4:bd:cc:2f:
de:2b:26:0d:cc:98:b6:05:b2:0c:9e:e3:df:ca:48:f1:ee:ea:
cf:d4:28:ad:ba:8e:31:aa:01:5e:80:b4:c6:e4:f7:fe:9f:d2:
a8:0e:2f:51:e1:53:6e:16:06:c3:81:c8:28:24:0f:25:67:ad:
c1:95:13:6d:5e:a3:6e:cb:3e:35:43:7d:92:c7:3a:ba:2e:e3:
95:84:82:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:04:28 2026 by rpki-client