This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft
File: 04zZRAVS59q5zVYx1KuHJFFTW3o.mft (raw, json)
Hash identifier: zmSJkGqw2MWsAXLOAX+7eo2MIeS1oKr8Baw4pickyCU=
Subject key identifier: BA:C5:25:CE:DB:2C:68:EE:07:16:0D:0C:B7:EE:57:3E:3D:1B:6D:B7
Authority key identifier: D3:8C:D9:44:05:52:E7:DA:B9:CD:56:31:D4:AB:87:24:51:53:5B:7A
Certificate issuer: /CN=d38cd9440552e7dab9cd5631d4ab872451535b7a
Certificate serial: 019C42B4885360AF198AD6AF2FF951358E73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04zZRAVS59q5zVYx1KuHJFFTW3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft
Manifest number: 0C72
Signing time: Mon 09 Feb 2026 14:00:53 +0000
Manifest this update: Mon 09 Feb 2026 14:00:53 +0000
Manifest next update: Tue 10 Feb 2026 14:00:53 +0000
Files and hashes: 1: 04zZRAVS59q5zVYx1KuHJFFTW3o.crl (hash: xKm8vSoUXeegH6LOtU6BezyRPxtpf5BWMk+MKux9tq8=)
2: IKM_OjyRSoBQf9ofx_ZJ7qDMPBY.roa (hash: gWtrWAgCkkNaCw5NffP1SoSfwcuzZCjsZNyKpfkfVrs=)
3: yXPaoSIGSfrOjU9hs5k0MekE_Nc.roa (hash: TYKrJM1uJp6GOMTl+6yQvyOUGQk4r4N2rI8aiTzZmcg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/04zZRAVS59q5zVYx1KuHJFFTW3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 14:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:b4:88:53:60:af:19:8a:d6:af:2f:f9:51:35:8e:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d38cd9440552e7dab9cd5631d4ab872451535b7a
Validity
Not Before: Feb 9 14:00:53 2026 GMT
Not After : Feb 10 14:00:53 2026 GMT
Subject: CN=bac525cedb2c68ee07160d0cb7ee573e3d1b6db7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bd:d1:bc:75:d8:f0:dd:d6:99:ce:f8:c2:6f:
c8:33:df:17:63:4f:68:68:5b:11:1b:ee:8a:50:37:
57:77:ea:d5:87:c7:ef:4a:79:f8:26:ae:98:64:b4:
65:76:8f:6e:3d:7a:a0:a8:70:87:88:c5:72:55:8e:
ba:dd:d3:17:d5:c6:b0:b4:80:f0:8f:cc:4e:66:3b:
78:8e:0e:72:2c:89:34:a1:02:62:44:1c:3b:59:90:
8e:cd:5b:9b:23:85:46:bb:04:63:2b:2e:30:fa:f1:
c9:39:51:61:73:81:5d:48:82:94:dc:49:81:61:e3:
5a:6f:68:8f:e1:98:22:a7:72:02:36:35:d1:18:a2:
bb:f7:4e:2d:4d:a7:90:55:c0:c7:f7:15:bd:74:2b:
f5:66:1b:c1:06:4a:08:48:f6:1d:0d:d3:3c:20:3b:
79:90:01:0b:d1:a1:b6:b1:53:cd:5a:06:df:2c:40:
1b:ca:2b:de:53:1e:37:16:8b:7b:43:2c:0c:3b:b4:
f7:06:13:f3:c2:56:3a:96:29:9c:31:bc:58:b8:ee:
99:36:78:fa:0f:cf:cd:77:02:0d:f8:b7:29:cf:a6:
04:05:20:a6:e9:38:25:62:0c:77:a2:6a:b7:47:13:
c1:17:bf:81:69:5d:76:25:30:af:0f:d7:12:13:c3:
de:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:C5:25:CE:DB:2C:68:EE:07:16:0D:0C:B7:EE:57:3E:3D:1B:6D:B7
X509v3 Authority Key Identifier:
keyid:D3:8C:D9:44:05:52:E7:DA:B9:CD:56:31:D4:AB:87:24:51:53:5B:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04zZRAVS59q5zVYx1KuHJFFTW3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:a2:ed:c6:86:84:b4:d1:23:14:67:95:f7:ef:b0:e3:db:b1:
d3:df:f5:bd:89:ff:65:90:51:c4:cc:a2:87:74:28:ac:39:e5:
a8:6a:a3:6e:f9:6a:9c:ff:d6:c3:71:9a:5d:fe:d0:2d:4d:b7:
85:4e:e5:99:47:51:cb:d4:d9:3e:7d:bd:ec:90:4a:12:74:5a:
21:b3:d4:41:f8:d3:a8:e3:83:b3:13:b5:29:11:7f:da:f3:e4:
5b:41:c1:62:14:46:51:d7:4b:d8:27:47:b2:d4:9e:d1:11:c1:
8e:80:38:89:1e:e3:56:5b:0b:f4:8c:7c:07:b4:a2:1d:19:62:
86:68:e7:22:3b:e4:54:20:2e:1b:47:06:70:e8:8b:1b:02:82:
b0:a5:d5:d6:17:50:63:23:d0:fa:48:44:02:dd:8e:fc:a9:27:
5b:3e:eb:ca:3a:92:b9:86:bc:96:b4:75:6c:85:4e:27:71:f2:
71:ad:8b:70:99:38:2d:04:f7:20:43:93:a0:bc:6b:b0:b8:e5:
7f:6b:78:bf:83:1a:0d:95:1b:68:d8:30:34:56:69:00:ec:03:
78:df:e6:9a:ea:41:a4:b6:4a:62:72:79:10:5c:43:2b:0c:b9:
6e:33:6f:db:58:4f:7c:d7:a1:36:e7:6a:d0:14:cc:dc:5a:cb:
02:4d:88:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:47:57 2026 by rpki-client