This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/428237-efd7-4726-90ca-f8f492af480e/1/Rz9JhZJFeFnyb7WmELe1HvUkE_M.mft
File: Rz9JhZJFeFnyb7WmELe1HvUkE_M.mft (raw, json)
Hash identifier: 93rIiwmzx0Ab/sscZ1s09DEJsuxdvj3sU4dXj0s8UVc=
Subject key identifier: 96:5C:C8:67:68:E2:5B:44:E5:7B:29:61:F9:B5:77:B6:CA:3D:81:E9
Authority key identifier: 47:3F:49:85:92:45:78:59:F2:6F:B5:A6:10:B7:B5:1E:F5:24:13:F3
Certificate issuer: /CN=473f498592457859f26fb5a610b7b51ef52413f3
Certificate serial: 019C4210027B70C4CB4E8818721E25CA98DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rz9JhZJFeFnyb7WmELe1HvUkE_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/428237-efd7-4726-90ca-f8f492af480e/1/Rz9JhZJFeFnyb7WmELe1HvUkE_M.mft
Manifest number: 0983
Signing time: Mon 09 Feb 2026 11:01:11 +0000
Manifest this update: Mon 09 Feb 2026 11:01:11 +0000
Manifest next update: Tue 10 Feb 2026 11:01:11 +0000
Files and hashes: 1: Rz9JhZJFeFnyb7WmELe1HvUkE_M.crl (hash: OU1QCm7Pv6ciN/Jzj3zF6uh/eiLoT4OORwaWgBozyBc=)
2: hSwUOwAMED0n18PsqXIxOxQYAlQ.roa (hash: DbjICHwW8+pnzPKc7pAGSBb3/bjUMmNtreKRXOAvuXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/428237-efd7-4726-90ca-f8f492af480e/1/Rz9JhZJFeFnyb7WmELe1HvUkE_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/428237-efd7-4726-90ca-f8f492af480e/1/Rz9JhZJFeFnyb7WmELe1HvUkE_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rz9JhZJFeFnyb7WmELe1HvUkE_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:10:02:7b:70:c4:cb:4e:88:18:72:1e:25:ca:98:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473f498592457859f26fb5a610b7b51ef52413f3
Validity
Not Before: Feb 9 11:01:11 2026 GMT
Not After : Feb 10 11:01:11 2026 GMT
Subject: CN=965cc86768e25b44e57b2961f9b577b6ca3d81e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:96:84:f3:e7:e2:28:41:ff:70:86:aa:de:a7:
3d:81:41:ac:39:ca:48:8c:ce:17:3c:3c:62:13:30:
2a:39:47:a5:f8:11:2c:0d:05:3e:85:76:16:79:bd:
6b:75:66:58:f4:99:c9:64:7d:4b:58:be:b5:a7:a0:
9d:ec:e5:f3:69:98:63:85:12:bc:a1:a4:1a:fa:6d:
9b:0c:99:19:7e:ab:60:7d:2e:b8:b4:33:36:80:a2:
09:02:85:70:01:98:b2:d6:c0:34:e4:a3:03:8f:94:
97:57:3b:17:d5:be:f5:b5:be:b7:a7:3a:29:82:80:
1a:67:72:58:c7:a2:5b:fb:17:17:cb:83:87:1e:fc:
68:2a:c0:1d:91:e4:31:4c:12:8d:13:86:22:f8:3b:
3e:66:9b:72:7b:0d:f3:86:43:49:3c:55:e7:3b:a1:
9f:e0:a3:f8:72:e2:f2:3a:7d:4f:56:64:3c:0a:8f:
d7:ea:cf:3e:d2:47:6a:78:8c:c8:cc:e0:01:90:69:
8e:ef:3d:33:95:fa:12:c7:a2:91:f6:e1:ce:8e:84:
10:bb:9a:2d:9d:43:25:ec:1b:bf:23:40:a8:c5:d3:
ad:57:c4:0b:b7:ff:14:f3:8b:e6:23:60:5d:3e:66:
df:76:89:02:5e:89:8c:f5:c3:ff:db:3b:93:1b:39:
1b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:5C:C8:67:68:E2:5B:44:E5:7B:29:61:F9:B5:77:B6:CA:3D:81:E9
X509v3 Authority Key Identifier:
keyid:47:3F:49:85:92:45:78:59:F2:6F:B5:A6:10:B7:B5:1E:F5:24:13:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rz9JhZJFeFnyb7WmELe1HvUkE_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/428237-efd7-4726-90ca-f8f492af480e/1/Rz9JhZJFeFnyb7WmELe1HvUkE_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/428237-efd7-4726-90ca-f8f492af480e/1/Rz9JhZJFeFnyb7WmELe1HvUkE_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:40:be:2d:40:00:62:69:4a:b1:7e:2b:44:a9:82:ae:9d:d8:
69:dc:20:af:6c:d5:96:af:c7:55:4b:7c:00:4b:94:43:69:4c:
64:a5:7c:2a:43:58:29:09:87:c1:e7:28:1f:64:c3:9f:ab:13:
9b:e7:df:ac:2b:6d:c9:3a:df:74:98:e7:26:43:5c:e7:f0:c4:
a7:92:d0:4b:01:9e:8c:b5:58:f2:c6:a0:10:a8:2b:b5:7b:20:
66:7e:69:1a:16:70:f2:f6:24:85:3a:2b:44:df:44:33:8e:d1:
dd:0e:a3:6b:8a:d1:be:fc:70:70:bf:22:e9:99:06:54:69:38:
04:dc:ae:b9:c7:14:bd:c8:8c:7f:b4:e2:a5:a0:d7:e4:39:ed:
98:2e:6e:32:e3:7c:99:94:09:b4:5b:a1:b5:ed:bf:a4:81:58:
b0:24:3b:be:e4:4a:82:1c:e7:a8:e7:d4:d6:79:94:3e:ea:7d:
ff:fd:bc:c8:bc:52:dd:8b:ff:d2:8d:9e:0c:e9:7e:1d:41:6c:
1a:ff:eb:94:e8:6f:74:e7:64:ae:19:51:2f:7d:cf:aa:ed:40:
76:d9:aa:f6:af:15:36:5d:8f:20:ed:ef:ad:57:a5:b3:fb:e0:
b6:b9:4a:19:2d:cd:14:71:76:ec:71:51:d1:6f:2b:bd:4b:2c:
9a:c3:70:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:48:03 2026 by rpki-client