This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.mft
File: zJd-nVKvvEd5nTl1_O6KxRygz2o.mft (raw, json)
Hash identifier: kZ8509a/UF9jj7RustbGvXcThuEo9TzDErNyYZ4IaL8=
Subject key identifier: 9B:06:37:94:4F:8B:FC:3B:1E:A7:F6:73:CB:3E:13:12:B8:7B:BE:CA
Authority key identifier: CC:97:7E:9D:52:AF:BC:47:79:9D:39:75:FC:EE:8A:C5:1C:A0:CF:6A
Certificate issuer: /CN=cc977e9d52afbc47799d3975fcee8ac51ca0cf6a
Certificate serial: 019C42B48137213AFE845444D6C4DD76BF12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zJd-nVKvvEd5nTl1_O6KxRygz2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.mft
Manifest number: 16E3
Signing time: Mon 09 Feb 2026 14:00:51 +0000
Manifest this update: Mon 09 Feb 2026 14:00:51 +0000
Manifest next update: Tue 10 Feb 2026 14:00:51 +0000
Files and hashes: 1: Sq1CvQy8o0B9tgh2Xu1eMwRJZtk.roa (hash: HdfFsuae+bs6Px2O/nXidzw9nHeIbmVY360ACfcO/uA=)
2: apKWJZAqjwjRd0dehHbbTa9ZY3A.roa (hash: nVaIovGi66UncedynfpwyGBTPpXsXon+jV7FMQbYQEg=)
3: zJd-nVKvvEd5nTl1_O6KxRygz2o.crl (hash: MytUT4PPoNkoLg0PDT+LcWzID22KVIs6rQeY+WeisPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/zJd-nVKvvEd5nTl1_O6KxRygz2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 14:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:b4:81:37:21:3a:fe:84:54:44:d6:c4:dd:76:bf:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc977e9d52afbc47799d3975fcee8ac51ca0cf6a
Validity
Not Before: Feb 9 14:00:51 2026 GMT
Not After : Feb 10 14:00:51 2026 GMT
Subject: CN=9b0637944f8bfc3b1ea7f673cb3e1312b87bbeca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:48:67:0d:8a:0a:cf:f3:07:98:4d:7e:ab:c0:
99:78:e5:6d:24:75:9f:13:25:4b:f5:25:e6:83:7e:
76:af:01:98:57:cd:a0:4b:77:7c:10:b3:20:1b:aa:
e7:03:fb:50:a8:6d:7b:c9:ba:fc:11:0f:8d:0e:e6:
37:30:30:54:0d:e1:37:3a:a6:f9:40:a4:3c:55:a9:
1d:ac:b1:87:1d:2d:39:63:59:66:18:ad:95:fc:07:
cb:65:a5:08:27:3a:84:93:75:37:a7:8f:1d:41:4f:
4b:ef:69:c2:17:f9:d5:07:23:ca:e2:40:6d:78:11:
bc:6b:94:0b:b0:42:e3:6a:1c:76:75:53:71:03:76:
0a:33:93:58:78:11:76:5b:6c:fa:0f:b7:99:6d:01:
32:67:1a:f1:00:de:92:e6:a8:b0:94:a8:32:46:d8:
ba:0b:39:ef:3c:d3:85:60:34:37:d3:4c:58:2e:43:
c7:a8:79:66:09:57:3f:cf:45:13:42:97:f8:b0:a3:
2c:11:dd:1f:36:67:44:c9:55:47:61:cd:79:34:a1:
97:6b:d2:db:35:f1:81:27:f7:4b:8e:09:8c:7f:9b:
8e:ea:e4:e0:09:83:a9:3d:44:d0:09:a4:2a:6a:7a:
87:48:18:30:98:40:5e:b3:8e:10:15:c2:51:fb:d3:
d8:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:06:37:94:4F:8B:FC:3B:1E:A7:F6:73:CB:3E:13:12:B8:7B:BE:CA
X509v3 Authority Key Identifier:
keyid:CC:97:7E:9D:52:AF:BC:47:79:9D:39:75:FC:EE:8A:C5:1C:A0:CF:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zJd-nVKvvEd5nTl1_O6KxRygz2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:9e:bf:46:db:21:e3:60:4a:de:93:ae:e2:9c:67:1b:6e:e6:
39:d7:1b:c0:b9:e7:f3:78:6a:da:75:10:ef:31:65:cc:37:94:
cb:d9:d3:52:6c:e2:a1:eb:99:76:fa:e7:d0:54:e5:ec:5d:00:
98:8a:e3:2a:35:40:65:d7:58:50:e9:53:33:50:e5:08:9f:2b:
43:d1:1a:50:a8:47:68:58:35:8c:b9:cf:f7:56:bb:19:33:cd:
f3:96:cc:b7:3a:69:0b:c2:1e:fa:f8:13:f2:41:b6:72:8b:c4:
5b:b0:3a:e6:60:70:49:23:e2:f7:41:52:66:f8:59:a3:dc:38:
e9:85:82:3e:b4:6e:fb:cb:41:4d:77:d3:c9:18:d8:76:23:b6:
c8:9b:8f:26:9f:93:54:07:ba:7e:5c:56:d1:38:0f:9f:72:be:
19:a7:1e:2e:75:8f:a5:5d:58:5d:9c:59:35:bb:c7:90:30:1f:
66:07:59:62:07:a1:b0:3a:f8:b8:1d:8f:09:1e:c9:13:8b:c9:
ec:53:38:32:aa:7a:ee:f4:a1:52:fb:5c:9c:f7:53:22:e6:6e:
d1:81:34:c7:69:61:5f:34:c9:42:6a:64:5d:e6:9b:71:1c:69:
7f:a0:71:97:8d:cb:31:8a:ae:e0:aa:24:8d:2e:25:b5:f0:33:
b9:37:50:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:41:23 2026 by rpki-client