This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.mft
File: z6loMZ1yqYp1lAAzi3D9xniRLeY.mft (raw, json)
Hash identifier: 6q3UV47pIe4loJpdr3ZqTD9pAZf6C7FjsoKVD8f26IA=
Subject key identifier: 0F:47:3B:A0:3C:82:84:F1:9A:05:24:B7:B2:63:AB:75:52:61:78:CE
Authority key identifier: CF:A9:68:31:9D:72:A9:8A:75:94:00:33:8B:70:FD:C6:78:91:2D:E6
Certificate issuer: /CN=cfa968319d72a98a759400338b70fdc678912de6
Certificate serial: 019C42B46BC18134F5BFE9A5AE92474D28FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z6loMZ1yqYp1lAAzi3D9xniRLeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.mft
Manifest number: 1815
Signing time: Mon 09 Feb 2026 14:00:46 +0000
Manifest this update: Mon 09 Feb 2026 14:00:46 +0000
Manifest next update: Tue 10 Feb 2026 14:00:46 +0000
Files and hashes: 1: 6Ep4JB6joSkE2HYaEIb1LFsZbgY.roa (hash: SqDePBtTD8XjhS8RPU2gNtHpu8bEH14qQE6MxK5aj78=)
2: z6loMZ1yqYp1lAAzi3D9xniRLeY.crl (hash: UfWhOYMaci79G2qpLDr71aYwY/4rbK2N+zJC4MvA8dQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/z6loMZ1yqYp1lAAzi3D9xniRLeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 14:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:b4:6b:c1:81:34:f5:bf:e9:a5:ae:92:47:4d:28:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfa968319d72a98a759400338b70fdc678912de6
Validity
Not Before: Feb 9 14:00:46 2026 GMT
Not After : Feb 10 14:00:46 2026 GMT
Subject: CN=0f473ba03c8284f19a0524b7b263ab75526178ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:25:7a:9d:62:98:45:39:7a:f5:f6:92:fc:75:
93:11:38:6d:69:0c:8e:7a:d1:d7:38:f8:d2:34:fd:
09:57:c5:3a:4b:b7:a1:f1:b5:cf:1b:77:47:35:4d:
22:c1:5f:f0:6f:33:77:21:46:fc:ff:77:7d:72:86:
ba:ed:36:50:c7:d5:4e:3a:47:b4:6d:b9:2c:f3:e0:
0d:8a:9d:d3:63:81:a3:09:b3:e9:2f:cd:e6:92:1b:
86:75:31:b9:e3:98:2c:be:d3:e9:e6:89:30:ca:ac:
bc:6f:7e:67:61:c4:46:52:e8:c4:d8:26:64:a1:44:
e9:50:e0:13:f1:46:c8:aa:18:e7:cc:82:ce:a1:34:
2d:1a:e2:39:a0:54:6d:43:5f:aa:59:dd:5f:58:ed:
4c:a8:eb:63:93:94:4c:f4:89:89:28:d1:c3:5f:89:
cb:79:97:25:fa:b4:3f:22:6f:90:0d:b8:25:41:56:
5b:b1:bb:df:46:54:9f:f0:db:aa:ef:f5:d4:0d:58:
00:c3:bd:22:85:f9:2e:51:60:b5:87:35:9c:60:d6:
1c:31:fa:4e:eb:58:32:77:b5:15:a1:59:ff:75:f5:
8b:8d:c8:ae:ef:17:bf:3e:30:18:70:cf:94:20:19:
a3:2c:4d:14:c0:6a:c9:1b:4b:81:33:af:a5:f8:82:
87:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:47:3B:A0:3C:82:84:F1:9A:05:24:B7:B2:63:AB:75:52:61:78:CE
X509v3 Authority Key Identifier:
keyid:CF:A9:68:31:9D:72:A9:8A:75:94:00:33:8B:70:FD:C6:78:91:2D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z6loMZ1yqYp1lAAzi3D9xniRLeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:e8:79:ab:45:68:95:d1:45:d9:d7:0c:61:6f:7b:6b:61:b7:
46:45:30:96:5f:9f:02:53:ab:93:90:7f:75:93:2d:62:e4:8c:
27:2f:b2:86:63:50:6b:10:89:58:67:3b:90:43:34:01:d2:eb:
52:18:5e:97:a7:82:93:9a:49:98:6d:e4:c3:a0:14:c4:d9:a8:
2d:7b:fb:ff:e4:a7:cc:36:5f:c9:12:d5:22:29:52:92:0e:a7:
7a:ea:7b:ff:f6:cd:4a:d2:d2:1f:58:76:40:38:a7:85:b0:85:
59:1e:5f:53:1f:ee:66:db:68:0f:c5:77:71:ba:55:7a:81:48:
89:22:50:38:d8:7c:27:c1:12:c5:46:df:de:e3:ef:84:bf:c7:
ce:4f:68:1a:d4:9e:01:29:4c:fb:5b:36:d6:59:e9:4d:f1:c3:
80:21:da:3e:8c:5c:17:cd:15:2f:34:28:0c:b2:56:be:01:4c:
0b:3c:da:a4:34:2f:c2:cc:a3:5e:10:5d:8e:df:f5:03:24:d0:
8b:b7:6d:70:55:39:9a:e5:92:9e:8b:39:9c:4f:ac:98:f2:c4:
ea:ac:0b:f6:96:b8:4a:b9:22:a8:c5:c9:8f:97:ef:07:9c:1e:
10:4c:94:60:8b:73:e3:9c:03:88:d8:93:21:1e:5a:d8:53:db:
9e:7a:d8:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:33:14 2026 by rpki-client