This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/f22743-1898-47e5-96e2-f797e1f544d9/1/z431Kt_i_Oaulvb-BdFAieAkfO4.mft
File: z431Kt_i_Oaulvb-BdFAieAkfO4.mft (raw, json)
Hash identifier: STvQ0N3mZpPsbvAHcMmo9nql0IaAIwIY4PSXi3krqX4=
Subject key identifier: 76:CA:B5:27:FE:DB:ED:29:73:A9:CB:1F:46:7B:4E:C6:85:A1:32:97
Authority key identifier: CF:8D:F5:2A:DF:E2:FC:E6:AE:96:F6:FE:05:D1:40:89:E0:24:7C:EE
Certificate issuer: /CN=cf8df52adfe2fce6ae96f6fe05d14089e0247cee
Certificate serial: 019C4322BFC7513493DA9F77A17B8F3D3296
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z431Kt_i_Oaulvb-BdFAieAkfO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/f22743-1898-47e5-96e2-f797e1f544d9/1/z431Kt_i_Oaulvb-BdFAieAkfO4.mft
Manifest number: 0FC5
Signing time: Mon 09 Feb 2026 16:01:16 +0000
Manifest this update: Mon 09 Feb 2026 16:01:16 +0000
Manifest next update: Tue 10 Feb 2026 16:01:16 +0000
Files and hashes: 1: OL0stDkX2i4iSRwxjMZs3BrE1SE.roa (hash: vvxqzVvoF7+NWvZaa2Ph3MfeFjAEA8fO1sH/RieX6t4=)
2: z431Kt_i_Oaulvb-BdFAieAkfO4.crl (hash: z/AC4mFmXsSyLSxu6Nse1biq0ectGsN+sFZ4hQyfpks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/f22743-1898-47e5-96e2-f797e1f544d9/1/z431Kt_i_Oaulvb-BdFAieAkfO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/f22743-1898-47e5-96e2-f797e1f544d9/1/z431Kt_i_Oaulvb-BdFAieAkfO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/z431Kt_i_Oaulvb-BdFAieAkfO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:22:bf:c7:51:34:93:da:9f:77:a1:7b:8f:3d:32:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf8df52adfe2fce6ae96f6fe05d14089e0247cee
Validity
Not Before: Feb 9 16:01:16 2026 GMT
Not After : Feb 10 16:01:16 2026 GMT
Subject: CN=76cab527fedbed2973a9cb1f467b4ec685a13297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:e2:5d:41:34:00:49:89:2e:d4:36:6a:a7:e7:
82:8a:93:7d:4e:2c:9b:6d:db:31:e8:57:42:cd:d9:
0e:4e:d6:59:7e:cd:58:dd:d0:fa:d2:dd:1b:1a:8c:
ef:99:35:c4:79:4d:a2:91:cb:6b:a9:19:3b:64:e0:
ea:97:d8:d9:ff:38:b6:b6:a1:87:6c:be:14:b0:88:
b8:5d:f7:08:54:a2:d6:5d:c9:e8:1d:ef:4a:0a:f0:
b4:bc:57:af:7a:74:48:9f:46:cf:94:dc:00:dc:cd:
e9:68:e0:99:7a:ad:40:03:36:a5:35:bf:f0:b7:ba:
1b:f3:5c:32:e5:8c:3b:98:25:f5:7a:20:a9:ef:ec:
f4:96:d9:a4:5e:ff:eb:a2:09:01:fc:51:9c:a0:ef:
6b:7c:16:a0:29:38:43:3e:24:ac:ff:9c:e1:e9:18:
be:82:05:9c:72:ae:41:bc:55:27:0a:d3:04:85:27:
72:08:0d:e5:2c:55:34:78:95:af:a4:8f:89:23:35:
ec:2a:3e:46:18:1f:1f:16:d4:b3:af:98:c3:76:5c:
84:d7:e1:f8:42:16:74:4b:27:e4:4c:bf:e6:a3:ed:
36:ab:63:8a:ce:c3:17:39:82:7e:e0:3f:8e:ef:bb:
45:52:07:db:3f:22:b6:90:91:9f:85:51:9a:5e:16:
86:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:CA:B5:27:FE:DB:ED:29:73:A9:CB:1F:46:7B:4E:C6:85:A1:32:97
X509v3 Authority Key Identifier:
keyid:CF:8D:F5:2A:DF:E2:FC:E6:AE:96:F6:FE:05:D1:40:89:E0:24:7C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z431Kt_i_Oaulvb-BdFAieAkfO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f22743-1898-47e5-96e2-f797e1f544d9/1/z431Kt_i_Oaulvb-BdFAieAkfO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f22743-1898-47e5-96e2-f797e1f544d9/1/z431Kt_i_Oaulvb-BdFAieAkfO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:94:32:ed:35:24:ba:72:15:73:0d:fc:a4:e7:8f:55:67:bc:
fa:76:1c:d4:29:fa:81:f1:7d:f2:79:99:45:79:66:9a:e7:57:
88:3d:79:07:44:20:d0:d3:d8:46:ae:4c:96:b6:9c:7e:f8:30:
96:f5:0f:bf:dd:75:59:c9:82:e6:89:83:b3:74:f8:e6:12:f9:
7d:08:4b:c7:8f:f5:2f:01:79:1b:0f:82:68:67:b6:e7:07:e3:
90:ff:bb:e3:37:9c:e2:e7:c0:93:b7:f2:39:20:dc:cf:5d:8b:
0f:b0:4a:34:4e:50:3c:09:57:ad:1a:e9:c5:8d:02:9b:67:dc:
9b:4b:c5:41:e8:52:f1:23:cf:15:8c:7b:e4:27:bd:2e:84:e0:
ef:17:56:93:e4:33:2b:2e:b2:22:2e:63:59:b1:19:8e:a2:52:
54:67:1c:42:33:38:8d:f2:d2:bb:fa:37:5c:33:c3:11:2c:fe:
c4:f9:e5:90:57:23:1b:a5:68:62:00:89:b0:fe:50:08:25:18:
f5:a6:4c:db:1e:cf:eb:ff:a3:49:e9:5c:a2:f9:7e:a2:32:cd:
b2:1a:69:fd:f4:8e:cc:25:91:5f:88:81:80:2c:0a:1f:64:b1:
6a:82:ac:02:fa:40:34:25:5e:24:e9:83:ea:e2:37:bc:72:fa:
57:d6:32:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:10:07 2026 by rpki-client