This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/31f25f-eed5-47ad-92d4-e27360796e18/1/zltHouqq5MEDTJEAPnz-PTjR5VU.mft
File: zltHouqq5MEDTJEAPnz-PTjR5VU.mft (raw, json)
Hash identifier: Wb32166z1tAscZQTh7/wujGeEO6Cob85huIu5TUm0VE=
Subject key identifier: 61:FE:D7:35:D0:8C:28:97:4B:B6:16:28:00:32:6E:42:D4:02:2E:70
Authority key identifier: CE:5B:47:A2:EA:AA:E4:C1:03:4C:91:00:3E:7C:FE:3D:38:D1:E5:55
Certificate issuer: /CN=ce5b47a2eaaae4c1034c91003e7cfe3d38d1e555
Certificate serial: 019C43C6B6B112991D64D1396B9913691F0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zltHouqq5MEDTJEAPnz-PTjR5VU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/31f25f-eed5-47ad-92d4-e27360796e18/1/zltHouqq5MEDTJEAPnz-PTjR5VU.mft
Manifest number: 094F
Signing time: Mon 09 Feb 2026 19:00:22 +0000
Manifest this update: Mon 09 Feb 2026 19:00:22 +0000
Manifest next update: Tue 10 Feb 2026 19:00:22 +0000
Files and hashes: 1: zltHouqq5MEDTJEAPnz-PTjR5VU.crl (hash: MLsGVqIL2sxzo8i5gBnUk7yI3I2hvZbG/5JHNy1O+uk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/31f25f-eed5-47ad-92d4-e27360796e18/1/zltHouqq5MEDTJEAPnz-PTjR5VU.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/31f25f-eed5-47ad-92d4-e27360796e18/1/zltHouqq5MEDTJEAPnz-PTjR5VU.mft
rsync://rpki.ripe.net/repository/DEFAULT/zltHouqq5MEDTJEAPnz-PTjR5VU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 19:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:c6:b6:b1:12:99:1d:64:d1:39:6b:99:13:69:1f:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce5b47a2eaaae4c1034c91003e7cfe3d38d1e555
Validity
Not Before: Feb 9 19:00:22 2026 GMT
Not After : Feb 10 19:00:22 2026 GMT
Subject: CN=61fed735d08c28974bb6162800326e42d4022e70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9c:12:d0:40:9c:3a:69:d0:6f:6e:52:7d:b6:
a2:70:49:c7:11:6e:b5:84:cb:f4:8b:a2:7c:00:c2:
ae:b7:66:af:29:66:d5:5f:79:f6:8b:33:16:4b:bb:
dd:ef:bb:1d:eb:28:5a:95:19:35:19:ae:c5:4c:d3:
06:10:20:81:20:5f:9d:d2:1a:de:36:4d:50:fc:81:
b8:55:5a:a1:3b:ea:13:11:14:e0:09:1e:4e:22:da:
27:96:2c:40:ce:1d:31:08:f3:83:88:64:3e:51:1c:
ce:31:c8:05:8c:6a:93:6b:6e:02:b8:56:57:f1:dc:
90:7a:6a:13:ec:a6:a6:89:8c:bb:f4:6e:61:df:19:
f2:c4:2f:18:5d:5c:89:69:b9:b9:ee:c8:e5:82:90:
51:b0:11:3a:70:42:b9:94:ba:4c:fd:21:3a:4e:ee:
34:10:b8:81:d0:9b:60:b2:b5:fe:7b:4a:11:0b:92:
47:a6:fd:0a:14:d9:31:e7:86:e5:8c:d4:17:fa:a1:
c6:1f:62:de:05:df:ad:72:ce:31:ea:83:eb:7c:8d:
df:7c:a5:98:71:67:e5:0d:e6:96:df:c6:f9:14:66:
28:a8:2d:03:14:2e:3d:60:51:ce:e5:88:e1:ae:4d:
68:8a:35:7e:80:c7:8d:6f:68:25:50:47:0d:f7:9a:
61:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:FE:D7:35:D0:8C:28:97:4B:B6:16:28:00:32:6E:42:D4:02:2E:70
X509v3 Authority Key Identifier:
keyid:CE:5B:47:A2:EA:AA:E4:C1:03:4C:91:00:3E:7C:FE:3D:38:D1:E5:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zltHouqq5MEDTJEAPnz-PTjR5VU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/31f25f-eed5-47ad-92d4-e27360796e18/1/zltHouqq5MEDTJEAPnz-PTjR5VU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/31f25f-eed5-47ad-92d4-e27360796e18/1/zltHouqq5MEDTJEAPnz-PTjR5VU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:ba:14:46:a0:17:a2:4c:7e:2e:d0:bb:78:81:f4:31:2c:b6:
dc:a8:5a:02:8e:ce:fe:59:a6:ec:4a:44:06:93:f2:3a:00:5a:
9a:16:25:eb:16:1a:c1:e2:fb:79:66:e4:25:42:e2:77:e8:c4:
99:cc:05:b0:e2:ed:07:f3:55:c0:ac:7b:12:af:89:e3:e7:9e:
51:a8:68:be:c1:5d:89:24:91:26:e7:11:3e:9a:e1:ce:3e:b5:
2f:bb:3e:a2:ef:ec:46:04:86:d0:ea:61:5c:cd:ce:e7:58:98:
ae:3e:25:60:23:78:a0:a9:34:4c:4d:cc:c4:da:30:7b:fa:3a:
a6:94:c0:68:8c:66:ce:35:23:a8:72:67:95:d8:7d:1e:28:ad:
cb:dd:0a:be:54:57:c8:56:49:b4:11:27:a9:92:43:84:9a:08:
e9:97:c4:33:e1:8d:29:f0:d8:b1:f6:a7:f5:bf:eb:84:02:09:
c6:a3:a6:a2:40:b7:85:3d:d7:cc:54:63:4c:15:0d:6f:59:31:
da:f1:6f:6d:f5:53:ad:1e:6d:2e:3c:e4:00:55:3a:c1:3e:11:
14:fa:de:be:28:53:37:5e:13:77:00:04:02:fb:de:e0:f0:6e:
7c:30:a6:13:61:ea:4c:94:8b:83:1b:8d:33:83:f5:a0:45:84:
62:fc:53:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:47:48 2026 by rpki-client