This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.mft
File: WAFcyNofG780PiarII34uyb9U64.mft (raw, json)
Hash identifier: KasPkibwrke6+H8SNjavLhHSjoTTrB79m56L7Gra+ng=
Subject key identifier: FD:68:56:DD:36:14:6F:88:D7:56:04:BF:5E:45:12:59:50:FF:A6:D3
Authority key identifier: 58:01:5C:C8:DA:1F:1B:BF:34:3E:26:AB:20:8D:F8:BB:26:FD:53:AE
Certificate issuer: /CN=58015cc8da1f1bbf343e26ab208df8bb26fd53ae
Certificate serial: 019BFA645131486A9DD0B88F4202075513DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WAFcyNofG780PiarII34uyb9U64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.mft
Manifest number: 17FD
Signing time: Mon 26 Jan 2026 13:00:36 +0000
Manifest this update: Mon 26 Jan 2026 13:00:36 +0000
Manifest next update: Tue 27 Jan 2026 13:00:36 +0000
Files and hashes: 1: BY0duX9kQwVXjgquhsR-munhjnQ.asa (hash: NvBZnkapjPSPy1tNHiYvTA3NcGg5KXOBAdMekZQ3UrA=)
2: NrgQ_5wI2_4HvegQwjwM_Zc8xdM.roa (hash: OvI93tgCnxoNbRAqaNHTlYSufUon+ySjKVV/RPhyqkQ=)
3: WAFcyNofG780PiarII34uyb9U64.crl (hash: XmRuCqdyXAlkiFayMj9B4r8y/cfbrgPr+YMbBtwEc8g=)
4: Wr5va4tlLM7OArIc13NwZVzUZSM.asa (hash: ZnrWop8OkpeoCvz/MYLeKchWVnb3K25hWmby4HEumAM=)
5: pqktpCxLGm0ef4jw2Ni2l6y-LvY.roa (hash: qzKRc0VCQWppc/oSUuGJGwq+ZahDXUJUBntxA72SvqY=)
6: sWwYUGN-qX4W4KsEuJ-NzSM85K4.roa (hash: 7Ca2j50Ko1N7zY6m8PRjHntwoi86jOPRDQ4B+sSksSw=)
7: z0dUAUAYs2FDj8KE93GCEX_1moY.asa (hash: jkyk8H05lxWxlsGkVRiKoTC3QiMwT13kS4SkDxeCCDY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.mft
rsync://rpki.ripe.net/repository/DEFAULT/WAFcyNofG780PiarII34uyb9U64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 13:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:fa:64:51:31:48:6a:9d:d0:b8:8f:42:02:07:55:13:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58015cc8da1f1bbf343e26ab208df8bb26fd53ae
Validity
Not Before: Jan 26 13:00:36 2026 GMT
Not After : Jan 27 13:00:36 2026 GMT
Subject: CN=fd6856dd36146f88d75604bf5e45125950ffa6d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:64:e9:fd:17:d3:06:7b:91:64:6d:65:26:54:
70:be:e2:b2:8d:ca:61:d8:0e:f9:9a:b7:83:ad:f5:
c3:af:c3:a3:bf:db:f9:70:a3:84:c8:53:2a:46:5b:
57:34:1f:1a:67:a1:f2:4e:d5:96:68:7d:38:00:e8:
00:3b:7e:cc:71:79:b7:00:9b:f9:ea:88:1e:8b:78:
88:3d:d7:7f:0e:4b:69:9c:d4:6d:f7:dd:f0:89:82:
f4:b8:36:43:b5:e5:2c:18:2f:fa:bb:37:75:39:87:
c7:2c:12:eb:fd:59:21:c3:09:eb:32:63:49:6b:18:
03:33:35:9b:97:38:79:89:35:08:af:c3:50:28:42:
77:ad:a9:d2:35:76:5d:45:25:ea:5a:6d:db:f1:4d:
5d:54:3b:c9:cd:dd:fd:7f:0d:f9:fe:71:1d:91:4f:
47:d5:75:3c:a9:a5:13:d1:28:40:95:57:fb:55:cf:
6d:65:ce:2f:1c:4b:8c:77:9c:7c:5a:9a:18:1c:35:
5b:39:32:25:7d:76:44:02:dd:c7:36:0d:3a:6f:4e:
a7:c5:89:6b:5c:9d:3d:cc:19:a8:bc:1d:95:59:66:
13:eb:b0:47:d9:f1:ac:90:da:d7:e6:e2:44:58:35:
74:90:d7:93:6d:8c:4f:28:8a:e1:06:2f:30:6d:b4:
6e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:68:56:DD:36:14:6F:88:D7:56:04:BF:5E:45:12:59:50:FF:A6:D3
X509v3 Authority Key Identifier:
keyid:58:01:5C:C8:DA:1F:1B:BF:34:3E:26:AB:20:8D:F8:BB:26:FD:53:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAFcyNofG780PiarII34uyb9U64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:67:95:0f:5e:cb:0a:58:d0:c6:19:f1:da:bb:de:da:8d:82:
c9:b4:cc:4a:3c:ef:c0:15:aa:0f:29:00:3e:07:7b:27:6c:a7:
fd:88:f1:bf:da:86:f2:b7:f0:5c:04:73:0d:09:68:8e:2d:b9:
fd:42:21:8a:73:76:82:e0:24:74:bd:f5:f1:e6:7c:cd:0b:2f:
9b:f6:b7:77:d2:49:ad:18:12:42:8e:7b:68:af:f8:39:38:49:
ff:cb:ed:b1:b4:fb:07:99:14:ef:f6:9f:33:66:d5:4c:74:c7:
57:09:5c:27:8b:14:eb:2b:27:4d:d4:e7:58:fa:d1:8f:36:b4:
11:60:32:48:f1:94:81:75:81:52:fa:ba:5c:60:86:94:51:88:
2c:c1:f4:94:3f:03:8d:ae:a2:5d:c5:b9:d4:7d:51:2c:33:24:
13:fd:8f:27:06:ed:79:d2:3f:74:16:8e:c3:0c:40:c4:80:e2:
f2:72:98:26:d9:4a:10:10:93:6a:d1:8f:6d:3f:9f:b3:80:2a:
ae:6a:e1:22:38:c8:3d:96:6a:70:cd:c2:be:8c:8b:99:53:f9:
a2:81:66:d2:9f:ad:2e:0f:a6:85:7e:ab:e8:81:d1:ad:5d:c3:
c9:fa:0d:75:2d:d2:4e:82:11:06:c5:91:ff:92:39:91:f3:7d:
33:64:6b:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 20:54:40 2026 by rpki-client