This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.mft
File: skz59tA09Gdg9PWbFzneEnuK3_M.mft (raw, json)
Hash identifier: 2dfA7yjnqIqdqTOXcc4ij3gbKxYg7GZl24E2VQQJ3DI=
Subject key identifier: 03:9D:8B:EE:D9:4C:A2:AB:40:14:E3:A6:2A:A8:F6:1D:C8:56:6D:F8
Authority key identifier: B2:4C:F9:F6:D0:34:F4:67:60:F4:F5:9B:17:39:DE:12:7B:8A:DF:F3
Certificate issuer: /CN=b24cf9f6d034f46760f4f59b1739de127b8adff3
Certificate serial: 019C43FE3FC6594A60C579CED12E0F0050D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/skz59tA09Gdg9PWbFzneEnuK3_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.mft
Manifest number: 0CF5
Signing time: Mon 09 Feb 2026 20:01:01 +0000
Manifest this update: Mon 09 Feb 2026 20:01:01 +0000
Manifest next update: Tue 10 Feb 2026 20:01:01 +0000
Files and hashes: 1: 2_rmRx0h4Ldgjna3JZ3fPaV_8K4.roa (hash: Db9G7H48+/jdUTzq6s6B93b4lpE5OnZQxkmWnM9jPYM=)
2: skz59tA09Gdg9PWbFzneEnuK3_M.crl (hash: pq9iNky+ozDIUD9deHAhiTEuhQyyaHX5gEJABnc3KwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/skz59tA09Gdg9PWbFzneEnuK3_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 20:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:fe:3f:c6:59:4a:60:c5:79:ce:d1:2e:0f:00:50:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b24cf9f6d034f46760f4f59b1739de127b8adff3
Validity
Not Before: Feb 9 20:01:01 2026 GMT
Not After : Feb 10 20:01:01 2026 GMT
Subject: CN=039d8beed94ca2ab4014e3a62aa8f61dc8566df8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:94:3a:de:2d:2c:37:d9:57:31:7b:99:ca:07:
22:72:2a:a4:bb:22:24:40:e0:9c:b8:75:64:86:86:
07:9c:c3:68:27:9d:05:73:5b:dc:4c:49:89:58:51:
87:88:ae:10:be:ab:b5:a5:b9:6b:11:5b:40:68:3c:
f8:30:13:1a:c3:92:b7:ae:a8:37:ee:63:fe:bf:67:
9b:4e:c9:57:91:58:59:25:00:44:c9:7e:93:5e:b7:
d6:77:95:67:0f:94:a6:39:7f:8e:5a:0c:d8:c4:27:
f6:e0:f4:40:74:ea:35:9e:49:7a:09:73:9a:23:c5:
06:2c:f2:bc:b4:ef:27:74:ca:c5:3f:43:66:37:46:
7b:d8:f1:fb:5a:dd:26:89:3e:95:a6:83:95:5c:62:
69:8f:29:10:76:34:4a:04:b0:60:24:30:6b:54:c5:
04:c4:08:f1:2b:da:66:21:da:23:13:6e:64:a2:ec:
6a:0d:45:27:d2:23:5d:23:9d:19:eb:13:73:65:df:
71:96:1a:ff:98:bf:54:7d:6d:84:e6:c7:12:67:6a:
f4:cf:b4:da:4d:42:c6:18:0b:52:14:86:5e:e0:10:
6e:5a:91:e5:4d:93:f4:46:70:62:a8:4c:68:14:5f:
27:04:bb:58:de:03:93:fd:c2:4e:99:9b:27:6e:f5:
c0:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:9D:8B:EE:D9:4C:A2:AB:40:14:E3:A6:2A:A8:F6:1D:C8:56:6D:F8
X509v3 Authority Key Identifier:
keyid:B2:4C:F9:F6:D0:34:F4:67:60:F4:F5:9B:17:39:DE:12:7B:8A:DF:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/skz59tA09Gdg9PWbFzneEnuK3_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:08:5e:5e:f9:20:09:e3:b9:4d:8f:4d:d5:83:7a:4b:af:6d:
95:d6:1d:f8:23:dc:12:c8:4f:d6:08:fb:65:13:65:61:71:0c:
ca:82:03:cf:60:17:92:58:6a:4a:01:5e:b2:8a:c7:da:23:f2:
b0:d4:c5:b4:09:f0:3a:96:1b:ae:6b:ab:8c:e7:1f:49:b3:31:
ce:d6:f5:10:20:29:90:ab:9e:54:87:fd:4b:96:e5:88:83:68:
43:ce:4b:80:43:ac:fe:65:60:19:1e:80:27:78:fb:2f:bd:e9:
4f:c6:f2:f7:e2:b7:b7:1d:2d:13:5e:8c:47:ff:26:d6:37:12:
48:cf:11:bb:df:5f:6e:ae:20:04:5c:c4:54:6a:e1:8d:a2:1e:
14:1e:74:25:54:e2:29:4e:86:ef:44:82:20:73:87:22:56:5a:
41:ca:17:88:b2:0f:e7:d4:db:be:d2:1d:5c:c7:8c:49:f0:be:
fa:9c:b7:26:3a:dd:c7:8e:9a:54:6e:57:1f:e2:97:7d:3b:0b:
ae:a8:70:88:d4:bc:1a:5e:47:7a:c4:8b:45:23:25:7c:c0:62:
d3:65:d3:18:d7:d2:75:1c:c7:9f:dd:5d:6f:73:2d:8b:1b:fc:
91:3e:70:13:30:10:1d:99:97:33:9a:a3:fb:7e:48:1b:56:5d:
e2:ad:73:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:31:17 2026 by rpki-client