This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/0feb89-7d8c-4300-99b5-06247a978d69/1/zJxBoSN2TPfcDy25hB9zKjuWE0M.mft
File: zJxBoSN2TPfcDy25hB9zKjuWE0M.mft (raw, json)
Hash identifier: MecW1X8ijYtkQGFy7AlnKni6vP06H0fwjWl/QGhe2WM=
Subject key identifier: 9C:D0:E3:77:D5:B8:59:E3:AA:C4:BF:95:0C:5D:0E:63:73:2D:F1:8F
Authority key identifier: CC:9C:41:A1:23:76:4C:F7:DC:0F:2D:B9:84:1F:73:2A:3B:96:13:43
Certificate issuer: /CN=cc9c41a123764cf7dc0f2db9841f732a3b961343
Certificate serial: 019C4359076C355EA5DD859D30E92D14572F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zJxBoSN2TPfcDy25hB9zKjuWE0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/0feb89-7d8c-4300-99b5-06247a978d69/1/zJxBoSN2TPfcDy25hB9zKjuWE0M.mft
Manifest number: 1812
Signing time: Mon 09 Feb 2026 17:00:33 +0000
Manifest this update: Mon 09 Feb 2026 17:00:33 +0000
Manifest next update: Tue 10 Feb 2026 17:00:33 +0000
Files and hashes: 1: RKsWQywf7E1-7yxnFVRThg94oQI.roa (hash: rZsYO4uq9KEbyvr1gPhju0XO3T5ePDaOKISlE/78+R4=)
2: zJxBoSN2TPfcDy25hB9zKjuWE0M.crl (hash: lU1yfalg9kKpgP3pm3YxnjMCPbcLl4auqwgUrPM3odI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/0feb89-7d8c-4300-99b5-06247a978d69/1/zJxBoSN2TPfcDy25hB9zKjuWE0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/0feb89-7d8c-4300-99b5-06247a978d69/1/zJxBoSN2TPfcDy25hB9zKjuWE0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/zJxBoSN2TPfcDy25hB9zKjuWE0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:59:07:6c:35:5e:a5:dd:85:9d:30:e9:2d:14:57:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc9c41a123764cf7dc0f2db9841f732a3b961343
Validity
Not Before: Feb 9 17:00:33 2026 GMT
Not After : Feb 10 17:00:33 2026 GMT
Subject: CN=9cd0e377d5b859e3aac4bf950c5d0e63732df18f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:46:35:3e:b7:fa:8b:3d:1b:5b:66:44:9a:05:
26:f7:fb:05:95:d4:4d:64:24:ea:d1:7a:00:0f:d7:
fb:69:14:65:15:5a:db:a0:58:cf:99:f9:82:f1:43:
1a:50:22:6e:82:18:5c:fc:3f:e6:3d:f9:d0:1c:e8:
a7:35:ac:99:be:fa:a7:00:31:01:87:bf:59:27:77:
fc:c9:a3:52:e3:aa:cf:43:86:90:4c:8b:92:3c:97:
2a:66:a9:71:61:93:b4:e9:02:eb:75:04:a0:aa:3b:
41:24:af:9d:44:7d:b7:2f:4f:d0:82:03:9a:80:b2:
76:1f:20:36:95:30:f4:98:d5:1c:51:f8:64:8a:ea:
12:fa:2e:31:87:53:eb:e9:b9:49:ef:44:cc:a4:11:
d9:48:32:d5:b6:67:38:e2:72:ca:11:94:c2:38:b5:
a1:5c:e4:10:22:77:fe:d3:65:24:80:86:f3:4a:14:
af:e6:f7:be:9d:62:38:fc:9e:b1:7e:d7:07:f3:3a:
64:ce:4e:59:07:c4:be:3f:70:db:65:c6:1f:28:92:
51:57:4a:7f:9a:8a:13:b8:e3:00:ec:52:8c:de:98:
a8:98:48:16:e7:c4:a1:1a:0f:9f:32:7b:e8:7e:3a:
55:f7:db:88:1f:ad:1b:a1:cb:f9:7a:2d:68:e9:7f:
6c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:D0:E3:77:D5:B8:59:E3:AA:C4:BF:95:0C:5D:0E:63:73:2D:F1:8F
X509v3 Authority Key Identifier:
keyid:CC:9C:41:A1:23:76:4C:F7:DC:0F:2D:B9:84:1F:73:2A:3B:96:13:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zJxBoSN2TPfcDy25hB9zKjuWE0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/0feb89-7d8c-4300-99b5-06247a978d69/1/zJxBoSN2TPfcDy25hB9zKjuWE0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/0feb89-7d8c-4300-99b5-06247a978d69/1/zJxBoSN2TPfcDy25hB9zKjuWE0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:e2:2c:3b:f5:19:76:5f:9c:9d:81:e2:85:0e:1d:56:69:6b:
ad:57:6d:02:a8:8a:67:7f:4e:65:a9:31:75:24:5f:eb:70:d4:
6e:1e:ac:a9:8b:ca:ce:8c:ce:fd:1b:e9:c2:36:9e:cf:95:35:
3b:f1:7c:88:e5:16:05:41:e8:14:49:12:48:90:16:b7:73:77:
fc:13:8c:58:bf:14:c7:19:53:dc:55:ca:2e:87:e5:df:2b:82:
78:ec:ba:2a:33:ca:01:5e:62:2e:b5:cc:e1:63:9f:02:b7:89:
a0:a7:19:74:0f:d7:e8:15:fc:fb:ca:d7:4f:05:7e:65:a0:9c:
e4:4d:e4:ff:4d:19:ff:d7:03:ab:2d:b6:ea:ed:64:8f:18:cc:
8c:40:7c:cf:6c:17:71:b2:ca:af:18:7e:5d:f4:92:62:a8:25:
fb:f5:3c:26:44:53:f4:64:6e:c5:74:c3:4e:b5:3f:57:fb:58:
ef:23:8c:8c:0b:e3:32:79:b5:d4:c2:a3:c2:d0:a2:f5:f3:31:
78:21:01:c0:c6:75:81:1b:17:96:67:ae:b1:23:7b:07:4f:cc:
a8:cf:b0:71:02:5b:1e:a8:11:78:ec:14:bd:56:ec:09:a7:55:
e1:00:5c:83:99:4b:32:3c:12:53:0c:aa:35:43:5b:ee:94:53:
5a:6e:ab:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:07:02 2026 by rpki-client