This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/ecaeb3-f42f-4bac-a49e-242ffdaa2670/1/zX7ksDJ5ljBM8YoSjiZVeAyda5s.mft
File: zX7ksDJ5ljBM8YoSjiZVeAyda5s.mft (raw, json)
Hash identifier: mp6Ew7CPu6RnRa4GVA0c8JivRz/i/6De55ft6+NlDow=
Subject key identifier: A6:85:7B:93:52:3E:3C:85:4A:75:54:C1:0D:AE:93:D9:1F:C7:D6:24
Authority key identifier: CD:7E:E4:B0:32:79:96:30:4C:F1:8A:12:8E:26:55:78:0C:9D:6B:9B
Certificate issuer: /CN=cd7ee4b0327996304cf18a128e2655780c9d6b9b
Certificate serial: 019C42EB20E3DEB25415D4F155821721AB1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zX7ksDJ5ljBM8YoSjiZVeAyda5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/ecaeb3-f42f-4bac-a49e-242ffdaa2670/1/zX7ksDJ5ljBM8YoSjiZVeAyda5s.mft
Manifest number: 0DAC
Signing time: Mon 09 Feb 2026 15:00:31 +0000
Manifest this update: Mon 09 Feb 2026 15:00:31 +0000
Manifest next update: Tue 10 Feb 2026 15:00:31 +0000
Files and hashes: 1: Q8ZJJ74q6bMVlfcvJJudps61QXo.roa (hash: 3ZMgLTga1etNt6/GjM7UgVlhZAFMLoY4B0xB96tmQlk=)
2: zX7ksDJ5ljBM8YoSjiZVeAyda5s.crl (hash: AIcpNYYzljTSVxIcTo7l6J6vda6Rvfu2DgwP/kZMRA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/ecaeb3-f42f-4bac-a49e-242ffdaa2670/1/zX7ksDJ5ljBM8YoSjiZVeAyda5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/ecaeb3-f42f-4bac-a49e-242ffdaa2670/1/zX7ksDJ5ljBM8YoSjiZVeAyda5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/zX7ksDJ5ljBM8YoSjiZVeAyda5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:eb:20:e3:de:b2:54:15:d4:f1:55:82:17:21:ab:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd7ee4b0327996304cf18a128e2655780c9d6b9b
Validity
Not Before: Feb 9 15:00:31 2026 GMT
Not After : Feb 10 15:00:31 2026 GMT
Subject: CN=a6857b93523e3c854a7554c10dae93d91fc7d624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d2:0a:fc:23:c0:7b:11:18:b7:8f:df:41:2c:
23:31:75:ac:7c:0d:45:21:1f:ad:77:3e:27:e0:54:
17:6e:c1:5e:56:74:d0:7a:74:ce:8c:1f:59:79:f5:
76:0f:d2:bb:e4:d2:e6:d0:6b:b2:98:db:1a:37:89:
55:8d:4b:f8:f8:f1:85:88:93:9e:81:41:53:92:67:
88:38:d3:2b:25:38:80:08:e7:39:38:bb:55:42:52:
40:e1:bd:e2:90:7f:d2:e1:60:cd:91:e4:b6:e8:b7:
de:1e:00:c0:96:b1:bb:98:f2:9f:4d:e0:cf:1f:da:
40:b8:0d:23:63:61:d1:38:5b:04:50:6e:ad:f6:03:
cf:37:21:a7:63:e0:82:3b:2b:16:a6:e7:6f:d8:31:
f5:76:14:41:84:fe:8c:af:69:a9:97:a5:2f:ee:d9:
5c:bb:b1:d5:66:8a:4c:45:54:91:d2:24:4a:c8:1f:
3f:c5:5d:a5:d5:a2:18:0a:2e:e3:25:7b:7d:70:00:
05:1a:af:e0:21:be:f2:a4:5b:6d:8a:2a:49:79:e8:
32:49:a2:33:79:25:1a:00:25:a8:10:0c:be:41:dc:
94:1d:46:97:1a:e6:2e:37:4a:a1:c6:34:91:99:46:
0b:e8:89:37:df:9d:ea:70:d2:ae:b7:33:cf:78:7f:
97:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:85:7B:93:52:3E:3C:85:4A:75:54:C1:0D:AE:93:D9:1F:C7:D6:24
X509v3 Authority Key Identifier:
keyid:CD:7E:E4:B0:32:79:96:30:4C:F1:8A:12:8E:26:55:78:0C:9D:6B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zX7ksDJ5ljBM8YoSjiZVeAyda5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/ecaeb3-f42f-4bac-a49e-242ffdaa2670/1/zX7ksDJ5ljBM8YoSjiZVeAyda5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/ecaeb3-f42f-4bac-a49e-242ffdaa2670/1/zX7ksDJ5ljBM8YoSjiZVeAyda5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:9b:d6:b5:bc:17:52:1d:65:09:36:a5:48:44:e6:2a:e0:09:
f5:09:72:a4:da:fe:5b:ce:f8:4a:f8:84:f2:33:18:cb:bd:3e:
93:a2:e3:bc:52:7d:76:97:88:40:27:bf:62:27:1a:ad:84:aa:
18:bd:27:8d:a0:00:91:40:e9:36:e4:50:33:c3:94:71:80:35:
ff:b6:22:7b:50:e0:4e:ac:d4:dc:cd:62:af:48:97:88:36:b0:
a0:13:f0:c8:5a:2f:da:a0:9b:d5:ed:cf:4f:d2:6c:a6:9a:5c:
86:4e:7e:b2:c4:76:be:a1:42:89:84:43:30:d9:cc:8a:1a:c4:
86:d1:89:a5:5a:dd:f7:d5:6f:2a:44:a8:f1:37:1b:6e:c8:e9:
96:2d:ab:8f:6e:f1:3d:ce:1b:a5:e9:bf:cd:68:87:d6:3c:03:
af:d0:27:53:b3:f0:0b:ca:70:a5:5b:cc:e4:bd:2b:19:d9:d4:
43:3d:54:f2:df:17:8a:3d:3b:40:96:11:77:a0:c3:3d:f2:88:
03:43:e0:82:a8:53:fb:56:2a:18:85:6d:dd:96:32:26:4e:45:
6d:ea:b6:f4:cd:21:24:e2:ce:7a:d8:5c:a5:60:71:74:97:50:
27:3e:8c:e3:ff:37:2d:41:bd:5d:97:1a:1d:f0:a0:ae:6d:9b:
04:cf:90:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxC6yDj3rJUFdTxVYIXIasaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkN2VlNGIwMzI3OTk2MzA0Y2YxOGExMjhlMjY1NTc4MGM5
ZDZiOWIwHhcNMjYwMjA5MTUwMDMxWhcNMjYwMjEwMTUwMDMxWjAzMTEwLwYDVQQD
EyhhNjg1N2I5MzUyM2UzYzg1NGE3NTU0YzEwZGFlOTNkOTFmYzdkNjI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndIK/CPAexEYt4/fQSwjMXWsfA1F
IR+tdz4n4FQXbsFeVnTQenTOjB9ZefV2D9K75NLm0GuymNsaN4lVjUv4+PGFiJOe
gUFTkmeIONMrJTiACOc5OLtVQlJA4b3ikH/S4WDNkeS26LfeHgDAlrG7mPKfTeDP
H9pAuA0jY2HROFsEUG6t9gPPNyGnY+CCOysWpudv2DH1dhRBhP6Mr2mpl6Uv7tlc
u7HVZopMRVSR0iRKyB8/xV2l1aIYCi7jJXt9cAAFGq/gIb7ypFttiipJeegySaIz
eSUaACWoEAy+QdyUHUaXGuYuN0qhxjSRmUYL6Ik3353qcNKutzPPeH+XfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKaFe5NSPjyFSnVUwQ2uk9kfx9YkMB8GA1UdIwQY
MBaAFM1+5LAyeZYwTPGKEo4mVXgMnWubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelg3a3NESjVsakJNOFlvU2ppWlZlQXlkYTVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9lY2FlYjMtZjQyZi00YmFjLWE0OWUt
MjQyZmZkYWEyNjcwLzEvelg3a3NESjVsakJNOFlvU2ppWlZlQXlkYTVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS9lY2FlYjMtZjQyZi00YmFjLWE0OWUtMjQyZmZkYWEyNjcw
LzEvelg3a3NESjVsakJNOFlvU2ppWlZlQXlkYTVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACJvWtbwX
Uh1lCTalSETmKuAJ9QlypNr+W874SviE8jMYy70+k6LjvFJ9dpeIQCe/YicarYSq
GL0njaAAkUDpNuRQM8OUcYA1/7Yie1DgTqzU3M1ir0iXiDawoBPwyFov2qCb1e3P
T9Jspppchk5+ssR2vqFCiYRDMNnMihrEhtGJpVrd99VvKkSo8Tcbbsjpli2rj27x
Pc4bpem/zWiH1jwDr9AnU7PwC8pwpVvM5L0rGdnUQz1U8t8Xij07QJYRd6DDPfKI
A0PggqhT+1YqGIVt3ZYyJk5Fbeq29M0hJOLOethcpWBxdJdQJz6M4/83LUG9XZca
HfCgrm2bBM+Qrg==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:33:21 2026 by rpki-client