This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/7e1b1c-f963-4e29-b8ec-788db09d0fe6/1/RzLsDpHbv5TdodZQRH0miXbWIJo.mft
File: RzLsDpHbv5TdodZQRH0miXbWIJo.mft (raw, json)
Hash identifier: xsW6IXuI+SToSoHt8K8IV3PQ8G1IegmKZFdKkwvzphc=
Subject key identifier: E0:0D:B5:5A:D1:45:DE:20:2F:AC:E4:1C:C7:86:9F:CA:17:0C:67:02
Authority key identifier: 47:32:EC:0E:91:DB:BF:94:DD:A1:D6:50:44:7D:26:89:76:D6:20:9A
Certificate issuer: /CN=4732ec0e91dbbf94dda1d650447d268976d6209a
Certificate serial: 019C427D777BB1E01141F74D53B920907FBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzLsDpHbv5TdodZQRH0miXbWIJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/7e1b1c-f963-4e29-b8ec-788db09d0fe6/1/RzLsDpHbv5TdodZQRH0miXbWIJo.mft
Manifest number: 0CC6
Signing time: Mon 09 Feb 2026 13:00:44 +0000
Manifest this update: Mon 09 Feb 2026 13:00:44 +0000
Manifest next update: Tue 10 Feb 2026 13:00:44 +0000
Files and hashes: 1: RzLsDpHbv5TdodZQRH0miXbWIJo.crl (hash: KIAME6uAOIymD/vPTfRSz04wdIcSZ1tWpl9q0WteWoI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/7e1b1c-f963-4e29-b8ec-788db09d0fe6/1/RzLsDpHbv5TdodZQRH0miXbWIJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/7e1b1c-f963-4e29-b8ec-788db09d0fe6/1/RzLsDpHbv5TdodZQRH0miXbWIJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/RzLsDpHbv5TdodZQRH0miXbWIJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7d:77:7b:b1:e0:11:41:f7:4d:53:b9:20:90:7f:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4732ec0e91dbbf94dda1d650447d268976d6209a
Validity
Not Before: Feb 9 13:00:44 2026 GMT
Not After : Feb 10 13:00:44 2026 GMT
Subject: CN=e00db55ad145de202face41cc7869fca170c6702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:97:8f:84:b9:b3:19:ba:40:d6:49:2c:9b:86:
04:a6:52:d2:a9:8e:e2:88:f0:a9:69:3c:9f:4a:31:
4d:f1:07:e8:e4:17:5c:22:93:46:64:c2:10:34:59:
f2:da:4f:44:29:03:d5:e9:52:d0:e7:f9:16:22:ab:
f3:97:e2:3a:21:e1:b9:5d:09:49:8c:79:2d:42:c8:
8e:62:de:ad:4e:ab:f1:c8:ee:ba:c2:f6:10:f7:49:
14:d1:df:96:58:50:db:85:f3:9e:8a:9d:ad:23:aa:
58:fe:82:eb:f8:b9:60:c8:43:d5:5a:fd:76:4a:1c:
75:fb:f5:da:aa:f1:e9:6c:73:ef:69:d5:a8:66:38:
15:ca:7d:d0:32:ef:d5:8f:a7:de:6f:3a:10:56:20:
57:bb:7d:f6:f1:ee:9b:9e:e6:fa:c8:a8:c0:ca:42:
11:ab:fc:6a:fa:1e:7e:24:6e:68:76:1e:8e:77:83:
5e:14:b2:2c:5f:95:cf:83:d2:58:25:e4:92:f3:08:
6c:16:89:ff:75:02:a1:7a:14:d2:2a:fe:fb:a4:87:
47:3e:93:b7:27:19:b2:26:6b:41:81:6b:89:b0:c6:
3b:19:6a:98:b6:68:9c:d0:f7:0b:95:fd:34:d3:f3:
09:49:07:39:90:b2:0e:8e:55:8e:5a:89:d4:06:01:
16:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:0D:B5:5A:D1:45:DE:20:2F:AC:E4:1C:C7:86:9F:CA:17:0C:67:02
X509v3 Authority Key Identifier:
keyid:47:32:EC:0E:91:DB:BF:94:DD:A1:D6:50:44:7D:26:89:76:D6:20:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzLsDpHbv5TdodZQRH0miXbWIJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/7e1b1c-f963-4e29-b8ec-788db09d0fe6/1/RzLsDpHbv5TdodZQRH0miXbWIJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/7e1b1c-f963-4e29-b8ec-788db09d0fe6/1/RzLsDpHbv5TdodZQRH0miXbWIJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:cd:7f:6d:cf:ac:f0:f9:ec:6a:ca:45:b1:bf:ad:3e:25:7c:
42:8e:71:c9:0d:00:c2:c3:14:e8:b4:eb:d8:05:f9:02:7d:1d:
82:2e:ce:e2:5a:73:0f:2c:af:de:51:61:cd:14:b9:6d:c8:b2:
63:13:60:68:61:cb:ec:68:15:ac:8c:bf:95:f0:86:4a:98:e6:
5a:5e:20:f6:61:df:d2:68:85:7a:b8:d7:06:57:5f:36:7f:cd:
77:29:5f:4c:fd:cd:fa:10:f6:6e:95:1b:fe:ad:c6:20:9c:78:
68:3a:3c:f0:a0:5a:be:48:d6:af:ad:33:ae:f4:ff:93:d7:2f:
7f:7f:8d:88:f4:54:37:e9:79:1f:d3:70:38:85:98:ab:2a:aa:
b7:28:de:b1:aa:87:3d:dd:5d:b9:4f:e4:7a:3a:e1:25:fe:5a:
04:84:f9:16:c9:44:b6:b8:a6:a3:d5:13:c2:63:59:d9:28:f3:
cb:97:6a:ae:e0:3e:2f:e8:dd:87:71:02:6c:62:a7:8d:ec:f5:
f2:b9:8f:25:d5:f6:63:f3:91:47:5b:9c:b6:d3:c6:0c:44:87:
3e:00:25:34:fc:48:35:30:a7:15:15:c2:a3:c2:5b:7e:f9:4c:
64:24:46:f6:d2:8a:14:7d:fe:fa:87:72:19:42:30:36:3b:e4:
9d:d5:51:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:29:02 2026 by rpki-client