This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft
File: Zw5gd5881NA9XlB4QPX6KjGmq40.mft (raw, json)
Hash identifier: zEmf71/GAaXgQoyNQsk7GClX2vx8yQv90weshrMa+QU=
Subject key identifier: 6B:F7:AE:1B:CC:53:C9:02:91:23:3D:AF:4B:9C:83:7D:E4:B9:02:64
Authority key identifier: 67:0E:60:77:9F:3C:D4:D0:3D:5E:50:78:40:F5:FA:2A:31:A6:AB:8D
Certificate issuer: /CN=670e60779f3cd4d03d5e507840f5fa2a31a6ab8d
Certificate serial: 019C421037BE3068FA45E234705C2ED2A8B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zw5gd5881NA9XlB4QPX6KjGmq40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft
Manifest number: 066F
Signing time: Mon 09 Feb 2026 11:01:24 +0000
Manifest this update: Mon 09 Feb 2026 11:01:24 +0000
Manifest next update: Tue 10 Feb 2026 11:01:24 +0000
Files and hashes: 1: 99ql3Nj_XXqdJBUKyH1zSjprsmk.roa (hash: 8Q5g46XQnTAlgbAY9G1RdWl4ij89rLN6KeETKWp4UX4=)
2: UKvSxhXp6UeN9PA2d7zmzONW8dI.roa (hash: U2Kl3dxAuyKIqhwNvATcE57d94w+8GaKrGRAFwd2pQQ=)
3: Zw5gd5881NA9XlB4QPX6KjGmq40.crl (hash: kjSlWltZeF7P5ScLQX19WGbf2Kwivyy+RWzxiHY+XWw=)
4: yGnTUZ-K5iZvv_QJlyjyr1Vifo0.roa (hash: 3NvMCRIYGPgbO9Y+3R7bmJF+C6D6NUF59+RrT9ZBe2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zw5gd5881NA9XlB4QPX6KjGmq40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:10:37:be:30:68:fa:45:e2:34:70:5c:2e:d2:a8:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=670e60779f3cd4d03d5e507840f5fa2a31a6ab8d
Validity
Not Before: Feb 9 11:01:24 2026 GMT
Not After : Feb 10 11:01:24 2026 GMT
Subject: CN=6bf7ae1bcc53c90291233daf4b9c837de4b90264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:98:0c:9e:40:95:62:56:5b:69:95:32:c9:7d:
aa:93:a0:6b:f9:95:9a:73:a2:89:48:54:2a:ff:37:
21:10:c8:ce:5a:3d:1c:dd:14:b3:1a:b8:fc:2a:65:
f0:fc:de:85:0d:d4:2a:bf:00:88:40:3f:4b:ca:9f:
c2:fb:4c:cb:b2:05:2c:2d:aa:9a:6c:20:29:70:4d:
05:3d:8e:d5:b2:54:5c:7b:b6:41:11:db:5b:39:f5:
d8:2e:11:85:1f:d6:ea:31:8b:43:80:e3:b1:de:2f:
2b:29:e6:b0:95:12:9c:15:1c:0e:23:a7:79:f4:ad:
24:08:aa:85:61:8b:ec:94:32:e7:0b:2a:a3:9e:cd:
16:35:a0:a0:bf:dc:40:a6:a8:80:36:99:0d:80:9f:
7f:27:d3:e5:68:9c:39:69:82:d8:b4:d4:bc:56:e8:
33:f9:9e:d3:39:68:1e:93:ac:19:80:dd:68:98:ca:
7f:8d:08:1c:bb:58:8a:7f:f8:94:9b:8c:c5:4c:76:
22:d7:de:be:18:3e:ed:e5:b3:8c:b0:f9:11:ac:79:
6a:96:95:f3:1e:39:1f:bb:9f:e1:d2:50:22:7d:31:
76:07:f7:6a:bb:88:fd:3b:12:34:8e:1a:c5:57:d5:
31:a8:ab:b6:40:1c:cd:cb:41:65:65:3e:77:f5:0c:
b0:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:F7:AE:1B:CC:53:C9:02:91:23:3D:AF:4B:9C:83:7D:E4:B9:02:64
X509v3 Authority Key Identifier:
keyid:67:0E:60:77:9F:3C:D4:D0:3D:5E:50:78:40:F5:FA:2A:31:A6:AB:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zw5gd5881NA9XlB4QPX6KjGmq40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:01:40:61:51:bc:7e:2b:35:9e:24:53:eb:be:a4:95:a7:93:
01:e9:1d:17:2f:46:70:d6:be:6e:f3:39:11:03:29:ff:83:1c:
dc:a1:de:4d:8a:db:7d:0f:16:bc:29:7a:ff:6c:bd:af:62:78:
c3:78:8b:f5:24:6f:44:3c:fc:bd:d8:e5:18:2c:8d:bc:f2:32:
ca:10:41:73:63:a0:6e:14:9d:b4:99:bf:ee:8c:ff:c8:2d:64:
9d:94:c8:ef:a5:b0:9b:29:0b:37:76:de:c1:10:6a:64:6c:3c:
22:ac:e7:3b:c8:03:f7:48:e1:30:f3:41:c0:11:6f:bd:fa:25:
e4:c4:12:0b:df:a7:0b:e4:9c:6d:eb:a8:e0:9d:22:3a:8d:85:
00:b9:ba:6d:fe:71:8d:41:8b:c6:a7:0a:83:30:f8:c9:48:f4:
51:3a:31:c0:b2:2c:1a:c9:6a:27:0d:31:91:30:e9:fd:93:76:
6a:b7:2d:b2:40:9e:7b:84:32:de:35:74:18:a5:d5:db:3b:51:
5c:40:70:86:a8:85:85:c1:0a:ed:5b:43:bf:83:25:08:b1:93:
0d:d7:ab:9e:69:21:81:36:29:69:49:45:75:98:e6:7e:df:fc:
19:64:cb:a1:37:e5:ba:ee:07:1f:09:f2:d3:a9:6b:08:fa:84:
6e:ab:43:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCEDe+MGj6ReI0cFwu0qiyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3MGU2MDc3OWYzY2Q0ZDAzZDVlNTA3ODQwZjVmYTJhMzFh
NmFiOGQwHhcNMjYwMjA5MTEwMTI0WhcNMjYwMjEwMTEwMTI0WjAzMTEwLwYDVQQD
Eyg2YmY3YWUxYmNjNTNjOTAyOTEyMzNkYWY0YjljODM3ZGU0YjkwMjY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5gMnkCVYlZbaZUyyX2qk6Br+ZWa
c6KJSFQq/zchEMjOWj0c3RSzGrj8KmXw/N6FDdQqvwCIQD9Lyp/C+0zLsgUsLaqa
bCApcE0FPY7VslRce7ZBEdtbOfXYLhGFH9bqMYtDgOOx3i8rKeawlRKcFRwOI6d5
9K0kCKqFYYvslDLnCyqjns0WNaCgv9xApqiANpkNgJ9/J9PlaJw5aYLYtNS8Vugz
+Z7TOWgek6wZgN1omMp/jQgcu1iKf/iUm4zFTHYi196+GD7t5bOMsPkRrHlqlpXz
Hjkfu5/h0lAifTF2B/dqu4j9OxI0jhrFV9UxqKu2QBzNy0FlZT539QywHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGv3rhvMU8kCkSM9r0ucg33kuQJkMB8GA1UdIwQY
MBaAFGcOYHefPNTQPV5QeED1+ioxpquNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnc1Z2Q1ODgxTkE5WGxCNFFQWDZLakdtcTQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9mNTk1MWEtYjBmZi00YTNjLTg4YWUt
MzUwMDRhNjcxZWIzLzEvWnc1Z2Q1ODgxTkE5WGxCNFFQWDZLakdtcTQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC9mNTk1MWEtYjBmZi00YTNjLTg4YWUtMzUwMDRhNjcxZWIz
LzEvWnc1Z2Q1ODgxTkE5WGxCNFFQWDZLakdtcTQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbgFAYVG8
fis1niRT676klaeTAekdFy9GcNa+bvM5EQMp/4Mc3KHeTYrbfQ8WvCl6/2y9r2J4
w3iL9SRvRDz8vdjlGCyNvPIyyhBBc2OgbhSdtJm/7oz/yC1knZTI76WwmykLN3be
wRBqZGw8IqznO8gD90jhMPNBwBFvvfol5MQSC9+nC+Scbeuo4J0iOo2FALm6bf5x
jUGLxqcKgzD4yUj0UToxwLIsGslqJw0xkTDp/ZN2arctskCee4Qy3jV0GKXV2ztR
XEBwhqiFhcEK7VtDv4MlCLGTDdernmkhgTYpaUlFdZjmft/8GWTLoTfluu4HHwny
06lrCPqEbqtDcg==
-----END CERTIFICATE-----
Generated at Mon Feb 9 20:13:31 2026 by rpki-client