This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/164d8d-41ac-4522-bb25-898634942285/1/ZatIWvkj0bRsWjIfx6P4VsBPtvw.mft
File: ZatIWvkj0bRsWjIfx6P4VsBPtvw.mft (raw, json)
Hash identifier: 6pu6ZCpcQvBQ3JaIi53JXL+cKgeC1ehsu5w2yc5X5GE=
Subject key identifier: F6:E7:DA:38:75:EB:2E:F9:9B:82:42:28:E8:BE:AA:86:F3:26:38:D7
Authority key identifier: 65:AB:48:5A:F9:23:D1:B4:6C:5A:32:1F:C7:A3:F8:56:C0:4F:B6:FC
Certificate issuer: /CN=65ab485af923d1b46c5a321fc7a3f856c04fb6fc
Certificate serial: 019C42EBAA4CF9382E3441FC267E1134B082
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZatIWvkj0bRsWjIfx6P4VsBPtvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/164d8d-41ac-4522-bb25-898634942285/1/ZatIWvkj0bRsWjIfx6P4VsBPtvw.mft
Manifest number: 1812
Signing time: Mon 09 Feb 2026 15:01:06 +0000
Manifest this update: Mon 09 Feb 2026 15:01:06 +0000
Manifest next update: Tue 10 Feb 2026 15:01:06 +0000
Files and hashes: 1: ZatIWvkj0bRsWjIfx6P4VsBPtvw.crl (hash: GzJZqK/t2eL0M/iaBCUBoiRf4siK30pgGvFl94iDCrA=)
2: j_HPqzEYCSbmN4xFIqdJBXQFYPM.roa (hash: yoT1DifOeGVrHGJeSH6umh8rSky2R54pK6MzOeEXpKY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/164d8d-41ac-4522-bb25-898634942285/1/ZatIWvkj0bRsWjIfx6P4VsBPtvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/164d8d-41ac-4522-bb25-898634942285/1/ZatIWvkj0bRsWjIfx6P4VsBPtvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZatIWvkj0bRsWjIfx6P4VsBPtvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:eb:aa:4c:f9:38:2e:34:41:fc:26:7e:11:34:b0:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65ab485af923d1b46c5a321fc7a3f856c04fb6fc
Validity
Not Before: Feb 9 15:01:06 2026 GMT
Not After : Feb 10 15:01:06 2026 GMT
Subject: CN=f6e7da3875eb2ef99b824228e8beaa86f32638d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:b6:a6:00:ab:7f:52:19:0d:f9:ac:02:78:24:
ff:71:39:af:2b:e3:9e:5e:21:53:f2:d5:94:86:aa:
9e:7d:6f:02:7c:3c:c5:78:80:74:54:d6:61:7f:dc:
c0:07:71:ee:78:84:ab:28:9d:f0:73:ce:26:ca:3a:
9a:db:58:eb:8a:6e:ad:05:28:37:e6:f7:19:72:64:
a1:0c:c7:36:92:4f:48:80:07:b6:d4:0c:60:22:45:
a0:47:48:a5:99:cc:3b:d5:f7:c6:61:d2:13:a1:6b:
d8:5d:38:16:03:4f:64:92:88:26:68:57:36:1f:4b:
b6:53:6d:17:ed:c6:d2:1c:f2:31:ba:06:73:0a:14:
c5:8d:12:54:eb:af:23:d9:74:8e:f0:22:5c:57:05:
9b:9c:b6:a1:af:5e:78:34:63:9d:84:a1:82:28:7f:
f5:49:47:97:71:19:22:b1:d5:cd:41:b0:3e:59:a3:
85:d2:b8:0c:ae:92:77:7a:05:68:63:00:bc:1f:ad:
17:de:19:62:bc:67:c6:a9:2c:fe:d5:ac:57:ba:c0:
82:92:ca:ac:51:c7:85:31:c9:22:e1:e5:11:2f:9c:
46:8b:62:04:fc:14:a3:3d:56:ed:34:1d:57:0c:44:
00:d3:fb:e9:65:f6:9a:b6:8a:87:3a:d6:10:e7:15:
81:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:E7:DA:38:75:EB:2E:F9:9B:82:42:28:E8:BE:AA:86:F3:26:38:D7
X509v3 Authority Key Identifier:
keyid:65:AB:48:5A:F9:23:D1:B4:6C:5A:32:1F:C7:A3:F8:56:C0:4F:B6:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZatIWvkj0bRsWjIfx6P4VsBPtvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/164d8d-41ac-4522-bb25-898634942285/1/ZatIWvkj0bRsWjIfx6P4VsBPtvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/164d8d-41ac-4522-bb25-898634942285/1/ZatIWvkj0bRsWjIfx6P4VsBPtvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:c1:10:d4:bf:50:d2:69:53:ec:4d:50:45:12:2a:ae:b2:cb:
79:1b:e7:6e:2f:e5:ec:9a:29:2a:e5:f7:5a:6c:c8:e6:49:9a:
55:8e:33:70:d1:eb:38:e7:f4:dd:16:73:70:b2:87:e2:63:a3:
c0:b3:1b:50:28:68:c5:7e:bd:4d:3a:48:f2:7a:24:d5:94:85:
22:17:0d:16:a6:97:46:93:1a:2e:0c:31:41:19:65:e9:70:02:
0a:da:8f:0e:e4:67:af:7a:1e:b8:42:db:96:4a:27:e5:38:e9:
58:0a:98:fe:f4:54:07:e3:bd:18:33:72:f6:7c:c9:84:b0:90:
54:ba:ef:3d:54:5f:e8:1b:47:af:59:21:e4:86:e5:30:3f:d1:
6a:fa:5e:66:d7:47:14:02:ad:cd:dd:c1:f6:7a:20:55:52:ca:
3c:2b:85:f6:2f:12:a1:63:44:3c:08:d8:b0:3f:ff:fe:fa:11:
86:cb:c4:79:fe:e0:7c:33:e6:4d:cb:32:1b:11:47:54:97:48:
06:1d:3c:52:52:f3:f6:2b:c1:7a:2b:97:7e:02:77:80:73:5d:
56:9a:76:da:86:22:52:92:5c:f1:77:80:0e:97:91:3b:6c:62:
4f:16:8a:cd:75:99:67:5f:c7:b7:12:2e:b6:42:49:bf:7f:75:
65:a7:53:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:33:23 2026 by rpki-client