This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/fcea85-8be1-4877-878a-ad9e1a0510b9/1/ZeuO9EGD-OOpyIenviaz8HE8E70.mft
File: ZeuO9EGD-OOpyIenviaz8HE8E70.mft (raw, json)
Hash identifier: 3S2armpi1EcLGZdTEvS5XapboykZCFDoZhxOE8HXNp0=
Subject key identifier: BD:3F:00:80:BB:73:61:4A:98:35:06:F0:32:59:73:08:6E:38:1F:E8
Authority key identifier: 65:EB:8E:F4:41:83:F8:E3:A9:C8:87:A7:BE:26:B3:F0:71:3C:13:BD
Certificate issuer: /CN=65eb8ef44183f8e3a9c887a7be26b3f0713c13bd
Certificate serial: 019C427DB1D122AD2759E4F3F18631B051C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZeuO9EGD-OOpyIenviaz8HE8E70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/fcea85-8be1-4877-878a-ad9e1a0510b9/1/ZeuO9EGD-OOpyIenviaz8HE8E70.mft
Manifest number: 0DCE
Signing time: Mon 09 Feb 2026 13:00:59 +0000
Manifest this update: Mon 09 Feb 2026 13:00:59 +0000
Manifest next update: Tue 10 Feb 2026 13:00:59 +0000
Files and hashes: 1: 1zk3At_CW_6MtNUlvcs7PWL_MSY.roa (hash: Wx50m0MeMkdSzmVTbDYeihjHelr2/WxDpsYDzzYan64=)
2: ZeuO9EGD-OOpyIenviaz8HE8E70.crl (hash: woClkEn0c7LjfelMJDgMFkQdmvQsLnae3MPxns2pcGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/fcea85-8be1-4877-878a-ad9e1a0510b9/1/ZeuO9EGD-OOpyIenviaz8HE8E70.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/fcea85-8be1-4877-878a-ad9e1a0510b9/1/ZeuO9EGD-OOpyIenviaz8HE8E70.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZeuO9EGD-OOpyIenviaz8HE8E70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7d:b1:d1:22:ad:27:59:e4:f3:f1:86:31:b0:51:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65eb8ef44183f8e3a9c887a7be26b3f0713c13bd
Validity
Not Before: Feb 9 13:00:59 2026 GMT
Not After : Feb 10 13:00:59 2026 GMT
Subject: CN=bd3f0080bb73614a983506f0325973086e381fe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:be:b6:3c:72:34:b6:dc:8d:34:4f:3f:fc:aa:
9d:22:47:46:bb:ba:6e:d0:82:2b:d1:4a:92:ef:0a:
e8:a5:bf:d3:5d:bb:c5:27:d7:80:a9:23:37:81:15:
10:c5:2a:e4:9b:54:98:3d:ed:46:9b:90:96:1d:9d:
1d:8a:af:06:09:3a:3f:3f:ff:db:a1:37:b4:31:a9:
47:08:cf:71:6d:4f:57:f9:1d:83:1b:01:35:5a:e2:
7d:db:72:5e:4e:1a:6a:dd:c3:ea:4d:f7:e0:40:fa:
3a:1d:23:e0:01:a5:91:ea:72:4d:d5:21:4c:3b:cc:
24:e0:c5:35:e6:7f:85:75:b2:99:fe:b6:4e:78:6c:
68:c2:84:6a:b5:a7:e6:71:31:75:22:61:45:73:8d:
e3:14:0b:4f:84:79:4e:5d:d6:00:a2:4a:33:4e:ec:
46:b5:8d:09:81:66:d6:99:3b:df:86:9e:81:c6:30:
26:2a:e9:c0:b2:1b:5d:40:cb:62:7c:5d:4b:94:e5:
f6:78:e3:34:c0:6b:a2:ad:2e:1e:f0:2a:a6:4b:92:
ae:fb:31:e0:63:3e:7b:f9:bb:d4:55:80:6e:0b:43:
68:07:52:f4:9c:44:a1:d6:96:ed:80:4e:17:d1:de:
1b:fd:33:44:ed:8a:82:71:c7:a8:2a:ed:eb:29:f5:
ec:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:3F:00:80:BB:73:61:4A:98:35:06:F0:32:59:73:08:6E:38:1F:E8
X509v3 Authority Key Identifier:
keyid:65:EB:8E:F4:41:83:F8:E3:A9:C8:87:A7:BE:26:B3:F0:71:3C:13:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZeuO9EGD-OOpyIenviaz8HE8E70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/fcea85-8be1-4877-878a-ad9e1a0510b9/1/ZeuO9EGD-OOpyIenviaz8HE8E70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/fcea85-8be1-4877-878a-ad9e1a0510b9/1/ZeuO9EGD-OOpyIenviaz8HE8E70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:56:78:50:95:e3:2a:41:7f:24:dd:8a:b0:7b:2d:cb:17:f4:
cd:bf:2c:f8:03:a7:be:41:21:b2:79:43:7f:79:08:95:ea:2d:
55:51:b2:1c:52:c2:81:f9:68:90:df:b4:1e:9f:d8:2b:a3:a4:
90:2b:d0:95:89:a5:c3:96:da:ca:7c:15:6a:35:03:01:c6:80:
5b:cd:b5:81:23:d9:cb:13:7c:5b:df:ef:02:e2:01:d6:d9:ea:
b5:3a:26:31:d0:fb:67:d6:90:ab:25:83:b9:e8:4d:b1:e8:23:
56:e5:91:cb:11:1e:8e:2f:12:e1:28:0d:8c:75:03:fb:3d:19:
68:9f:16:aa:0d:b8:36:b6:05:65:85:d4:63:d6:93:ec:c9:ab:
ba:21:fe:70:c0:6d:40:98:5e:10:19:35:1a:24:54:d0:31:dc:
7b:f5:94:a5:83:33:c4:01:73:30:02:f9:b1:64:0c:13:f0:67:
7d:8d:cb:c7:89:83:a0:b7:7f:c7:ff:b8:f6:fd:25:0f:e7:fc:
36:3a:51:82:72:f7:60:2d:a9:e4:db:03:24:f5:22:0f:74:fe:
3c:77:cc:14:db:84:78:77:56:72:7a:1f:9e:3d:49:80:83:08:
fb:5e:ce:50:32:01:45:e6:31:08:dd:a2:54:e0:ef:83:22:53:
79:33:ea:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:06:39 2026 by rpki-client