This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/5bec72-0f1e-4208-b124-ec578e1cceed/1/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.mft
File: wIbnLWiCq6IEJMjIJ3p-I8B3LNI.mft (raw, json)
Hash identifier: 9g8f99kxzhweoCYGWUtJHZgYTRUQnmVlbJmOIyI2cNk=
Subject key identifier: 49:77:67:5D:22:14:55:41:34:55:BA:5F:6C:30:8C:7D:B4:22:64:9B
Authority key identifier: C0:86:E7:2D:68:82:AB:A2:04:24:C8:C8:27:7A:7E:23:C0:77:2C:D2
Certificate issuer: /CN=c086e72d6882aba20424c8c8277a7e23c0772cd2
Certificate serial: 019C41D89033E1E31AFDAB2A16E4C0D0CC06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/5bec72-0f1e-4208-b124-ec578e1cceed/1/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.mft
Manifest number: 01AA
Signing time: Mon 09 Feb 2026 10:00:37 +0000
Manifest this update: Mon 09 Feb 2026 10:00:37 +0000
Manifest next update: Tue 10 Feb 2026 10:00:37 +0000
Files and hashes: 1: opV5K4TDIZwg2_Ke6wz0k_YRsno.roa (hash: L3PdsoBBCqtcSMykMoxo+EhISOF23hs0Fdp4ciolx2U=)
2: wIbnLWiCq6IEJMjIJ3p-I8B3LNI.crl (hash: AefWLibFzoWOU+aAOheLOi6GtdrekqsN5oCUGjADvOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/5bec72-0f1e-4208-b124-ec578e1cceed/1/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/5bec72-0f1e-4208-b124-ec578e1cceed/1/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 10:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:d8:90:33:e1:e3:1a:fd:ab:2a:16:e4:c0:d0:cc:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c086e72d6882aba20424c8c8277a7e23c0772cd2
Validity
Not Before: Feb 9 10:00:37 2026 GMT
Not After : Feb 10 10:00:37 2026 GMT
Subject: CN=4977675d221455413455ba5f6c308c7db422649b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b2:0e:ff:fd:46:21:55:d8:f8:7a:ba:5c:cc:
c8:19:94:ff:31:e6:b3:3a:71:84:e3:63:9a:f9:fe:
ea:dc:2c:64:4a:9a:04:f9:f7:ce:43:20:21:6c:4b:
1b:f4:e6:e2:f9:55:74:fa:9d:22:ba:a7:b8:ad:41:
2f:ae:c9:e3:6b:e5:95:c9:78:b2:04:f1:d7:6d:ec:
a5:ad:31:19:c9:f2:99:36:8c:bb:3d:8d:27:58:a2:
88:7d:5e:ff:95:07:9b:85:00:49:b5:13:81:d4:5f:
5b:2d:db:e5:c8:6a:a0:18:a9:09:ec:b2:20:c1:2c:
73:36:34:b1:67:d3:f8:1b:80:a6:6a:64:fa:c8:ec:
4d:ac:c7:c7:27:43:78:0b:19:7a:5e:e3:73:0b:3a:
28:98:44:22:8d:55:83:6e:74:25:49:5e:df:4f:17:
56:1e:b1:5a:45:b1:9c:78:b6:7c:95:4b:4b:e4:66:
33:30:5f:8f:6e:6b:46:95:41:51:48:b3:7d:e5:e3:
fe:13:d3:f7:ce:33:20:da:c7:bc:b4:a3:72:88:83:
35:12:38:f9:af:2f:36:fe:f4:18:ed:a7:1a:fe:c2:
07:0a:db:8d:aa:7b:ae:ad:7e:65:26:a7:5c:13:6c:
11:ca:b3:41:09:54:fe:92:63:42:9a:0a:8c:5e:4b:
01:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:77:67:5D:22:14:55:41:34:55:BA:5F:6C:30:8C:7D:B4:22:64:9B
X509v3 Authority Key Identifier:
keyid:C0:86:E7:2D:68:82:AB:A2:04:24:C8:C8:27:7A:7E:23:C0:77:2C:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5bec72-0f1e-4208-b124-ec578e1cceed/1/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5bec72-0f1e-4208-b124-ec578e1cceed/1/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:2c:48:fa:e6:6f:92:06:6c:b4:60:dc:11:cf:e3:6a:e8:09:
bb:ed:a5:0e:74:10:4c:97:1e:d7:ad:cf:d7:7f:32:6d:b7:99:
f0:12:0e:6f:b6:c5:ba:19:f4:ef:02:c9:20:44:7e:4d:b6:3c:
f0:76:3e:5a:90:40:fb:b2:5b:be:ac:a6:04:e5:55:36:58:61:
d6:f2:4a:70:fc:32:de:5b:77:36:cf:df:2a:05:e8:3a:fd:df:
22:21:7f:13:da:3a:be:bb:20:19:62:c4:83:02:98:d0:b2:a2:
76:ae:19:e6:c3:8e:c5:bf:95:0d:82:71:d9:99:b9:c5:a8:93:
b8:f6:dc:8b:b1:35:43:7a:b0:07:a6:9d:75:eb:b6:40:ee:d3:
07:68:15:eb:39:d9:ed:99:7b:b8:4e:1f:94:ba:e2:ea:b1:6c:
a3:39:52:c2:e7:e6:44:92:02:ca:b4:c6:f9:58:d5:a4:c1:5f:
08:8d:8a:f3:fa:1d:18:75:51:33:cd:10:9d:11:36:93:6c:3a:
bd:33:96:5f:78:8d:be:48:90:8e:a7:9e:33:bf:7c:e4:39:b2:
b1:6b:f2:33:90:95:3e:0b:d6:34:75:4a:da:73:9c:0c:69:55:
a7:50:30:dc:64:77:6d:5a:e4:d4:f5:5c:fa:89:ae:a1:7c:0a:
9c:f2:3e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:32:15 2026 by rpki-client