This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/aef530-0c91-4c28-85ae-27cb1b026113/1/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.mft
File: Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.mft (raw, json)
Hash identifier: b4GLADFvGVoHPTQ06NIwgYOXiTRXpMBGK98wU0Vvub8=
Subject key identifier: D2:5F:ED:C2:C5:5C:04:42:D1:68:FA:A4:A3:6E:D4:94:9A:47:B0:57
Authority key identifier: 66:DF:B4:31:58:D9:DD:B2:F5:B9:F2:92:37:53:BE:D3:FB:11:73:CA
Certificate issuer: /CN=66dfb43158d9ddb2f5b9f2923753bed3fb1173ca
Certificate serial: 019C4358CF14B1933E4BF38DA0565847367A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/aef530-0c91-4c28-85ae-27cb1b026113/1/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.mft
Manifest number: 154A
Signing time: Mon 09 Feb 2026 17:00:19 +0000
Manifest this update: Mon 09 Feb 2026 17:00:19 +0000
Manifest next update: Tue 10 Feb 2026 17:00:19 +0000
Files and hashes: 1: MK5B2h9Q0ERwN9XCDOgzBibuA-8.roa (hash: N47GLmPQEQK3T6K6K5QwCYgIvSWVtPfThL2ceHkYyic=)
2: Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.crl (hash: GmUZJkzHPBEXDfP1WIYbkZf39Uuo75HWSPR/BgQT7BA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/aef530-0c91-4c28-85ae-27cb1b026113/1/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/aef530-0c91-4c28-85ae-27cb1b026113/1/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 17:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:58:cf:14:b1:93:3e:4b:f3:8d:a0:56:58:47:36:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dfb43158d9ddb2f5b9f2923753bed3fb1173ca
Validity
Not Before: Feb 9 17:00:19 2026 GMT
Not After : Feb 10 17:00:19 2026 GMT
Subject: CN=d25fedc2c55c0442d168faa4a36ed4949a47b057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5a:f4:16:1e:8b:cd:e8:4d:f8:00:cc:09:22:
37:63:a7:c9:d2:ed:ee:d9:82:22:75:41:37:3f:a0:
bf:58:ce:f2:66:c4:6a:42:58:ca:65:ee:45:ae:de:
a7:54:ea:5c:77:53:cb:ad:69:e8:e6:4a:cd:33:8e:
3e:ab:a4:fd:5c:7e:dc:73:92:12:85:c8:59:c4:f0:
ed:2d:04:22:2e:34:4c:80:83:1d:5f:fd:81:4c:a6:
3a:bd:8f:b2:9d:8b:aa:40:47:58:37:60:b6:c8:27:
b2:96:a4:33:5c:50:1f:26:70:71:f1:d8:7d:34:d0:
62:8b:37:79:42:ab:7b:e6:f2:bf:57:10:73:26:dd:
18:f4:7b:52:e1:65:2a:79:3b:e3:dc:f8:1c:ea:04:
60:0e:86:6f:61:b4:a5:a7:8d:70:90:70:1c:b2:c2:
99:18:8a:a1:7f:4e:9f:63:cb:6f:85:4b:63:69:31:
73:3a:fa:2d:2a:de:bd:ec:a9:48:78:fb:99:c8:31:
3d:15:69:08:fd:e2:95:e3:97:ec:07:b7:29:38:01:
9d:ba:01:b0:b5:88:7b:07:e0:33:60:3c:2f:18:ef:
db:e7:15:cd:a5:a1:e5:44:fe:27:24:c4:a4:8b:b7:
e1:7a:09:20:8b:1f:91:b5:54:06:2f:11:5c:cb:a7:
d4:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:5F:ED:C2:C5:5C:04:42:D1:68:FA:A4:A3:6E:D4:94:9A:47:B0:57
X509v3 Authority Key Identifier:
keyid:66:DF:B4:31:58:D9:DD:B2:F5:B9:F2:92:37:53:BE:D3:FB:11:73:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/aef530-0c91-4c28-85ae-27cb1b026113/1/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/aef530-0c91-4c28-85ae-27cb1b026113/1/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:f8:56:cf:f9:c8:8a:8a:04:72:6e:17:98:2f:8e:9f:c3:87:
0e:47:ae:d6:88:ae:77:ea:3f:3c:a4:3c:ce:58:db:5c:8a:db:
38:75:de:3e:fe:4f:dc:97:b0:63:21:4a:8e:8d:89:b6:ad:e2:
d8:78:ea:b2:63:da:e2:7e:dd:e4:62:2a:ff:4b:01:fe:7b:32:
dc:73:60:71:92:cc:94:c7:61:6c:d3:98:83:08:97:f5:e6:e2:
b9:0b:26:26:86:56:04:dc:63:00:6d:6a:05:a4:81:f9:7f:28:
aa:fe:67:25:34:43:b2:21:38:ab:d0:de:a6:6f:34:61:f6:f6:
b9:c7:52:03:09:a9:4a:52:98:c3:2c:09:55:da:ac:34:28:ab:
76:9f:fa:bb:3c:83:18:1f:fa:df:e3:7d:7c:55:f3:56:f2:cf:
91:6a:59:84:f6:96:14:89:4c:19:60:ad:f2:2b:e6:9a:10:b2:
4d:34:69:4a:e3:33:8b:06:68:e5:18:c7:02:51:5a:68:94:7f:
4e:91:20:9a:10:74:4c:10:31:92:89:cc:a9:8b:0d:3d:63:51:
1f:8d:3f:8e:07:82:22:8c:1a:99:c9:52:6d:02:41:3f:58:4c:
52:3e:99:38:86:d4:35:2d:7f:40:1c:6e:03:9b:27:ca:bc:8c:
53:2e:1a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:31:19 2026 by rpki-client