This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/937385-1a90-42f5-8e40-c67ab83ac1f5/1/zlZJ27pZLxyfPyiJvPgf0iWYk2c.mft
File: zlZJ27pZLxyfPyiJvPgf0iWYk2c.mft (raw, json)
Hash identifier: x0BDUD+ApYiRooH8QsQSlhPnJhrjw+KigVjO6W9M4oI=
Subject key identifier: 5E:3D:52:16:DB:6C:E9:74:03:5D:74:9F:28:E9:23:A5:55:3E:66:70
Authority key identifier: CE:56:49:DB:BA:59:2F:1C:9F:3F:28:89:BC:F8:1F:D2:25:98:93:67
Certificate issuer: /CN=ce5649dbba592f1c9f3f2889bcf81fd225989367
Certificate serial: 019C43590C4389AD651402D12516AB739A1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zlZJ27pZLxyfPyiJvPgf0iWYk2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/937385-1a90-42f5-8e40-c67ab83ac1f5/1/zlZJ27pZLxyfPyiJvPgf0iWYk2c.mft
Manifest number: 1810
Signing time: Mon 09 Feb 2026 17:00:35 +0000
Manifest this update: Mon 09 Feb 2026 17:00:35 +0000
Manifest next update: Tue 10 Feb 2026 17:00:35 +0000
Files and hashes: 1: hP6LOiB-JXjzIxcAoNUeheYCC_w.roa (hash: Am0rp7j+BYvMadHXe785VdV8wLgqVi6auP8kJTGDcRE=)
2: zlZJ27pZLxyfPyiJvPgf0iWYk2c.crl (hash: m06eTEPISIEf/fBqiFUAGxol1/6fwuML/ciqBWS4YXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/937385-1a90-42f5-8e40-c67ab83ac1f5/1/zlZJ27pZLxyfPyiJvPgf0iWYk2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/937385-1a90-42f5-8e40-c67ab83ac1f5/1/zlZJ27pZLxyfPyiJvPgf0iWYk2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/zlZJ27pZLxyfPyiJvPgf0iWYk2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:59:0c:43:89:ad:65:14:02:d1:25:16:ab:73:9a:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce5649dbba592f1c9f3f2889bcf81fd225989367
Validity
Not Before: Feb 9 17:00:35 2026 GMT
Not After : Feb 10 17:00:35 2026 GMT
Subject: CN=5e3d5216db6ce974035d749f28e923a5553e6670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7a:60:ca:cb:6d:56:33:3c:91:9a:ea:4b:00:
cb:be:09:29:8d:b8:c7:48:e3:5b:97:24:75:c3:29:
80:df:5e:45:72:05:6c:01:c3:26:3b:00:a5:e1:ea:
4b:05:98:0c:8d:e3:82:21:89:29:0e:d2:e7:4c:66:
27:71:c7:83:50:bc:9c:4f:02:97:99:eb:32:36:55:
c1:64:6c:7d:a3:04:70:ea:04:19:1f:c9:b2:46:b9:
26:14:09:6e:ed:1b:4e:2f:06:59:eb:e2:a6:a8:2d:
8f:bd:a6:53:85:ac:a9:66:3e:de:66:df:82:c4:06:
15:76:6f:d9:9a:7e:ce:f3:82:e0:c5:4d:eb:54:df:
81:43:bf:7c:06:16:ad:8a:44:1d:49:06:bf:8c:9e:
97:f2:ac:05:4b:13:6f:e4:87:0d:02:85:ce:c6:e3:
ae:96:34:60:05:c6:a2:bf:98:0d:09:67:74:06:3d:
d6:3d:68:54:0f:4f:21:73:2d:8e:fc:9a:61:62:30:
79:67:0e:3c:a4:68:4a:a6:73:39:0b:5a:20:f8:6f:
0c:7c:05:fa:5b:97:c8:2a:e2:eb:21:26:37:06:50:
15:17:84:72:e6:3a:c7:22:a1:94:1f:09:1a:c6:4b:
7f:db:6d:bd:e6:06:3b:e8:63:f5:b1:30:c6:a9:9d:
ba:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:3D:52:16:DB:6C:E9:74:03:5D:74:9F:28:E9:23:A5:55:3E:66:70
X509v3 Authority Key Identifier:
keyid:CE:56:49:DB:BA:59:2F:1C:9F:3F:28:89:BC:F8:1F:D2:25:98:93:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zlZJ27pZLxyfPyiJvPgf0iWYk2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/937385-1a90-42f5-8e40-c67ab83ac1f5/1/zlZJ27pZLxyfPyiJvPgf0iWYk2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/937385-1a90-42f5-8e40-c67ab83ac1f5/1/zlZJ27pZLxyfPyiJvPgf0iWYk2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:58:b4:53:91:dc:48:7d:0c:1f:47:1c:84:ce:a5:98:d5:56:
99:22:0b:43:87:2d:94:73:cb:81:53:b2:42:c5:2d:91:5b:b2:
95:70:e3:ee:91:3d:51:b6:40:e4:f2:99:28:c0:9f:c7:46:3b:
f8:59:1f:03:30:0b:5d:64:63:4e:b6:3e:86:2d:9f:fe:59:dd:
ea:a7:bb:3c:69:40:41:9b:f7:04:bd:8d:86:8c:6b:26:20:c0:
28:4c:49:71:d3:c3:d8:38:44:16:9d:66:2e:89:59:62:bd:03:
d2:dc:7d:00:08:62:6b:1b:20:11:f1:13:56:de:4d:f3:f8:5a:
a1:ad:92:e3:dd:16:94:ba:8e:f1:eb:75:fe:b1:ec:da:4b:ec:
7a:f2:f2:a4:b3:72:0d:3c:1c:e1:2f:29:ac:70:8e:ba:aa:e0:
73:e0:3c:37:a3:67:72:29:49:9d:84:71:5e:80:a3:6f:d8:ba:
44:e1:b7:47:13:d9:af:fc:18:dc:4a:99:7d:5b:d2:29:34:b7:
00:2c:b2:1c:1b:91:df:35:6a:2a:7e:73:49:a6:c3:35:4e:f1:
67:2d:ce:d4:6a:9e:66:75:94:b0:9c:1a:86:dc:34:74:be:26:
ab:ef:48:d2:65:81:a6:2b:a9:d8:d5:66:fe:f2:7c:99:ec:c2:
4e:ba:ed:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:54:59 2026 by rpki-client