This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/MzKH4jvuZ8pmL713n8vBguxVO-M.mft
File: MzKH4jvuZ8pmL713n8vBguxVO-M.mft (raw, json)
Hash identifier: 8oc2W78pcWTv3J8F/asODWTRwLhIGcyl/ywq0UO66cw=
Subject key identifier: 85:A5:FF:E0:B3:8B:EF:9B:CF:D1:86:A9:55:5F:AE:3E:A3:70:43:BD
Authority key identifier: 33:32:87:E2:3B:EE:67:CA:66:2F:BD:77:9F:CB:C1:82:EC:55:3B:E3
Certificate issuer: /CN=333287e23bee67ca662fbd779fcbc182ec553be3
Certificate serial: 019C42469CB5E74F87B5480F7B3E30CB9A86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzKH4jvuZ8pmL713n8vBguxVO-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/MzKH4jvuZ8pmL713n8vBguxVO-M.mft
Manifest number: 0B77
Signing time: Mon 09 Feb 2026 12:00:49 +0000
Manifest this update: Mon 09 Feb 2026 12:00:49 +0000
Manifest next update: Tue 10 Feb 2026 12:00:49 +0000
Files and hashes: 1: MzKH4jvuZ8pmL713n8vBguxVO-M.crl (hash: fkf/aQK2YGZFd1rpH8E7ygsWWrOwLUF4Ua4XgWMHZEQ=)
2: lWJEJ38LG2xnxFB2fT73IqXyIEA.roa (hash: KHwos3EmOZKUtMcSQbvFbuttFTsD5TBtKXWrJtoYgHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/MzKH4jvuZ8pmL713n8vBguxVO-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/MzKH4jvuZ8pmL713n8vBguxVO-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/MzKH4jvuZ8pmL713n8vBguxVO-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 12:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:46:9c:b5:e7:4f:87:b5:48:0f:7b:3e:30:cb:9a:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=333287e23bee67ca662fbd779fcbc182ec553be3
Validity
Not Before: Feb 9 12:00:49 2026 GMT
Not After : Feb 10 12:00:49 2026 GMT
Subject: CN=85a5ffe0b38bef9bcfd186a9555fae3ea37043bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:44:ec:97:5a:1b:2a:aa:26:4e:cc:b3:ff:0e:
69:4c:3c:ec:ea:78:d8:0c:8f:2d:34:ee:35:1d:f9:
47:00:30:19:ab:37:d0:22:cb:ad:d4:34:62:2e:f7:
09:40:a8:97:02:38:28:80:25:13:c8:3a:70:62:91:
71:80:2b:27:3a:7a:71:97:c8:9a:b2:5f:6a:f0:3c:
d0:38:16:8d:50:96:ae:cc:42:c4:b9:92:76:8a:cb:
45:9d:7c:98:59:74:c7:7b:c1:83:3c:6d:22:de:54:
33:71:df:53:1d:72:af:64:9d:a2:b4:4c:82:29:69:
b2:32:87:5b:c2:9f:34:df:b6:07:d0:76:c4:6e:eb:
74:41:b8:5c:e3:4a:e8:4a:ce:37:56:57:1b:e5:7f:
55:08:01:55:85:13:dc:f6:c2:37:38:80:c8:02:5e:
b0:5b:06:a1:ca:e1:5e:7a:cc:b1:65:bb:96:43:82:
e4:b8:64:da:6e:db:17:e9:b5:50:fd:13:de:18:40:
c9:aa:7b:7b:5d:13:c2:01:eb:da:25:af:58:23:20:
5d:28:00:c5:54:28:66:f8:b7:01:81:21:31:74:b9:
0f:5a:3b:ca:a0:cd:5a:c2:a8:91:f7:08:b8:ae:2e:
8e:39:6a:9a:80:c3:a9:ae:ec:c7:f1:7c:7e:cb:d5:
00:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:A5:FF:E0:B3:8B:EF:9B:CF:D1:86:A9:55:5F:AE:3E:A3:70:43:BD
X509v3 Authority Key Identifier:
keyid:33:32:87:E2:3B:EE:67:CA:66:2F:BD:77:9F:CB:C1:82:EC:55:3B:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzKH4jvuZ8pmL713n8vBguxVO-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/MzKH4jvuZ8pmL713n8vBguxVO-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/MzKH4jvuZ8pmL713n8vBguxVO-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:bd:95:69:71:58:53:2f:fc:71:34:8d:75:fe:b0:3f:ba:4e:
6a:d6:7d:af:30:62:e4:e5:cc:bc:fd:26:15:88:c1:56:e9:31:
6c:a9:86:60:35:26:f7:7d:1a:98:c0:43:d4:83:3e:f8:fb:e7:
82:0b:ed:20:dc:00:fd:17:46:8b:9a:13:9d:83:23:7f:6a:ae:
38:29:94:11:d2:73:fc:c5:12:5c:8f:46:5e:4d:3c:16:d8:cf:
cb:59:41:5f:f9:14:ea:5d:24:a8:91:33:e2:e6:07:1f:9f:ff:
5c:d8:d9:58:dd:bf:c3:c0:c8:e3:98:5a:93:e6:86:3f:ba:c4:
e6:c8:48:79:67:e7:9d:85:f4:4b:1a:f4:19:ec:83:71:52:97:
e4:c2:12:81:5d:d7:0e:d8:e4:d5:2e:b3:1f:c5:dc:59:f4:63:
32:f3:09:ba:a8:8f:61:ae:31:39:54:47:ec:81:97:09:a0:01:
78:a6:27:dc:d1:06:57:1f:37:03:31:a6:cf:ad:ba:88:64:62:
62:1c:03:fd:df:a9:d2:6a:8e:ba:a2:f2:c7:98:40:6e:27:14:
b0:43:d3:7f:44:18:00:7a:31:8d:88:ad:2f:3e:7b:50:4f:ae:
c3:9f:8f:8c:db:43:ff:60:e2:e4:bb:5f:1d:fa:9e:81:f7:68:
cd:98:db:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:47:59 2026 by rpki-client