This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/976925-2551-4b2b-900a-e111f322636a/1/z8TCrjOIRe_ngC3uwjTq4_e5XzE.mft
File: z8TCrjOIRe_ngC3uwjTq4_e5XzE.mft (raw, json)
Hash identifier: hQCRDvfpVrMjeHjFLaraKSbGm45J0rkyp0pOI2hSkcU=
Subject key identifier: 46:93:22:14:A3:B4:FE:3A:C2:F5:25:25:FD:60:13:C9:B7:A3:3D:F6
Authority key identifier: CF:C4:C2:AE:33:88:45:EF:E7:80:2D:EE:C2:34:EA:E3:F7:B9:5F:31
Certificate issuer: /CN=cfc4c2ae338845efe7802deec234eae3f7b95f31
Certificate serial: 019C40FCE8288E5334094D1560F8B5F9EFFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8TCrjOIRe_ngC3uwjTq4_e5XzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/976925-2551-4b2b-900a-e111f322636a/1/z8TCrjOIRe_ngC3uwjTq4_e5XzE.mft
Manifest number: 0207
Signing time: Mon 09 Feb 2026 06:00:42 +0000
Manifest this update: Mon 09 Feb 2026 06:00:42 +0000
Manifest next update: Tue 10 Feb 2026 06:00:42 +0000
Files and hashes: 1: 5Po2qtadpqTNf7p3MMLaT46C8vE.roa (hash: nFjym/eYekZGGRObI9fvHB7nvqlWQEguTM24IpDntwA=)
2: z8TCrjOIRe_ngC3uwjTq4_e5XzE.crl (hash: 6Qkk6ieQxKkxmYhs4zDjtc0U2UlpdHulPNV8kGeJSsc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/976925-2551-4b2b-900a-e111f322636a/1/z8TCrjOIRe_ngC3uwjTq4_e5XzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/976925-2551-4b2b-900a-e111f322636a/1/z8TCrjOIRe_ngC3uwjTq4_e5XzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/z8TCrjOIRe_ngC3uwjTq4_e5XzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 06:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:40:fc:e8:28:8e:53:34:09:4d:15:60:f8:b5:f9:ef:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfc4c2ae338845efe7802deec234eae3f7b95f31
Validity
Not Before: Feb 9 06:00:42 2026 GMT
Not After : Feb 10 06:00:42 2026 GMT
Subject: CN=46932214a3b4fe3ac2f52525fd6013c9b7a33df6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c6:93:0b:81:f2:f3:3e:22:a5:3c:64:38:55:
3d:2c:38:a7:d2:7a:5f:e1:09:16:f9:6a:7c:cf:bc:
02:98:49:38:b0:5a:72:66:1b:7c:1e:64:26:a4:b0:
0c:22:4b:43:d5:ef:57:48:2b:9e:55:04:a6:38:3e:
d6:84:b4:98:39:eb:e1:44:cd:39:e8:44:48:5e:71:
33:56:bc:79:11:de:87:dd:76:7c:37:0f:25:09:76:
10:db:0b:c7:1f:bf:d0:50:48:01:db:b8:6d:49:13:
bd:30:41:b1:d5:44:ec:22:6c:3d:0b:c6:39:e0:c2:
07:f3:74:ac:f1:7a:59:3e:22:23:7d:aa:1f:94:ca:
70:56:7b:dd:d7:02:75:eb:2d:e7:c3:6b:61:69:32:
8d:49:91:6e:62:7e:ad:6c:60:d7:ec:3c:3f:7b:7e:
0b:99:0e:5e:ea:43:8e:1f:1a:3b:0f:a1:b1:02:7b:
4b:d1:08:5f:dc:73:f1:38:5c:e5:cb:48:ad:b8:b7:
ef:ec:3f:56:c0:df:57:9c:71:23:91:c4:19:be:11:
d9:20:74:a7:dc:bb:b2:95:eb:e4:82:3c:0e:de:e2:
93:5c:28:f8:0f:30:e3:28:5f:47:cd:ea:14:e9:0d:
a7:7a:4b:2c:6f:eb:f0:01:44:66:9f:39:fb:83:c7:
09:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:93:22:14:A3:B4:FE:3A:C2:F5:25:25:FD:60:13:C9:B7:A3:3D:F6
X509v3 Authority Key Identifier:
keyid:CF:C4:C2:AE:33:88:45:EF:E7:80:2D:EE:C2:34:EA:E3:F7:B9:5F:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8TCrjOIRe_ngC3uwjTq4_e5XzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/976925-2551-4b2b-900a-e111f322636a/1/z8TCrjOIRe_ngC3uwjTq4_e5XzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/976925-2551-4b2b-900a-e111f322636a/1/z8TCrjOIRe_ngC3uwjTq4_e5XzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:71:8c:c1:55:da:3c:b1:2b:c2:69:cd:a0:42:1e:5c:96:76:
d2:2a:2c:cb:57:80:4f:d9:be:9f:04:20:66:3e:dd:cc:d3:3c:
b0:6e:45:f9:5b:16:15:26:d5:c2:40:7d:4d:46:e5:a0:dd:d4:
56:b8:e7:12:0b:99:40:be:4a:b9:83:7a:bf:ea:47:ba:d7:78:
bf:d4:b3:b1:6d:28:25:07:62:b6:a6:da:c4:6e:77:0e:4d:1a:
f2:08:ff:ef:9e:6e:21:e9:e5:c4:41:76:5c:78:88:ba:81:d6:
2a:a1:ba:67:e2:bf:0c:b8:08:ea:37:e4:41:ab:9f:02:f7:63:
c4:84:3e:fe:a4:ae:49:aa:de:02:60:5f:8f:47:e0:23:eb:64:
33:ea:0a:61:04:4c:4a:04:dc:09:4e:27:41:d4:ae:02:b0:d9:
1d:a6:1b:04:35:77:81:52:33:87:86:d6:1a:62:0c:6d:f4:05:
49:70:93:4b:68:03:2b:3f:1f:b2:9d:28:d9:7d:5e:b7:b8:da:
e1:e2:77:10:f9:b3:b0:d5:16:e9:30:68:04:9f:d7:3d:02:1d:
02:82:3d:43:c8:94:7d:fb:fb:e0:78:dd:ab:c9:f8:f8:99:bc:
f3:36:5a:98:9b:94:bd:3b:97:b0:25:af:4f:b6:97:34:6d:0d:
6c:78:22:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:00:32 2026 by rpki-client