This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/e54104-00c3-495e-a86c-07f3fbf4d13c/1/zmSRf8O1HbiuDlu806YJTANB6S0.mft
File: zmSRf8O1HbiuDlu806YJTANB6S0.mft (raw, json)
Hash identifier: bTSXtG02MmNXJ8Peh/h4O7bHD/VWb9KARnLut/LyS5g=
Subject key identifier: F5:E1:BB:06:1F:1C:4D:FB:CA:06:54:6C:09:CC:B6:6A:6D:5E:4A:07
Authority key identifier: CE:64:91:7F:C3:B5:1D:B8:AE:0E:5B:BC:D3:A6:09:4C:03:41:E9:2D
Certificate issuer: /CN=ce64917fc3b51db8ae0e5bbcd3a6094c0341e92d
Certificate serial: 019C40FD586B2494A4B6B13AA003C15406DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zmSRf8O1HbiuDlu806YJTANB6S0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/e54104-00c3-495e-a86c-07f3fbf4d13c/1/zmSRf8O1HbiuDlu806YJTANB6S0.mft
Manifest number: 4E
Signing time: Mon 09 Feb 2026 06:01:10 +0000
Manifest this update: Mon 09 Feb 2026 06:01:10 +0000
Manifest next update: Tue 10 Feb 2026 06:01:10 +0000
Files and hashes: 1: OEf2lBJ_RBqJMmsQzdnnofJeh48.roa (hash: abuHlrBHXQkdM8/st+VwX7SzQ7cIYRuXZP6BjEevqBs=)
2: zmSRf8O1HbiuDlu806YJTANB6S0.crl (hash: BZycJN8QQQtzz85eCM+6BPkSADQvu+o8jKPahWgOGiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/e54104-00c3-495e-a86c-07f3fbf4d13c/1/zmSRf8O1HbiuDlu806YJTANB6S0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/e54104-00c3-495e-a86c-07f3fbf4d13c/1/zmSRf8O1HbiuDlu806YJTANB6S0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zmSRf8O1HbiuDlu806YJTANB6S0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 06:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:40:fd:58:6b:24:94:a4:b6:b1:3a:a0:03:c1:54:06:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce64917fc3b51db8ae0e5bbcd3a6094c0341e92d
Validity
Not Before: Feb 9 06:01:10 2026 GMT
Not After : Feb 10 06:01:10 2026 GMT
Subject: CN=f5e1bb061f1c4dfbca06546c09ccb66a6d5e4a07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:1f:93:b7:32:d0:80:c5:ce:27:40:79:22:ef:
77:5b:83:f7:6e:04:f8:24:ba:b0:02:5b:e2:f3:cf:
0f:a1:20:81:0a:ad:75:58:33:ae:c7:27:d5:b5:21:
90:7d:3b:d8:cd:34:ee:5a:7a:5e:3a:0c:34:4f:6c:
d9:08:eb:48:40:42:4b:06:1f:05:8b:8a:0b:eb:d2:
7b:13:96:e1:c6:77:a5:98:01:69:b2:48:ec:f8:98:
cd:e6:30:ef:48:ce:e6:16:8a:eb:d2:79:9a:28:7c:
09:30:d5:96:44:6b:da:81:a1:ad:58:5e:e3:92:c3:
5c:29:20:b0:37:8c:a0:d9:7e:70:b6:9a:9e:11:7f:
cd:81:e8:2f:52:5c:9b:0d:31:dc:17:e0:db:f6:ea:
56:a0:25:93:d8:14:88:5d:0b:96:47:e5:a8:1d:38:
b0:49:fc:63:8d:9d:8b:fd:67:45:7e:e3:42:0d:93:
bb:09:1a:2f:87:e9:77:31:66:b0:78:8d:13:78:d5:
ba:7c:9a:e4:2f:54:1c:4c:ee:56:09:86:c3:eb:d5:
96:98:8b:95:82:39:2b:9e:20:c8:e9:89:42:9c:22:
74:50:5a:5f:3f:48:b7:d2:32:60:70:70:f2:a5:0a:
ca:83:69:a4:6d:22:0e:01:30:85:3a:b6:26:cb:87:
c4:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:E1:BB:06:1F:1C:4D:FB:CA:06:54:6C:09:CC:B6:6A:6D:5E:4A:07
X509v3 Authority Key Identifier:
keyid:CE:64:91:7F:C3:B5:1D:B8:AE:0E:5B:BC:D3:A6:09:4C:03:41:E9:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zmSRf8O1HbiuDlu806YJTANB6S0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e54104-00c3-495e-a86c-07f3fbf4d13c/1/zmSRf8O1HbiuDlu806YJTANB6S0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e54104-00c3-495e-a86c-07f3fbf4d13c/1/zmSRf8O1HbiuDlu806YJTANB6S0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:bc:47:a9:84:0d:4c:62:91:52:55:a4:4a:1b:25:34:e4:59:
c8:40:e2:9c:72:81:5e:f2:b6:d6:01:70:bb:ca:af:cd:04:5c:
d6:99:d1:63:3a:7a:e3:01:8e:44:a8:51:4b:a5:c0:47:cc:f4:
77:fe:5d:b1:63:bb:66:e8:19:65:8e:e1:a3:d8:e9:67:d2:2b:
3b:34:a8:39:18:c6:08:e4:bb:52:33:8b:8a:eb:f0:e8:88:5f:
93:70:8e:dd:49:a6:19:af:c9:02:58:cc:f5:eb:d4:42:b2:97:
ea:4e:a8:3a:11:b3:bf:da:ae:1b:2a:1a:1b:c1:a6:7b:c8:3c:
09:a5:aa:fe:14:0d:2b:0b:3b:03:84:ee:50:49:14:e0:ff:92:
e3:57:a3:65:0b:20:3c:32:51:14:4c:cb:1e:94:78:ca:39:1e:
af:f9:cc:40:82:14:b7:7e:fc:cd:f6:f7:43:50:9f:1d:49:39:
89:a1:70:12:2a:1f:eb:d6:f6:ac:a2:b5:67:27:8e:cf:97:f7:
59:f5:9c:96:8b:57:ae:6e:63:a5:de:d4:f2:a2:a6:9c:4a:dd:
3a:2c:1b:e8:38:6f:64:89:31:a6:9d:7d:e7:5b:1b:2a:5d:6f:
8f:20:ab:d0:5f:2f:de:27:ad:42:22:29:28:d5:74:71:af:9f:
3f:88:34:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:48:03 2026 by rpki-client