This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/a36365-8552-4a97-8bfa-ccaf44d41648/1/ZlBwd85_MPwGht0JNKiZl98x6Ew.mft
File: ZlBwd85_MPwGht0JNKiZl98x6Ew.mft (raw, json)
Hash identifier: CtUpveYIZhHDEuPePNIekNDkvUd21brt6DXCkyPrC8M=
Subject key identifier: 81:7A:DF:27:D4:24:0F:56:29:A8:F9:4A:E2:81:01:47:F3:DF:7E:32
Authority key identifier: 66:50:70:77:CE:7F:30:FC:06:86:DD:09:34:A8:99:97:DF:31:E8:4C
Certificate issuer: /CN=66507077ce7f30fc0686dd0934a89997df31e84c
Certificate serial: 019C4246B9B2B3CFA9F3E42E83AE84AFD5A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZlBwd85_MPwGht0JNKiZl98x6Ew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/a36365-8552-4a97-8bfa-ccaf44d41648/1/ZlBwd85_MPwGht0JNKiZl98x6Ew.mft
Manifest number: 0392
Signing time: Mon 09 Feb 2026 12:00:57 +0000
Manifest this update: Mon 09 Feb 2026 12:00:57 +0000
Manifest next update: Tue 10 Feb 2026 12:00:57 +0000
Files and hashes: 1: ZlBwd85_MPwGht0JNKiZl98x6Ew.crl (hash: l5NHGk4jbaWtTbWdU3H7JwHIn/6AplKa26trELv6Geg=)
2: oEr0iaXnd0sYycCq7BAkuxMnYgU.roa (hash: htrjhsBScBfwfdBlz2NkGUVVLsJ41MJX7K3Gfxtec48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/a36365-8552-4a97-8bfa-ccaf44d41648/1/ZlBwd85_MPwGht0JNKiZl98x6Ew.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/a36365-8552-4a97-8bfa-ccaf44d41648/1/ZlBwd85_MPwGht0JNKiZl98x6Ew.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZlBwd85_MPwGht0JNKiZl98x6Ew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 12:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:46:b9:b2:b3:cf:a9:f3:e4:2e:83:ae:84:af:d5:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66507077ce7f30fc0686dd0934a89997df31e84c
Validity
Not Before: Feb 9 12:00:57 2026 GMT
Not After : Feb 10 12:00:57 2026 GMT
Subject: CN=817adf27d4240f5629a8f94ae2810147f3df7e32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ae:ba:d8:6a:19:89:51:5b:c2:9e:f7:49:e8:
1f:bf:f7:81:4d:8b:72:1b:a3:a2:a8:a3:b7:12:c3:
93:9a:18:8d:34:5c:f8:7b:8c:46:ad:3b:97:33:57:
17:d6:44:5b:1c:7b:cb:29:88:c5:1a:8b:a6:0c:51:
f4:97:59:47:82:60:a5:5e:f3:b0:08:f5:3b:db:b9:
c7:eb:68:24:a2:bc:41:1a:0a:38:fc:d4:32:84:fd:
e5:fa:23:c7:29:ee:1e:82:7c:87:c6:ba:30:4c:db:
75:09:97:34:64:77:34:c1:f6:e8:14:3d:08:a1:a6:
5a:7c:86:27:34:0f:46:bc:ec:56:c8:7d:1f:92:44:
c3:16:88:8b:a0:8f:a0:ba:a3:cd:04:23:29:cf:6b:
8f:64:1f:8a:4a:05:85:24:ef:4f:54:c3:b1:8c:31:
fa:92:d5:f9:8e:2c:30:61:38:33:8c:39:c2:96:ba:
1b:42:f0:c1:da:ef:09:67:48:02:ff:00:b2:6c:06:
ea:c9:34:9d:18:70:a5:af:e7:c8:20:f7:e8:9b:02:
75:ae:6e:d9:79:73:d4:77:4a:01:f2:38:2a:38:b6:
af:df:20:52:3a:ac:dd:75:f0:b2:9e:64:ee:07:ea:
c2:57:35:9b:7c:49:45:d1:8c:6a:6f:a6:32:7b:99:
66:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:7A:DF:27:D4:24:0F:56:29:A8:F9:4A:E2:81:01:47:F3:DF:7E:32
X509v3 Authority Key Identifier:
keyid:66:50:70:77:CE:7F:30:FC:06:86:DD:09:34:A8:99:97:DF:31:E8:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZlBwd85_MPwGht0JNKiZl98x6Ew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a36365-8552-4a97-8bfa-ccaf44d41648/1/ZlBwd85_MPwGht0JNKiZl98x6Ew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a36365-8552-4a97-8bfa-ccaf44d41648/1/ZlBwd85_MPwGht0JNKiZl98x6Ew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:00:45:ad:dd:49:51:dc:f9:5f:82:6d:62:3e:dc:d6:f6:e4:
90:b8:32:92:94:09:26:8a:ce:16:d8:ec:22:7a:d2:5f:5b:c8:
80:0e:2c:de:8a:3e:2c:df:4f:2f:42:1c:83:ec:3a:55:5d:33:
3f:e1:a0:4e:5f:6a:c0:45:4d:7f:9e:68:9e:9f:35:b2:12:ee:
ce:a8:09:90:9f:b0:13:2b:06:91:d8:77:cf:1a:0a:1c:f0:a1:
8a:6c:ba:d6:06:a0:8c:e0:36:0a:9f:47:b2:c3:3c:4d:3c:74:
7b:72:11:36:03:77:8b:17:2f:fe:1f:6f:7d:63:53:26:9c:22:
19:09:7a:30:8e:b6:4f:bc:56:74:b1:c3:fb:22:62:38:29:4d:
c8:d2:8d:c9:26:55:af:4f:12:8a:d0:87:b5:6d:b1:20:0a:85:
1d:27:44:3f:01:7e:38:56:10:1a:67:cc:5c:10:bc:5a:03:4b:
d2:68:11:d8:2a:a5:d6:40:3b:49:fb:58:49:bd:eb:64:ab:16:
46:e1:80:49:a3:32:4c:34:88:06:90:0b:7d:53:60:a2:9a:52:
9a:f6:83:76:ba:30:50:8e:3d:24:78:af:90:b8:f3:2b:d7:80:
82:c1:c3:0b:28:d5:c9:ea:8c:db:5a:ff:e5:0e:66:c2:3e:d5:
ff:b1:f6:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:02:17 2026 by rpki-client