This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/14eb92-33f3-4ece-aecb-1f0bf0d8cb36/1/wkdsjbVJ97WIqQKw9M6AvrbSV0g.mft
File: wkdsjbVJ97WIqQKw9M6AvrbSV0g.mft (raw, json)
Hash identifier: 3gA+mPqQ5owaV04B0PaRXgSuA6yZaTztXVAaNFEaZVE=
Subject key identifier: 98:6B:5B:75:C7:68:97:B1:A0:AF:E1:2D:31:6E:D0:CF:D7:07:F9:D5
Authority key identifier: C2:47:6C:8D:B5:49:F7:B5:88:A9:02:B0:F4:CE:80:BE:B6:D2:57:48
Certificate issuer: /CN=c2476c8db549f7b588a902b0f4ce80beb6d25748
Certificate serial: 019C446BACD9FA37FDF2D8003061611499D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wkdsjbVJ97WIqQKw9M6AvrbSV0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/14eb92-33f3-4ece-aecb-1f0bf0d8cb36/1/wkdsjbVJ97WIqQKw9M6AvrbSV0g.mft
Manifest number: 0E9D
Signing time: Mon 09 Feb 2026 22:00:33 +0000
Manifest this update: Mon 09 Feb 2026 22:00:33 +0000
Manifest next update: Tue 10 Feb 2026 22:00:33 +0000
Files and hashes: 1: 1mKr2BYewzXDecj0nNw7rfiYO80.roa (hash: 6ynFOsQcc4+COoSJWkYKLEzNdnYU6AWGSoX2YiGPF3I=)
2: wkdsjbVJ97WIqQKw9M6AvrbSV0g.crl (hash: ul3frm4DCs5AAuXC98YiDNI+xot3YBykGW6U1RriJJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/14eb92-33f3-4ece-aecb-1f0bf0d8cb36/1/wkdsjbVJ97WIqQKw9M6AvrbSV0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/14eb92-33f3-4ece-aecb-1f0bf0d8cb36/1/wkdsjbVJ97WIqQKw9M6AvrbSV0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/wkdsjbVJ97WIqQKw9M6AvrbSV0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:44:6b:ac:d9:fa:37:fd:f2:d8:00:30:61:61:14:99:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2476c8db549f7b588a902b0f4ce80beb6d25748
Validity
Not Before: Feb 9 22:00:33 2026 GMT
Not After : Feb 10 22:00:33 2026 GMT
Subject: CN=986b5b75c76897b1a0afe12d316ed0cfd707f9d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a5:c7:ec:97:86:bf:6a:89:d3:ff:c5:a3:70:
f8:d7:47:86:0c:d6:fa:92:f5:5d:81:d1:4d:2b:73:
9a:23:40:cb:d4:5a:39:10:38:2f:89:83:f2:31:70:
ca:bb:0c:ad:5e:af:28:7f:78:40:4b:7a:19:35:8a:
73:8d:f5:8c:dc:42:20:df:53:da:6e:0b:69:af:bd:
9d:73:53:03:9d:24:82:24:2d:4f:f5:73:5a:95:9c:
e5:1f:9d:a1:38:83:35:77:44:57:84:a1:2d:d8:51:
0c:eb:3c:2f:cb:7d:05:94:82:a8:09:47:db:f6:72:
1e:85:53:51:38:93:b4:a2:61:a2:d4:17:9a:4c:5b:
6f:b1:66:19:ee:65:01:da:f8:63:09:8b:8f:67:a6:
63:45:90:5c:65:1f:9b:80:88:80:61:4b:8f:45:ef:
c7:06:7c:8a:25:d0:0d:a9:9a:96:49:9c:97:0c:de:
e8:c2:e5:0e:bf:f5:6b:6e:5a:2c:90:be:7e:ed:d2:
2a:8a:f0:91:30:7a:e5:e8:0b:f8:9b:ca:ee:1c:cb:
b9:4d:9f:a8:40:bc:82:69:87:d1:d1:34:56:8f:58:
6f:9a:e7:a2:f0:56:31:f0:ec:e5:21:d9:63:7d:b7:
eb:46:73:9d:e9:05:d6:2c:00:4a:fc:e5:28:80:6c:
8a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:6B:5B:75:C7:68:97:B1:A0:AF:E1:2D:31:6E:D0:CF:D7:07:F9:D5
X509v3 Authority Key Identifier:
keyid:C2:47:6C:8D:B5:49:F7:B5:88:A9:02:B0:F4:CE:80:BE:B6:D2:57:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wkdsjbVJ97WIqQKw9M6AvrbSV0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/14eb92-33f3-4ece-aecb-1f0bf0d8cb36/1/wkdsjbVJ97WIqQKw9M6AvrbSV0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/14eb92-33f3-4ece-aecb-1f0bf0d8cb36/1/wkdsjbVJ97WIqQKw9M6AvrbSV0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:8c:76:63:75:48:fd:0d:35:c3:4c:d3:33:0c:1c:db:f7:88:
a8:15:60:8d:e0:b0:8c:8a:18:da:8d:59:04:45:26:d9:c5:ca:
a7:aa:13:2f:a6:dd:00:4c:b7:47:cd:66:07:58:a6:7e:84:09:
5b:22:0a:8b:49:3f:05:81:06:b7:bc:53:c2:08:a2:f4:fc:11:
b8:8c:3b:22:1e:63:19:9e:5e:8f:1f:ae:5d:30:72:19:e8:0a:
ba:7b:e8:16:66:ca:b6:5a:1b:1f:82:d9:b5:cb:fe:b4:2a:4e:
6e:dc:1f:71:6b:db:0a:a3:7f:23:4c:dc:09:54:6d:e0:c6:5c:
bc:03:ed:b0:1b:93:bf:4a:5e:af:b0:2a:75:d8:45:ab:9b:7f:
3f:d6:f9:ce:3a:cc:70:0a:7c:68:6e:6b:99:6b:9a:b7:e8:61:
95:5e:92:11:2f:72:f5:3a:dd:10:89:6b:66:ce:cd:3d:3d:01:
d6:64:33:85:0e:fc:f1:2f:8c:12:0b:b7:f4:d8:42:99:a5:df:
76:b8:b2:0e:81:c1:63:7d:dd:d0:36:85:6f:4b:e7:dc:fb:68:
f8:44:3a:e3:43:6b:94:8a:88:95:ee:9c:1c:f2:7f:2b:0e:4c:
44:11:54:ac:b3:36:94:f7:46:c1:e5:20:4f:e6:23:36:06:54:
c1:ca:63:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:41:38 2026 by rpki-client