This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/74e085-3a29-4c19-8485-b7f9b702ed48/1/wBWqbOyG3yEV4qEOkgnYqi35i78.mft
File: wBWqbOyG3yEV4qEOkgnYqi35i78.mft (raw, json)
Hash identifier: GIWkmurPaSFbxa8u68KeBDuhzo3KOL0ZOYXQKToIUTk=
Subject key identifier: AC:1F:19:B1:E5:35:F6:AB:C0:11:FA:6C:CF:9C:61:86:5C:F5:67:ED
Authority key identifier: C0:15:AA:6C:EC:86:DF:21:15:E2:A1:0E:92:09:D8:AA:2D:F9:8B:BF
Certificate issuer: /CN=c015aa6cec86df2115e2a10e9209d8aa2df98bbf
Certificate serial: 019C0E593A300FBF0077F4EAFC94CFD26E35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wBWqbOyG3yEV4qEOkgnYqi35i78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/74e085-3a29-4c19-8485-b7f9b702ed48/1/wBWqbOyG3yEV4qEOkgnYqi35i78.mft
Manifest number: 02B5
Signing time: Fri 30 Jan 2026 10:00:54 +0000
Manifest this update: Fri 30 Jan 2026 10:00:54 +0000
Manifest next update: Sat 31 Jan 2026 10:00:54 +0000
Files and hashes: 1: SOx3AgvmBANgGuRBvGIZv19ZcA0.roa (hash: 6aOAX3w5YQajoC0CEbqRBxH+zCfnhhkE4sDztjd3jWI=)
2: wBWqbOyG3yEV4qEOkgnYqi35i78.crl (hash: 6QRn/9acRfBorDbdC/92SvuROMJ3gQZQDuRUD/nLs4A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/74e085-3a29-4c19-8485-b7f9b702ed48/1/wBWqbOyG3yEV4qEOkgnYqi35i78.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/74e085-3a29-4c19-8485-b7f9b702ed48/1/wBWqbOyG3yEV4qEOkgnYqi35i78.mft
rsync://rpki.ripe.net/repository/DEFAULT/wBWqbOyG3yEV4qEOkgnYqi35i78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Jan 2026 06:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:0e:59:3a:30:0f:bf:00:77:f4:ea:fc:94:cf:d2:6e:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c015aa6cec86df2115e2a10e9209d8aa2df98bbf
Validity
Not Before: Jan 30 10:00:54 2026 GMT
Not After : Jan 31 10:00:54 2026 GMT
Subject: CN=ac1f19b1e535f6abc011fa6ccf9c61865cf567ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7e:30:dc:b7:2c:96:99:45:a6:91:7b:f0:21:
69:6e:22:a6:65:a4:c4:c2:20:40:b4:de:34:d2:76:
ff:fe:e6:2f:88:6c:e4:02:07:54:7a:a2:ee:56:63:
c1:16:34:62:ae:d6:55:ba:a2:e7:0f:e9:09:61:6a:
ed:c2:0d:81:36:fd:9c:7a:02:b9:1c:35:76:78:c9:
bf:c9:14:a0:c0:db:55:40:17:bd:54:4c:9f:9f:a7:
3c:ff:4b:59:cf:a2:b7:4f:86:6b:b0:7f:d3:64:5e:
3c:24:c8:18:89:5a:8a:72:8f:2e:93:c8:97:54:86:
05:f7:b0:4b:30:02:0a:68:e1:c8:03:a2:e9:8f:11:
8d:68:4e:22:13:44:9b:30:1a:3d:a9:65:0e:bf:4f:
9b:ab:13:22:17:af:c9:6f:5f:49:1b:76:61:65:b1:
e8:90:c2:3c:da:da:8f:5a:82:24:55:9d:42:5d:aa:
49:4c:27:09:2a:69:90:db:96:a7:f4:d0:29:59:d1:
e9:99:dd:dc:0c:07:83:82:92:f0:8b:5b:c2:c1:20:
d0:d3:90:02:e1:ba:5e:9d:18:11:b1:92:6b:c2:88:
fd:c3:68:56:b8:d3:47:0a:73:ac:18:a8:2f:57:96:
fa:c1:20:c0:07:1a:82:f8:9a:0d:25:fe:df:49:47:
46:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:1F:19:B1:E5:35:F6:AB:C0:11:FA:6C:CF:9C:61:86:5C:F5:67:ED
X509v3 Authority Key Identifier:
keyid:C0:15:AA:6C:EC:86:DF:21:15:E2:A1:0E:92:09:D8:AA:2D:F9:8B:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBWqbOyG3yEV4qEOkgnYqi35i78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/74e085-3a29-4c19-8485-b7f9b702ed48/1/wBWqbOyG3yEV4qEOkgnYqi35i78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/74e085-3a29-4c19-8485-b7f9b702ed48/1/wBWqbOyG3yEV4qEOkgnYqi35i78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:1b:d9:67:a5:90:6d:db:85:05:14:6c:d7:7d:80:51:fd:54:
a7:49:2e:d5:64:ba:18:ad:15:51:44:c6:e5:6e:8a:71:dd:8a:
27:53:64:e8:f2:8a:9e:11:72:13:e1:1c:f2:c5:fa:24:57:ba:
df:75:e3:18:69:16:92:63:ca:bf:ad:8a:af:12:7b:60:3d:56:
2a:f5:37:fc:93:3f:85:72:3f:f4:8f:e7:fd:7a:99:dd:07:d2:
32:82:c8:74:13:99:80:84:b8:48:ca:56:b9:aa:36:ec:69:68:
bb:d6:ae:5a:37:d2:d2:33:63:f7:df:84:ea:c5:20:27:d8:8d:
0e:5d:51:c0:47:d0:93:77:a5:a7:9c:cc:d2:f8:ec:83:0a:6f:
92:69:94:50:58:a1:87:4d:4d:02:60:6c:72:c4:ca:33:a6:1c:
68:5a:d5:47:22:6b:e7:82:b3:30:39:55:b0:b0:3b:b8:40:e4:
64:37:a1:ac:b6:50:84:21:ab:6f:bf:98:d3:55:aa:19:a4:5e:
66:8d:70:64:16:65:58:4c:78:8b:8b:6a:cc:57:88:b6:74:8a:
10:8f:f9:8c:08:2d:a9:b6:63:e0:01:fa:fc:a4:2c:76:2c:31:
06:ff:28:19:e6:0f:71:ff:c4:b4:04:aa:ba:e2:c4:22:2b:ab:
d1:65:30:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZwOWTowD78Ad/Tq/JTP0m41MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwMTVhYTZjZWM4NmRmMjExNWUyYTEwZTkyMDlkOGFhMmRm
OThiYmYwHhcNMjYwMTMwMTAwMDU0WhcNMjYwMTMxMTAwMDU0WjAzMTEwLwYDVQQD
EyhhYzFmMTliMWU1MzVmNmFiYzAxMWZhNmNjZjljNjE4NjVjZjU2N2VkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlX4w3LcslplFppF78CFpbiKmZaTE
wiBAtN400nb//uYviGzkAgdUeqLuVmPBFjRirtZVuqLnD+kJYWrtwg2BNv2cegK5
HDV2eMm/yRSgwNtVQBe9VEyfn6c8/0tZz6K3T4ZrsH/TZF48JMgYiVqKco8uk8iX
VIYF97BLMAIKaOHIA6LpjxGNaE4iE0SbMBo9qWUOv0+bqxMiF6/Jb19JG3ZhZbHo
kMI82tqPWoIkVZ1CXapJTCcJKmmQ25an9NApWdHpmd3cDAeDgpLwi1vCwSDQ05AC
4bpenRgRsZJrwoj9w2hWuNNHCnOsGKgvV5b6wSDABxqC+JoNJf7fSUdGAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKwfGbHlNfarwBH6bM+cYYZc9WftMB8GA1UdIwQY
MBaAFMAVqmzsht8hFeKhDpIJ2Kot+Yu/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0JXcWJPeUczeUVWNHFFT2tnbllxaTM1aTc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS83NGUwODUtM2EyOS00YzE5LTg0ODUt
YjdmOWI3MDJlZDQ4LzEvd0JXcWJPeUczeUVWNHFFT2tnbllxaTM1aTc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS83NGUwODUtM2EyOS00YzE5LTg0ODUtYjdmOWI3MDJlZDQ4
LzEvd0JXcWJPeUczeUVWNHFFT2tnbllxaTM1aTc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyBvZZ6WQ
bduFBRRs132AUf1Up0ku1WS6GK0VUUTG5W6Kcd2KJ1Nk6PKKnhFyE+Ec8sX6JFe6
33XjGGkWkmPKv62KrxJ7YD1WKvU3/JM/hXI/9I/n/XqZ3QfSMoLIdBOZgIS4SMpW
uao27Glou9auWjfS0jNj99+E6sUgJ9iNDl1RwEfQk3elp5zM0vjsgwpvkmmUUFih
h01NAmBscsTKM6YcaFrVRyJr54KzMDlVsLA7uEDkZDehrLZQhCGrb7+Y01WqGaRe
Zo1wZBZlWEx4i4tqzFeItnSKEI/5jAgtqbZj4AH6/KQsdiwxBv8oGeYPcf/EtASq
uuLEIiur0WUw8w==
-----END CERTIFICATE-----
Generated at Fri Jan 30 14:31:46 2026 by rpki-client