This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.mft
File: zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.mft (raw, json)
Hash identifier: j0Lx6+f5FR0QbC8kPV2QkfFTiIIfnkiaLjllLyhYRxY=
Subject key identifier: E7:19:93:97:3A:37:BB:46:FF:28:03:18:6F:D3:23:D8:2C:3E:DF:39
Authority key identifier: CE:A0:2C:07:79:7F:A2:03:A1:E2:49:3B:A0:DD:80:19:9E:D9:BE:05
Certificate issuer: /CN=cea02c07797fa203a1e2493ba0dd80199ed9be05
Certificate serial: 019C41D8E8CEB325B03491AB67285AD5BCDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.mft
Manifest number: 180D
Signing time: Mon 09 Feb 2026 10:01:00 +0000
Manifest this update: Mon 09 Feb 2026 10:01:00 +0000
Manifest next update: Tue 10 Feb 2026 10:01:00 +0000
Files and hashes: 1: TAemyk33p1zXgyxiSJqWPeQVynw.roa (hash: qzyHhOuBo7tPm0yMPXt6srTNFtIZysUY2o24I/uqBiU=)
2: zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.crl (hash: ybbRFlmc6O+7ditrUTCjFT2DldmDFaHZG3mx5clgdOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.mft
rsync://rpki.ripe.net/repository/DEFAULT/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 10:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:d8:e8:ce:b3:25:b0:34:91:ab:67:28:5a:d5:bc:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cea02c07797fa203a1e2493ba0dd80199ed9be05
Validity
Not Before: Feb 9 10:01:00 2026 GMT
Not After : Feb 10 10:01:00 2026 GMT
Subject: CN=e71993973a37bb46ff2803186fd323d82c3edf39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ce:e3:f6:9c:72:46:2e:0b:e1:1b:09:c4:93:
77:5b:08:48:2d:45:8d:04:06:17:bb:ae:4d:a1:13:
d6:5c:02:ae:64:87:0f:29:b7:a1:2b:9d:57:57:34:
74:a7:b2:1c:32:d3:aa:23:3b:d8:36:0c:5d:85:5e:
1c:29:d6:b2:4b:0f:84:42:e5:f4:cf:ea:18:03:5a:
29:b2:2b:2e:e4:b1:69:f8:ba:1f:ac:6b:97:9d:b2:
5a:f9:a8:7a:09:97:d6:86:ab:d5:5f:24:2c:5d:ef:
9a:d2:01:7a:55:40:2a:a1:aa:a7:79:21:41:98:56:
d4:27:fd:89:16:de:6e:e2:d8:61:8a:13:d4:d8:c9:
9b:85:f9:04:f7:6b:cf:d3:fc:03:eb:43:c9:0b:9e:
86:51:86:ac:ee:30:36:42:85:1e:2e:d8:dc:75:ff:
bd:ab:12:c2:da:40:dc:86:35:ad:42:4e:d2:54:f5:
42:57:ec:87:14:e4:7e:03:0c:01:38:57:7a:44:7f:
ec:de:6a:d0:3f:73:3c:48:2f:9f:b9:7a:23:46:8f:
7c:f3:a8:b2:0c:68:31:8e:f8:ba:03:3d:52:ed:de:
49:61:35:0d:44:d5:c8:85:ed:4b:e4:4d:a5:fd:0e:
08:64:36:d0:99:09:9a:68:89:57:72:d3:a6:30:7d:
47:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:19:93:97:3A:37:BB:46:FF:28:03:18:6F:D3:23:D8:2C:3E:DF:39
X509v3 Authority Key Identifier:
keyid:CE:A0:2C:07:79:7F:A2:03:A1:E2:49:3B:A0:DD:80:19:9E:D9:BE:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:5a:71:da:0d:db:06:8f:3e:9a:07:57:a1:2c:f1:ea:96:fa:
2e:90:5a:df:f1:33:c4:79:1f:37:d4:68:4d:e7:23:20:7c:b5:
09:63:8c:8d:02:42:c3:d4:0e:84:db:d9:b4:b0:3c:59:93:31:
b7:8c:6c:ed:06:fd:11:f2:bb:29:18:c7:29:be:8b:e8:9e:43:
c2:1a:b0:85:54:a6:30:98:72:27:e8:16:08:29:8f:b7:06:ca:
78:4c:89:b7:22:ae:9e:8a:68:b9:3e:d5:a0:9f:84:ad:7c:c7:
56:07:1e:7d:45:dc:00:a0:1d:c7:90:d6:1e:4e:26:8b:d5:ff:
67:59:c2:84:86:15:8a:47:63:dc:b5:c4:3f:11:e9:65:ba:05:
cb:07:12:f0:a2:62:66:9a:6a:db:bb:9a:c5:24:7f:ee:46:12:
c8:ca:34:e1:fe:19:9e:35:cf:ad:10:7c:64:e5:70:b2:4c:23:
3e:18:a6:30:ad:1a:60:42:1f:ee:21:5f:81:be:89:f5:06:cd:
e2:1f:27:6e:c2:b8:bc:4e:bd:c2:47:de:a6:77:90:d5:18:d9:
4f:d6:f6:4a:10:40:9f:1a:57:ad:4b:77:e2:9a:72:e6:7a:a1:
c4:df:b4:37:91:48:97:2b:7b:45:05:d9:14:71:53:fb:11:37:
43:2b:dd:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxB2OjOsyWwNJGrZyha1bzcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlYTAyYzA3Nzk3ZmEyMDNhMWUyNDkzYmEwZGQ4MDE5OWVk
OWJlMDUwHhcNMjYwMjA5MTAwMTAwWhcNMjYwMjEwMTAwMTAwWjAzMTEwLwYDVQQD
EyhlNzE5OTM5NzNhMzdiYjQ2ZmYyODAzMTg2ZmQzMjNkODJjM2VkZjM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwc7j9pxyRi4L4RsJxJN3WwhILUWN
BAYXu65NoRPWXAKuZIcPKbehK51XVzR0p7IcMtOqIzvYNgxdhV4cKdaySw+EQuX0
z+oYA1opsisu5LFp+LofrGuXnbJa+ah6CZfWhqvVXyQsXe+a0gF6VUAqoaqneSFB
mFbUJ/2JFt5u4thhihPU2MmbhfkE92vP0/wD60PJC56GUYas7jA2QoUeLtjcdf+9
qxLC2kDchjWtQk7SVPVCV+yHFOR+AwwBOFd6RH/s3mrQP3M8SC+fuXojRo9886iy
DGgxjvi6Az1S7d5JYTUNRNXIhe1L5E2l/Q4IZDbQmQmaaIlXctOmMH1HRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOcZk5c6N7tG/ygDGG/TI9gsPt85MB8GA1UdIwQY
MBaAFM6gLAd5f6IDoeJJO6DdgBme2b4FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenFBc0IzbF9vZ09oNGtrN29OMkFHWjdadmdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9lMmRjNWItY2ViMi00MzVjLWFiYTQt
N2VmMWI5MTU5ZWI2LzEvenFBc0IzbF9vZ09oNGtrN29OMkFHWjdadmdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9lMmRjNWItY2ViMi00MzVjLWFiYTQtN2VmMWI5MTU5ZWI2
LzEvenFBc0IzbF9vZ09oNGtrN29OMkFHWjdadmdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOlpx2g3b
Bo8+mgdXoSzx6pb6LpBa3/EzxHkfN9RoTecjIHy1CWOMjQJCw9QOhNvZtLA8WZMx
t4xs7Qb9EfK7KRjHKb6L6J5DwhqwhVSmMJhyJ+gWCCmPtwbKeEyJtyKunopouT7V
oJ+ErXzHVgcefUXcAKAdx5DWHk4mi9X/Z1nChIYVikdj3LXEPxHpZboFywcS8KJi
Zppq27uaxSR/7kYSyMo04f4ZnjXPrRB8ZOVwskwjPhimMK0aYEIf7iFfgb6J9QbN
4h8nbsK4vE69wkfepneQ1RjZT9b2ShBAnxpXrUt34ppy5nqhxN+0N5FIlyt7RQXZ
FHFT+xE3Qyvdrg==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:40:37 2026 by rpki-client