This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/3d12b8-d0e8-4e46-848a-017e2b25d886/1/cz2mpsToscTOPyBLtL_Z2GoPVh4.mft
File: cz2mpsToscTOPyBLtL_Z2GoPVh4.mft (raw, json)
Hash identifier: 6cZR2aghmL0404d0d6F27riiA5a2wVLNtL7TLQqUE3E=
Subject key identifier: 46:46:57:26:C0:1D:C0:00:1D:A5:A8:4A:D0:64:07:70:B5:1F:7E:E9
Authority key identifier: 73:3D:A6:A6:C4:E8:B1:C4:CE:3F:20:4B:B4:BF:D9:D8:6A:0F:56:1E
Certificate issuer: /CN=733da6a6c4e8b1c4ce3f204bb4bfd9d86a0f561e
Certificate serial: 019C43220B779C07C90CDBBBE5D03FFC2C3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cz2mpsToscTOPyBLtL_Z2GoPVh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/3d12b8-d0e8-4e46-848a-017e2b25d886/1/cz2mpsToscTOPyBLtL_Z2GoPVh4.mft
Manifest number: 145F
Signing time: Mon 09 Feb 2026 16:00:30 +0000
Manifest this update: Mon 09 Feb 2026 16:00:30 +0000
Manifest next update: Tue 10 Feb 2026 16:00:30 +0000
Files and hashes: 1: cz2mpsToscTOPyBLtL_Z2GoPVh4.crl (hash: XOIjx0vbgUu5lWfHalg5ez+HtWFzoz2zE4cPpJDOaxQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/3d12b8-d0e8-4e46-848a-017e2b25d886/1/cz2mpsToscTOPyBLtL_Z2GoPVh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/3d12b8-d0e8-4e46-848a-017e2b25d886/1/cz2mpsToscTOPyBLtL_Z2GoPVh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cz2mpsToscTOPyBLtL_Z2GoPVh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:22:0b:77:9c:07:c9:0c:db:bb:e5:d0:3f:fc:2c:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=733da6a6c4e8b1c4ce3f204bb4bfd9d86a0f561e
Validity
Not Before: Feb 9 16:00:30 2026 GMT
Not After : Feb 10 16:00:30 2026 GMT
Subject: CN=46465726c01dc0001da5a84ad0640770b51f7ee9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:36:5d:ca:00:db:23:d1:0e:14:e5:cd:f0:3e:
92:49:f1:f4:95:b4:77:4c:74:12:ba:df:39:17:b2:
a9:e6:9a:54:5a:65:38:72:f7:13:bf:f8:36:a8:25:
28:02:c6:db:e3:e4:ea:93:f5:77:c9:ae:bb:d2:6e:
bf:43:38:dd:d7:46:ae:b9:14:ff:43:92:37:6b:6b:
bf:b1:04:2f:69:5e:da:f1:07:c0:a1:6e:29:6f:ab:
4a:8f:9c:6b:a6:9d:57:11:45:b5:d5:46:05:3e:e7:
89:0c:e4:eb:86:00:1d:2f:4c:a3:2f:77:7c:cf:2a:
7b:b3:53:e9:38:37:06:68:4e:6c:37:6d:dd:ad:7f:
03:42:ff:9b:b4:10:fc:57:d1:a2:51:46:88:33:22:
1d:f1:b0:a1:e0:c0:34:91:ce:19:07:ba:eb:18:be:
75:17:03:a7:1f:0b:2b:01:26:39:e8:79:53:8b:1e:
cc:22:87:aa:48:79:c1:cb:26:86:20:ad:91:ab:de:
44:54:9a:c9:18:18:69:1e:ac:ae:91:38:53:f1:eb:
e5:5b:cb:2f:4d:bc:5e:65:d4:17:a0:a6:1a:13:dd:
65:2b:43:62:2c:26:a2:f4:94:29:92:b7:b4:a4:0b:
17:12:bd:87:a2:81:a2:b0:40:7b:c4:14:dd:05:a9:
2a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:46:57:26:C0:1D:C0:00:1D:A5:A8:4A:D0:64:07:70:B5:1F:7E:E9
X509v3 Authority Key Identifier:
keyid:73:3D:A6:A6:C4:E8:B1:C4:CE:3F:20:4B:B4:BF:D9:D8:6A:0F:56:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cz2mpsToscTOPyBLtL_Z2GoPVh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3d12b8-d0e8-4e46-848a-017e2b25d886/1/cz2mpsToscTOPyBLtL_Z2GoPVh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3d12b8-d0e8-4e46-848a-017e2b25d886/1/cz2mpsToscTOPyBLtL_Z2GoPVh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:62:73:02:14:d8:82:51:f1:ae:0b:f3:df:7c:b2:f7:f0:25:
07:10:82:0b:d6:51:4f:46:b3:2c:94:fa:e2:75:20:38:15:59:
b5:cd:ea:b1:fd:98:0c:cf:60:c6:b2:9e:8e:57:72:33:52:0a:
37:a0:80:d0:98:e3:3c:ca:69:e4:84:4c:4e:5a:ff:9f:84:1c:
cd:32:6d:f6:76:ee:3b:57:ff:d4:08:8b:3d:49:cc:15:22:80:
23:bd:80:4a:47:7b:d0:00:c1:f0:73:70:28:66:f9:fc:1a:d0:
14:8a:4b:17:69:4a:fb:6c:12:3f:08:d7:d6:22:f2:a3:29:df:
68:81:4d:98:65:ea:e2:6b:15:00:fb:eb:60:3d:9f:d4:a1:a2:
d1:0f:95:c4:d2:34:75:6f:2f:b6:58:b1:fa:74:94:1c:03:da:
af:d9:c7:09:81:4c:7e:92:d6:38:be:90:b7:e0:fa:d2:30:4f:
20:2b:72:df:f7:0e:b4:49:98:c7:70:3c:4e:88:ea:78:e0:6a:
67:48:4d:6d:03:e1:fd:af:b9:11:f6:f5:45:78:ee:71:c2:bf:
d0:7a:bb:5f:37:6f:04:07:a5:3b:fd:9c:97:b7:3d:54:5c:48:
37:30:40:e9:90:74:ec:c5:ed:db:33:15:32:10:e8:e8:c8:04:
44:bc:a2:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:04:31 2026 by rpki-client