This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/e6f18d-f775-4438-95cb-afb558a5e841/1/Z5vXjjgZdwwRbld7rPrRmTOSvbg.mft
File: Z5vXjjgZdwwRbld7rPrRmTOSvbg.mft (raw, json)
Hash identifier: eYRhtKWZp06eLSnBKNTIuKJZ2xcdjfdXfwEVHMCaVwE=
Subject key identifier: 4A:DC:A7:E9:9A:AF:9D:FA:67:81:B7:EF:18:33:BC:72:01:18:4F:E1
Authority key identifier: 67:9B:D7:8E:38:19:77:0C:11:6E:57:7B:AC:FA:D1:99:33:92:BD:B8
Certificate issuer: /CN=679bd78e3819770c116e577bacfad1993392bdb8
Certificate serial: 019C421030B962502BBBC57DA541B4A6EB3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5vXjjgZdwwRbld7rPrRmTOSvbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/e6f18d-f775-4438-95cb-afb558a5e841/1/Z5vXjjgZdwwRbld7rPrRmTOSvbg.mft
Manifest number: 126E
Signing time: Mon 09 Feb 2026 11:01:22 +0000
Manifest this update: Mon 09 Feb 2026 11:01:22 +0000
Manifest next update: Tue 10 Feb 2026 11:01:22 +0000
Files and hashes: 1: Z5vXjjgZdwwRbld7rPrRmTOSvbg.crl (hash: nNwR7OSchTVC1v4dI23cEFHK0OslVU3lQdkE0j44iuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/e6f18d-f775-4438-95cb-afb558a5e841/1/Z5vXjjgZdwwRbld7rPrRmTOSvbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/e6f18d-f775-4438-95cb-afb558a5e841/1/Z5vXjjgZdwwRbld7rPrRmTOSvbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z5vXjjgZdwwRbld7rPrRmTOSvbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:10:30:b9:62:50:2b:bb:c5:7d:a5:41:b4:a6:eb:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=679bd78e3819770c116e577bacfad1993392bdb8
Validity
Not Before: Feb 9 11:01:22 2026 GMT
Not After : Feb 10 11:01:22 2026 GMT
Subject: CN=4adca7e99aaf9dfa6781b7ef1833bc7201184fe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:3d:96:e5:48:62:72:fa:a6:95:a3:59:71:1d:
4d:15:d5:92:77:1c:e5:5b:02:37:be:7d:9c:57:91:
96:e4:d2:cb:40:64:19:9b:a2:63:83:61:11:72:39:
87:01:73:11:d3:ea:d3:59:8b:da:36:ad:6d:b1:40:
09:b0:17:70:13:ed:45:ea:40:10:55:49:54:76:97:
e2:89:99:1c:36:b1:1a:02:69:7e:e8:fd:75:1e:8a:
c2:2f:a3:f6:e0:aa:e7:73:cc:a9:b1:96:47:f2:15:
aa:07:d4:e6:72:cc:63:39:26:67:ed:84:fd:65:f1:
4b:7c:7f:64:16:9e:c1:d4:82:6c:4c:ae:ca:d2:88:
4d:07:aa:10:d8:09:73:51:be:01:73:41:1c:15:87:
28:11:08:e8:57:8a:b7:92:02:60:b4:06:64:d9:92:
7e:1e:10:bc:1e:d8:cc:eb:69:3a:da:02:3d:a1:86:
83:b1:d1:11:57:4d:97:a6:08:cb:ab:75:d5:fa:fb:
02:5c:82:46:bd:89:be:45:67:46:2a:b5:b7:81:6f:
56:81:26:f8:8d:f0:f3:90:c1:18:20:08:e1:96:3b:
f2:40:02:e9:a5:8c:f6:cb:da:ec:fd:0e:55:fa:86:
1c:d5:11:05:24:01:75:26:fc:03:c9:91:1b:5e:62:
7a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:DC:A7:E9:9A:AF:9D:FA:67:81:B7:EF:18:33:BC:72:01:18:4F:E1
X509v3 Authority Key Identifier:
keyid:67:9B:D7:8E:38:19:77:0C:11:6E:57:7B:AC:FA:D1:99:33:92:BD:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5vXjjgZdwwRbld7rPrRmTOSvbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e6f18d-f775-4438-95cb-afb558a5e841/1/Z5vXjjgZdwwRbld7rPrRmTOSvbg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e6f18d-f775-4438-95cb-afb558a5e841/1/Z5vXjjgZdwwRbld7rPrRmTOSvbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:94:fe:18:0b:fb:d8:c4:1d:65:c3:38:72:84:c5:ab:66:a2:
63:9c:8d:98:b2:40:93:d6:bf:ff:e0:94:af:e2:28:69:cd:1e:
29:09:30:c1:03:0d:92:cf:27:15:5f:98:f1:8e:5b:04:3b:de:
dc:bb:36:8c:2b:5a:f5:ad:62:a4:be:65:3d:87:f7:d7:5d:93:
6a:59:43:f9:d3:e7:12:6e:73:73:4b:0e:12:3e:82:b6:02:68:
a5:73:2c:fd:05:a0:b6:eb:2f:f1:0f:9e:47:f3:ae:c3:7f:b4:
e7:73:64:f7:78:77:92:23:4f:4e:66:e4:e0:a1:99:29:88:5d:
d8:05:b9:56:a0:79:b0:88:1a:52:97:a0:f2:7e:25:fa:c6:b1:
4d:8c:64:23:09:f0:c4:da:f0:6e:02:60:de:1c:96:19:76:d5:
69:16:9e:48:71:61:2b:df:08:a5:ca:c8:2c:73:66:d0:59:53:
d7:64:79:0f:9e:43:2e:99:d8:ea:af:66:32:29:a2:ba:a8:6f:
9f:81:73:99:ea:a6:fc:23:1e:36:68:f3:99:83:a4:0a:1a:b3:
02:75:56:c6:08:d8:d9:f3:71:79:d4:46:60:9b:57:61:2b:14:
e9:83:15:a1:28:24:52:2f:e5:af:1a:3c:ad:2e:97:e1:9d:4f:
35:3e:c3:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:49:18 2026 by rpki-client