This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/9a10c3-212f-4c5e-97bb-e0d576a5450e/1/cZhnMZJb6FUaUwka_m0Jct-jgH4.mft
File: cZhnMZJb6FUaUwka_m0Jct-jgH4.mft (raw, json)
Hash identifier: SzdpG3NU8JXJLcxL4S7iIDWkXwz0pE4sw8Z8ahv1BKA=
Subject key identifier: D7:CC:57:A3:55:0B:2D:AD:9B:BF:2E:1A:DF:7A:97:A9:63:52:8A:69
Authority key identifier: 71:98:67:31:92:5B:E8:55:1A:53:09:1A:FE:6D:09:72:DF:A3:80:7E
Certificate issuer: /CN=71986731925be8551a53091afe6d0972dfa3807e
Certificate serial: 019C42EB9A8E8262197B117992EEEC4310DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cZhnMZJb6FUaUwka_m0Jct-jgH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/9a10c3-212f-4c5e-97bb-e0d576a5450e/1/cZhnMZJb6FUaUwka_m0Jct-jgH4.mft
Manifest number: 08D3
Signing time: Mon 09 Feb 2026 15:01:02 +0000
Manifest this update: Mon 09 Feb 2026 15:01:02 +0000
Manifest next update: Tue 10 Feb 2026 15:01:02 +0000
Files and hashes: 1: cZhnMZJb6FUaUwka_m0Jct-jgH4.crl (hash: +xXRx4YusMAyj1+ME5Dcrk8HBeb1ljvGwLe8FaEJDgw=)
2: deQ3iUYI2zhDS5WVofbw_0r7MdU.roa (hash: aWouu4WFuntFUTMgXaNZBkCjMzZT9CqQafzXFsbJDvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/9a10c3-212f-4c5e-97bb-e0d576a5450e/1/cZhnMZJb6FUaUwka_m0Jct-jgH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/9a10c3-212f-4c5e-97bb-e0d576a5450e/1/cZhnMZJb6FUaUwka_m0Jct-jgH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cZhnMZJb6FUaUwka_m0Jct-jgH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:eb:9a:8e:82:62:19:7b:11:79:92:ee:ec:43:10:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71986731925be8551a53091afe6d0972dfa3807e
Validity
Not Before: Feb 9 15:01:02 2026 GMT
Not After : Feb 10 15:01:02 2026 GMT
Subject: CN=d7cc57a3550b2dad9bbf2e1adf7a97a963528a69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6d:90:0c:8d:78:a8:46:aa:9e:fc:bb:f5:c9:
03:08:d1:82:8b:4d:c1:38:11:06:fc:09:ca:e3:82:
43:9c:db:7c:15:a8:45:af:a8:57:e0:af:df:2f:47:
f4:b1:c1:b3:19:09:f8:37:a5:31:bd:c6:9b:8b:bf:
17:44:8c:c3:b9:48:36:7a:01:eb:fd:4d:fe:ea:52:
07:1e:e7:d7:ae:ce:fd:25:9b:b6:89:8c:10:1c:bf:
e9:ac:aa:0f:09:bc:cd:03:0a:89:bd:41:bd:22:be:
1d:89:7f:2b:58:1b:39:7f:54:b6:62:f8:53:4b:6f:
e5:ce:18:09:5c:b2:3d:36:82:a6:fa:04:cf:e8:f6:
15:37:9f:16:1a:7e:cc:31:13:27:cb:a5:c9:f5:67:
8c:7c:49:9a:fe:7c:af:d2:59:50:16:fb:ef:20:ed:
7a:ad:9e:e7:24:7b:e4:19:15:8e:bb:51:27:83:4e:
6d:2b:5c:70:8f:b4:f9:67:44:2a:c5:84:70:e8:53:
3b:60:40:6b:fb:2f:28:2f:ef:d5:8a:7d:ce:70:79:
c8:91:55:93:bf:da:10:09:eb:c9:52:58:a9:22:a7:
af:45:6f:49:60:f6:48:98:8b:cb:58:08:db:9f:85:
fa:ba:7c:b7:0f:90:27:02:67:dd:16:04:a7:38:3e:
f0:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:CC:57:A3:55:0B:2D:AD:9B:BF:2E:1A:DF:7A:97:A9:63:52:8A:69
X509v3 Authority Key Identifier:
keyid:71:98:67:31:92:5B:E8:55:1A:53:09:1A:FE:6D:09:72:DF:A3:80:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cZhnMZJb6FUaUwka_m0Jct-jgH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/9a10c3-212f-4c5e-97bb-e0d576a5450e/1/cZhnMZJb6FUaUwka_m0Jct-jgH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/9a10c3-212f-4c5e-97bb-e0d576a5450e/1/cZhnMZJb6FUaUwka_m0Jct-jgH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:9a:0f:3e:ac:06:c7:e8:9f:99:9d:b8:08:6f:8f:72:7d:2e:
24:7b:ef:3d:44:e1:41:35:15:5f:60:b8:61:72:32:5b:5d:4b:
36:1e:00:40:43:b5:b3:b7:12:b5:02:05:16:6c:31:47:a4:ac:
8f:bc:e1:4b:ab:fc:39:ea:03:1b:5b:fa:89:09:11:5d:99:8c:
87:8f:a9:e6:a4:46:3a:a0:80:ad:78:14:1f:6b:84:03:85:e1:
72:28:28:1b:21:20:1f:fd:79:14:98:51:99:ce:64:68:75:f4:
29:48:ad:78:dd:be:5a:60:36:2e:b4:d7:37:2e:1b:2a:81:04:
d0:cb:53:9a:bc:ec:63:2f:bc:f8:23:67:cf:9d:2f:41:e7:c9:
40:fc:f9:79:cd:9d:e7:99:70:7b:3e:c0:48:cc:17:fd:cc:64:
2f:9b:d2:68:48:bb:31:eb:cf:e6:79:df:29:05:e0:23:5d:90:
ab:96:be:9d:09:dc:9a:a7:73:bb:57:c9:07:3d:4b:1e:c4:c4:
6a:8d:dc:b9:b6:c9:c7:51:b8:39:b7:c8:41:4b:12:5c:93:3a:
6f:66:64:17:c5:09:14:97:47:3a:05:af:9f:76:6b:b2:9a:26:
71:1c:5f:04:28:c5:51:1a:57:36:8a:88:8c:a8:95:22:4b:5e:
9a:5d:f5:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:41:29 2026 by rpki-client