This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/f3c3b2-b64a-49e1-9a48-c93989cc9b67/1/VzCjLzFiRs4LFHu4lejN8K7UPtY.mft
File: VzCjLzFiRs4LFHu4lejN8K7UPtY.mft (raw, json)
Hash identifier: 5r8Kkk4bQEgk1O5RkVU29xhCkLkJeKPPD4M5R2XxXc0=
Subject key identifier: 79:0C:E8:F6:00:86:6E:5D:C7:04:B8:8E:85:9B:D0:B3:FB:AC:3A:4D
Authority key identifier: 57:30:A3:2F:31:62:46:CE:0B:14:7B:B8:95:E8:CD:F0:AE:D4:3E:D6
Certificate issuer: /CN=5730a32f316246ce0b147bb895e8cdf0aed43ed6
Certificate serial: 019C42EB9D27F5426B2CCE32D695BCF54E85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VzCjLzFiRs4LFHu4lejN8K7UPtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/f3c3b2-b64a-49e1-9a48-c93989cc9b67/1/VzCjLzFiRs4LFHu4lejN8K7UPtY.mft
Manifest number: 0ABF
Signing time: Mon 09 Feb 2026 15:01:03 +0000
Manifest this update: Mon 09 Feb 2026 15:01:03 +0000
Manifest next update: Tue 10 Feb 2026 15:01:03 +0000
Files and hashes: 1: OIQ7KotgSfCre3ojigAVW-uj7lY.roa (hash: 2fHntqMDtZ1kaQHeRQmuVhi7S0ZWG3DjRdqxqMJ0p6U=)
2: VzCjLzFiRs4LFHu4lejN8K7UPtY.crl (hash: E0yChmgywcYFL5RIyT3hqw5+fPzqHuMNKZDbZg2k/Nk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/f3c3b2-b64a-49e1-9a48-c93989cc9b67/1/VzCjLzFiRs4LFHu4lejN8K7UPtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/f3c3b2-b64a-49e1-9a48-c93989cc9b67/1/VzCjLzFiRs4LFHu4lejN8K7UPtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/VzCjLzFiRs4LFHu4lejN8K7UPtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:eb:9d:27:f5:42:6b:2c:ce:32:d6:95:bc:f5:4e:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5730a32f316246ce0b147bb895e8cdf0aed43ed6
Validity
Not Before: Feb 9 15:01:03 2026 GMT
Not After : Feb 10 15:01:03 2026 GMT
Subject: CN=790ce8f600866e5dc704b88e859bd0b3fbac3a4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:89:79:0a:d9:9d:56:00:7e:bd:10:5f:d8:2b:
a1:41:3f:3d:6d:46:b9:1d:4b:ab:f3:ca:ba:c6:73:
d4:7e:e6:33:76:8e:23:31:8a:43:9e:5a:2b:5b:44:
63:34:49:22:3c:c0:d1:20:58:58:9c:4d:8a:1e:e5:
4e:82:40:21:2a:cc:84:0f:58:57:13:87:db:53:68:
db:62:d6:9b:12:d9:c4:33:4c:24:f3:e1:51:a8:2d:
98:bd:93:5c:dd:be:19:df:f7:ca:2d:d2:24:b8:01:
69:41:b2:d3:f9:99:1f:f4:fa:d9:51:55:29:8a:18:
ee:cf:68:de:89:89:94:b9:60:33:25:8e:48:af:3b:
c3:42:0f:44:5f:47:62:6b:4a:49:67:72:3d:4b:0e:
30:20:4f:c5:ab:3e:40:db:cd:f4:b1:c9:00:c3:08:
33:17:03:55:60:3b:37:ce:a0:ff:72:e9:d0:d5:46:
88:10:ad:9b:1a:13:0a:83:bf:e3:24:22:27:e1:32:
32:56:9c:97:71:d7:b8:e7:58:77:ef:9e:78:69:10:
c7:a2:a6:e6:10:25:1f:07:44:29:10:ec:4f:b7:14:
b9:95:9f:6d:2a:0c:35:04:36:23:d8:f9:9e:df:d2:
48:f2:98:33:c0:f6:1c:c9:3d:44:26:7e:36:ea:3c:
11:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:0C:E8:F6:00:86:6E:5D:C7:04:B8:8E:85:9B:D0:B3:FB:AC:3A:4D
X509v3 Authority Key Identifier:
keyid:57:30:A3:2F:31:62:46:CE:0B:14:7B:B8:95:E8:CD:F0:AE:D4:3E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VzCjLzFiRs4LFHu4lejN8K7UPtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f3c3b2-b64a-49e1-9a48-c93989cc9b67/1/VzCjLzFiRs4LFHu4lejN8K7UPtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f3c3b2-b64a-49e1-9a48-c93989cc9b67/1/VzCjLzFiRs4LFHu4lejN8K7UPtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:81:4b:cc:a7:88:c0:d2:b7:d1:65:94:d2:92:70:1a:f3:0b:
2d:94:06:50:3b:6b:c5:74:3d:29:1c:c6:1e:f4:c9:c4:db:b3:
12:fb:de:8b:f4:f5:ef:8d:ea:60:af:86:6e:57:43:f4:e4:22:
88:bc:57:bf:0f:4c:de:16:b5:b6:c5:a6:cd:0b:c5:a5:15:43:
04:80:b5:d7:a9:6d:3d:fa:0a:56:83:f1:04:3a:28:8b:26:5b:
f6:37:22:a1:0a:82:f9:cb:77:71:52:07:38:fc:65:82:39:e3:
97:3a:52:03:a9:13:44:02:73:f7:53:e5:63:77:ec:5e:c4:84:
9b:16:25:a8:10:53:9e:a1:91:3a:62:a6:5b:24:37:c8:20:34:
77:f3:19:b9:05:21:a7:b5:3d:f1:04:8e:c7:7e:dd:ed:b9:ec:
56:9c:f5:ed:f4:80:bb:de:65:14:6e:dc:40:e3:82:95:cc:89:
fe:77:dc:ea:8d:61:8d:06:b2:52:b7:32:33:df:cb:70:cb:43:
8f:26:21:b2:68:dc:e1:d6:09:58:26:e9:8c:cc:4e:d3:ca:72:
2c:e2:0d:19:60:e2:2e:3f:f9:64:83:af:5f:a6:6b:e2:d4:56:
1c:1a:21:a5:84:57:e2:7f:a8:be:a7:d8:21:8d:19:db:8e:50:
44:7d:2e:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxC650n9UJrLM4y1pW89U6FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3MzBhMzJmMzE2MjQ2Y2UwYjE0N2JiODk1ZThjZGYwYWVk
NDNlZDYwHhcNMjYwMjA5MTUwMTAzWhcNMjYwMjEwMTUwMTAzWjAzMTEwLwYDVQQD
Eyg3OTBjZThmNjAwODY2ZTVkYzcwNGI4OGU4NTliZDBiM2ZiYWMzYTRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYl5CtmdVgB+vRBf2CuhQT89bUa5
HUur88q6xnPUfuYzdo4jMYpDnlorW0RjNEkiPMDRIFhYnE2KHuVOgkAhKsyED1hX
E4fbU2jbYtabEtnEM0wk8+FRqC2YvZNc3b4Z3/fKLdIkuAFpQbLT+Zkf9PrZUVUp
ihjuz2jeiYmUuWAzJY5IrzvDQg9EX0dia0pJZ3I9Sw4wIE/Fqz5A2830sckAwwgz
FwNVYDs3zqD/cunQ1UaIEK2bGhMKg7/jJCIn4TIyVpyXcde451h37554aRDHoqbm
ECUfB0QpEOxPtxS5lZ9tKgw1BDYj2Pme39JI8pgzwPYcyT1EJn426jwRfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHkM6PYAhm5dxwS4joWb0LP7rDpNMB8GA1UdIwQY
MBaAFFcwoy8xYkbOCxR7uJXozfCu1D7WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnpDakx6RmlSczRMRkh1NGxlak44SzdVUHRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9mM2MzYjItYjY0YS00OWUxLTlhNDgt
YzkzOTg5Y2M5YjY3LzEvVnpDakx6RmlSczRMRkh1NGxlak44SzdVUHRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS9mM2MzYjItYjY0YS00OWUxLTlhNDgtYzkzOTg5Y2M5YjY3
LzEvVnpDakx6RmlSczRMRkh1NGxlak44SzdVUHRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcYFLzKeI
wNK30WWU0pJwGvMLLZQGUDtrxXQ9KRzGHvTJxNuzEvvei/T1743qYK+GbldD9OQi
iLxXvw9M3ha1tsWmzQvFpRVDBIC116ltPfoKVoPxBDooiyZb9jcioQqC+ct3cVIH
OPxlgjnjlzpSA6kTRAJz91PlY3fsXsSEmxYlqBBTnqGROmKmWyQ3yCA0d/MZuQUh
p7U98QSOx37d7bnsVpz17fSAu95lFG7cQOOClcyJ/nfc6o1hjQayUrcyM9/LcMtD
jyYhsmjc4dYJWCbpjMxO08pyLOINGWDiLj/5ZIOvX6Zr4tRWHBohpYRX4n+ovqfY
IY0Z245QRH0uKQ==
-----END CERTIFICATE-----
Generated at Mon Feb 9 21:07:13 2026 by rpki-client