This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/c908ca-82c3-46c3-8b29-34d0c0e4c113/1/r-Zisul_0r2pHzKyzOnnRculhgI.mft
File: r-Zisul_0r2pHzKyzOnnRculhgI.mft (raw, json)
Hash identifier: 7P483XEkqWtTCMHAfsKbQq+KtGR7qfbUZIrYtfcizWE=
Subject key identifier: 2D:55:9B:60:EC:25:96:78:FC:7F:52:19:B1:F9:14:69:DD:4F:74:51
Authority key identifier: AF:E6:62:B2:E9:7F:D2:BD:A9:1F:32:B2:CC:E9:E7:45:CB:A5:86:02
Certificate issuer: /CN=afe662b2e97fd2bda91f32b2cce9e745cba58602
Certificate serial: 019C24737CE25AFB655E3DC14639602AC554
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-Zisul_0r2pHzKyzOnnRculhgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/c908ca-82c3-46c3-8b29-34d0c0e4c113/1/r-Zisul_0r2pHzKyzOnnRculhgI.mft
Manifest number: 01E6
Signing time: Tue 03 Feb 2026 17:01:14 +0000
Manifest this update: Tue 03 Feb 2026 17:01:14 +0000
Manifest next update: Wed 04 Feb 2026 17:01:14 +0000
Files and hashes: 1: r-Zisul_0r2pHzKyzOnnRculhgI.crl (hash: h9nNDyWC4nn2ILBbu2isnV4xi/QLrOypItPjDYjP7FA=)
2: sBjAqPrKhV1Z1WPs7LsZcM8hAlM.roa (hash: FofTnNrc0AeEr8Tl3KCw6xOYYJYEqXcD/ByXgE3T67E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/c908ca-82c3-46c3-8b29-34d0c0e4c113/1/r-Zisul_0r2pHzKyzOnnRculhgI.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/c908ca-82c3-46c3-8b29-34d0c0e4c113/1/r-Zisul_0r2pHzKyzOnnRculhgI.mft
rsync://rpki.ripe.net/repository/DEFAULT/r-Zisul_0r2pHzKyzOnnRculhgI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Feb 2026 15:22:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:24:73:7c:e2:5a:fb:65:5e:3d:c1:46:39:60:2a:c5:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afe662b2e97fd2bda91f32b2cce9e745cba58602
Validity
Not Before: Feb 3 17:01:14 2026 GMT
Not After : Feb 4 17:01:14 2026 GMT
Subject: CN=2d559b60ec259678fc7f5219b1f91469dd4f7451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2c:f7:15:27:74:fc:09:8f:1b:5a:f8:a3:ef:
24:ad:fe:9e:a9:87:1f:5a:31:af:6c:68:a9:cf:78:
70:b9:77:72:01:ce:83:19:e0:3e:6f:e7:e5:10:2b:
53:cf:58:96:f4:65:73:db:af:83:d9:2c:ed:da:8e:
0a:b2:a4:12:44:a7:e2:97:c3:2b:5a:2c:92:5d:11:
69:e7:8b:49:08:5a:1f:71:c3:9d:36:12:e0:9d:47:
74:16:6b:8c:aa:5a:67:ba:98:a0:71:b7:98:51:31:
a6:95:39:c4:ed:72:ab:73:30:ed:05:6e:48:a6:2c:
a5:be:ae:4b:6c:ee:d7:2c:d9:5f:c1:44:53:76:0e:
78:9b:c4:c8:88:9a:9e:5c:a3:79:b5:28:dc:92:14:
0d:90:80:75:a3:90:31:d2:f3:34:10:10:c4:e4:4d:
7f:60:33:ec:b1:ec:c9:63:5b:cb:43:61:e3:48:8f:
8b:89:ed:e9:02:c7:3f:a8:02:71:ec:56:42:b7:d0:
27:64:9c:c0:6f:4d:f0:d5:16:e6:65:04:71:9b:db:
62:5b:f8:e3:3f:ae:98:2d:94:4c:d6:6b:8c:02:38:
16:50:aa:cc:ef:c9:96:bc:53:7c:b5:4a:e4:46:96:
a5:e9:5a:75:bb:d6:6e:71:d3:b4:b3:36:a3:50:e6:
50:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:55:9B:60:EC:25:96:78:FC:7F:52:19:B1:F9:14:69:DD:4F:74:51
X509v3 Authority Key Identifier:
keyid:AF:E6:62:B2:E9:7F:D2:BD:A9:1F:32:B2:CC:E9:E7:45:CB:A5:86:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-Zisul_0r2pHzKyzOnnRculhgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c908ca-82c3-46c3-8b29-34d0c0e4c113/1/r-Zisul_0r2pHzKyzOnnRculhgI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c908ca-82c3-46c3-8b29-34d0c0e4c113/1/r-Zisul_0r2pHzKyzOnnRculhgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:d5:01:47:15:ed:71:0e:8c:60:43:1f:98:37:89:c3:44:78:
8c:51:96:4b:7a:c9:f5:b0:3c:5d:82:23:07:c5:0c:09:cd:87:
87:4f:63:d8:fe:67:23:44:61:2a:4e:9c:d9:0b:48:08:76:6c:
9b:3b:36:7f:e6:f6:cc:1e:55:b4:89:ea:ad:ef:0d:28:a0:7e:
e4:08:30:be:be:17:9c:4e:ba:8b:f9:ef:f7:8b:d7:62:02:26:
09:61:b7:24:c9:fa:87:f9:fa:89:76:ec:4e:1b:e3:bd:e4:a4:
f0:54:da:c1:aa:88:96:91:cd:84:d9:ee:dd:c3:04:40:78:54:
85:6d:8a:bb:65:1b:14:99:e9:ab:31:93:54:6c:9f:11:6e:a6:
c5:99:7e:eb:f8:56:2d:7b:a2:84:aa:3a:46:03:21:53:ea:6c:
8b:ed:ea:a1:f4:46:10:5f:eb:46:80:60:37:80:04:83:da:06:
32:3d:5f:e9:7b:7e:91:9b:2b:27:03:90:db:bf:6d:e5:c4:d3:
30:71:d6:65:f6:06:31:cf:56:1a:cf:d3:f7:7b:2d:c9:a7:83:
f8:54:c4:38:2a:46:09:31:90:14:90:0e:62:bc:29:2d:00:c5:
a2:8c:22:a4:4c:9c:c1:54:8c:db:5d:de:69:e6:56:c2:a1:b7:
09:3e:22:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 3 21:58:34 2026 by rpki-client