This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft
File: ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft (raw, json)
Hash identifier: 2fNyGOu1lVLEYuI+HWXlhYxX6D5thJkX16aexJN1IZU=
Subject key identifier: EC:C9:D4:4C:79:9B:DD:0D:EB:69:04:5E:42:84:AC:EB:13:A1:16:FE
Authority key identifier: 65:E2:26:BC:F4:A8:30:B2:F4:48:FD:6E:A9:97:6B:15:20:87:DD:45
Certificate issuer: /CN=65e226bcf4a830b2f448fd6ea9976b152087dd45
Certificate serial: 019BDEED6208AA38917E2B14ADCF5F06BC3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZeImvPSoMLL0SP1uqZdrFSCH3UU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft
Manifest number: 0AD1
Signing time: Wed 21 Jan 2026 05:00:57 +0000
Manifest this update: Wed 21 Jan 2026 05:00:57 +0000
Manifest next update: Thu 22 Jan 2026 05:00:57 +0000
Files and hashes: 1: 4MSE4UyGO5LwOd_U2HJUAYFw8yI.roa (hash: 1DrymcOv7aoritq27aJXxxGAaxiSifi94Z89A2CC9Ow=)
2: KaN7RLL5KVyq30qD32Rnb_nls78.roa (hash: bzsFsGck1pscarjTWs0d9Ebn5ZXqcM8xKvGnRO+nPFk=)
3: ZeImvPSoMLL0SP1uqZdrFSCH3UU.crl (hash: ynNc0WWg2QnF7+fGcT5SM9Yz2aqGLfYXTRjhtBSbEks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZeImvPSoMLL0SP1uqZdrFSCH3UU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Jan 2026 00:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:de:ed:62:08:aa:38:91:7e:2b:14:ad:cf:5f:06:bc:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65e226bcf4a830b2f448fd6ea9976b152087dd45
Validity
Not Before: Jan 21 05:00:57 2026 GMT
Not After : Jan 22 05:00:57 2026 GMT
Subject: CN=ecc9d44c799bdd0deb69045e4284aceb13a116fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:7e:2a:33:9e:cc:ce:37:b6:6f:70:ec:d7:39:
6d:e3:8a:e0:04:96:68:33:c1:d4:02:d6:20:14:f7:
f1:ba:c7:83:2c:11:f5:40:9a:4e:8c:93:2d:20:6f:
6a:c4:3f:d2:51:c1:56:c0:87:4a:87:b4:16:fc:5f:
97:7c:b4:62:17:d4:db:14:23:6b:b5:43:9f:ff:c2:
22:15:c0:db:51:19:fd:5f:f0:0a:c3:9c:c6:94:f6:
1b:fb:de:22:9d:9b:13:c9:a8:0e:1c:69:34:32:42:
7f:3e:18:90:bd:fb:f8:1b:03:82:86:d7:d8:2c:3f:
58:3a:de:08:61:6b:19:52:f5:88:31:e2:2f:98:63:
3f:01:a2:b1:24:d8:3c:34:20:aa:13:28:07:21:10:
ed:7a:53:0e:ed:f7:d6:ca:c8:4e:60:96:6f:46:88:
10:8a:6a:8d:cc:2b:f9:d6:fc:f0:ac:e9:17:56:02:
d0:30:ca:f5:81:0d:e7:fb:82:14:3a:1f:2a:a2:95:
ed:c3:c9:67:9b:76:77:66:bf:a4:3f:ba:62:a5:6a:
ba:bc:32:63:5c:11:dd:59:4f:78:4c:36:ad:9c:16:
d8:1e:03:b0:2f:76:3d:8c:c3:0a:69:05:4d:c0:41:
c1:0b:70:48:da:cb:7d:86:5a:54:ec:85:52:fe:e2:
1a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:C9:D4:4C:79:9B:DD:0D:EB:69:04:5E:42:84:AC:EB:13:A1:16:FE
X509v3 Authority Key Identifier:
keyid:65:E2:26:BC:F4:A8:30:B2:F4:48:FD:6E:A9:97:6B:15:20:87:DD:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZeImvPSoMLL0SP1uqZdrFSCH3UU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:4d:91:77:46:a3:62:53:fe:73:b3:a2:10:63:76:0b:3a:fa:
a8:b7:26:0d:c1:41:3d:4d:d6:e2:08:e5:b1:6d:e2:d6:35:97:
3e:f7:96:46:cd:70:d1:6f:4f:50:08:3a:d8:f5:32:62:94:a6:
fe:3c:68:29:d0:ed:2d:64:de:df:f8:75:75:e2:3f:f3:d2:a9:
da:69:fa:bf:36:51:4e:cb:59:d5:4a:c2:e7:17:5e:17:89:fe:
a1:9d:76:f9:2a:d7:fc:99:74:14:52:10:72:59:a5:53:60:08:
67:98:76:de:65:5e:a7:e9:a2:e3:db:66:fe:de:b9:ae:ba:d1:
02:f9:cb:4f:c6:68:01:26:60:70:d2:c6:da:d6:e5:cf:d7:90:
01:ae:bd:06:cb:8f:e3:43:fc:cb:f7:51:db:59:3d:9e:7e:83:
a9:f1:67:98:34:45:a5:9e:d8:b6:7d:c1:09:fb:01:f0:9b:b4:
8b:3a:42:c5:35:79:b5:94:fe:fd:cc:eb:1e:87:36:33:8b:2c:
f7:59:98:8e:b7:db:6a:d6:cd:04:47:21:50:fc:ad:76:94:b0:
cd:e7:df:4c:7a:6c:c4:6b:ae:c7:d5:82:57:dd:f0:99:45:18:
90:75:23:4c:3c:4c:55:be:88:d6:a0:6d:ce:a9:bd:c7:51:b8:
f4:98:39:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 06:37:08 2026 by rpki-client