This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/a8de56-edcc-40b1-b87f-4a07f97e98a9/1/WzSxhIYRAAcf5Ns92oSoLMG7zGI.mft
File: WzSxhIYRAAcf5Ns92oSoLMG7zGI.mft (raw, json)
Hash identifier: cBR1TfIEnYb3YeOPB3hFyMwf8eDQZh1/m30aZb6GkWs=
Subject key identifier: A5:AD:86:B6:30:CE:21:B2:7C:71:43:00:06:CF:95:2C:47:3C:2C:C1
Authority key identifier: 5B:34:B1:84:86:11:00:07:1F:E4:DB:3D:DA:84:A8:2C:C1:BB:CC:62
Certificate issuer: /CN=5b34b184861100071fe4db3dda84a82cc1bbcc62
Certificate serial: 019C43FDE61D6CBBF95686D8C4792A40B31F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WzSxhIYRAAcf5Ns92oSoLMG7zGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/a8de56-edcc-40b1-b87f-4a07f97e98a9/1/WzSxhIYRAAcf5Ns92oSoLMG7zGI.mft
Manifest number: 0C89
Signing time: Mon 09 Feb 2026 20:00:38 +0000
Manifest this update: Mon 09 Feb 2026 20:00:38 +0000
Manifest next update: Tue 10 Feb 2026 20:00:38 +0000
Files and hashes: 1: WzSxhIYRAAcf5Ns92oSoLMG7zGI.crl (hash: 4PfeXslPmrntWmMFBETAvtD+Wo7xBnCk0aakB8HJNo8=)
2: el19n5VFJI2Td0uzZZckW_YpTo0.roa (hash: DpjOrLRCltZRLAqBNQKYh5WLON/qWjFe342eyMeNeHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/a8de56-edcc-40b1-b87f-4a07f97e98a9/1/WzSxhIYRAAcf5Ns92oSoLMG7zGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/a8de56-edcc-40b1-b87f-4a07f97e98a9/1/WzSxhIYRAAcf5Ns92oSoLMG7zGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WzSxhIYRAAcf5Ns92oSoLMG7zGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 20:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:fd:e6:1d:6c:bb:f9:56:86:d8:c4:79:2a:40:b3:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b34b184861100071fe4db3dda84a82cc1bbcc62
Validity
Not Before: Feb 9 20:00:38 2026 GMT
Not After : Feb 10 20:00:38 2026 GMT
Subject: CN=a5ad86b630ce21b27c71430006cf952c473c2cc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d9:fc:05:f1:ee:b2:d2:f5:53:67:00:b4:6d:
7c:f8:54:80:82:0f:fc:fe:3c:37:55:74:15:f7:f8:
65:0b:8e:75:a2:88:c3:ad:b4:0b:94:d3:3a:52:d2:
05:7f:7d:27:a3:a1:44:d8:7b:9a:25:2b:74:40:eb:
62:d7:d4:ff:4b:b0:56:40:76:7a:2b:02:fe:c7:0b:
7b:ff:13:f0:9c:92:16:77:15:ba:81:34:dc:ec:fd:
2b:47:1d:60:48:0f:d2:40:79:9c:6f:30:45:59:b9:
7f:b4:35:51:0d:c4:86:b0:f9:04:0c:05:da:ea:9b:
22:48:e8:28:49:c3:01:41:35:74:e4:13:6c:14:52:
af:47:25:42:8f:ed:cb:66:6c:00:66:95:f3:a7:ed:
45:84:5f:67:31:04:68:31:60:b5:0b:c9:b8:17:0d:
a2:45:20:55:43:82:55:67:da:7c:84:83:14:20:72:
70:4a:6f:c2:0d:cf:fa:e7:b6:30:20:78:b2:26:b5:
fb:48:1b:46:18:bc:10:02:21:71:89:86:ef:b6:93:
0c:37:5a:80:5b:09:87:92:08:f0:f6:2a:0e:ff:30:
98:e8:e8:fc:3e:80:d5:49:27:4f:02:08:ee:56:8c:
8e:25:f7:37:2b:26:61:ee:f4:cf:63:19:f4:b7:e7:
13:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:AD:86:B6:30:CE:21:B2:7C:71:43:00:06:CF:95:2C:47:3C:2C:C1
X509v3 Authority Key Identifier:
keyid:5B:34:B1:84:86:11:00:07:1F:E4:DB:3D:DA:84:A8:2C:C1:BB:CC:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WzSxhIYRAAcf5Ns92oSoLMG7zGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a8de56-edcc-40b1-b87f-4a07f97e98a9/1/WzSxhIYRAAcf5Ns92oSoLMG7zGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a8de56-edcc-40b1-b87f-4a07f97e98a9/1/WzSxhIYRAAcf5Ns92oSoLMG7zGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:7e:55:ed:52:3f:6f:c8:68:b3:0f:94:bd:9b:fb:2e:ec:3d:
0d:42:6c:5a:0a:19:61:ca:98:12:13:ca:a1:06:67:04:06:26:
e1:8f:cc:ba:06:0d:82:8b:83:87:cb:ed:ad:d8:5b:08:e4:77:
7b:71:98:25:6f:d6:b6:c5:5b:09:3d:be:b7:12:f6:84:9c:61:
c9:8c:2c:27:33:00:6d:64:24:55:61:e1:74:c9:d9:e8:f0:b2:
15:6c:07:d1:3b:53:cd:ef:68:87:72:8a:c6:fe:61:59:bc:03:
37:01:2e:50:81:58:0c:2a:1a:e6:d0:51:04:a7:95:6b:e3:21:
d8:ff:2f:74:ae:5f:cb:20:4e:ee:fb:f7:cc:b7:1e:1a:d0:2a:
bb:93:28:56:82:87:a4:77:3c:e1:fe:55:f0:16:7b:87:a9:b9:
e7:d8:4e:ac:89:cc:90:4c:88:58:65:ba:7a:67:5c:ac:c3:2b:
2c:b3:c2:22:ff:88:18:85:7c:c8:a2:c4:03:92:b0:dd:b7:c3:
34:44:f3:2f:35:fc:69:26:de:43:94:67:2f:38:fe:b1:61:c3:
aa:9a:c5:84:31:e3:53:dd:ea:06:79:29:21:c3:8d:4c:f7:57:
09:6b:27:61:f0:dc:20:d1:71:53:23:83:0c:11:40:67:61:fe:
89:e2:36:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 03:15:46 2026 by rpki-client