This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft
File: Z84XnL4T3bFAEphaBnEA75ilVgE.mft (raw, json)
Hash identifier: elhMDO2WIV3LB5hZe6AsEW2N+W2gRms/oZg3mL7dEG4=
Subject key identifier: 1F:43:4A:83:EE:3E:43:64:95:FA:33:EF:A4:83:2E:95:8F:00:BB:F4
Authority key identifier: 67:CE:17:9C:BE:13:DD:B1:40:12:98:5A:06:71:00:EF:98:A5:56:01
Certificate issuer: /CN=67ce179cbe13ddb14012985a067100ef98a55601
Certificate serial: 019C1BA6A177B4FEFB1A1CDA68B7842B9F16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft
Manifest number: 0CBE
Signing time: Mon 02 Feb 2026 00:00:30 +0000
Manifest this update: Mon 02 Feb 2026 00:00:30 +0000
Manifest next update: Tue 03 Feb 2026 00:00:30 +0000
Files and hashes: 1: 8r1K1OM5qngui5thmoePxmjOGcI.roa (hash: Lc08lhuuRKkKxvYSfc9k1w2HHAp3Uz/xuk8BCj5oIrU=)
2: HMy1wxSppt6a370WgOiNsXQlVPk.roa (hash: nDhnb6wdJq1bcejnMDwW0L0rGJF02QbJ2F6fT5r9zng=)
3: JpNz-5mJsFq7butKO_csWbCEm5Q.roa (hash: VpAczQvbgQ1Ym4VsrRQcCrHDbx+vYYfxzFiOJ1msYps=)
4: KO2DY0u9wdedPHwObsI7cPYbfFQ.roa (hash: chzNX5SpmlEt8RciW6ST6qYzL/lzzcsJcvqyYaAMbaQ=)
5: Z84XnL4T3bFAEphaBnEA75ilVgE.crl (hash: kjg2eSNU5429jkeSaLuxovBsIB4UaPai2/CNUaFMsPE=)
6: ZuS-gRLhfC_n_ype4xj8F1xzPiw.roa (hash: EZUmDI/jcW023J4DXzaS1TmCl7OpJwcwm1bJROBPAP8=)
7: _foadMbZdx4Kyy6kAY35bfy57Ew.asa (hash: f8gD+BKnO4V+AgW6MN335RkWYKE7LS8tKEs9AypX4GM=)
8: aOh1-99JcOZxqAcykG11EP2F9_g.roa (hash: 5HlRoHZPsDB8WS/Sga5nh3qNHpa39AaXfQFzVc0mT+4=)
9: fN_qyC3q0DgZifOUjvgGUIVLuLE.roa (hash: Ghng4SHLOPaXZFJc/gZf2VJ82XHj4yYptmX1zNVV1oI=)
10: mP8zF_bJOTWvXPulXS_oUR4vAd8.roa (hash: 4byK92brafemOMsopEaLGHGlykZBiRbGdrhWO9EemSI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Feb 2026 00:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:1b:a6:a1:77:b4:fe:fb:1a:1c:da:68:b7:84:2b:9f:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67ce179cbe13ddb14012985a067100ef98a55601
Validity
Not Before: Feb 2 00:00:30 2026 GMT
Not After : Feb 3 00:00:30 2026 GMT
Subject: CN=1f434a83ee3e436495fa33efa4832e958f00bbf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:6b:e2:97:a4:17:b7:30:d2:94:5b:a6:99:29:
28:ba:31:1f:cd:ac:ed:f4:2e:33:6d:09:73:a1:0b:
0e:28:27:e0:ea:28:89:55:f1:ae:18:bc:9a:c2:d2:
76:74:80:9f:27:2e:b1:6c:18:76:b1:3d:ee:26:c7:
ab:a7:fd:0b:e0:3b:bd:0a:51:e2:af:57:0a:81:1d:
3f:42:94:b0:05:33:52:b8:99:c7:13:02:be:35:00:
85:f8:d1:44:46:6f:a9:6e:7c:b5:5a:02:fa:97:12:
ef:78:73:9c:d4:e4:fd:e9:c8:f0:a5:f3:b1:ab:e5:
fd:ac:2c:52:88:89:ee:2a:6c:52:55:bd:dc:f1:e7:
c5:b1:06:5d:30:ae:cd:18:dc:7e:45:74:77:9d:76:
f9:18:17:70:12:69:1c:c8:ca:7d:42:0a:b1:ed:56:
87:c6:e6:2f:32:33:10:4e:76:14:3f:6f:ce:a8:77:
60:41:57:1f:c0:bb:43:39:be:4c:94:f3:db:3e:3a:
d1:23:8a:9b:ac:dc:65:40:0e:f6:94:fd:67:ef:c4:
b4:0b:e5:40:91:7d:aa:9f:4a:b8:32:eb:b2:c3:92:
fa:b7:68:f5:fa:c4:dc:21:fe:f4:f6:cd:37:5d:6a:
9f:a4:65:b2:06:55:dc:eb:36:a3:63:22:1f:e2:94:
12:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:43:4A:83:EE:3E:43:64:95:FA:33:EF:A4:83:2E:95:8F:00:BB:F4
X509v3 Authority Key Identifier:
keyid:67:CE:17:9C:BE:13:DD:B1:40:12:98:5A:06:71:00:EF:98:A5:56:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:31:e6:7d:80:c7:c6:60:12:fa:ed:65:70:2f:87:c9:54:c3:
23:19:e3:60:21:3e:b4:1c:69:c7:e5:c2:99:f4:04:f7:a4:a9:
08:8e:ce:8f:18:44:4b:17:45:91:16:4a:e2:f4:db:64:ce:8d:
e3:b8:c0:48:ce:16:4a:d7:3c:a7:7f:13:9f:e4:64:94:c9:9f:
fd:ef:2c:eb:dd:7e:48:24:bd:30:38:fe:59:a7:6f:a5:f9:1d:
b0:05:b7:7a:ac:9a:f6:f7:8e:32:3e:7d:0f:c5:a3:69:86:cc:
3f:19:82:87:dc:83:7d:6e:48:64:d6:81:3b:ea:74:59:04:8d:
c8:74:e0:d6:31:b2:8f:4d:80:7b:d4:f4:ea:ef:d6:9b:81:48:
ff:ea:17:b9:85:92:d7:73:b1:f3:c1:8b:51:51:d5:aa:1b:48:
f2:11:fb:2f:c7:86:e6:f9:6f:5f:b3:07:34:54:50:0f:bd:1d:
95:24:0c:49:8d:4c:a7:df:b6:61:66:62:7e:41:f5:65:d8:48:
e1:69:65:18:b9:83:8d:57:85:9b:52:1d:af:f6:2b:eb:e6:32:
5e:f3:e7:67:75:70:4a:0c:69:bb:4a:0b:7c:cd:71:9a:84:f8:
68:27:9c:5f:ce:fd:e0:03:37:4a:53:fb:78:46:08:f0:ca:60:
da:2c:f0:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:30:15 2026 by rpki-client