This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8dea72-6e11-471e-aae2-d8fc6147b504/1/zB3F-g22wmfAudluTecJSzFWYvg.mft
File: zB3F-g22wmfAudluTecJSzFWYvg.mft (raw, json)
Hash identifier: QScnbF30v3ci2Ocge6dKHiWqeMhF2ajxHvvm/RV6gk8=
Subject key identifier: 62:99:F9:8E:9D:D8:E1:C0:6C:EF:C0:80:70:08:DA:0D:16:F8:46:83
Authority key identifier: CC:1D:C5:FA:0D:B6:C2:67:C0:B9:D9:6E:4D:E7:09:4B:31:56:62:F8
Certificate issuer: /CN=cc1dc5fa0db6c267c0b9d96e4de7094b315662f8
Certificate serial: 019BACEEDBA337370C742C9630BA64846195
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zB3F-g22wmfAudluTecJSzFWYvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8dea72-6e11-471e-aae2-d8fc6147b504/1/zB3F-g22wmfAudluTecJSzFWYvg.mft
Manifest number: 0D
Signing time: Sun 11 Jan 2026 12:01:33 +0000
Manifest this update: Sun 11 Jan 2026 12:01:33 +0000
Manifest next update: Mon 12 Jan 2026 12:01:33 +0000
Files and hashes: 1: 9GzN_HKP_WWThvHhjhRJAGhf8ns.asa (hash: f8fwofMZM08xkZUiIxhpRhPluVGD+4+qwgtz4Dalacw=)
2: MVjU4gy_hBbM35wNK4KUfvSGtL0.roa (hash: G8eoXQHfmyT8ey2XBjyQ/4arEt1c8Z8snoeJI0FyEH8=)
3: zB3F-g22wmfAudluTecJSzFWYvg.crl (hash: pd7HnCBG0ufymKKsKzu2UMsjvpKIDN2kQ5ZmHi5GgV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8dea72-6e11-471e-aae2-d8fc6147b504/1/zB3F-g22wmfAudluTecJSzFWYvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/8dea72-6e11-471e-aae2-d8fc6147b504/1/zB3F-g22wmfAudluTecJSzFWYvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/zB3F-g22wmfAudluTecJSzFWYvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Jan 2026 09:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:ac:ee:db:a3:37:37:0c:74:2c:96:30:ba:64:84:61:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc1dc5fa0db6c267c0b9d96e4de7094b315662f8
Validity
Not Before: Jan 11 12:01:33 2026 GMT
Not After : Jan 12 12:01:33 2026 GMT
Subject: CN=6299f98e9dd8e1c06cefc0807008da0d16f84683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c8:b8:33:e9:f8:78:c1:4b:4b:07:09:e9:a8:
f1:d3:c1:06:96:53:03:e6:f5:41:1a:b9:57:53:7a:
69:92:bd:72:8c:d9:36:61:2f:a6:20:ed:89:5a:b1:
67:f3:83:33:69:67:7f:08:20:40:68:e9:93:cc:50:
e7:2c:11:c6:ea:fe:b3:99:9a:c3:c3:cd:d6:57:5a:
22:03:9a:bc:38:b5:2b:1e:ce:f4:91:3b:00:ac:02:
c4:7d:be:b3:6f:28:6c:14:ff:b7:46:9f:e7:5a:6e:
b4:91:c3:38:5c:1d:8a:6a:19:a0:34:48:fd:e4:96:
47:1e:63:91:5e:19:4b:0b:11:d7:00:a9:04:76:28:
8b:f7:88:c5:ee:ea:ad:51:70:bf:1d:60:88:e2:50:
31:28:4d:43:5d:28:9c:a5:34:f4:15:60:44:55:79:
7d:df:61:2b:c2:f4:9b:9b:4e:f2:7c:37:54:9f:af:
86:f0:45:39:2a:83:7b:12:06:cf:5f:34:c0:44:fa:
f8:bd:c0:5f:25:d5:ba:bb:6f:c9:32:99:80:08:36:
41:20:5d:0a:3c:16:8a:8c:52:90:83:b5:50:15:1d:
47:3c:01:d5:2a:ba:a4:47:6a:59:ed:dc:f9:66:52:
db:92:67:1e:1e:1c:20:33:b1:84:7f:cd:fa:d2:e1:
20:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:99:F9:8E:9D:D8:E1:C0:6C:EF:C0:80:70:08:DA:0D:16:F8:46:83
X509v3 Authority Key Identifier:
keyid:CC:1D:C5:FA:0D:B6:C2:67:C0:B9:D9:6E:4D:E7:09:4B:31:56:62:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zB3F-g22wmfAudluTecJSzFWYvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8dea72-6e11-471e-aae2-d8fc6147b504/1/zB3F-g22wmfAudluTecJSzFWYvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8dea72-6e11-471e-aae2-d8fc6147b504/1/zB3F-g22wmfAudluTecJSzFWYvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:3e:e2:2b:7c:d8:30:de:da:1e:14:df:41:df:be:96:54:60:
0d:45:40:80:21:a6:f3:c1:de:c5:6a:02:43:77:c2:ff:a5:9a:
f4:14:7b:10:85:59:56:8c:64:7d:41:01:07:55:36:c9:98:4d:
de:bf:d3:46:a4:63:1f:d3:48:b0:a1:5b:5e:1f:5e:2d:c2:24:
d3:ca:d0:65:60:78:65:30:47:ba:60:21:04:42:86:12:fd:05:
d1:63:4e:54:a9:55:36:2b:b9:78:1b:9c:90:b5:c4:42:4e:31:
ca:cc:f8:35:37:47:c1:cc:23:5c:9f:8d:be:6a:0b:a5:ce:b5:
a0:6b:e6:80:c9:c6:e7:a8:25:8d:4e:1b:99:0d:be:e0:97:f5:
de:55:19:72:10:1a:c9:18:9e:ca:68:4c:fc:5a:1b:d9:b1:1c:
81:53:4b:4e:24:56:f9:1f:87:57:7d:ec:39:36:f4:1e:a9:62:
59:e3:10:0a:15:c0:92:28:07:28:2f:c1:cc:44:e8:09:e4:f7:
9b:8a:b5:6a:2d:dc:87:70:1a:ba:d9:d5:d6:d7:50:57:f9:6b:
9d:77:e3:82:d3:a1:ba:86:ce:69:0e:a8:96:f4:a5:55:b3:1d:
ca:7d:34:9a:fc:fa:fe:58:06:ee:7a:c2:2d:d0:54:4a:91:53:
e0:0a:38:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 18:47:57 2026 by rpki-client