This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/a4640c-e69a-4337-b1aa-4cb0679ace7f/1/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.mft
File: ZMX9HcDEV9nsET0jvUk1xyPp7PQ.mft (raw, json)
Hash identifier: 28bS0YUv7qFhPdJf8f5chjz8w4mZ7Hs6AncUkdCywps=
Subject key identifier: 01:99:81:6E:6D:72:C6:0D:99:50:C4:8C:B4:24:34:A0:2D:9A:66:01
Authority key identifier: 64:C5:FD:1D:C0:C4:57:D9:EC:11:3D:23:BD:49:35:C7:23:E9:EC:F4
Certificate issuer: /CN=64c5fd1dc0c457d9ec113d23bd4935c723e9ecf4
Certificate serial: 019C43FDF07953231DA02CA7CC1BB15B33E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/a4640c-e69a-4337-b1aa-4cb0679ace7f/1/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.mft
Manifest number: 1014
Signing time: Mon 09 Feb 2026 20:00:41 +0000
Manifest this update: Mon 09 Feb 2026 20:00:41 +0000
Manifest next update: Tue 10 Feb 2026 20:00:41 +0000
Files and hashes: 1: Z8LVBFcg0z0aAMYhWrQLHZb_nn8.roa (hash: V2MLHL/okJ/3o6MZQXWdDGTI8xzQQww1eNzhJoWdwk8=)
2: ZMX9HcDEV9nsET0jvUk1xyPp7PQ.crl (hash: QkeKi6frDwNStL0ewGBdfvXv4n2KcOhtTmsL443RO6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/a4640c-e69a-4337-b1aa-4cb0679ace7f/1/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/a4640c-e69a-4337-b1aa-4cb0679ace7f/1/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 20:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:fd:f0:79:53:23:1d:a0:2c:a7:cc:1b:b1:5b:33:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64c5fd1dc0c457d9ec113d23bd4935c723e9ecf4
Validity
Not Before: Feb 9 20:00:41 2026 GMT
Not After : Feb 10 20:00:41 2026 GMT
Subject: CN=0199816e6d72c60d9950c48cb42434a02d9a6601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:05:d0:5a:71:52:dd:54:1c:67:e9:aa:24:6f:
3f:a0:f6:cc:d5:70:6f:91:b4:8e:7d:e2:78:83:fe:
b5:1c:94:c3:ec:2c:a3:ca:84:3f:d9:08:c4:5a:38:
c2:b6:2d:d7:4c:c7:eb:8a:c4:1d:90:f7:25:de:0f:
b1:f5:d4:89:ea:af:9a:82:41:07:1c:1b:92:05:cf:
c2:1d:86:1a:4b:3f:cc:84:2b:28:47:3d:38:aa:7d:
ed:b8:bb:a1:77:ba:2e:39:0d:05:c9:7e:79:a4:20:
6f:f1:c0:80:f6:64:87:20:31:1c:6a:3e:15:27:33:
07:6e:51:76:4c:11:11:1d:7a:71:3e:38:ae:85:43:
d6:f3:df:04:0f:b1:ea:29:e5:05:ac:9f:f0:c4:b2:
00:3e:35:10:9a:e9:db:f4:54:c7:fd:bb:7a:d5:34:
1b:cb:a9:9c:9a:ed:05:3b:ee:5c:ec:d8:e7:e4:d9:
45:cf:26:86:25:70:c2:a3:d6:40:f4:86:85:76:2a:
a0:0d:ae:ac:90:4d:b0:67:39:0e:16:af:7c:2d:0e:
88:5a:c3:55:81:e8:03:8e:65:9f:1d:5c:86:fa:73:
a7:ee:bf:e7:b1:85:ee:ca:e4:64:da:55:8f:36:e2:
be:c4:20:d7:0d:8c:0c:b3:89:38:ac:08:4b:e0:93:
44:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:99:81:6E:6D:72:C6:0D:99:50:C4:8C:B4:24:34:A0:2D:9A:66:01
X509v3 Authority Key Identifier:
keyid:64:C5:FD:1D:C0:C4:57:D9:EC:11:3D:23:BD:49:35:C7:23:E9:EC:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/a4640c-e69a-4337-b1aa-4cb0679ace7f/1/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/a4640c-e69a-4337-b1aa-4cb0679ace7f/1/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:03:31:4a:3d:0f:4f:21:b3:51:42:51:4f:74:1a:aa:76:b4:
8a:89:bd:d7:34:bd:88:71:a0:74:f5:7a:ab:10:54:17:b8:0c:
69:0a:67:59:93:a4:b0:19:c3:63:1c:c1:b3:af:0e:93:fb:82:
cc:b4:cf:4c:ba:e6:b3:e3:6f:d4:83:78:9c:c3:5a:28:7f:f4:
63:90:c1:89:96:00:a8:76:d5:b5:81:5e:e0:a0:04:04:6c:8a:
b7:40:72:4b:e0:da:41:4a:81:86:3e:ea:fa:46:dc:d3:22:09:
b2:67:29:b4:ee:da:5d:8e:ef:0a:07:e7:4b:f6:03:d3:b5:bb:
69:ad:d6:2d:79:32:83:4e:dd:c4:7f:8b:9d:d1:3f:44:15:bb:
e0:5b:d1:97:48:01:2b:e2:9a:be:ec:29:7f:e9:b8:3f:34:b2:
1c:0f:00:7f:fb:ce:33:3a:07:70:39:05:ce:cf:fa:7a:f2:69:
f5:8b:8d:67:50:df:c2:fd:85:04:65:ab:3d:8e:ed:03:7e:99:
28:f6:61:7c:2f:8b:ba:be:90:5c:5e:fc:b2:fb:17:48:48:8c:
fe:f6:66:f4:d8:ae:2c:1f:aa:58:01:b7:88:bb:b7:81:0e:da:
8c:ff:5b:8b:09:78:aa:b5:f5:31:6e:d7:3b:f2:01:c8:f3:37:
f0:ca:87:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:34:15 2026 by rpki-client