This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.mft
File: wur6ows0Ds-BCky5rztRxwJWZZg.mft (raw, json)
Hash identifier: iOUejqjIWoGgkA00BMLjGECLub9aPS5pwu6EaPm6CHw=
Subject key identifier: 03:70:D8:D4:50:86:A4:82:D0:5C:F6:FA:46:1E:BD:2B:22:83:D7:BE
Authority key identifier: C2:EA:FA:A3:0B:34:0E:CF:81:0A:4C:B9:AF:3B:51:C7:02:56:65:98
Certificate issuer: /CN=c2eafaa30b340ecf810a4cb9af3b51c702566598
Certificate serial: 019B7FF3292B831F3B7BB8ED586522DC6BAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wur6ows0Ds-BCky5rztRxwJWZZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.mft
Manifest number: 17BC
Signing time: Fri 02 Jan 2026 18:23:20 +0000
Manifest this update: Fri 02 Jan 2026 18:23:20 +0000
Manifest next update: Sat 03 Jan 2026 18:23:20 +0000
Files and hashes: 1: 1xjGy8kGxJyh7J2Qkdm_1CgIizw.roa (hash: SCjTStnx3d9rgUqD/sa6z+Um/fiujbi+YSkvNuWw4AU=)
2: 560muZF2ZFoUXzFHeehOMiu7TxY.roa (hash: a+kp1sRnHb+zyHfy5p6Tvl2ORdufjMmgMTLJNwAskEk=)
3: Jn0foO2nylOIzwPP_aMaHGiC2GY.roa (hash: ohSovumWWLhKdZhk5RrKtQ4CFLps70d/0Yn1l3fVxq8=)
4: VM0pLapdGx8fvQVDV102YwMpG_8.roa (hash: e7Glou5sCvTIjF7UOrM+pI35ruz4p3l8J2z8cZZnKCs=)
5: VmoSUZB_YwVO3RGWmDSF29nsGPs.roa (hash: aKDz3hszk2w0c4ThUwFprKtq7QSsO1nVkwJ3BeHiXA0=)
6: bSNghNsXj0O_UpWy8HNgSqgK06c.roa (hash: 0NGKAdWwCE4N9xElDNPG0dRrl6HPJhaQ5Fv72afvE6E=)
7: p1THCo5uM8Pbdp5XB79Oi3ovbQg.roa (hash: ssTfln5EUyqHJxTZeKtRr4dmZA8VXk7SK0Av2d5HPsA=)
8: wur6ows0Ds-BCky5rztRxwJWZZg.crl (hash: AdGLKMc1dJTDS2JWZbiXx8H91U9WKoFX7H4qjfMZVk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/wur6ows0Ds-BCky5rztRxwJWZZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Jan 2026 18:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:f3:29:2b:83:1f:3b:7b:b8:ed:58:65:22:dc:6b:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2eafaa30b340ecf810a4cb9af3b51c702566598
Validity
Not Before: Jan 2 18:23:20 2026 GMT
Not After : Jan 3 18:23:20 2026 GMT
Subject: CN=0370d8d45086a482d05cf6fa461ebd2b2283d7be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4b:ec:cf:52:9e:3c:f3:f6:c9:05:70:8e:d1:
4e:db:f9:54:89:64:41:da:08:04:08:81:f8:28:8f:
d4:11:24:8e:a5:aa:1e:bc:4e:08:a5:2a:ed:5b:42:
fa:b2:31:c9:b7:bf:98:fe:38:c2:05:dc:6c:e1:44:
02:79:a6:88:2a:61:3c:c1:32:ed:2a:10:15:5c:4f:
f1:ba:7c:87:07:03:bf:d5:ab:bd:47:3e:e3:d7:79:
2b:66:83:5f:a0:88:5d:ca:e2:fc:10:dd:60:c1:a1:
f4:7b:6c:cc:03:0b:db:84:d8:2d:6f:7e:54:d7:99:
04:26:44:ea:e2:a9:7a:47:d4:53:3d:bb:8a:66:75:
63:9b:80:4c:6d:55:8e:8c:a4:b0:e4:c2:54:c3:d8:
28:0c:0f:6b:b2:06:e4:f3:ee:e4:40:25:80:8a:06:
3e:75:66:f4:12:5c:9e:4f:01:5b:b6:4d:08:64:5c:
84:2e:3c:3f:bd:e5:23:a9:99:30:18:41:c9:c5:cc:
a0:e2:2d:02:0c:47:2a:be:5e:22:4e:de:41:b7:ff:
4c:bd:17:03:40:51:f3:5a:ae:f6:a8:4c:90:4b:9a:
70:15:87:c8:09:e5:af:5a:5a:41:05:23:e0:4e:a8:
f8:3f:7a:da:44:09:39:6d:4e:7b:5f:75:3e:ef:a5:
97:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:70:D8:D4:50:86:A4:82:D0:5C:F6:FA:46:1E:BD:2B:22:83:D7:BE
X509v3 Authority Key Identifier:
keyid:C2:EA:FA:A3:0B:34:0E:CF:81:0A:4C:B9:AF:3B:51:C7:02:56:65:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wur6ows0Ds-BCky5rztRxwJWZZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:f9:a1:a4:25:ee:50:22:2a:75:64:21:9d:e8:83:71:c9:fd:
c4:7e:30:37:05:5e:14:14:bf:69:af:d5:da:ae:f0:c2:38:73:
cf:07:bf:05:1e:74:51:31:c5:90:8f:b1:0c:35:71:43:1e:1f:
92:c3:7a:0b:59:35:e2:4d:b9:3a:a7:f0:84:88:e0:fe:d5:dd:
38:e5:a0:0c:6a:49:2d:0a:8a:ad:44:7f:26:fb:45:01:0c:a2:
af:64:0f:4a:30:4f:8a:21:b3:90:bc:11:df:c1:5a:11:79:9a:
2d:53:86:1d:a7:5a:c4:d8:86:fd:47:75:5c:9c:7c:13:63:72:
24:86:e3:60:60:8d:e7:b6:f9:71:ab:86:da:b2:f9:f6:a2:e3:
36:55:2d:3d:6b:11:b5:a0:84:e1:2a:0a:fd:db:bb:02:bc:f5:
df:ba:2e:f2:52:14:87:8f:01:cb:2c:f5:8e:61:23:34:dd:6a:
2c:7b:7f:2a:b0:ec:bd:c3:8b:f8:1a:1e:43:f0:13:0e:fb:f1:
71:48:18:67:4b:d5:b0:84:b0:22:8a:64:e3:51:e6:be:00:e5:
b0:e4:70:df:9a:9d:63:2a:57:06:81:7a:f4:92:92:a8:92:b1:
4c:d6:6e:e1:cb:d6:29:29:8e:f7:46:8c:57:c5:6b:4a:aa:2d:
75:57:7c:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 2 23:28:34 2026 by rpki-client