This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/3c9c3c-d608-4ea2-9a28-c11ec6ea86b8/1/zpE13-0LtjNdGd3W1-mfSK--PAE.mft
File: zpE13-0LtjNdGd3W1-mfSK--PAE.mft (raw, json)
Hash identifier: ftUyIrtr/kCSeQM86yR2cCiDBXU3XdfEWzixhqU6DaI=
Subject key identifier: A8:F4:75:C5:29:1A:37:7D:89:EE:FC:6E:52:24:1B:C5:21:17:20:E2
Authority key identifier: CE:91:35:DF:ED:0B:B6:33:5D:19:DD:D6:D7:E9:9F:48:AF:BE:3C:01
Certificate issuer: /CN=ce9135dfed0bb6335d19ddd6d7e99f48afbe3c01
Certificate serial: 019C420F9B28381E5C54F2323BD90E9AF268
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zpE13-0LtjNdGd3W1-mfSK--PAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/3c9c3c-d608-4ea2-9a28-c11ec6ea86b8/1/zpE13-0LtjNdGd3W1-mfSK--PAE.mft
Manifest number: 1477
Signing time: Mon 09 Feb 2026 11:00:44 +0000
Manifest this update: Mon 09 Feb 2026 11:00:44 +0000
Manifest next update: Tue 10 Feb 2026 11:00:44 +0000
Files and hashes: 1: JsGq180cWpQwLGA873fpca8Bxj4.roa (hash: RBi5C0yGtp+dilj2CHlX7dy6n4QE4ZE7FypDUnxLwcU=)
2: _ugkR7EVVfxByxX4xFuzJ-ICxnM.roa (hash: k76p+M7xU4ZojZboTeMRkkpRvcXvQeBc65zI5mAjkww=)
3: zpE13-0LtjNdGd3W1-mfSK--PAE.crl (hash: Gho2+yz3gkwRAYZX85sYvfGEhYKqwezDSLHtxgCwx44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/3c9c3c-d608-4ea2-9a28-c11ec6ea86b8/1/zpE13-0LtjNdGd3W1-mfSK--PAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/3c9c3c-d608-4ea2-9a28-c11ec6ea86b8/1/zpE13-0LtjNdGd3W1-mfSK--PAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zpE13-0LtjNdGd3W1-mfSK--PAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:0f:9b:28:38:1e:5c:54:f2:32:3b:d9:0e:9a:f2:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce9135dfed0bb6335d19ddd6d7e99f48afbe3c01
Validity
Not Before: Feb 9 11:00:44 2026 GMT
Not After : Feb 10 11:00:44 2026 GMT
Subject: CN=a8f475c5291a377d89eefc6e52241bc5211720e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ef:2f:f5:0d:28:0c:d7:ce:aa:04:2c:35:ce:
8f:94:92:84:ec:8e:d1:22:37:dc:c6:9a:62:30:80:
e6:f6:1e:ac:88:45:ff:15:22:bf:55:9e:fa:f1:7d:
64:79:49:6a:2d:83:f4:f7:a5:2a:e1:5e:38:4c:d6:
65:3a:8a:6a:d4:e5:85:bb:08:e7:bf:44:07:e2:3c:
69:07:c7:70:34:c5:40:58:88:75:61:ec:61:4f:14:
1b:a1:24:ba:52:d4:94:61:02:86:11:b0:47:e5:af:
95:42:1e:65:64:66:b9:45:63:46:c7:d8:31:15:db:
cd:c9:02:bb:c7:ce:06:fe:95:9b:fd:70:14:7d:fd:
a8:2f:bb:e1:98:b5:c6:4f:50:9a:44:3f:30:25:f7:
e0:c1:84:c3:c2:d6:92:5b:4f:3e:93:a6:88:cc:c6:
ce:36:6f:58:1f:87:4b:4d:f9:d8:f0:ef:e1:d1:f0:
de:8c:b6:dd:0d:7d:e7:18:46:0f:4c:3e:87:d1:6f:
6b:c0:35:73:f2:af:84:a4:f7:17:68:0a:21:10:ea:
72:68:cd:6a:d4:69:0b:a7:d8:c7:be:3c:8c:f8:81:
54:92:16:99:c8:b6:8f:93:a1:9b:9f:5b:ef:d0:58:
fe:a8:26:28:ef:12:4d:61:9b:78:00:8c:3a:77:5c:
3b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:F4:75:C5:29:1A:37:7D:89:EE:FC:6E:52:24:1B:C5:21:17:20:E2
X509v3 Authority Key Identifier:
keyid:CE:91:35:DF:ED:0B:B6:33:5D:19:DD:D6:D7:E9:9F:48:AF:BE:3C:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zpE13-0LtjNdGd3W1-mfSK--PAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/3c9c3c-d608-4ea2-9a28-c11ec6ea86b8/1/zpE13-0LtjNdGd3W1-mfSK--PAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/3c9c3c-d608-4ea2-9a28-c11ec6ea86b8/1/zpE13-0LtjNdGd3W1-mfSK--PAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:2f:31:e1:b1:e2:3f:32:e2:a0:31:ad:5e:37:93:d5:27:60:
c0:88:14:05:ab:8b:8e:a4:76:9d:51:9d:6a:e9:58:a3:ce:57:
3c:c5:f6:fc:57:83:7f:d7:78:dc:39:3c:d6:cc:83:a6:67:6d:
1d:23:00:6c:10:ff:0b:a9:40:59:88:1f:7e:81:56:43:5a:c1:
3d:72:e6:b5:70:28:a7:6d:66:ca:1e:96:93:c9:d9:d2:5d:71:
5b:e7:77:15:d2:3e:53:f5:c8:5f:3e:e3:1a:90:63:86:8f:fc:
cd:ff:c9:5b:bb:36:71:4f:48:e1:4d:9e:c6:bc:4e:f1:a6:48:
c6:a5:df:c4:ed:40:91:18:5c:9c:82:1e:1f:7b:08:7b:9d:4b:
bb:6f:42:6d:09:7b:bc:e1:d1:36:dc:07:e1:a7:ca:64:64:73:
9c:0b:6a:61:1b:f5:dc:32:6f:45:c4:a3:f7:90:76:d7:aa:20:
cb:7a:a3:a8:8f:dc:2b:24:33:6d:37:a9:77:4a:57:e0:70:83:
72:72:31:3c:45:e9:c2:53:94:80:32:57:9c:b8:cb:a0:a8:f4:
22:7e:87:9a:ae:07:88:cb:d4:54:f6:f2:3a:bd:54:9d:73:37:
5b:d2:94:bd:c6:47:00:f8:10:38:f8:db:23:9d:a0:e1:ce:53:
d2:be:c8:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:56:26 2026 by rpki-client