This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/5ce03b-cd2c-441a-bcec-e12d16f44153/1/zn_f9IC7kN2LJtKCMJrxYEVeyws.mft
File: zn_f9IC7kN2LJtKCMJrxYEVeyws.mft (raw, json)
Hash identifier: t6C7hDMDpzpUzgc7GBYbo18xtokOa/3VuhQlbVLvuTQ=
Subject key identifier: 23:24:D0:DE:C5:D3:95:E1:1B:14:F6:96:1C:F7:E6:9C:94:BA:66:05
Authority key identifier: CE:7F:DF:F4:80:BB:90:DD:8B:26:D2:82:30:9A:F1:60:45:5E:CB:0B
Certificate issuer: /CN=ce7fdff480bb90dd8b26d282309af160455ecb0b
Certificate serial: 019C432213BAC79D29D137B5AAE5876CEB18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zn_f9IC7kN2LJtKCMJrxYEVeyws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/5ce03b-cd2c-441a-bcec-e12d16f44153/1/zn_f9IC7kN2LJtKCMJrxYEVeyws.mft
Manifest number: 0320
Signing time: Mon 09 Feb 2026 16:00:32 +0000
Manifest this update: Mon 09 Feb 2026 16:00:32 +0000
Manifest next update: Tue 10 Feb 2026 16:00:32 +0000
Files and hashes: 1: sOZAQKDJ6_4Z9N3yUIJGTBa92hI.roa (hash: TYha/rKs1ePCSrjre9LK7iVoQd2uvPGLNTbl1Ahn9QU=)
2: zn_f9IC7kN2LJtKCMJrxYEVeyws.crl (hash: E9lgwoRUNpZBOARLQPypCH9CrHhZ1Mq2iyC4rKZfQR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/5ce03b-cd2c-441a-bcec-e12d16f44153/1/zn_f9IC7kN2LJtKCMJrxYEVeyws.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/5ce03b-cd2c-441a-bcec-e12d16f44153/1/zn_f9IC7kN2LJtKCMJrxYEVeyws.mft
rsync://rpki.ripe.net/repository/DEFAULT/zn_f9IC7kN2LJtKCMJrxYEVeyws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:22:13:ba:c7:9d:29:d1:37:b5:aa:e5:87:6c:eb:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce7fdff480bb90dd8b26d282309af160455ecb0b
Validity
Not Before: Feb 9 16:00:32 2026 GMT
Not After : Feb 10 16:00:32 2026 GMT
Subject: CN=2324d0dec5d395e11b14f6961cf7e69c94ba6605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6e:7b:3b:78:77:5e:54:93:cf:96:8c:95:5e:
21:c3:56:ec:02:bd:15:d9:91:1a:6c:18:26:09:1d:
30:96:9a:ee:75:1c:6c:51:1e:4d:b7:74:ec:b9:6d:
c7:d9:6c:32:59:47:0a:0f:b9:91:e9:cb:72:84:68:
1e:69:af:5d:06:28:70:49:e9:e4:27:92:8f:e4:a9:
34:4e:9d:27:84:62:fb:af:01:79:ba:d3:9d:cf:ce:
5b:05:77:ea:b5:eb:df:c2:29:0f:2d:6d:a9:8e:85:
b1:ea:50:31:ac:8f:b1:2d:bf:24:46:88:9b:9e:f1:
5d:a8:ce:2a:57:41:0f:22:ed:cc:6f:1b:a7:1a:26:
65:1f:9f:bc:c6:68:5e:86:7e:07:47:5e:31:d6:11:
3e:8b:c0:52:4f:7f:68:f3:73:cd:e9:e8:c5:d6:14:
38:74:34:37:d4:c1:d5:eb:41:eb:de:5a:48:d7:be:
3b:99:bd:44:4c:a6:fa:e2:71:75:4c:b5:18:a4:83:
3f:db:00:b2:f1:25:ec:0c:2b:2f:bb:7d:5f:5f:5d:
69:8b:43:ea:94:65:d9:c5:2b:60:2c:49:ef:6b:44:
bc:f5:b6:a7:36:9c:ff:b2:85:0c:c9:86:aa:8c:32:
32:24:84:86:97:da:84:26:1b:30:80:dc:9b:f7:74:
b6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:24:D0:DE:C5:D3:95:E1:1B:14:F6:96:1C:F7:E6:9C:94:BA:66:05
X509v3 Authority Key Identifier:
keyid:CE:7F:DF:F4:80:BB:90:DD:8B:26:D2:82:30:9A:F1:60:45:5E:CB:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zn_f9IC7kN2LJtKCMJrxYEVeyws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/5ce03b-cd2c-441a-bcec-e12d16f44153/1/zn_f9IC7kN2LJtKCMJrxYEVeyws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/5ce03b-cd2c-441a-bcec-e12d16f44153/1/zn_f9IC7kN2LJtKCMJrxYEVeyws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:3c:1e:fd:fd:47:2e:f5:5e:31:5a:47:13:c4:ac:35:75:96:
cb:ba:1d:76:ee:8e:bb:8d:4f:e6:e4:90:fe:8c:03:bc:95:f3:
c9:2e:36:74:da:3c:51:af:37:a3:ed:7f:9a:df:bf:29:9d:e1:
c1:49:0f:d2:3e:09:09:30:64:de:79:76:c2:8f:96:f3:3c:0b:
2b:71:7e:34:cd:f7:ca:76:3a:c3:c3:60:04:d5:80:a2:61:c5:
9a:eb:ab:c8:a4:ba:e7:60:af:c8:3d:20:25:8f:9b:9c:7d:a9:
9b:4f:7d:1f:02:76:56:8b:3f:b5:ab:68:91:54:b2:15:93:55:
fa:8f:ee:97:d5:1e:c1:81:b3:7f:9f:29:cf:10:bd:45:d2:de:
60:11:ae:4c:67:7c:6a:08:0e:ff:9f:a5:c5:ba:f6:2c:c9:f6:
d9:a4:74:80:20:ab:ea:0b:05:71:8c:58:4e:9f:4d:21:64:16:
cd:47:a0:49:7c:c4:d5:e1:6a:dc:af:4a:a8:2a:63:76:c3:33:
27:8b:88:32:18:60:af:10:4a:77:ec:7c:80:a9:ad:4f:d5:91:
ed:7a:e2:68:d5:19:8d:29:c3:22:d0:89:33:e7:f5:23:cd:e2:
20:19:98:aa:bd:2e:04:32:27:6d:89:76:bc:41:28:e9:99:c7:
45:62:72:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:06:26 2026 by rpki-client