This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft
File: Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft (raw, json)
Hash identifier: xR/g2X2vkASPakQu1QjVhVCDkXtMrST/bKgvBgr3soA=
Subject key identifier: 18:92:39:A0:70:5D:85:70:97:B5:02:77:BD:38:F0:58:EC:30:61:8B
Authority key identifier: 67:58:9D:5F:E4:BB:1C:5B:DB:83:A3:53:C2:73:7D:C6:04:34:13:26
Certificate issuer: /CN=67589d5fe4bb1c5bdb83a353c2737dc604341326
Certificate serial: 019C4358B5227B708C2AB2F2C80B5AEED35C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft
Manifest number: 0352
Signing time: Mon 09 Feb 2026 17:00:12 +0000
Manifest this update: Mon 09 Feb 2026 17:00:12 +0000
Manifest next update: Tue 10 Feb 2026 17:00:12 +0000
Files and hashes: 1: KyuLPj5o4j_n8r1tPjoVcUGqn_c.roa (hash: 6rz3nPgtR7nYzXOgSBXCSqdxgUf8eCA4QNV+oiGauy0=)
2: Z1idX-S7HFvbg6NTwnN9xgQ0EyY.crl (hash: PXnfL4aXvUu1hhwHfa0X87XUSA7Quq1Ba8gYT+3bhDg=)
3: xYG26TB2RrgqHuMvZiHsPq1NDVM.roa (hash: W2+WDoIzPRMoYogzmzQsW/rEEBQkgPMptZQ4oMSwz/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:58:b5:22:7b:70:8c:2a:b2:f2:c8:0b:5a:ee:d3:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67589d5fe4bb1c5bdb83a353c2737dc604341326
Validity
Not Before: Feb 9 17:00:12 2026 GMT
Not After : Feb 10 17:00:12 2026 GMT
Subject: CN=189239a0705d857097b50277bd38f058ec30618b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b4:26:3a:dc:ae:f9:f8:0c:80:a1:3b:ab:95:
4e:0e:90:8d:bc:7e:39:ee:43:68:00:e4:c0:a4:50:
2a:df:09:ff:33:ae:ca:7c:05:f2:52:d9:70:a4:f9:
1b:fe:e4:e0:06:dd:1c:3f:09:c2:82:59:e6:75:f2:
94:f2:5f:ab:de:af:7c:41:bc:ec:cc:40:af:21:ba:
49:14:79:f5:75:b4:30:77:64:39:b8:6b:02:cc:a9:
af:da:9c:e7:d7:d0:35:0d:27:a9:60:c1:96:49:de:
de:93:13:d2:d3:6b:f8:ec:3d:27:e7:ee:78:3f:a1:
3c:06:d6:f5:27:13:aa:0c:c9:89:d4:8b:fa:29:d1:
fb:76:d0:e5:83:07:22:47:fa:3b:b9:65:a1:68:da:
b6:77:03:4a:74:a0:5d:3b:01:e1:6f:1c:e1:de:c1:
5b:e0:0b:00:cc:07:30:b9:c0:f2:71:a9:8e:3c:d3:
48:cb:e2:3c:0d:76:fe:a2:cc:75:61:8b:a1:0b:74:
7f:1c:9a:a2:e7:84:8c:30:28:08:99:71:0c:eb:b7:
35:52:b8:a7:ce:90:f0:ab:78:a3:ae:59:46:60:65:
c0:2c:f1:09:1a:5b:2f:8c:8b:8c:7e:45:7b:31:6c:
ce:57:88:9d:4a:34:a7:5f:c0:8c:22:2a:16:ec:a1:
70:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:92:39:A0:70:5D:85:70:97:B5:02:77:BD:38:F0:58:EC:30:61:8B
X509v3 Authority Key Identifier:
keyid:67:58:9D:5F:E4:BB:1C:5B:DB:83:A3:53:C2:73:7D:C6:04:34:13:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:69:84:ff:87:54:76:68:c4:75:76:31:69:a0:f1:d2:d8:25:
86:99:28:f8:5e:7c:ba:9f:c7:89:f8:19:60:e9:8e:ba:e5:7e:
34:39:74:76:1d:ab:73:2f:9c:0a:10:bd:15:11:90:32:16:3a:
a4:45:f7:05:b4:a2:d0:90:23:9c:b3:00:49:76:81:c4:00:65:
49:0f:2a:eb:36:ae:b3:6c:e6:76:36:23:e5:da:d5:23:eb:d6:
5d:80:7d:9a:90:8a:ca:b4:a8:d5:96:39:c6:9f:b9:f9:3a:4b:
02:fa:08:6b:a1:91:2d:7b:7a:51:90:42:84:df:94:d0:87:5e:
83:ff:fd:44:b7:77:21:13:76:8f:08:ba:fe:66:be:88:ea:6f:
35:36:b9:ef:d1:d3:b4:29:c3:f0:aa:4f:13:13:f2:cc:0f:be:
3e:a0:84:26:26:36:8c:9f:fa:92:26:bf:45:ff:13:09:47:6f:
40:47:93:0a:a5:71:27:05:7b:fb:ab:4f:6d:53:a6:63:8c:54:
12:65:98:2a:e3:86:b1:39:ca:02:42:89:a7:35:80:27:63:85:
c0:33:d6:db:11:da:81:b6:84:f0:f1:39:fe:96:de:77:6d:dc:
3c:d2:5c:ad:53:9b:1b:0e:1b:85:78:13:e3:3f:4a:db:2b:96:
ef:aa:cb:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:00:10 2026 by rpki-client