This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.mft
File: zUBlln3sCStfyQFS5KlTObodIok.mft (raw, json)
Hash identifier: 4j1C+tUCcCziPNH/LrfGXE+RizrVE44e3csXTkuOOCk=
Subject key identifier: 34:FD:30:90:55:D8:2D:F9:37:8C:C4:BE:72:BC:55:98:DF:C5:45:BF
Authority key identifier: CD:40:65:96:7D:EC:09:2B:5F:C9:01:52:E4:A9:53:39:BA:1D:22:89
Certificate issuer: /CN=cd4065967dec092b5fc90152e4a95339ba1d2289
Certificate serial: 019C4246986F920B97BDCDA9D74CAAE0C47D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zUBlln3sCStfyQFS5KlTObodIok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.mft
Manifest number: 0E66
Signing time: Mon 09 Feb 2026 12:00:48 +0000
Manifest this update: Mon 09 Feb 2026 12:00:48 +0000
Manifest next update: Tue 10 Feb 2026 12:00:48 +0000
Files and hashes: 1: XrmmbPIgnA61rh6z_5Wfj4vJ374.roa (hash: DtOM3AG98xq9adArrqetx0s2cyFgsSbYyCzOOvAoXqc=)
2: wm5FHuXn0yj2Fzs7mssloklRCsc.roa (hash: nSYa0rr7dwu5dctQzszV3Gq5wfYwUX466+D2hjWAmcE=)
3: zUBlln3sCStfyQFS5KlTObodIok.crl (hash: kBtIQ+UIwfULsZJ69S2ISculrqX/kYpTchBwK+yscyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.mft
rsync://rpki.ripe.net/repository/DEFAULT/zUBlln3sCStfyQFS5KlTObodIok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 12:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:46:98:6f:92:0b:97:bd:cd:a9:d7:4c:aa:e0:c4:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd4065967dec092b5fc90152e4a95339ba1d2289
Validity
Not Before: Feb 9 12:00:48 2026 GMT
Not After : Feb 10 12:00:48 2026 GMT
Subject: CN=34fd309055d82df9378cc4be72bc5598dfc545bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2a:83:48:3e:bc:73:e6:65:61:0b:2a:94:a4:
37:51:b0:a1:29:47:4c:5e:1c:7c:d6:31:b4:af:f5:
49:4f:67:b8:4a:01:34:2f:a0:43:ff:23:4b:b9:ae:
50:e3:0c:cb:7c:15:36:07:1d:38:69:08:a0:04:f8:
0e:27:2a:e7:ef:3f:f3:49:e8:00:6c:7f:92:f2:6c:
ea:8e:96:e1:b5:1c:b3:aa:af:2f:80:08:ad:af:ba:
d0:ee:09:80:40:73:4d:c5:2b:c5:73:9f:c5:1c:b7:
7d:4b:4d:1b:ff:6b:f8:62:cb:95:da:f1:70:05:d6:
16:5f:0e:e4:86:76:8d:2d:3f:b0:4a:cf:1b:1a:aa:
fe:d8:37:1d:a8:e3:92:88:b6:6e:e6:26:80:38:54:
f2:ce:54:87:f0:78:78:e4:29:51:36:6a:24:eb:12:
b5:c1:dc:79:ec:10:47:0c:17:3b:11:24:f9:02:7b:
e6:9b:47:8b:18:68:12:25:26:02:f2:5f:2d:61:12:
76:29:8f:82:68:02:76:6f:da:da:a4:5a:ab:e8:c3:
10:bf:07:2a:e3:bc:f3:0d:de:26:4a:87:e4:e1:c1:
9b:d4:ec:81:6e:04:94:84:fa:84:ce:2a:f3:2f:32:
3f:3f:77:27:0c:1c:97:ed:43:d2:82:0e:e6:8e:d8:
4c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:FD:30:90:55:D8:2D:F9:37:8C:C4:BE:72:BC:55:98:DF:C5:45:BF
X509v3 Authority Key Identifier:
keyid:CD:40:65:96:7D:EC:09:2B:5F:C9:01:52:E4:A9:53:39:BA:1D:22:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zUBlln3sCStfyQFS5KlTObodIok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:1c:dd:49:8b:5c:cf:30:f9:93:50:68:a7:01:c1:6a:9a:c5:
87:a0:75:cc:c4:ab:05:80:a7:fc:34:79:51:83:11:a4:02:c6:
1a:24:61:03:31:08:ae:40:1c:9a:d0:95:6a:43:2d:fb:bf:8b:
70:50:8e:2f:03:da:97:a6:a7:53:d3:65:88:0b:25:b4:d0:4b:
83:86:c2:42:02:b6:79:e1:67:89:c5:6d:48:84:4e:17:7d:97:
dd:ad:af:b0:72:52:ad:55:7a:90:2b:b1:c3:59:6c:56:16:e6:
a7:7a:fd:1a:91:f3:e1:eb:68:8f:3a:0b:d0:ae:59:b9:15:32:
dc:4a:e6:85:50:cf:79:00:97:1a:c4:12:66:19:0a:50:12:d2:
49:0f:8d:8c:fd:25:c4:6a:c1:34:22:e5:14:b1:20:5f:da:ec:
b9:76:6d:f4:b7:74:4e:1a:f9:28:cc:96:2c:68:25:86:8f:2c:
f6:70:37:b2:43:28:01:bc:3f:6d:47:68:dd:b4:32:5a:27:e2:
5d:df:41:60:4d:61:f2:63:01:1e:fc:f2:fd:b6:42:d7:3d:6f:
26:d8:db:66:ab:31:be:d8:b9:21:e3:d2:5e:27:ac:6c:5b:bb:
38:a7:d5:80:d2:61:9d:ad:68:dd:05:31:5b:25:db:f2:1a:07:
f3:8a:82:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:56:31 2026 by rpki-client