This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/736db2-0c64-45ed-833a-a94dd8ccaf9f/1/ZNq6FdHTZstTCVQS0GSQ4jSY4XA.mft
File: ZNq6FdHTZstTCVQS0GSQ4jSY4XA.mft (raw, json)
Hash identifier: hZQ6zSYWGtUZMuDG79WZZK1LLl3TD12UxNVP3eKcp1w=
Subject key identifier: 0F:25:2B:A6:D0:45:DC:5D:FE:43:0B:C5:13:BE:EE:78:E9:87:00:0E
Authority key identifier: 64:DA:BA:15:D1:D3:66:CB:53:09:54:12:D0:64:90:E2:34:98:E1:70
Certificate issuer: /CN=64daba15d1d366cb53095412d06490e23498e170
Certificate serial: 019C435901F9BEBF81621B248B9460B2C7EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNq6FdHTZstTCVQS0GSQ4jSY4XA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/736db2-0c64-45ed-833a-a94dd8ccaf9f/1/ZNq6FdHTZstTCVQS0GSQ4jSY4XA.mft
Manifest number: 180F
Signing time: Mon 09 Feb 2026 17:00:32 +0000
Manifest this update: Mon 09 Feb 2026 17:00:32 +0000
Manifest next update: Tue 10 Feb 2026 17:00:32 +0000
Files and hashes: 1: ZNq6FdHTZstTCVQS0GSQ4jSY4XA.crl (hash: eoKibDzWg188r0uoAVSCBfWrTX8NuD1qD4BQAceJJ70=)
2: bF8Fj85M5baKnqvJRx8XW6rb7BQ.roa (hash: f3mVln76POyyxSCx8XE3vxQpqNxsBFWRi4oixhIFTn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/736db2-0c64-45ed-833a-a94dd8ccaf9f/1/ZNq6FdHTZstTCVQS0GSQ4jSY4XA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/736db2-0c64-45ed-833a-a94dd8ccaf9f/1/ZNq6FdHTZstTCVQS0GSQ4jSY4XA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZNq6FdHTZstTCVQS0GSQ4jSY4XA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:59:01:f9:be:bf:81:62:1b:24:8b:94:60:b2:c7:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64daba15d1d366cb53095412d06490e23498e170
Validity
Not Before: Feb 9 17:00:32 2026 GMT
Not After : Feb 10 17:00:32 2026 GMT
Subject: CN=0f252ba6d045dc5dfe430bc513beee78e987000e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:3d:28:cd:6d:b6:8e:d8:d0:f8:2f:42:b9:04:
ac:08:e3:c7:3a:16:43:2a:d0:0a:bf:f6:50:a5:fa:
a1:c0:c1:7c:eb:9a:b0:9e:b5:0c:80:d2:aa:23:ad:
36:99:1f:09:95:f0:10:63:6e:d4:86:b9:42:2d:46:
ca:3f:ed:12:57:dc:a6:9d:ef:57:e3:c5:db:63:32:
1b:fe:bc:95:2c:26:ab:4e:3a:87:1e:49:03:75:4b:
1e:9b:02:a7:0a:aa:ba:15:c0:5a:a2:95:f5:97:49:
0b:d8:89:d9:b4:c4:e8:f1:0d:b0:6d:a6:df:2c:c4:
c5:92:de:cc:64:a3:07:8f:84:d5:b7:7c:29:b4:98:
d5:23:69:1f:0b:41:f2:d1:bf:e7:9c:79:a2:07:65:
02:e4:d0:5b:4b:99:c0:a6:05:6c:b9:a8:32:f9:2b:
2a:4d:ad:8e:47:27:f7:20:a5:5d:26:4f:84:40:35:
e7:b8:9c:d4:a0:50:75:52:d4:18:29:ff:52:1d:b7:
ec:a9:e2:5b:5b:28:8e:1c:e8:0c:a4:b6:d4:64:03:
45:f5:38:7f:1f:a4:97:b7:23:13:02:cd:f5:84:2e:
7f:0a:ac:c3:d4:61:e5:1a:40:ab:22:c1:4f:a7:4f:
ba:64:88:8b:a2:af:b4:ab:f1:b7:b1:d0:84:47:a7:
47:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:25:2B:A6:D0:45:DC:5D:FE:43:0B:C5:13:BE:EE:78:E9:87:00:0E
X509v3 Authority Key Identifier:
keyid:64:DA:BA:15:D1:D3:66:CB:53:09:54:12:D0:64:90:E2:34:98:E1:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNq6FdHTZstTCVQS0GSQ4jSY4XA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/736db2-0c64-45ed-833a-a94dd8ccaf9f/1/ZNq6FdHTZstTCVQS0GSQ4jSY4XA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/736db2-0c64-45ed-833a-a94dd8ccaf9f/1/ZNq6FdHTZstTCVQS0GSQ4jSY4XA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:48:14:2f:de:06:bb:f6:18:ed:d5:b4:7e:4c:89:b5:1f:cd:
02:45:09:c6:3c:31:3d:9b:03:85:4b:53:e4:8e:bc:21:69:12:
02:a7:1c:37:ca:82:66:55:1a:8c:d2:4c:21:33:a4:b5:47:d8:
86:43:f6:62:e6:01:d2:89:db:96:eb:1a:bc:63:df:e5:59:59:
f9:ef:bc:61:d6:a6:1f:50:0c:83:a1:7e:c1:4d:26:4d:e4:8a:
6d:21:20:3f:86:26:8f:d5:41:27:50:8f:dc:1d:37:a7:c9:2f:
82:9a:2e:5c:63:23:e8:94:c7:01:76:08:7c:46:44:53:40:32:
81:c5:55:ad:95:a5:a7:e0:12:23:04:39:10:47:16:bd:bf:84:
8a:30:84:50:52:e4:75:a2:f2:fc:2c:98:67:56:12:a1:15:b5:
65:6c:f3:a1:f9:bf:91:9f:53:ea:54:77:2b:f9:19:0a:92:29:
0d:bf:d8:4c:a3:7d:20:26:7a:f1:e9:f4:d7:99:c5:2d:a6:7f:
bb:d8:44:cc:91:50:77:7a:69:12:50:d2:27:a0:05:e1:65:cb:
92:01:d3:89:bf:ca:e2:c4:76:26:cd:98:f0:54:21:b1:50:55:
18:fa:58:72:cc:12:1e:84:df:a7:09:ec:fa:f1:5e:9f:ff:30:
22:12:7b:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:26:19 2026 by rpki-client