This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/1cb4f1-1835-4f00-9351-3e965b5a476b/1/ZDP_Xi5OtZpc2S8ComoOkr0Ghgg.mft
File: ZDP_Xi5OtZpc2S8ComoOkr0Ghgg.mft (raw, json)
Hash identifier: 0cIKEMI7UyOO7EvE21UI8h35bU8PIuZrxpTTESY64oQ=
Subject key identifier: 69:27:E8:92:39:0E:B6:6C:97:A5:6E:0B:D4:5E:29:63:E3:9F:FB:74
Authority key identifier: 64:33:FF:5E:2E:4E:B5:9A:5C:D9:2F:02:A2:6A:0E:92:BD:06:86:08
Certificate issuer: /CN=6433ff5e2e4eb59a5cd92f02a26a0e92bd068608
Certificate serial: 019C4358C09E23E5D7D06FF5EE7D5C5AF3EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZDP_Xi5OtZpc2S8ComoOkr0Ghgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/1cb4f1-1835-4f00-9351-3e965b5a476b/1/ZDP_Xi5OtZpc2S8ComoOkr0Ghgg.mft
Manifest number: 07
Signing time: Mon 09 Feb 2026 17:00:15 +0000
Manifest this update: Mon 09 Feb 2026 17:00:15 +0000
Manifest next update: Tue 10 Feb 2026 17:00:15 +0000
Files and hashes: 1: ZDP_Xi5OtZpc2S8ComoOkr0Ghgg.crl (hash: oPDrohSF33Pg0rb0s2dq8dH1NqUQHKGdORJ8XzLAi04=)
2: sXcUTVU3seCH9wJMIPunvKNyLno.asa (hash: UcqkRSCrTefmZ26PmZjiVWzdNEglpK/0ZjjW3AK0zqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/1cb4f1-1835-4f00-9351-3e965b5a476b/1/ZDP_Xi5OtZpc2S8ComoOkr0Ghgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/1cb4f1-1835-4f00-9351-3e965b5a476b/1/ZDP_Xi5OtZpc2S8ComoOkr0Ghgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZDP_Xi5OtZpc2S8ComoOkr0Ghgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:58:c0:9e:23:e5:d7:d0:6f:f5:ee:7d:5c:5a:f3:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6433ff5e2e4eb59a5cd92f02a26a0e92bd068608
Validity
Not Before: Feb 9 17:00:15 2026 GMT
Not After : Feb 10 17:00:15 2026 GMT
Subject: CN=6927e892390eb66c97a56e0bd45e2963e39ffb74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:5c:be:85:5a:78:68:2e:1c:61:6f:1f:31:8c:
fc:31:1c:23:de:82:95:5b:7a:a3:5e:62:d3:64:63:
69:6f:01:d3:5c:c7:12:a1:6c:bd:c9:d0:e0:4a:17:
19:a0:be:83:32:9d:89:6e:1b:8b:98:ba:19:10:21:
57:fd:4f:df:4a:93:7d:98:22:42:6b:40:ff:27:16:
3a:dd:da:fe:75:fa:b1:05:86:ff:6c:5a:c9:c2:65:
13:65:ad:99:79:98:23:34:de:a3:19:5d:0f:97:ba:
86:e7:29:55:2f:62:eb:1a:a3:44:5b:81:c9:b3:20:
89:f6:9d:55:94:74:74:be:f2:b8:1b:76:c8:80:aa:
19:86:86:54:70:16:c8:fb:76:cc:a4:a0:3e:75:66:
ef:b6:73:b5:9d:03:df:5f:bc:d2:25:d9:89:92:5b:
75:a1:b2:f7:aa:2c:27:d8:70:4c:61:31:13:32:11:
69:8b:93:43:9a:e8:b7:46:8d:17:11:b6:06:1c:01:
0a:64:0b:57:dd:3b:6c:21:d7:0d:1a:f0:d9:f6:55:
cc:08:9e:c2:a7:c8:db:3b:a2:90:f5:5f:b3:75:5d:
cd:71:60:46:d1:39:3b:8d:69:e3:c5:e4:0c:ec:1b:
21:d6:87:0e:b8:ee:fd:a2:5d:39:47:7c:55:72:84:
28:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:27:E8:92:39:0E:B6:6C:97:A5:6E:0B:D4:5E:29:63:E3:9F:FB:74
X509v3 Authority Key Identifier:
keyid:64:33:FF:5E:2E:4E:B5:9A:5C:D9:2F:02:A2:6A:0E:92:BD:06:86:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZDP_Xi5OtZpc2S8ComoOkr0Ghgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/1cb4f1-1835-4f00-9351-3e965b5a476b/1/ZDP_Xi5OtZpc2S8ComoOkr0Ghgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/1cb4f1-1835-4f00-9351-3e965b5a476b/1/ZDP_Xi5OtZpc2S8ComoOkr0Ghgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:8b:db:3c:46:17:24:7e:e4:02:33:54:a5:54:09:63:a4:d6:
3e:d7:4b:43:26:19:e7:6a:5b:04:47:7a:0d:6a:07:2f:98:0e:
f3:7b:66:56:37:51:e9:f3:53:92:65:24:34:d3:ab:3b:62:a7:
db:13:b2:4c:39:3f:71:4b:1a:2c:fe:f5:bb:38:5a:d3:b9:48:
e4:8c:32:e0:8f:6b:f6:65:49:71:af:16:8d:de:ff:92:47:a6:
5b:eb:d5:52:30:2e:b0:4f:e5:f7:11:22:3b:43:56:22:9d:60:
f4:69:c2:9a:d1:95:79:ad:46:b1:c5:ce:7f:15:9b:63:04:b6:
c0:02:75:97:2f:ed:fc:a1:68:86:72:73:58:28:47:08:5a:ab:
02:a3:be:b8:66:f1:00:49:85:85:83:29:75:5c:5f:75:24:a7:
72:21:45:60:df:9e:b4:f4:6b:e0:4b:9c:82:47:8e:c7:4c:ab:
60:fa:8f:55:4d:15:82:b0:59:b7:dd:23:8c:eb:45:68:f4:77:
ae:57:6f:b6:c4:65:d7:8f:5c:53:98:29:a4:8b:05:ba:ba:8d:
a1:0d:ec:48:96:af:4d:88:4e:41:17:a6:3c:81:c8:75:38:b2:
26:bc:e9:9b:2f:a7:1b:2d:26:12:47:57:92:2e:39:be:cf:04:
25:a0:f9:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:22:34 2026 by rpki-client