This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.mft
File: zm4aIgj6PxufPTj_8fjiw02RHzY.mft (raw, json)
Hash identifier: Lk1dJp3m8K9+8waKgeG71gboAoRT2EqhkHDX7U7JjC0=
Subject key identifier: 2D:AB:BD:F0:98:C4:F1:61:D1:30:42:C9:9C:F8:27:18:93:84:2E:AA
Authority key identifier: CE:6E:1A:22:08:FA:3F:1B:9F:3D:38:FF:F1:F8:E2:C3:4D:91:1F:36
Certificate issuer: /CN=ce6e1a2208fa3f1b9f3d38fff1f8e2c34d911f36
Certificate serial: 019C41A1B5014C5412997D0F32334F30076E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zm4aIgj6PxufPTj_8fjiw02RHzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.mft
Manifest number: 110C
Signing time: Mon 09 Feb 2026 09:00:42 +0000
Manifest this update: Mon 09 Feb 2026 09:00:42 +0000
Manifest next update: Tue 10 Feb 2026 09:00:42 +0000
Files and hashes: 1: gvoNw609bD_6W2IwVPcUpI-Guaw.roa (hash: ye+ihzO9nCFXOpOHQxxGEqHh0UKlaKr0ZU9zZSsc480=)
2: zm4aIgj6PxufPTj_8fjiw02RHzY.crl (hash: U/VGC/k6dJ+THZ4E98c8sQwJR9xpQ+jjQdzMk0L2SGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zm4aIgj6PxufPTj_8fjiw02RHzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 09:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:a1:b5:01:4c:54:12:99:7d:0f:32:33:4f:30:07:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce6e1a2208fa3f1b9f3d38fff1f8e2c34d911f36
Validity
Not Before: Feb 9 09:00:42 2026 GMT
Not After : Feb 10 09:00:42 2026 GMT
Subject: CN=2dabbdf098c4f161d13042c99cf8271893842eaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:b8:97:e6:63:59:5a:1f:4d:48:f7:43:50:29:
1c:7f:5e:6a:c6:f4:d5:ea:3e:4a:83:f3:71:c2:c0:
c9:4a:75:95:26:6e:50:a9:2c:fd:69:7a:67:a0:70:
93:5c:b0:f2:b7:d2:90:02:da:7b:52:ec:71:a6:14:
55:37:a1:ed:1a:79:26:12:cd:05:80:40:c9:af:fb:
9f:3c:7e:37:f7:3d:ad:0f:58:85:61:da:5e:bd:11:
af:f5:7e:8b:ca:65:2f:3d:78:f0:9e:58:92:a4:3c:
df:a0:8d:cd:99:92:a7:e4:4c:a6:7d:9a:0c:a8:d3:
ed:ba:c4:5d:c8:78:d5:d4:50:23:ab:9a:32:64:2b:
ea:ea:ff:9b:b6:d2:ba:6a:d9:bb:b8:33:13:94:ed:
33:03:b1:6c:aa:13:21:3b:5e:33:90:41:31:95:88:
f1:80:43:b9:25:5d:e2:1a:6f:9c:cc:31:d6:a6:a5:
50:14:3e:05:e9:e9:a0:97:2f:4b:25:d6:57:96:ee:
d1:0e:88:18:71:c4:ee:c2:37:34:ec:03:77:bf:b2:
fa:eb:7d:73:be:f0:16:a6:86:e2:6c:2e:94:99:53:
ce:0e:d3:de:84:96:6f:b2:82:9b:22:76:75:cb:5f:
a6:50:59:29:80:33:fb:95:e5:6a:df:e2:94:31:ac:
e9:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:AB:BD:F0:98:C4:F1:61:D1:30:42:C9:9C:F8:27:18:93:84:2E:AA
X509v3 Authority Key Identifier:
keyid:CE:6E:1A:22:08:FA:3F:1B:9F:3D:38:FF:F1:F8:E2:C3:4D:91:1F:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zm4aIgj6PxufPTj_8fjiw02RHzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:52:6e:fd:00:ca:6d:9a:41:18:bd:14:d0:5c:87:bc:d2:7e:
b7:7d:99:35:9f:3b:2d:46:a0:3f:3e:9a:50:af:40:a1:59:00:
2a:f2:53:40:ce:62:32:66:a2:74:8f:71:72:6e:74:a6:69:cb:
2d:0f:0b:1e:ce:2e:04:7c:a3:20:84:8f:46:db:af:b2:ad:95:
32:67:9f:c2:e4:3f:eb:dd:07:49:9d:ce:57:1d:d6:35:7e:f4:
a7:de:bd:cd:51:ee:65:77:a0:32:68:90:ae:28:98:85:22:34:
ca:e2:b1:55:30:39:a4:f3:6b:cf:71:6f:51:b5:88:07:18:45:
6c:ca:f1:e6:8a:cb:66:10:9e:4a:a9:0d:34:ba:41:d7:cf:56:
ab:71:73:1b:de:9d:d9:19:5b:33:80:a2:20:5d:8a:f9:36:76:
3d:ca:39:df:26:1b:fc:d6:a1:ae:3f:6d:b1:5c:7b:c3:04:60:
f1:bd:2e:dd:4f:c1:50:eb:bb:bb:3c:8c:60:ad:ad:4a:4e:cd:
7b:9b:8a:98:da:90:13:17:5c:2d:19:97:53:e6:60:ed:4a:c3:
2d:ab:76:f5:d8:03:29:2d:4d:8d:29:96:fa:93:31:fa:b5:4f:
24:fe:ef:7d:cd:18:0f:78:11:11:5c:88:40:af:64:39:da:38:
f8:e0:35:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:46:03 2026 by rpki-client