This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.mft
File: zHd6CKRWRUi1GOw4ZLNB4fpSJeo.mft (raw, json)
Hash identifier: AVs+iit3MA8bS49tiNzlW3NrDF69ubWS7ZUogsJ+62A=
Subject key identifier: B0:1D:59:72:82:D0:31:60:89:00:CA:A7:11:51:FC:20:01:04:DA:86
Authority key identifier: CC:77:7A:08:A4:56:45:48:B5:18:EC:38:64:B3:41:E1:FA:52:25:EA
Certificate issuer: /CN=cc777a08a4564548b518ec3864b341e1fa5225ea
Certificate serial: 019C420F81FCA85D7B342EB87F2A2049BD8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.mft
Manifest number: 1820
Signing time: Mon 09 Feb 2026 11:00:38 +0000
Manifest this update: Mon 09 Feb 2026 11:00:38 +0000
Manifest next update: Tue 10 Feb 2026 11:00:38 +0000
Files and hashes: 1: efPNeN_0KirVowyqOO81ber6Zg8.roa (hash: 0sZnmeXPSX5yamGjUWVvInbw7JdGyiWW9gzFR1D9bNU=)
2: zHd6CKRWRUi1GOw4ZLNB4fpSJeo.crl (hash: HOCp/0conZBL9ZE3wa7rcP5qvv9ULLJiFeR6yUObJ08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:0f:81:fc:a8:5d:7b:34:2e:b8:7f:2a:20:49:bd:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc777a08a4564548b518ec3864b341e1fa5225ea
Validity
Not Before: Feb 9 11:00:38 2026 GMT
Not After : Feb 10 11:00:38 2026 GMT
Subject: CN=b01d597282d031608900caa71151fc200104da86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4e:44:44:21:50:ac:a0:7a:75:34:11:9c:6e:
f5:4d:00:c1:b5:17:3f:c9:c3:cf:28:df:2b:f0:9b:
e5:dc:47:56:01:7a:2d:18:1e:b8:b4:87:75:23:d8:
6f:2e:93:18:ef:2b:3c:a8:66:8c:1a:52:31:fa:c1:
b5:28:94:f4:dd:56:3a:fe:71:5a:75:91:ab:ca:bd:
90:c4:5b:7a:cd:d8:83:9e:04:ae:ae:3d:61:25:b9:
8d:88:c4:c6:77:48:69:6f:3b:7f:b8:b8:9a:cc:69:
e8:11:5a:3b:ee:fd:ca:2a:c2:6d:31:da:dc:60:1b:
ac:b0:9f:47:7e:32:1c:87:c9:75:ee:eb:08:1c:85:
b7:1c:ce:b2:72:62:1f:79:7a:8e:28:0e:ef:db:3d:
6f:2b:c4:ed:ad:b7:c4:76:51:2c:7b:25:a8:54:9d:
f6:3d:80:03:b5:77:6f:23:6e:1d:96:36:04:c7:72:
05:1c:9b:b2:92:c3:41:5f:98:be:1f:88:6a:48:61:
79:36:ee:7d:da:e1:ed:96:ec:3f:2b:39:6d:42:e0:
40:fa:a8:23:5f:ed:d2:59:6a:ef:36:58:6a:29:fc:
75:f5:ae:85:a1:c0:88:74:fc:53:9a:0d:49:f7:61:
e6:ce:60:0b:8d:88:0c:36:ad:4b:af:d4:40:2d:73:
9d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:1D:59:72:82:D0:31:60:89:00:CA:A7:11:51:FC:20:01:04:DA:86
X509v3 Authority Key Identifier:
keyid:CC:77:7A:08:A4:56:45:48:B5:18:EC:38:64:B3:41:E1:FA:52:25:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:5d:03:b9:ce:5f:70:ab:cf:06:c1:6c:53:9e:e1:89:97:41:
a8:5b:ea:4b:a9:e4:ec:4d:d0:b5:46:62:b2:d0:04:a8:d8:2d:
46:3e:12:8e:c5:a9:9a:03:f6:ae:0b:c3:8b:f6:b9:1e:d2:e0:
4e:4a:68:57:08:0b:83:f6:c9:02:59:ab:17:93:f4:27:2e:55:
8e:57:5c:e8:02:62:c5:eb:d4:fe:90:ab:79:57:69:7f:03:48:
7a:78:9e:5d:da:a9:18:06:9c:21:0c:e3:18:6d:fc:7c:ab:9c:
71:7c:52:83:34:24:fb:57:c0:db:26:d5:fd:5d:50:2d:0a:1c:
0e:e2:22:db:5d:85:26:3f:7d:0b:be:d6:2e:75:fd:34:83:bb:
79:fe:b5:e3:35:fb:6c:68:13:12:bc:37:7d:12:e1:7c:37:bb:
43:7e:3b:9b:1d:a5:c3:09:d3:37:1d:5b:a0:73:aa:46:e4:44:
38:12:f3:a2:32:40:6c:0c:e3:4e:94:d1:29:92:2d:4f:93:8e:
12:56:de:91:a4:60:45:f5:50:70:39:91:d4:9d:68:06:12:d0:
81:ea:1f:4b:64:62:31:40:55:d4:70:cf:9b:e0:92:02:13:ba:
8f:14:7c:0e:3e:d6:18:7a:bf:55:76:b1:b9:65:50:20:ae:75:
4e:67:cd:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:30:49 2026 by rpki-client