This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/5e3892-ea88-4058-b99f-21fdfa3607c9/1/E_ZReahVuwpt3lZiFisrW6l0hxA.mft
File: E_ZReahVuwpt3lZiFisrW6l0hxA.mft (raw, json)
Hash identifier: OpVvViUai743fcKtAsw/FFzg62xckDE/YzV8Hm/oYGE=
Subject key identifier: 6B:8D:E6:E9:16:14:C9:AA:BF:32:E9:C9:E3:89:4A:AE:DF:D4:0D:6F
Authority key identifier: 13:F6:51:79:A8:55:BB:0A:6D:DE:56:62:16:2B:2B:5B:A9:74:87:10
Certificate issuer: /CN=13f65179a855bb0a6dde5662162b2b5ba9748710
Certificate serial: 019C42EB380D39CA3904BD1A412EA49AAFEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E_ZReahVuwpt3lZiFisrW6l0hxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/5e3892-ea88-4058-b99f-21fdfa3607c9/1/E_ZReahVuwpt3lZiFisrW6l0hxA.mft
Manifest number: 0A86
Signing time: Mon 09 Feb 2026 15:00:37 +0000
Manifest this update: Mon 09 Feb 2026 15:00:37 +0000
Manifest next update: Tue 10 Feb 2026 15:00:37 +0000
Files and hashes: 1: E_ZReahVuwpt3lZiFisrW6l0hxA.crl (hash: MHqj9cqmJMX7eGRHLE3zY2Z6wBwLl99d1eeBRD411jQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/5e3892-ea88-4058-b99f-21fdfa3607c9/1/E_ZReahVuwpt3lZiFisrW6l0hxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/5e3892-ea88-4058-b99f-21fdfa3607c9/1/E_ZReahVuwpt3lZiFisrW6l0hxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/E_ZReahVuwpt3lZiFisrW6l0hxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:eb:38:0d:39:ca:39:04:bd:1a:41:2e:a4:9a:af:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13f65179a855bb0a6dde5662162b2b5ba9748710
Validity
Not Before: Feb 9 15:00:37 2026 GMT
Not After : Feb 10 15:00:37 2026 GMT
Subject: CN=6b8de6e91614c9aabf32e9c9e3894aaedfd40d6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:17:1d:3a:bf:2f:d6:9d:b6:4b:b9:9f:6a:d0:
ee:0c:99:1d:2d:79:a7:1e:30:a9:60:2c:f2:7b:a3:
84:08:58:01:4e:01:38:00:d6:55:5a:95:c2:10:31:
87:29:0a:5d:43:b7:e2:81:bd:06:14:49:ae:bd:85:
e2:38:c9:20:c0:e5:52:48:ba:0f:e3:ca:08:47:e3:
9c:84:83:8e:10:55:76:58:42:be:96:68:7e:c2:19:
f2:42:73:da:c6:67:b8:19:4d:2f:9e:ce:fc:41:b9:
fc:b6:b0:63:d4:9e:c7:83:52:c1:5b:bf:45:3b:8b:
f3:a2:79:f3:45:bd:e0:fb:fa:4a:d8:03:e6:34:96:
41:32:c8:87:5c:37:88:a2:68:63:03:ab:00:de:a2:
e7:33:7c:f3:15:6b:65:9b:d3:c2:8d:db:1d:75:da:
19:90:23:67:69:c4:82:7d:e6:90:fe:7e:32:67:7c:
b5:f8:18:0f:52:77:78:23:01:52:99:5b:ee:9b:e5:
1c:fc:64:e0:20:5e:ae:bc:c8:ae:f0:f8:c4:f9:55:
3f:56:24:be:7b:8e:4a:3f:17:fc:67:e8:2a:2b:09:
10:11:4a:36:c2:29:93:e6:d5:33:ba:a4:12:e7:32:
7b:a4:99:23:a7:d9:7d:0a:34:87:56:27:87:19:4d:
65:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:8D:E6:E9:16:14:C9:AA:BF:32:E9:C9:E3:89:4A:AE:DF:D4:0D:6F
X509v3 Authority Key Identifier:
keyid:13:F6:51:79:A8:55:BB:0A:6D:DE:56:62:16:2B:2B:5B:A9:74:87:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E_ZReahVuwpt3lZiFisrW6l0hxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5e3892-ea88-4058-b99f-21fdfa3607c9/1/E_ZReahVuwpt3lZiFisrW6l0hxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5e3892-ea88-4058-b99f-21fdfa3607c9/1/E_ZReahVuwpt3lZiFisrW6l0hxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:58:5e:9e:8b:d1:71:a0:40:bf:78:eb:ec:5a:62:24:e3:1b:
38:43:7e:7c:d7:e4:ac:25:e7:d3:e0:6e:84:f8:5b:6a:61:5f:
0d:b2:e6:24:f6:96:66:35:21:43:b3:ea:fb:cd:b2:9c:fd:77:
a5:a6:b4:59:8b:42:a9:57:10:10:e7:84:e9:c1:a1:64:c6:34:
7b:98:b4:e1:39:fb:67:0b:94:6e:6a:df:1b:9a:8d:1b:73:6d:
60:dc:95:73:8d:0d:6b:76:a8:43:da:2f:f2:98:bb:f3:46:b3:
24:cb:58:05:97:1f:37:0b:28:fe:0f:3c:63:74:b4:ec:81:f2:
af:86:ff:2e:da:c4:80:25:4f:66:4f:8d:8d:b0:c5:05:41:3f:
0e:f8:55:d2:b7:45:5b:b6:25:db:a1:ea:91:12:7e:8f:34:cf:
bc:6a:f2:62:08:c6:3d:98:b4:41:f1:5f:00:0d:dc:93:4c:77:
a2:d1:0c:cd:cc:f3:a7:51:35:80:56:48:46:7b:4a:5f:ad:7c:
bc:c0:8d:6d:18:ba:cf:18:68:b3:04:5c:6e:7b:bb:05:05:5b:
15:54:4a:1f:88:35:c3:bf:70:a7:ec:6c:d1:10:fd:4c:33:86:
b3:4f:83:e6:e3:73:78:b6:56:00:7b:be:85:56:11:f7:4b:26:
e9:24:2b:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:06:34 2026 by rpki-client