This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/ba8790-ef43-40ea-becf-bb0e0cc26c49/1/zmVHG5SjJgwtn2WNztL4f0C1Qks.mft
File: zmVHG5SjJgwtn2WNztL4f0C1Qks.mft (raw, json)
Hash identifier: V9/nnMHtLWNJltACqy18OjioJItRE9ci/e7MKrhArc4=
Subject key identifier: 0E:93:9E:15:3E:DB:CC:34:0F:50:F9:9C:5E:C5:9A:67:05:84:9A:BA
Authority key identifier: CE:65:47:1B:94:A3:26:0C:2D:9F:65:8D:CE:D2:F8:7F:40:B5:42:4B
Certificate issuer: /CN=ce65471b94a3260c2d9f658dced2f87f40b5424b
Certificate serial: 019C446C2ACE97EEBCBFB11A4A505C521B06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zmVHG5SjJgwtn2WNztL4f0C1Qks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/ba8790-ef43-40ea-becf-bb0e0cc26c49/1/zmVHG5SjJgwtn2WNztL4f0C1Qks.mft
Manifest number: 1811
Signing time: Mon 09 Feb 2026 22:01:05 +0000
Manifest this update: Mon 09 Feb 2026 22:01:05 +0000
Manifest next update: Tue 10 Feb 2026 22:01:05 +0000
Files and hashes: 1: CXkKc_BGGlQDVJndPZpJEIKApLM.roa (hash: lB6WL5NHR05zZ3JJcK7U/WiKpx7SIVQpEQDB/XRsPv0=)
2: zmVHG5SjJgwtn2WNztL4f0C1Qks.crl (hash: 48EuOaZy/f1itDkkC2VGTrG75fnYILo4Ce8moaoEzmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/ba8790-ef43-40ea-becf-bb0e0cc26c49/1/zmVHG5SjJgwtn2WNztL4f0C1Qks.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/ba8790-ef43-40ea-becf-bb0e0cc26c49/1/zmVHG5SjJgwtn2WNztL4f0C1Qks.mft
rsync://rpki.ripe.net/repository/DEFAULT/zmVHG5SjJgwtn2WNztL4f0C1Qks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:44:6c:2a:ce:97:ee:bc:bf:b1:1a:4a:50:5c:52:1b:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce65471b94a3260c2d9f658dced2f87f40b5424b
Validity
Not Before: Feb 9 22:01:05 2026 GMT
Not After : Feb 10 22:01:05 2026 GMT
Subject: CN=0e939e153edbcc340f50f99c5ec59a6705849aba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:99:6d:28:ca:cb:69:5a:a4:ce:93:44:85:18:
fb:9c:9d:2d:ca:cf:4f:46:d2:49:f2:f7:9a:df:bc:
ff:64:27:56:7f:55:af:20:a4:bf:4e:f4:a6:9d:a2:
21:6b:2b:af:7c:f8:c6:87:d2:1d:7e:06:40:ff:8a:
ed:f0:8e:39:1f:c5:c3:25:a5:e8:77:00:ad:0e:d5:
c5:be:4c:e1:7b:05:6c:db:80:8b:6a:e2:46:f6:47:
08:cc:1e:38:5c:1d:ab:d1:3b:5e:96:fb:88:62:33:
51:8f:0d:6c:bf:f0:53:65:50:8e:6a:4c:b9:56:47:
c9:d9:27:e2:fb:04:6f:48:2e:bd:41:36:60:f8:38:
0f:c2:98:69:64:2e:dc:54:cd:56:fb:db:a5:c4:52:
4c:7d:53:e3:3b:e0:89:da:9d:2d:7c:e5:56:95:3d:
11:6a:c1:25:ca:02:9c:82:e3:5f:32:14:33:6e:ee:
1a:fe:fd:b7:00:7f:ed:2c:66:9c:24:0b:3c:60:a6:
7a:e2:37:45:fa:ce:a3:6d:41:8c:3f:01:6c:e8:9d:
62:de:e8:20:95:11:5c:d9:dc:bc:a1:eb:54:6c:d1:
84:76:b9:33:85:5b:71:83:a5:ce:26:65:a8:d9:a2:
42:65:eb:b9:80:af:1f:85:6b:2d:e1:f3:e9:5f:ff:
76:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:93:9E:15:3E:DB:CC:34:0F:50:F9:9C:5E:C5:9A:67:05:84:9A:BA
X509v3 Authority Key Identifier:
keyid:CE:65:47:1B:94:A3:26:0C:2D:9F:65:8D:CE:D2:F8:7F:40:B5:42:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zmVHG5SjJgwtn2WNztL4f0C1Qks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/ba8790-ef43-40ea-becf-bb0e0cc26c49/1/zmVHG5SjJgwtn2WNztL4f0C1Qks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/ba8790-ef43-40ea-becf-bb0e0cc26c49/1/zmVHG5SjJgwtn2WNztL4f0C1Qks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:a0:9b:d7:7c:3f:89:b4:3c:f7:ce:60:ff:cc:63:99:70:1e:
d7:e1:e2:f6:7d:6a:d6:39:04:cf:0d:2e:33:50:db:7a:8e:5f:
f9:f7:f2:ea:1c:30:cf:d9:2e:99:21:b9:22:ba:ef:c2:79:38:
15:7b:ba:72:23:ee:a5:fa:bd:7f:fa:aa:a1:cd:a2:94:33:c4:
9d:2e:ed:f6:f7:32:2a:d6:06:94:60:4e:a1:e8:bf:9d:01:9b:
3e:15:64:b2:80:a2:a4:7b:75:ff:c9:60:9e:f5:2f:90:0f:f7:
03:2f:26:f8:df:33:c9:1b:7a:52:c1:00:49:41:9d:c9:2c:6c:
70:9c:6e:9f:21:a3:37:ad:40:30:66:b6:c2:c4:76:c6:17:7c:
72:77:b6:8c:70:5a:6a:06:5e:40:10:c1:b1:05:56:9e:d1:08:
9c:97:fe:0f:6f:e2:37:69:a0:2e:9d:0a:b5:c1:7a:8f:9b:b3:
46:5b:b9:bc:f8:e4:9a:46:f7:5e:62:a9:77:38:d8:05:41:52:
36:1e:37:26:d9:a4:03:e6:c6:46:9e:db:58:89:9e:64:78:ea:
e3:fd:c1:2b:25:6f:a1:84:30:6a:03:5c:0c:5d:99:12:ae:fc:
e4:3e:37:3b:69:42:9f:5f:ee:22:f6:f4:be:d7:b3:bb:e9:3c:
49:61:b5:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxEbCrOl+68v7EaSlBcUhsGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlNjU0NzFiOTRhMzI2MGMyZDlmNjU4ZGNlZDJmODdmNDBi
NTQyNGIwHhcNMjYwMjA5MjIwMTA1WhcNMjYwMjEwMjIwMTA1WjAzMTEwLwYDVQQD
EygwZTkzOWUxNTNlZGJjYzM0MGY1MGY5OWM1ZWM1OWE2NzA1ODQ5YWJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5ltKMrLaVqkzpNEhRj7nJ0tys9P
RtJJ8vea37z/ZCdWf1WvIKS/TvSmnaIhayuvfPjGh9IdfgZA/4rt8I45H8XDJaXo
dwCtDtXFvkzhewVs24CLauJG9kcIzB44XB2r0TtelvuIYjNRjw1sv/BTZVCOaky5
VkfJ2Sfi+wRvSC69QTZg+DgPwphpZC7cVM1W+9ulxFJMfVPjO+CJ2p0tfOVWlT0R
asElygKcguNfMhQzbu4a/v23AH/tLGacJAs8YKZ64jdF+s6jbUGMPwFs6J1i3ugg
lRFc2dy8oetUbNGEdrkzhVtxg6XOJmWo2aJCZeu5gK8fhWst4fPpX/92TwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA6TnhU+28w0D1D5nF7FmmcFhJq6MB8GA1UdIwQY
MBaAFM5lRxuUoyYMLZ9ljc7S+H9AtUJLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvem1WSEc1U2pKZ3d0bjJXTnp0TDRmMEMxUWtzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9iYTg3OTAtZWY0My00MGVhLWJlY2Yt
YmIwZTBjYzI2YzQ5LzEvem1WSEc1U2pKZ3d0bjJXTnp0TDRmMEMxUWtzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS9iYTg3OTAtZWY0My00MGVhLWJlY2YtYmIwZTBjYzI2YzQ5
LzEvem1WSEc1U2pKZ3d0bjJXTnp0TDRmMEMxUWtzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcKCb13w/
ibQ8985g/8xjmXAe1+Hi9n1q1jkEzw0uM1Dbeo5f+ffy6hwwz9kumSG5Irrvwnk4
FXu6ciPupfq9f/qqoc2ilDPEnS7t9vcyKtYGlGBOoei/nQGbPhVksoCipHt1/8lg
nvUvkA/3Ay8m+N8zyRt6UsEASUGdySxscJxunyGjN61AMGa2wsR2xhd8cne2jHBa
agZeQBDBsQVWntEInJf+D2/iN2mgLp0KtcF6j5uzRlu5vPjkmkb3XmKpdzjYBUFS
Nh43JtmkA+bGRp7bWImeZHjq4/3BKyVvoYQwagNcDF2ZEq785D43O2lCn1/uIvb0
vtezu+k8SWG12A==
-----END CERTIFICATE-----
Generated at Tue Feb 10 00:16:06 2026 by rpki-client