This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/34b48f-70c0-4004-ba0f-de3c8d953ec5/1/wAqI1-WlZepxnPxA2Ltj7hZxhWo.mft
File: wAqI1-WlZepxnPxA2Ltj7hZxhWo.mft (raw, json)
Hash identifier: mrNXncgwywQ9gQm7iKhqQrDW4vI/hK/FB2cTGEs3alI=
Subject key identifier: DA:B0:4D:08:C0:6A:33:42:60:DD:E4:AE:C4:BD:AB:A3:19:95:50:5E
Authority key identifier: C0:0A:88:D7:E5:A5:65:EA:71:9C:FC:40:D8:BB:63:EE:16:71:85:6A
Certificate issuer: /CN=c00a88d7e5a565ea719cfc40d8bb63ee1671856a
Certificate serial: 019C420FA7B5AD475087B0BD6ED9C2001A13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wAqI1-WlZepxnPxA2Ltj7hZxhWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/34b48f-70c0-4004-ba0f-de3c8d953ec5/1/wAqI1-WlZepxnPxA2Ltj7hZxhWo.mft
Manifest number: 0713
Signing time: Mon 09 Feb 2026 11:00:47 +0000
Manifest this update: Mon 09 Feb 2026 11:00:47 +0000
Manifest next update: Tue 10 Feb 2026 11:00:47 +0000
Files and hashes: 1: IJ2P19IcEVD5TXJ_fPVhgYBm_qY.roa (hash: N2VSLUJTgIas4vbaZK4n5fSPJQ+7roJjvsDns30p6Kc=)
2: wAqI1-WlZepxnPxA2Ltj7hZxhWo.crl (hash: eqxu0mMvjmMvhkSmWcDA7ZztbiwiYb6GO55V0jKHx48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/34b48f-70c0-4004-ba0f-de3c8d953ec5/1/wAqI1-WlZepxnPxA2Ltj7hZxhWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/34b48f-70c0-4004-ba0f-de3c8d953ec5/1/wAqI1-WlZepxnPxA2Ltj7hZxhWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/wAqI1-WlZepxnPxA2Ltj7hZxhWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:0f:a7:b5:ad:47:50:87:b0:bd:6e:d9:c2:00:1a:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c00a88d7e5a565ea719cfc40d8bb63ee1671856a
Validity
Not Before: Feb 9 11:00:47 2026 GMT
Not After : Feb 10 11:00:47 2026 GMT
Subject: CN=dab04d08c06a334260dde4aec4bdaba31995505e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f6:f1:79:a9:03:98:f7:6a:66:a5:15:80:a7:
c5:07:08:e0:35:27:e2:8d:22:ee:01:03:0a:14:b2:
9b:ac:4c:2c:df:40:c8:09:ba:e6:ba:d1:a7:7f:75:
89:53:66:4b:9c:08:2f:8e:0d:d6:88:72:47:a6:e9:
38:27:44:f1:4a:d5:a7:51:93:70:71:56:c6:92:11:
78:f3:ff:d2:25:1b:5a:dc:2a:85:05:1d:90:26:2c:
ec:56:55:06:5c:7c:b6:53:21:bc:d8:91:7b:73:c0:
2d:d5:9c:74:64:98:93:b3:af:06:36:d3:8f:1e:8e:
7f:57:f7:5b:2e:c3:ed:d4:9e:d5:f5:62:8c:80:e7:
22:e0:3d:78:44:7d:89:79:cb:6b:74:04:c5:81:72:
15:55:7c:1d:57:bd:d0:64:10:79:19:95:ae:2c:be:
3d:d0:d5:93:66:c8:e4:6b:8b:b7:22:02:40:24:b7:
6d:58:33:ae:6c:a6:9f:68:3a:a8:0a:7f:64:ac:af:
de:cb:68:e1:fa:ec:2f:da:af:8b:17:6d:21:5a:07:
2e:5d:77:bf:12:ff:65:5b:3d:10:16:f2:2d:8b:9a:
13:1e:80:8d:e5:a3:08:70:8f:93:a4:83:b6:5a:1d:
63:a7:ea:ed:20:7e:f3:49:cd:d9:7d:73:2c:48:57:
9b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:B0:4D:08:C0:6A:33:42:60:DD:E4:AE:C4:BD:AB:A3:19:95:50:5E
X509v3 Authority Key Identifier:
keyid:C0:0A:88:D7:E5:A5:65:EA:71:9C:FC:40:D8:BB:63:EE:16:71:85:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wAqI1-WlZepxnPxA2Ltj7hZxhWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/34b48f-70c0-4004-ba0f-de3c8d953ec5/1/wAqI1-WlZepxnPxA2Ltj7hZxhWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/34b48f-70c0-4004-ba0f-de3c8d953ec5/1/wAqI1-WlZepxnPxA2Ltj7hZxhWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:4c:6c:14:e9:f1:7d:91:8d:aa:b4:51:59:3a:f1:ef:97:c0:
39:f4:e7:c0:ac:89:f0:ec:42:7e:8e:10:bb:87:d8:d8:11:d9:
0b:e5:10:8d:90:77:f4:cb:35:a7:a1:75:46:40:46:29:35:d1:
18:5e:ee:38:5f:2b:a7:12:2b:76:2b:97:c6:79:01:f2:57:b8:
72:1e:ca:e7:f3:6f:93:6d:ed:11:01:6d:ed:75:76:5e:9f:61:
ad:13:a1:b2:14:79:66:18:a5:62:26:00:b6:46:f9:b8:b8:78:
44:70:2c:45:fe:1c:d6:85:f4:c5:66:15:9b:21:14:3e:0e:9d:
aa:1c:0b:4d:83:43:bc:42:fc:a6:f5:0e:8a:c6:31:67:0f:07:
43:d3:6a:e5:b8:e7:35:b2:96:d0:71:ec:81:1a:fb:45:73:db:
f7:fa:7a:e9:55:89:fc:6a:8d:3a:21:ff:40:42:e1:a0:23:d4:
60:ab:f3:2d:c4:66:df:e2:40:e6:9f:b1:e4:d8:fa:c9:4f:19:
d9:1f:7e:ac:a2:b4:31:3f:dc:8c:9e:90:31:4e:98:f9:43:d5:
09:db:60:aa:7d:ca:13:e3:81:f5:ee:34:10:2a:40:ed:1c:fa:
dc:71:e8:a2:9e:fc:f4:c6:6f:28:42:75:43:e0:40:ad:3b:a4:
96:3a:33:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCD6e1rUdQh7C9btnCABoTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwMGE4OGQ3ZTVhNTY1ZWE3MTljZmM0MGQ4YmI2M2VlMTY3
MTg1NmEwHhcNMjYwMjA5MTEwMDQ3WhcNMjYwMjEwMTEwMDQ3WjAzMTEwLwYDVQQD
EyhkYWIwNGQwOGMwNmEzMzQyNjBkZGU0YWVjNGJkYWJhMzE5OTU1MDVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfbxeakDmPdqZqUVgKfFBwjgNSfi
jSLuAQMKFLKbrEws30DICbrmutGnf3WJU2ZLnAgvjg3WiHJHpuk4J0TxStWnUZNw
cVbGkhF48//SJRta3CqFBR2QJizsVlUGXHy2UyG82JF7c8At1Zx0ZJiTs68GNtOP
Ho5/V/dbLsPt1J7V9WKMgOci4D14RH2JectrdATFgXIVVXwdV73QZBB5GZWuLL49
0NWTZsjka4u3IgJAJLdtWDOubKafaDqoCn9krK/ey2jh+uwv2q+LF20hWgcuXXe/
Ev9lWz0QFvIti5oTHoCN5aMIcI+TpIO2Wh1jp+rtIH7zSc3ZfXMsSFebrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNqwTQjAajNCYN3krsS9q6MZlVBeMB8GA1UdIwQY
MBaAFMAKiNflpWXqcZz8QNi7Y+4WcYVqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0FxSTEtV2xaZXB4blB4QTJMdGo3aFp4aFdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8zNGI0OGYtNzBjMC00MDA0LWJhMGYt
ZGUzYzhkOTUzZWM1LzEvd0FxSTEtV2xaZXB4blB4QTJMdGo3aFp4aFdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy8zNGI0OGYtNzBjMC00MDA0LWJhMGYtZGUzYzhkOTUzZWM1
LzEvd0FxSTEtV2xaZXB4blB4QTJMdGo3aFp4aFdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcExsFOnx
fZGNqrRRWTrx75fAOfTnwKyJ8OxCfo4Qu4fY2BHZC+UQjZB39Ms1p6F1RkBGKTXR
GF7uOF8rpxIrdiuXxnkB8le4ch7K5/Nvk23tEQFt7XV2Xp9hrROhshR5ZhilYiYA
tkb5uLh4RHAsRf4c1oX0xWYVmyEUPg6dqhwLTYNDvEL8pvUOisYxZw8HQ9Nq5bjn
NbKW0HHsgRr7RXPb9/p66VWJ/GqNOiH/QELhoCPUYKvzLcRm3+JA5p+x5Nj6yU8Z
2R9+rKK0MT/cjJ6QMU6Y+UPVCdtgqn3KE+OB9e40ECpA7Rz63HHoop789MZvKEJ1
Q+BArTukljoz6Q==
-----END CERTIFICATE-----
Generated at Mon Feb 9 17:02:00 2026 by rpki-client