This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/z173qHDUsUjrHU9P5mbtUFSt6uw.mft
File: z173qHDUsUjrHU9P5mbtUFSt6uw.mft (raw, json)
Hash identifier: D8FZ84ZFTCJu7PwBwKq+E6mL9Ai9UTiOxRgm/z62qE8=
Subject key identifier: D0:12:37:DA:BD:DB:66:A0:64:93:DB:39:C2:DD:2C:E6:1E:1A:69:2B
Authority key identifier: CF:5E:F7:A8:70:D4:B1:48:EB:1D:4F:4F:E6:66:ED:50:54:AD:EA:EC
Certificate issuer: /CN=cf5ef7a870d4b148eb1d4f4fe666ed5054adeaec
Certificate serial: 019C2699152A539DBBC99AF4DAAE1DA80D39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z173qHDUsUjrHU9P5mbtUFSt6uw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/z173qHDUsUjrHU9P5mbtUFSt6uw.mft
Manifest number: 0F78
Signing time: Wed 04 Feb 2026 03:01:32 +0000
Manifest this update: Wed 04 Feb 2026 03:01:32 +0000
Manifest next update: Thu 05 Feb 2026 03:01:32 +0000
Files and hashes: 1: WcEXb1FwWuq7CmZIR_j833VQVLg.roa (hash: YwtVclxxnke6RUqR5TUDz5Eu+w+6DwiJjWOIUuWJONU=)
2: bfREzEwR-EXPjAe3wBGoI04LV-k.roa (hash: 769fYTMFcVF5MUU/DGKAsF33sj2AY85ZIEX4Env7vD8=)
3: z173qHDUsUjrHU9P5mbtUFSt6uw.crl (hash: Idl+/cuXz9k8cH5wRUfxASko6tFtE4HlegQpexGZiQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/z173qHDUsUjrHU9P5mbtUFSt6uw.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/z173qHDUsUjrHU9P5mbtUFSt6uw.mft
rsync://rpki.ripe.net/repository/DEFAULT/z173qHDUsUjrHU9P5mbtUFSt6uw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Feb 2026 00:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:26:99:15:2a:53:9d:bb:c9:9a:f4:da:ae:1d:a8:0d:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf5ef7a870d4b148eb1d4f4fe666ed5054adeaec
Validity
Not Before: Feb 4 03:01:32 2026 GMT
Not After : Feb 5 03:01:32 2026 GMT
Subject: CN=d01237dabddb66a06493db39c2dd2ce61e1a692b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a1:1d:8f:63:ff:88:38:2f:0b:59:c4:7e:5e:
1e:5b:5f:76:a6:02:8b:f3:5b:ea:c6:92:b8:3c:8c:
2a:e5:15:bd:16:ed:ac:01:98:14:42:6b:9a:62:83:
85:cf:ec:fa:6b:0d:6b:02:d3:fb:0a:81:e6:07:00:
31:cc:16:aa:86:20:ff:f2:c0:53:d3:3d:10:74:3c:
36:18:03:b1:e8:ba:6d:f7:a8:fb:91:11:a8:d4:69:
48:ff:53:f9:4c:cb:af:03:ff:b3:71:2f:2d:28:1a:
5c:94:c0:bd:cc:7f:e0:f9:dd:86:39:72:48:3d:93:
61:6e:97:ad:05:ac:f8:f5:28:de:31:ec:56:03:b0:
3a:39:54:d5:94:20:19:eb:05:ac:1b:b2:a0:01:df:
8e:0c:a5:d2:6a:72:53:9f:20:42:e9:7f:43:18:9b:
43:39:50:87:11:a5:cf:05:05:89:5c:90:aa:e0:bd:
d0:72:ab:d4:85:ed:92:46:d4:2d:ba:13:fa:12:57:
b7:7f:c9:9a:83:5a:48:2c:53:11:8f:7f:df:23:31:
7c:a4:0b:5d:49:df:2f:8a:c8:22:bd:d5:ad:3a:17:
7f:46:bd:a7:e5:f5:c9:c7:cd:5a:25:51:51:83:b3:
5f:d4:55:48:56:f0:61:8c:65:46:a7:98:9a:22:e2:
71:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:12:37:DA:BD:DB:66:A0:64:93:DB:39:C2:DD:2C:E6:1E:1A:69:2B
X509v3 Authority Key Identifier:
keyid:CF:5E:F7:A8:70:D4:B1:48:EB:1D:4F:4F:E6:66:ED:50:54:AD:EA:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z173qHDUsUjrHU9P5mbtUFSt6uw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/z173qHDUsUjrHU9P5mbtUFSt6uw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/z173qHDUsUjrHU9P5mbtUFSt6uw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:01:09:2c:1a:75:46:e1:bb:af:df:aa:e0:ff:95:88:a2:14:
f7:21:5b:ec:2e:8d:4b:4a:ba:13:7f:c4:66:7f:13:b1:49:6c:
48:ad:30:63:68:bf:4d:fa:bb:4f:e9:18:e3:c7:58:fc:8e:21:
1b:07:f8:4b:e4:4b:69:0d:35:7b:b8:6a:46:76:7e:5f:0c:82:
52:64:c5:64:87:8c:cc:66:2f:bd:51:9b:2a:dd:f5:5f:3d:7a:
9b:22:f5:17:34:8c:aa:88:59:74:63:92:59:72:f3:50:88:82:
dc:a1:24:b1:f3:6c:03:0c:ac:f7:c2:9a:d1:8f:33:71:90:8c:
76:b8:9c:b6:40:ae:0c:83:e4:e6:32:1a:38:2f:e6:36:3b:be:
04:87:72:3f:9c:05:14:7d:bd:7e:08:c9:7d:40:50:18:f5:21:
f3:b9:df:34:b2:b8:2d:ae:bb:3e:ee:23:b4:46:a9:9f:3e:24:
10:8a:7a:2a:f2:44:9b:a8:98:18:66:dd:64:6b:c0:bf:d9:18:
d2:5f:5f:ee:1c:4d:5c:f2:4a:f9:3f:47:5d:d8:4e:fa:a7:91:
c7:cf:80:c5:c0:ac:a9:43:a1:0e:ed:28:44:2c:99:a6:ae:73:
8f:b2:c1:db:45:76:14:a8:bb:cf:33:19:27:ee:c2:29:fc:de:
8f:98:0e:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 4 10:58:15 2026 by rpki-client