This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/4b908d-f43a-4882-a66f-b216844ac1e4/1/wa5jZUn1bYSFj_lsixYw6MuKSK8.mft
File: wa5jZUn1bYSFj_lsixYw6MuKSK8.mft (raw, json)
Hash identifier: vLuqZgRlatpclmwthhqAwFYmOgCIbBhhukJeU219akE=
Subject key identifier: 2C:41:70:C7:6A:0A:01:5E:26:48:C0:62:30:B8:7E:76:F7:A4:BA:B5
Authority key identifier: C1:AE:63:65:49:F5:6D:84:85:8F:F9:6C:8B:16:30:E8:CB:8A:48:AF
Certificate issuer: /CN=c1ae636549f56d84858ff96c8b1630e8cb8a48af
Certificate serial: 019C4358DE3A24B1F7CF61225768DE3DB163
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wa5jZUn1bYSFj_lsixYw6MuKSK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/4b908d-f43a-4882-a66f-b216844ac1e4/1/wa5jZUn1bYSFj_lsixYw6MuKSK8.mft
Manifest number: 1812
Signing time: Mon 09 Feb 2026 17:00:23 +0000
Manifest this update: Mon 09 Feb 2026 17:00:23 +0000
Manifest next update: Tue 10 Feb 2026 17:00:23 +0000
Files and hashes: 1: qfLg6_O2M8WS1thcqc7yvX4X2YA.roa (hash: QWR0hHgaSdM86S0MEOSeh4BxClfakxPYih9gZR0Zp3g=)
2: wa5jZUn1bYSFj_lsixYw6MuKSK8.crl (hash: N79170dzLH6Gg5nFR79okk7eqLLmdQ5ZY8r4mhUgREE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/4b908d-f43a-4882-a66f-b216844ac1e4/1/wa5jZUn1bYSFj_lsixYw6MuKSK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/4b908d-f43a-4882-a66f-b216844ac1e4/1/wa5jZUn1bYSFj_lsixYw6MuKSK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wa5jZUn1bYSFj_lsixYw6MuKSK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:58:de:3a:24:b1:f7:cf:61:22:57:68:de:3d:b1:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1ae636549f56d84858ff96c8b1630e8cb8a48af
Validity
Not Before: Feb 9 17:00:23 2026 GMT
Not After : Feb 10 17:00:23 2026 GMT
Subject: CN=2c4170c76a0a015e2648c06230b87e76f7a4bab5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b5:6c:ba:df:59:60:ea:37:34:81:87:6f:e5:
75:5d:c8:ea:79:c5:cd:b8:18:23:fe:66:96:10:50:
f9:32:5c:c3:c3:fc:bb:fa:95:33:66:0c:5d:19:96:
fd:6a:08:87:ea:53:5d:9d:1a:65:6d:af:b5:88:40:
d5:93:58:5e:01:d1:ec:70:3c:04:61:40:1a:8e:b2:
3c:14:bc:d0:69:29:92:e1:2b:ce:f2:42:20:79:ba:
c9:f3:9e:a5:e8:42:98:f7:0e:1f:84:ee:83:a0:31:
55:32:91:51:48:35:ce:da:aa:10:d6:c4:b8:e7:ac:
87:2f:5b:0c:18:1e:13:e5:f5:8b:e1:dd:10:52:a8:
16:2f:45:73:3c:0d:11:de:e8:36:fb:65:38:f6:26:
33:e8:88:22:bd:b3:cf:d4:63:9b:f5:db:80:a7:c4:
5d:ca:9c:b1:36:67:0c:e1:98:9a:11:60:54:52:ec:
fb:9a:8c:65:a3:b0:dd:d6:95:78:0c:e1:b2:51:f3:
ae:41:eb:bb:e3:30:4d:cc:01:f4:50:9f:f4:23:37:
22:27:1e:ae:7c:b6:70:ed:5d:30:7b:b0:43:0f:9a:
77:ae:89:66:08:0e:d3:66:31:dc:9d:d0:4b:79:e3:
6e:d9:fe:85:5c:bb:c5:4f:47:31:2e:72:95:69:64:
96:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:41:70:C7:6A:0A:01:5E:26:48:C0:62:30:B8:7E:76:F7:A4:BA:B5
X509v3 Authority Key Identifier:
keyid:C1:AE:63:65:49:F5:6D:84:85:8F:F9:6C:8B:16:30:E8:CB:8A:48:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wa5jZUn1bYSFj_lsixYw6MuKSK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4b908d-f43a-4882-a66f-b216844ac1e4/1/wa5jZUn1bYSFj_lsixYw6MuKSK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4b908d-f43a-4882-a66f-b216844ac1e4/1/wa5jZUn1bYSFj_lsixYw6MuKSK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e4:f8:fe:16:45:d7:21:67:4e:fb:89:41:0c:43:0e:15:a0:65:
b3:95:f0:fa:c3:03:58:fc:2f:ef:d6:b5:1a:ed:d7:39:32:4c:
0c:01:f2:02:4a:4d:88:14:38:b2:69:5f:6d:1d:77:a3:8f:1b:
13:93:e9:93:5d:24:f7:9a:77:0a:d9:26:d0:8a:74:c1:05:62:
fa:f7:6e:6e:e3:1b:3d:4b:10:a6:a5:fc:15:44:06:20:37:f7:
e7:a3:6b:f5:fe:fa:c1:c0:e3:7b:ef:7b:2d:e6:46:ad:cb:88:
fd:de:95:f0:f6:0d:77:b5:1b:ca:25:87:c0:b4:64:72:3c:3b:
c2:ea:83:0a:b6:70:3b:17:0e:15:1c:e7:0c:04:3e:90:91:9c:
13:58:94:2c:42:f6:64:73:66:dc:4e:06:df:7f:7a:52:43:21:
5f:22:64:28:47:8b:b1:7a:d8:0c:16:a4:8c:da:6c:42:a0:2f:
15:c8:c9:f6:c7:1e:95:b1:f2:96:cc:f9:aa:3f:9b:e0:4c:ef:
21:93:1a:6b:38:18:4b:98:4a:e7:78:ed:fe:49:6e:41:18:72:
0c:ce:8f:1b:6a:b7:15:02:f7:18:d9:96:ac:17:75:63:72:13:
10:7f:c0:46:c5:b7:2d:c0:c2:1e:bd:23:78:38:1e:69:0d:6e:
4f:32:58:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:59:25 2026 by rpki-client