This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.mft
File: z_N0ZX9XB488oscRCdNZJ8IkhoE.mft (raw, json)
Hash identifier: lM5imi1lflvJcb7kpwM4KVK7yeMUpMYcDT2r9LvJN6Y=
Subject key identifier: 55:D0:B4:25:DA:F7:78:D2:77:A8:D9:3D:7F:DC:2F:02:3F:B3:0D:E6
Authority key identifier: CF:F3:74:65:7F:57:07:8F:3C:A2:C7:11:09:D3:59:27:C2:24:86:81
Certificate issuer: /CN=cff374657f57078f3ca2c71109d35927c2248681
Certificate serial: 019C43C74B0E51029D5C76DA735C48221BFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z_N0ZX9XB488oscRCdNZJ8IkhoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.mft
Manifest number: 1153
Signing time: Mon 09 Feb 2026 19:01:00 +0000
Manifest this update: Mon 09 Feb 2026 19:01:00 +0000
Manifest next update: Tue 10 Feb 2026 19:01:00 +0000
Files and hashes: 1: 0m2Q39AVzMvmJbXvZVeAp5BUqHM.roa (hash: 4ENNyihBFdH7BC6Hukkp0FP8JTMdCiKInQ5i0yx7kBg=)
2: ld2nVBzkdbNeG0PFY_dUC7B6WIs.roa (hash: Jqk77Lv//XRofZ2i9r4w2rfiDp6DOlIJobQS/uFZtSA=)
3: z_N0ZX9XB488oscRCdNZJ8IkhoE.crl (hash: FDwCO7N3QPqrL9+/YthWfxMmWI4EdclW6DuZ7ikbymA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/z_N0ZX9XB488oscRCdNZJ8IkhoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 19:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:c7:4b:0e:51:02:9d:5c:76:da:73:5c:48:22:1b:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cff374657f57078f3ca2c71109d35927c2248681
Validity
Not Before: Feb 9 19:01:00 2026 GMT
Not After : Feb 10 19:01:00 2026 GMT
Subject: CN=55d0b425daf778d277a8d93d7fdc2f023fb30de6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a5:9a:74:bf:7e:ee:60:15:eb:25:cf:a0:ee:
bd:87:f9:a6:5c:ae:b2:91:2a:da:ae:bc:f4:e9:28:
08:51:ad:ac:6b:a9:07:ff:83:32:df:f5:81:43:e0:
44:37:b2:77:8e:e2:08:eb:25:f3:c7:e9:44:39:11:
10:58:8b:4a:4f:96:7c:ae:c0:0b:4d:37:39:e9:65:
34:d6:48:c5:de:80:25:35:2d:a4:a5:d0:a2:9c:a7:
e0:e2:67:44:7d:29:b9:18:9f:15:5e:82:5b:65:11:
b0:fb:06:01:15:cb:0a:a6:cd:7f:88:64:da:ea:61:
a6:e4:cc:3e:53:d0:c3:7f:8a:4f:af:ec:0a:f0:7e:
45:e3:3a:4d:77:d2:83:e3:a7:96:87:5c:07:9f:c5:
df:7b:83:14:ce:63:75:cd:44:7a:a9:c7:af:5b:dd:
17:99:27:25:ec:7e:9d:7d:6b:cc:46:d0:9a:59:9a:
f6:37:0d:ae:ba:60:b4:ed:57:28:1f:a8:bb:0b:cf:
ca:d0:26:ff:c9:d8:b3:ef:e1:c8:78:ce:79:de:9e:
15:b0:ef:43:db:3e:07:61:6f:74:66:c0:17:c9:17:
45:42:c8:fa:5a:c6:c1:4c:6a:d6:99:f9:a3:21:6b:
e4:30:5f:55:c9:57:d4:df:94:30:4f:dd:d9:45:e3:
06:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:D0:B4:25:DA:F7:78:D2:77:A8:D9:3D:7F:DC:2F:02:3F:B3:0D:E6
X509v3 Authority Key Identifier:
keyid:CF:F3:74:65:7F:57:07:8F:3C:A2:C7:11:09:D3:59:27:C2:24:86:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z_N0ZX9XB488oscRCdNZJ8IkhoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:c2:5b:e5:ae:57:0e:78:4e:7c:dc:b5:7b:c0:38:35:73:0d:
e6:b1:0b:92:81:48:85:14:72:78:dc:09:97:11:67:fc:26:9d:
fc:14:7c:b3:0a:b2:bf:62:b4:30:93:49:37:56:b8:26:28:4a:
e2:80:a7:66:44:49:f6:99:7e:ce:f5:af:ac:d2:23:4d:0c:2a:
2b:9f:a2:3f:c7:26:ae:9d:74:7a:e9:84:0f:13:21:36:c3:e4:
ab:34:31:91:af:40:67:00:be:57:f0:20:a7:a6:47:bb:be:d5:
33:94:7f:73:1d:54:66:a0:3a:c3:9e:81:94:cd:49:cf:d0:fe:
84:b1:9b:87:75:38:2d:05:e5:ab:de:43:5c:f4:15:bf:24:13:
97:d3:92:dd:ca:7e:0f:d5:86:5f:d1:d7:ac:ce:13:cc:30:2b:
65:94:a5:33:30:07:97:f7:b8:d3:8a:06:40:dc:68:2f:bf:e2:
d9:7b:98:76:5f:7d:f9:7d:3e:64:ac:20:8c:5d:53:32:c2:7b:
94:fb:1e:5c:19:2e:12:56:3b:dc:ce:61:ab:47:d9:c3:a7:9d:
56:fd:90:20:cc:b7:22:62:d6:80:c7:84:f3:3c:d3:df:8b:f4:
db:06:8e:00:00:52:bc:7e:84:ba:05:07:bb:91:d4:f8:b5:1a:
f2:18:48:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:41:25 2026 by rpki-client