This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/59e107-704f-4480-b69e-f06a761c9a20/1/wd13fOfXCSaMDFWlnADGrqWyGb0.mft
File: wd13fOfXCSaMDFWlnADGrqWyGb0.mft (raw, json)
Hash identifier: F+eNK8BO+H9yhLk4fJ3PDf2TYJrkxBKTHlWAXZwRlVw=
Subject key identifier: 5A:9E:6B:5A:C5:D1:98:23:EB:37:18:68:3D:28:7B:78:F5:3C:AB:A1
Authority key identifier: C1:DD:77:7C:E7:D7:09:26:8C:0C:55:A5:9C:00:C6:AE:A5:B2:19:BD
Certificate issuer: /CN=c1dd777ce7d709268c0c55a59c00c6aea5b219bd
Certificate serial: 019C42EB2AFFA5CBA02FBCBFD79E637399F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wd13fOfXCSaMDFWlnADGrqWyGb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/59e107-704f-4480-b69e-f06a761c9a20/1/wd13fOfXCSaMDFWlnADGrqWyGb0.mft
Manifest number: 12FE
Signing time: Mon 09 Feb 2026 15:00:34 +0000
Manifest this update: Mon 09 Feb 2026 15:00:34 +0000
Manifest next update: Tue 10 Feb 2026 15:00:34 +0000
Files and hashes: 1: nRmjyxWGF6a7tV1DmVfOj7lLijI.roa (hash: zc3Mo+okKisvH6UwCPx7tW7bSfZdDVD88nKDTYhyQDY=)
2: wd13fOfXCSaMDFWlnADGrqWyGb0.crl (hash: lQ3KIX70Gd04NaNlDyv3JB2z3qZTZz6iS+t5epxxn14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/59e107-704f-4480-b69e-f06a761c9a20/1/wd13fOfXCSaMDFWlnADGrqWyGb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/59e107-704f-4480-b69e-f06a761c9a20/1/wd13fOfXCSaMDFWlnADGrqWyGb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/wd13fOfXCSaMDFWlnADGrqWyGb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:eb:2a:ff:a5:cb:a0:2f:bc:bf:d7:9e:63:73:99:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1dd777ce7d709268c0c55a59c00c6aea5b219bd
Validity
Not Before: Feb 9 15:00:34 2026 GMT
Not After : Feb 10 15:00:34 2026 GMT
Subject: CN=5a9e6b5ac5d19823eb3718683d287b78f53caba1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4f:41:bf:0f:77:e0:4d:4e:6a:f8:0f:6f:68:
b5:bb:00:17:e8:8c:54:48:14:ad:b8:db:c7:5e:77:
57:6d:8c:da:98:da:d7:36:bd:75:f9:5d:c6:c0:5f:
4c:31:cc:3c:ca:9e:06:7d:6a:27:6b:c2:be:5c:8b:
12:45:58:79:03:e5:95:33:18:b9:07:b8:d4:b0:6f:
0a:9b:47:80:af:cb:9c:07:fb:c1:6e:e3:3e:c5:f4:
a9:0e:6a:78:8e:4c:58:e7:eb:7e:73:18:e7:7b:f3:
3f:0f:2e:bd:e9:03:52:c4:5c:f3:4e:bc:fe:09:c8:
cd:2e:22:a0:bd:4a:e7:07:05:8f:0f:e0:94:2a:c9:
52:5f:a9:bc:6b:c1:db:ad:9e:44:6a:be:1b:10:97:
4f:cb:fb:67:2b:df:c2:f6:ad:18:04:09:35:0a:26:
83:87:f2:d7:e5:e7:b7:60:1e:4c:2d:e0:32:8b:c2:
40:ad:d9:c6:51:da:72:8b:7c:d3:58:69:c7:0a:97:
47:02:45:60:1c:5c:71:49:d9:22:66:f0:f8:33:1c:
8e:2a:4d:5c:59:96:9a:21:09:e3:cc:82:90:14:20:
11:ab:d7:85:51:7a:fc:35:4a:fc:80:b2:99:e8:22:
b8:f3:80:54:df:12:f7:3b:14:b0:4e:0f:aa:71:a2:
d0:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:9E:6B:5A:C5:D1:98:23:EB:37:18:68:3D:28:7B:78:F5:3C:AB:A1
X509v3 Authority Key Identifier:
keyid:C1:DD:77:7C:E7:D7:09:26:8C:0C:55:A5:9C:00:C6:AE:A5:B2:19:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wd13fOfXCSaMDFWlnADGrqWyGb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/59e107-704f-4480-b69e-f06a761c9a20/1/wd13fOfXCSaMDFWlnADGrqWyGb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/59e107-704f-4480-b69e-f06a761c9a20/1/wd13fOfXCSaMDFWlnADGrqWyGb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:f5:05:84:7e:c8:43:88:4f:12:28:d9:4b:a7:6f:bb:2d:7c:
21:d8:94:cf:0e:8e:5a:64:c0:86:27:c5:a6:68:60:a1:52:0a:
fe:db:5e:3d:ca:29:48:3f:03:bd:c0:a8:6b:ad:32:cb:cc:e1:
12:44:95:19:bd:c2:3d:c6:84:85:63:87:25:7b:cf:77:a8:d5:
4b:14:fb:2f:6f:71:e1:9f:ff:b5:c8:ee:aa:5d:01:46:1f:98:
9f:c6:f0:ec:69:9a:32:75:0f:d1:09:bb:bc:73:92:9c:ac:7a:
bf:c0:28:07:c3:63:c2:7c:54:08:00:ed:b8:54:ab:b7:7e:89:
d6:ae:a0:be:38:57:99:e0:8b:c8:41:f6:62:ab:a6:7a:cb:2b:
bd:f0:79:1a:28:89:8b:3b:9c:bc:45:a8:e1:c8:6f:59:12:08:
2d:bc:a6:02:18:d9:54:29:fb:f9:80:25:1b:5f:ab:f9:60:8c:
da:4c:27:3c:0b:29:18:ab:72:84:93:50:c3:e0:ab:af:a9:6c:
2f:65:be:42:c8:ee:09:cd:fa:78:ae:76:06:b7:b8:54:c6:53:
c5:2b:4d:30:73:8c:26:52:df:fd:21:74:df:bc:df:2c:de:bd:
10:09:39:1d:8d:3a:22:84:ff:e7:dd:f9:46:52:84:5c:c7:00:
7e:ea:60:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:49:13 2026 by rpki-client