This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/784c9e-e6ea-49e9-adbe-479297364eb6/1/wVwVNEGqsCDrb2Df9xUu6qyupOc.mft
File: wVwVNEGqsCDrb2Df9xUu6qyupOc.mft (raw, json)
Hash identifier: NzruFA3NBe1gtDh7XCjJUMuRRNK3Q841wiFyaI93JFU=
Subject key identifier: 49:96:90:3C:D3:5E:8B:CE:F7:5E:7C:C1:24:53:54:03:11:AA:E7:F2
Authority key identifier: C1:5C:15:34:41:AA:B0:20:EB:6F:60:DF:F7:15:2E:EA:AC:AE:A4:E7
Certificate issuer: /CN=c15c153441aab020eb6f60dff7152eeaacaea4e7
Certificate serial: 019B76DBAA1FBF20E2A1A41477C6CA5D92F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wVwVNEGqsCDrb2Df9xUu6qyupOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/784c9e-e6ea-49e9-adbe-479297364eb6/1/wVwVNEGqsCDrb2Df9xUu6qyupOc.mft
Manifest number: 17A4
Signing time: Thu 01 Jan 2026 00:01:05 +0000
Manifest this update: Thu 01 Jan 2026 00:01:05 +0000
Manifest next update: Fri 02 Jan 2026 00:01:05 +0000
Files and hashes: 1: d20SUDYIRv-4bm5PviK5Z-zGDs0.roa (hash: Eh4bKXtFp88meM/tOgLhq0HIMCc67pkb4NNRMEjL16E=)
2: wVwVNEGqsCDrb2Df9xUu6qyupOc.crl (hash: r8HvoDOnurHJ14tpWBDnxRvUMy41+SjGumua1ngCD0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/784c9e-e6ea-49e9-adbe-479297364eb6/1/wVwVNEGqsCDrb2Df9xUu6qyupOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/784c9e-e6ea-49e9-adbe-479297364eb6/1/wVwVNEGqsCDrb2Df9xUu6qyupOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wVwVNEGqsCDrb2Df9xUu6qyupOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Jan 2026 00:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:76:db:aa:1f:bf:20:e2:a1:a4:14:77:c6:ca:5d:92:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c15c153441aab020eb6f60dff7152eeaacaea4e7
Validity
Not Before: Jan 1 00:01:05 2026 GMT
Not After : Jan 2 00:01:05 2026 GMT
Subject: CN=4996903cd35e8bcef75e7cc12453540311aae7f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5a:c0:bf:f6:55:39:a7:72:43:ee:61:fc:73:
b4:15:f6:d0:a5:e3:7c:c3:93:53:a0:1c:89:9f:a8:
07:89:76:be:4d:9c:cb:d5:39:2e:9c:7e:9b:24:44:
8b:f5:b1:d8:53:e2:89:21:50:d2:b7:53:07:b6:e8:
97:dd:7c:d7:22:2c:b8:2e:18:d8:5f:d7:a0:5e:56:
d3:5e:0e:28:46:fb:a8:8a:0d:58:b1:41:5e:36:bb:
8a:a3:24:67:57:c2:04:02:b0:04:f0:be:72:8e:91:
02:d9:1d:8c:86:04:34:58:05:31:94:89:8d:ae:3b:
3f:da:d0:c4:98:06:c6:fa:ac:55:2e:6d:ce:0e:4a:
cc:98:88:f7:47:ff:ed:a9:30:60:99:b9:51:e4:33:
74:4d:16:17:27:aa:08:14:20:59:72:a0:cc:db:c7:
ce:5e:07:9a:45:f2:f1:a4:0a:27:b7:fb:f2:b9:cf:
15:4a:f0:6f:a3:35:65:30:ac:2c:d9:65:a5:f9:4f:
c4:19:6b:bd:b2:01:67:f3:2a:aa:d8:c8:43:bf:9b:
d3:04:0d:f4:55:e8:92:a6:32:86:a5:22:15:02:f5:
0c:f0:44:00:63:44:58:e7:67:b0:79:9d:4e:77:cf:
f9:a6:8f:ac:58:8e:0f:ab:4b:5d:be:7f:a7:02:d8:
d9:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:96:90:3C:D3:5E:8B:CE:F7:5E:7C:C1:24:53:54:03:11:AA:E7:F2
X509v3 Authority Key Identifier:
keyid:C1:5C:15:34:41:AA:B0:20:EB:6F:60:DF:F7:15:2E:EA:AC:AE:A4:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wVwVNEGqsCDrb2Df9xUu6qyupOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/784c9e-e6ea-49e9-adbe-479297364eb6/1/wVwVNEGqsCDrb2Df9xUu6qyupOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/784c9e-e6ea-49e9-adbe-479297364eb6/1/wVwVNEGqsCDrb2Df9xUu6qyupOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:cf:72:5c:fa:da:74:80:32:0b:5c:60:8a:cc:e9:0d:49:dd:
4b:1b:42:d4:4e:55:4f:6c:fc:c5:24:10:58:35:4e:ac:cb:53:
ba:c3:af:e4:da:4e:b9:dd:4a:04:db:48:63:cd:f5:aa:10:4d:
46:10:47:88:e4:ff:bf:3a:d2:34:eb:96:eb:e6:b5:4d:e7:aa:
aa:a5:8f:f1:aa:b5:fe:4c:a3:53:ce:07:db:49:02:51:f2:7f:
29:dc:11:58:b9:c9:d0:af:d0:fd:21:9f:43:44:a8:d6:25:71:
b3:46:81:c1:07:84:19:cf:49:08:67:28:11:fc:2b:8b:0b:28:
ea:31:56:b8:9f:5f:81:5f:f2:cd:a7:ad:4b:6d:cd:9c:c2:6c:
dc:76:7b:cf:61:42:25:84:91:ea:09:70:1e:f9:bd:ba:b4:52:
8c:b4:64:47:81:3a:46:35:52:b5:0b:60:11:a5:6b:7a:9b:10:
a6:d7:3b:f7:eb:2c:de:2e:85:2c:53:fd:d3:a9:a0:4e:df:06:
91:54:83:2a:cd:a0:92:b6:d5:c4:8a:2b:b4:10:a4:e8:8f:84:
4e:3a:55:00:b5:92:b6:63:b9:ea:cd:62:fd:b1:f0:cd:49:b6:
c0:a0:1d:f2:f9:7a:ae:86:c7:48:50:64:5b:94:d4:4b:3d:4b:
87:49:c6:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZt226ofvyDioaQUd8bKXZLwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxNWMxNTM0NDFhYWIwMjBlYjZmNjBkZmY3MTUyZWVhYWNh
ZWE0ZTcwHhcNMjYwMTAxMDAwMTA1WhcNMjYwMTAyMDAwMTA1WjAzMTEwLwYDVQQD
Eyg0OTk2OTAzY2QzNWU4YmNlZjc1ZTdjYzEyNDUzNTQwMzExYWFlN2YyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFrAv/ZVOadyQ+5h/HO0FfbQpeN8
w5NToByJn6gHiXa+TZzL1TkunH6bJESL9bHYU+KJIVDSt1MHtuiX3XzXIiy4LhjY
X9egXlbTXg4oRvuoig1YsUFeNruKoyRnV8IEArAE8L5yjpEC2R2MhgQ0WAUxlImN
rjs/2tDEmAbG+qxVLm3ODkrMmIj3R//tqTBgmblR5DN0TRYXJ6oIFCBZcqDM28fO
XgeaRfLxpAont/vyuc8VSvBvozVlMKws2WWl+U/EGWu9sgFn8yqq2MhDv5vTBA30
VeiSpjKGpSIVAvUM8EQAY0RY52eweZ1Od8/5po+sWI4Pq0tdvn+nAtjZNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEmWkDzTXovO9158wSRTVAMRqufyMB8GA1UdIwQY
MBaAFMFcFTRBqrAg629g3/cVLuqsrqTnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1Z3Vk5FR3FzQ0RyYjJEZjl4VXU2cXl1cE9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi83ODRjOWUtZTZlYS00OWU5LWFkYmUt
NDc5Mjk3MzY0ZWI2LzEvd1Z3Vk5FR3FzQ0RyYjJEZjl4VXU2cXl1cE9jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi83ODRjOWUtZTZlYS00OWU5LWFkYmUtNDc5Mjk3MzY0ZWI2
LzEvd1Z3Vk5FR3FzQ0RyYjJEZjl4VXU2cXl1cE9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL89yXPra
dIAyC1xgiszpDUndSxtC1E5VT2z8xSQQWDVOrMtTusOv5NpOud1KBNtIY831qhBN
RhBHiOT/vzrSNOuW6+a1TeeqqqWP8aq1/kyjU84H20kCUfJ/KdwRWLnJ0K/Q/SGf
Q0So1iVxs0aBwQeEGc9JCGcoEfwriwso6jFWuJ9fgV/yzaetS23NnMJs3HZ7z2FC
JYSR6glwHvm9urRSjLRkR4E6RjVStQtgEaVrepsQptc79+ss3i6FLFP906mgTt8G
kVSDKs2gkrbVxIortBCk6I+ETjpVALWStmO56s1i/bHwzUm2wKAd8vl6robHSFBk
W5TUSz1Lh0nG/w==
-----END CERTIFICATE-----
Generated at Thu Jan 1 03:53:14 2026 by rpki-client