This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/ac4c2d-8ab1-4e01-b6b1-29602215add0/1/W-oEa0mXgK7H1hgtLVanXrCJaM0.mft
File: W-oEa0mXgK7H1hgtLVanXrCJaM0.mft (raw, json)
Hash identifier: B5wKTX7Z/PkQgECUqHAiT7EnuLsGH9Bew/FStQn6Lys=
Subject key identifier: 6E:CE:53:3D:ED:65:B6:E9:6E:1E:E9:6B:DA:4F:84:8B:6C:37:C8:85
Authority key identifier: 5B:EA:04:6B:49:97:80:AE:C7:D6:18:2D:2D:56:A7:5E:B0:89:68:CD
Certificate issuer: /CN=5bea046b499780aec7d6182d2d56a75eb08968cd
Certificate serial: 019C420F7F2F33E8CB9E4FD0D282D6654D0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W-oEa0mXgK7H1hgtLVanXrCJaM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/ac4c2d-8ab1-4e01-b6b1-29602215add0/1/W-oEa0mXgK7H1hgtLVanXrCJaM0.mft
Manifest number: 16FA
Signing time: Mon 09 Feb 2026 11:00:37 +0000
Manifest this update: Mon 09 Feb 2026 11:00:37 +0000
Manifest next update: Tue 10 Feb 2026 11:00:37 +0000
Files and hashes: 1: W-oEa0mXgK7H1hgtLVanXrCJaM0.crl (hash: G7VCJQtfXWgi9IMRHMiCSkwbvI60h+sWgzeS86gpSB0=)
2: zQPH05SIZNuQg4zGS0l4MvCEJwc.roa (hash: ueZfBj8JGiHYfSauWwC/j0GXwlPaWH1VC5mIskTovc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/ac4c2d-8ab1-4e01-b6b1-29602215add0/1/W-oEa0mXgK7H1hgtLVanXrCJaM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/ac4c2d-8ab1-4e01-b6b1-29602215add0/1/W-oEa0mXgK7H1hgtLVanXrCJaM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/W-oEa0mXgK7H1hgtLVanXrCJaM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:0f:7f:2f:33:e8:cb:9e:4f:d0:d2:82:d6:65:4d:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bea046b499780aec7d6182d2d56a75eb08968cd
Validity
Not Before: Feb 9 11:00:37 2026 GMT
Not After : Feb 10 11:00:37 2026 GMT
Subject: CN=6ece533ded65b6e96e1ee96bda4f848b6c37c885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:07:6a:af:73:fd:a6:5c:8f:b5:a4:31:8f:50:
e5:75:83:93:b2:44:c6:b9:09:10:31:ec:d3:bb:84:
b8:b0:98:dc:d8:1a:8f:ae:6a:c4:8b:db:ab:d2:c2:
0b:b5:bf:a1:b0:18:c9:aa:f3:c5:3f:5c:0d:81:f2:
17:c6:a5:4d:fe:64:52:b1:57:fc:9b:ec:59:68:35:
c8:1a:3a:14:20:26:01:4c:aa:52:2a:cd:34:c1:30:
f9:19:83:93:14:b3:81:31:83:56:d1:6a:92:06:c7:
c7:90:ce:cb:39:89:9c:eb:12:7b:d1:b3:bb:79:67:
66:08:ac:69:69:e9:86:ba:21:60:4d:e9:b0:83:b0:
78:28:b6:44:97:6a:ce:6d:b7:c8:fa:8e:b2:eb:73:
f2:86:c2:45:15:36:14:ce:29:b6:13:3a:2a:94:66:
f2:f8:67:6b:dc:f0:78:fd:64:59:16:a7:78:7d:38:
f4:5b:76:37:ce:e6:d1:db:69:c7:ae:bd:da:90:2c:
6f:5b:6a:c3:91:84:2d:4e:41:b2:d3:a2:99:ac:0c:
5c:0d:9e:42:9c:7a:63:19:13:dc:23:20:cf:d8:2a:
a4:75:9b:98:1f:24:b0:a8:6a:38:c1:45:eb:3b:b9:
5a:b9:ca:3b:a3:46:72:df:2c:b6:73:cb:2b:7d:b1:
5b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:CE:53:3D:ED:65:B6:E9:6E:1E:E9:6B:DA:4F:84:8B:6C:37:C8:85
X509v3 Authority Key Identifier:
keyid:5B:EA:04:6B:49:97:80:AE:C7:D6:18:2D:2D:56:A7:5E:B0:89:68:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-oEa0mXgK7H1hgtLVanXrCJaM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/ac4c2d-8ab1-4e01-b6b1-29602215add0/1/W-oEa0mXgK7H1hgtLVanXrCJaM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/ac4c2d-8ab1-4e01-b6b1-29602215add0/1/W-oEa0mXgK7H1hgtLVanXrCJaM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:5e:9a:30:4c:79:65:ea:bc:cf:2e:52:7b:50:b7:7c:e4:ad:
1d:86:ee:e8:31:9c:48:05:97:07:85:3a:d9:8b:df:e4:db:46:
42:89:38:98:78:32:2f:e9:f3:a2:3a:f5:2d:01:01:77:ec:92:
35:b3:e4:f1:0d:ca:f7:4b:be:68:11:f8:02:7b:80:7d:4f:4f:
d2:98:85:9e:81:e2:41:aa:1b:de:14:fd:8e:fd:b8:5d:b5:51:
93:d9:70:77:86:27:a2:37:a3:c8:49:48:3e:53:7e:47:f1:51:
26:b7:72:a3:04:e9:5c:a1:12:64:42:b6:1f:dc:da:4f:e8:52:
f7:95:7c:8e:dc:a8:96:4d:ed:33:c7:58:e3:dd:59:58:00:7b:
cb:d7:cb:b4:87:3d:31:f6:9d:36:62:08:2a:11:12:45:8b:d9:
4d:2d:89:3c:c2:11:c7:f4:da:0e:27:31:55:87:96:cc:ef:f7:
4c:36:cb:df:43:80:01:4f:e8:a2:26:c6:2b:3f:8e:70:e4:2f:
15:a3:96:5f:56:1a:97:2c:93:3c:00:43:af:9f:7c:50:7e:fb:
5a:b3:05:32:52:18:0a:31:be:f0:fb:28:1e:2e:55:cc:9a:a4:
4e:b6:bb:07:a5:78:ba:2b:44:81:e7:b0:51:df:b7:de:11:7d:
e7:e4:56:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:58:00 2026 by rpki-client