This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.mft
File: ZZw1ZjM4jpvYl9AAo_OLweVG70o.mft (raw, json)
Hash identifier: Bz1DO4Lx1d2IeENNsRwXUPnKrNVyzBbaamml81ZVJsw=
Subject key identifier: 5A:3F:52:B7:2C:12:06:1A:27:39:7B:91:D9:8B:0F:5E:4F:3F:93:2F
Authority key identifier: 65:9C:35:66:33:38:8E:9B:D8:97:D0:00:A3:F3:8B:C1:E5:46:EF:4A
Certificate issuer: /CN=659c356633388e9bd897d000a3f38bc1e546ef4a
Certificate serial: 019BD0561D3EB5A35C832C71ABBD0324AF0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZZw1ZjM4jpvYl9AAo_OLweVG70o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.mft
Manifest number: 0FC9
Signing time: Sun 18 Jan 2026 09:01:03 +0000
Manifest this update: Sun 18 Jan 2026 09:01:03 +0000
Manifest next update: Mon 19 Jan 2026 09:01:03 +0000
Files and hashes: 1: BMF2VpXZcBJDRIgbKu6WmPKlRZE.roa (hash: Qaj7moEkQ9ZCrPUXtOtCs5aCDU6SYqiy/nfoo9H7JTA=)
2: FUJsXxiOTQX7pzaDkL5Jbj6ETSk.roa (hash: Uv+Y92AvX9M/f9d8WVX2zm/JR3SnMp+hpIYMHfKMlJ0=)
3: QKv3-8YoDEK1Mitg0rmTL0SGOJM.roa (hash: DZBSel951tZH4WYCuGXNyVILmfYXwt90PA6IkSwgQS0=)
4: ZZw1ZjM4jpvYl9AAo_OLweVG70o.crl (hash: FjE9yTn2MG2y1tswYE3jyu2H1HjU5qfuxmbXApYYKvg=)
5: layLa7phubn33XrJU1BmwvtRXsY.roa (hash: cTdYPRtqorbWTxs8WaRuos58WsmGioXRqkoVdeR+lmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZZw1ZjM4jpvYl9AAo_OLweVG70o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Jan 2026 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:d0:56:1d:3e:b5:a3:5c:83:2c:71:ab:bd:03:24:af:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=659c356633388e9bd897d000a3f38bc1e546ef4a
Validity
Not Before: Jan 18 09:01:03 2026 GMT
Not After : Jan 19 09:01:03 2026 GMT
Subject: CN=5a3f52b72c12061a27397b91d98b0f5e4f3f932f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:41:fc:70:25:6d:83:b6:ee:58:4b:14:c5:25:
9d:76:1b:61:60:86:0b:c4:71:32:69:34:1e:91:1b:
2c:59:19:67:b6:3e:44:47:64:3f:52:86:b1:14:13:
78:a2:d9:9a:b5:a3:b4:6d:2d:af:fb:e2:83:8b:11:
4c:c5:a7:aa:bd:93:fc:7a:c5:64:9b:30:51:53:14:
49:90:9c:38:2a:cc:cb:20:6b:a4:b4:02:79:0e:bf:
3d:30:8f:05:f9:94:74:df:d1:46:eb:26:e5:6d:bd:
09:32:87:a0:fc:66:9d:a6:65:e0:60:30:94:64:4b:
28:0b:fa:bf:4a:84:ae:9a:fd:3b:70:26:c0:e5:30:
91:43:9d:4a:75:90:b7:43:23:92:79:df:8c:59:36:
9e:fb:fe:f1:c2:ce:11:07:8d:b2:05:f8:c5:c7:37:
39:59:84:02:d0:fd:ec:1f:bd:d8:ad:98:49:5f:15:
4a:bf:59:4a:b4:d7:a9:71:2a:6c:d4:80:48:9a:1e:
99:78:e4:d6:a7:df:77:5e:8a:56:f6:c7:a3:96:fd:
a3:97:1b:6b:8c:b6:2e:4f:ab:10:e9:c4:5c:bf:a7:
0a:53:3d:63:b7:7b:28:76:96:28:33:62:e2:a4:96:
5c:f5:eb:bc:85:a4:10:bd:ab:f5:54:4e:78:67:60:
9e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:3F:52:B7:2C:12:06:1A:27:39:7B:91:D9:8B:0F:5E:4F:3F:93:2F
X509v3 Authority Key Identifier:
keyid:65:9C:35:66:33:38:8E:9B:D8:97:D0:00:A3:F3:8B:C1:E5:46:EF:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZw1ZjM4jpvYl9AAo_OLweVG70o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:a8:fc:fd:2f:55:2b:8c:ec:4f:4e:3c:9e:08:5d:ff:3e:10:
b8:94:64:2d:10:a5:91:4e:6f:39:41:54:ce:4c:96:88:0b:af:
cc:b7:39:b1:e0:2c:23:5c:c3:a3:ff:fe:7f:ff:33:99:b1:2c:
a6:f0:ec:5e:76:98:a8:1b:a7:fd:5b:42:50:0c:8b:c5:9e:3e:
7a:c1:01:fe:c0:19:80:17:f2:39:67:3f:fd:03:37:e9:2d:a3:
53:0d:0b:61:5e:1e:e0:08:8f:53:d8:97:ba:ac:da:d0:dc:ce:
66:5d:9e:b8:9f:9e:58:60:7e:42:47:fd:5a:44:be:2c:1b:d9:
5f:c6:26:5a:46:29:8a:35:71:5e:64:d9:9a:3a:aa:d4:39:a1:
07:98:f5:0d:6c:17:5e:e7:0c:60:c2:b3:ba:48:c2:57:c3:5d:
cc:14:34:81:f8:21:a4:5e:27:67:b9:a5:c1:d2:a0:bc:59:1e:
8b:4d:c4:41:0e:45:c3:d0:08:29:3f:fe:b4:c1:1a:b6:fb:de:
59:63:a0:5b:12:c3:3e:7b:34:d0:c3:3b:a4:46:97:bf:bf:75:
72:65:ae:8c:c5:62:80:a2:88:23:e1:7b:b3:3e:20:e3:94:79:
e9:d6:07:28:fb:fe:15:2e:10:8e:f2:eb:59:fd:95:33:35:01:
36:5a:b2:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 12:07:55 2026 by rpki-client