This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/956fd2-0dd3-4d4f-8b37-c6d86a1b08e0/1/wqyPcJYdLcc-L-OnmQgy6T1JVhE.mft
File: wqyPcJYdLcc-L-OnmQgy6T1JVhE.mft (raw, json)
Hash identifier: krls0MzPE3kR0zzdEEn2kMhVoZdr0ENFsF/zCaTa+z0=
Subject key identifier: 12:CE:B0:58:DB:D2:F7:76:B4:55:AB:40:46:C7:E9:3E:68:BA:22:4B
Authority key identifier: C2:AC:8F:70:96:1D:2D:C7:3E:2F:E3:A7:99:08:32:E9:3D:49:56:11
Certificate issuer: /CN=c2ac8f70961d2dc73e2fe3a7990832e93d495611
Certificate serial: 019C41D8760E52A362AC257C47E45DA03EC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wqyPcJYdLcc-L-OnmQgy6T1JVhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/956fd2-0dd3-4d4f-8b37-c6d86a1b08e0/1/wqyPcJYdLcc-L-OnmQgy6T1JVhE.mft
Manifest number: 03D7
Signing time: Mon 09 Feb 2026 10:00:30 +0000
Manifest this update: Mon 09 Feb 2026 10:00:30 +0000
Manifest next update: Tue 10 Feb 2026 10:00:30 +0000
Files and hashes: 1: cteGZrXVQTzZk8l0QKUTc5GLCgw.roa (hash: 7vVUH27gqwWuDvrtOX55FjGkEONXdCw+D3c878DK6LE=)
2: wqyPcJYdLcc-L-OnmQgy6T1JVhE.crl (hash: 9yKB/WwuteNifZH/l3BtD+tTlY1sZ93xk9o65qVlqKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/956fd2-0dd3-4d4f-8b37-c6d86a1b08e0/1/wqyPcJYdLcc-L-OnmQgy6T1JVhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/956fd2-0dd3-4d4f-8b37-c6d86a1b08e0/1/wqyPcJYdLcc-L-OnmQgy6T1JVhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/wqyPcJYdLcc-L-OnmQgy6T1JVhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 10:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:d8:76:0e:52:a3:62:ac:25:7c:47:e4:5d:a0:3e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2ac8f70961d2dc73e2fe3a7990832e93d495611
Validity
Not Before: Feb 9 10:00:30 2026 GMT
Not After : Feb 10 10:00:30 2026 GMT
Subject: CN=12ceb058dbd2f776b455ab4046c7e93e68ba224b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b9:14:4d:c4:d1:25:63:18:e0:9f:c9:7c:b8:
1a:0d:ef:6f:71:d1:3b:26:82:05:be:1f:1b:1b:73:
33:88:51:be:cf:13:48:42:4b:da:9d:d1:c0:44:84:
00:a7:8f:b4:08:ed:84:b6:f7:05:59:e4:ca:7b:86:
8e:79:c3:7e:a5:47:cc:96:f1:43:ab:42:63:d1:a4:
f2:bf:0f:28:95:2f:13:08:7f:78:35:dc:9d:fb:ef:
a6:9d:c3:63:0b:25:b8:71:59:3d:ef:3e:f9:c6:e9:
97:2e:d3:82:fb:d6:7a:80:68:65:d0:93:5b:62:76:
e9:82:bb:de:cc:47:93:a0:7e:b6:7d:51:45:76:da:
20:5c:c1:2d:74:6d:3d:15:b1:21:00:ef:af:e1:16:
a7:d1:98:4e:db:b1:67:c6:ee:7e:50:b2:42:e4:19:
8f:10:0b:9d:a8:98:17:57:9c:4e:f0:b6:ec:28:a3:
8a:94:5a:5d:92:ca:e5:39:83:2e:31:cf:b7:8d:a8:
51:0a:32:2d:21:8e:b9:e5:2c:26:ac:96:eb:b5:64:
13:24:db:39:36:19:3a:16:68:a7:85:f5:52:25:30:
eb:8d:cf:20:a8:d0:83:02:56:8d:79:2e:93:ae:b7:
f3:0f:9f:97:da:8c:9c:be:0e:b6:a1:a0:0c:5b:19:
b1:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:CE:B0:58:DB:D2:F7:76:B4:55:AB:40:46:C7:E9:3E:68:BA:22:4B
X509v3 Authority Key Identifier:
keyid:C2:AC:8F:70:96:1D:2D:C7:3E:2F:E3:A7:99:08:32:E9:3D:49:56:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wqyPcJYdLcc-L-OnmQgy6T1JVhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/956fd2-0dd3-4d4f-8b37-c6d86a1b08e0/1/wqyPcJYdLcc-L-OnmQgy6T1JVhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/956fd2-0dd3-4d4f-8b37-c6d86a1b08e0/1/wqyPcJYdLcc-L-OnmQgy6T1JVhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:d8:de:ae:7a:56:6b:45:eb:ad:0b:1d:57:8d:a4:df:db:0e:
18:54:3c:8e:d3:92:a7:7a:61:44:d6:55:92:65:6f:20:ab:22:
0e:cd:ad:b4:ed:25:a6:18:7e:ce:e6:ac:57:0d:c1:3b:6b:71:
d8:6c:2c:01:53:ca:0e:ae:8c:ec:46:3e:da:b1:09:0f:1e:6e:
3c:a4:65:00:b4:e6:0b:b6:a0:1e:64:e2:4d:bf:c9:f0:b3:42:
d3:f6:b0:6c:cd:2d:32:16:0e:d0:d6:e8:50:f9:d4:bd:af:3a:
21:6d:70:87:9f:2d:a9:9b:68:37:05:5a:04:7e:53:9c:5e:c2:
5d:ef:07:0a:40:dd:41:12:64:e6:8d:11:f7:b3:c5:c7:d1:92:
61:b6:77:43:8f:64:9c:c0:dc:35:74:00:aa:86:e6:b3:d9:e1:
f7:f5:d3:7a:e5:04:9a:de:13:6c:26:9f:ed:22:a1:80:95:0d:
b3:50:ca:ba:46:74:44:32:0d:77:2e:cf:04:10:01:4d:91:52:
09:61:a8:20:53:f7:04:73:10:e6:43:bd:27:13:e0:aa:c0:77:
b2:4f:80:f7:56:35:fb:6c:62:02:6f:99:57:95:9f:88:76:de:
00:ec:0c:0f:b9:cf:c7:40:7b:24:fc:11:ae:73:3d:93:83:73:
61:9d:a9:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:56:22 2026 by rpki-client