This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/zvOPSFaIM6X3FX7vWXh4M6AfU_U.mft
File: zvOPSFaIM6X3FX7vWXh4M6AfU_U.mft (raw, json)
Hash identifier: x10CEE27NuGtdWUgz8MHRCxGU6CeHwrFiuI6SZScaLQ=
Subject key identifier: 16:76:EB:2C:3E:7B:FC:AD:3E:FC:1C:D4:EE:5A:E7:E3:27:C3:8C:43
Authority key identifier: CE:F3:8F:48:56:88:33:A5:F7:15:7E:EF:59:78:78:33:A0:1F:53:F5
Certificate issuer: /CN=cef38f48568833a5f7157eef59787833a01f53f5
Certificate serial: 019C43906299415E29700C5D86934B5B64E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvOPSFaIM6X3FX7vWXh4M6AfU_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/zvOPSFaIM6X3FX7vWXh4M6AfU_U.mft
Manifest number: 0A24
Signing time: Mon 09 Feb 2026 18:01:01 +0000
Manifest this update: Mon 09 Feb 2026 18:01:01 +0000
Manifest next update: Tue 10 Feb 2026 18:01:01 +0000
Files and hashes: 1: 0uz5MbW1iQjUOVrXafnfS0Kr9aI.roa (hash: 2tTjB+QcoGOzx+5PBvD5G637D13fBCfUdr4GPNFvVKU=)
2: zvOPSFaIM6X3FX7vWXh4M6AfU_U.crl (hash: pBW4iZtPSYX0R0SldWZESIwt9X57Ox7C6mNWgSmMYFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/zvOPSFaIM6X3FX7vWXh4M6AfU_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/zvOPSFaIM6X3FX7vWXh4M6AfU_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvOPSFaIM6X3FX7vWXh4M6AfU_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:90:62:99:41:5e:29:70:0c:5d:86:93:4b:5b:64:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cef38f48568833a5f7157eef59787833a01f53f5
Validity
Not Before: Feb 9 18:01:01 2026 GMT
Not After : Feb 10 18:01:01 2026 GMT
Subject: CN=1676eb2c3e7bfcad3efc1cd4ee5ae7e327c38c43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a7:a9:11:3e:0a:56:1b:18:e4:62:26:56:5c:
42:b8:43:3e:64:de:8a:40:2b:b7:53:5b:0b:b3:19:
9d:c0:b2:4e:c7:b5:6e:99:98:3d:87:bd:e8:28:73:
d5:0d:9c:48:90:18:d2:48:ba:b8:f3:88:99:70:a8:
e1:35:24:2e:1f:ca:65:99:bf:d0:f6:d4:cd:89:d5:
06:59:66:3f:fd:2a:66:58:50:40:e1:1e:b3:ef:8d:
8b:8c:5f:a5:33:fc:44:a7:b9:0a:02:ab:d5:e3:fe:
83:f5:a4:e5:d9:0e:23:13:68:87:a1:1e:d1:7b:32:
9a:fc:52:5f:64:e8:03:01:83:da:a4:46:c9:46:1d:
5e:39:1e:18:c8:99:8d:64:84:e0:15:03:ec:72:06:
19:9d:c8:8d:31:19:93:4c:64:c1:47:ae:53:9a:45:
1b:0f:d4:f8:df:bc:c0:9f:a2:e1:2f:4f:b2:d1:b1:
35:0b:63:5b:8c:76:97:aa:5f:4f:f1:4e:e8:91:b0:
29:90:24:b3:d6:30:b0:76:1d:21:3a:c7:25:66:2c:
8d:b6:90:64:6e:43:7b:0a:38:04:d9:1b:dc:36:df:
0d:b2:89:27:10:31:0c:4d:df:ca:f3:ea:88:64:c8:
91:e4:18:59:0d:7e:29:37:6f:8c:0a:33:08:23:f4:
4d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:76:EB:2C:3E:7B:FC:AD:3E:FC:1C:D4:EE:5A:E7:E3:27:C3:8C:43
X509v3 Authority Key Identifier:
keyid:CE:F3:8F:48:56:88:33:A5:F7:15:7E:EF:59:78:78:33:A0:1F:53:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvOPSFaIM6X3FX7vWXh4M6AfU_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/zvOPSFaIM6X3FX7vWXh4M6AfU_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/e10abe-4148-451b-94f5-f95c6097a50d/1/zvOPSFaIM6X3FX7vWXh4M6AfU_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:e9:d7:d4:d9:53:b0:64:a4:21:73:06:fc:f4:7b:3c:a6:76:
06:c0:47:36:3b:ea:5a:e7:67:01:38:8e:15:fb:11:7d:8d:57:
b9:96:d5:98:4a:06:22:e6:5e:c8:ff:98:56:73:a8:3d:9e:0d:
8c:c2:bf:c0:3b:30:07:38:3e:fc:ea:0e:c5:f8:b5:2d:1b:d2:
78:cb:7e:36:0e:b8:8c:92:7b:01:65:30:0d:36:65:04:a9:7c:
10:08:fd:91:7d:77:f1:64:15:ba:f1:1d:fa:ae:c1:9a:d2:c3:
fc:ca:cd:43:2b:2f:d0:b4:ba:72:39:7f:f3:0f:33:3d:a5:2a:
1c:06:78:f0:75:44:a9:4b:75:bc:44:c6:83:b4:db:f8:bb:d4:
b9:b8:87:a6:b3:c0:36:13:69:a1:e5:d4:db:d0:fa:81:4e:d7:
c5:b0:54:d1:1c:67:ca:df:af:fb:03:6f:7e:97:f2:a9:b4:91:
d5:ec:a0:fe:6f:0d:6b:bc:25:b1:8a:5b:89:bc:89:4c:55:15:
1b:35:e2:79:2c:9a:88:9a:b0:38:ef:97:c0:21:5a:83:3e:07:
cc:e9:53:e0:7f:91:47:f4:f1:44:1b:34:7f:d6:ca:ce:56:55:
a6:cb:0a:0c:ca:e2:4f:ae:08:3c:ff:6b:c6:a4:e7:26:ae:6f:
63:09:6c:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:10:13 2026 by rpki-client