This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/871c6b-0f26-4c43-a0aa-7ffc4f40366a/1/zBqfcpOIwWm6zBy6-Y4jbU6AirQ.mft
File: zBqfcpOIwWm6zBy6-Y4jbU6AirQ.mft (raw, json)
Hash identifier: hn2cLiElGFZE9f91bs7Mi78K2SZaR/hB2gqCuGOmh30=
Subject key identifier: 18:63:67:31:16:2A:BD:D3:43:D9:C8:75:8A:64:81:FC:D9:6E:07:18
Authority key identifier: CC:1A:9F:72:93:88:C1:69:BA:CC:1C:BA:F9:8E:23:6D:4E:80:8A:B4
Certificate issuer: /CN=cc1a9f729388c169bacc1cbaf98e236d4e808ab4
Certificate serial: 019C4321E9B3E31B2C4CCBB7A282F61CC63E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zBqfcpOIwWm6zBy6-Y4jbU6AirQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/871c6b-0f26-4c43-a0aa-7ffc4f40366a/1/zBqfcpOIwWm6zBy6-Y4jbU6AirQ.mft
Manifest number: 0399
Signing time: Mon 09 Feb 2026 16:00:21 +0000
Manifest this update: Mon 09 Feb 2026 16:00:21 +0000
Manifest next update: Tue 10 Feb 2026 16:00:21 +0000
Files and hashes: 1: nlfrfn24osfntQHsu8evHx4ar1o.roa (hash: Q2Oonu/mgcyQ29viLLMKjLOBF64WUB0mkAHoMi7xoGU=)
2: zBqfcpOIwWm6zBy6-Y4jbU6AirQ.crl (hash: F6CPGJkRLrHLDffVbOvKmGsgIIBZRnVPJZkKxcYzkb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/871c6b-0f26-4c43-a0aa-7ffc4f40366a/1/zBqfcpOIwWm6zBy6-Y4jbU6AirQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/871c6b-0f26-4c43-a0aa-7ffc4f40366a/1/zBqfcpOIwWm6zBy6-Y4jbU6AirQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/zBqfcpOIwWm6zBy6-Y4jbU6AirQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 16:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:21:e9:b3:e3:1b:2c:4c:cb:b7:a2:82:f6:1c:c6:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc1a9f729388c169bacc1cbaf98e236d4e808ab4
Validity
Not Before: Feb 9 16:00:21 2026 GMT
Not After : Feb 10 16:00:21 2026 GMT
Subject: CN=18636731162abdd343d9c8758a6481fcd96e0718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:25:63:d2:d2:29:00:df:43:16:0e:19:56:25:
f0:b2:a0:93:06:38:0f:52:21:75:c8:56:7a:f5:25:
db:32:00:a1:9a:b3:df:9c:52:72:fa:e4:ed:6e:73:
59:1d:0d:1c:c3:40:f8:aa:0f:12:4f:9b:b8:e8:e0:
2a:c6:a5:74:dd:c4:a5:c4:a5:ee:0f:69:59:bc:29:
20:73:1e:37:c1:c1:00:8e:6a:e6:2a:a8:b6:25:81:
82:1a:68:db:c1:4b:19:bb:f9:67:c3:68:0b:33:76:
9d:3a:02:aa:74:32:d5:94:48:9b:57:4d:82:7f:cb:
d2:3e:01:82:07:54:ef:33:6e:8f:53:25:9d:26:d2:
cd:41:e6:58:6f:1b:84:a2:25:d0:b3:c3:3c:32:48:
b1:79:a8:cd:d7:e5:50:64:82:fa:6c:c6:95:93:73:
5f:d2:5f:ca:77:69:91:d5:7f:84:ae:2d:61:95:c3:
46:70:e9:49:c3:5b:04:74:49:06:1a:68:19:9c:1f:
c1:23:16:f0:76:a5:ed:97:4f:f1:4c:f6:ed:8f:b0:
97:a6:4d:eb:8f:c7:cd:e2:7d:a6:b9:b4:9f:a3:fb:
ab:b3:3d:7f:20:ea:45:08:41:5e:1d:d7:24:23:fd:
d6:d8:3d:59:20:c8:6a:38:c7:4e:dd:76:2b:4b:7c:
b4:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:63:67:31:16:2A:BD:D3:43:D9:C8:75:8A:64:81:FC:D9:6E:07:18
X509v3 Authority Key Identifier:
keyid:CC:1A:9F:72:93:88:C1:69:BA:CC:1C:BA:F9:8E:23:6D:4E:80:8A:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zBqfcpOIwWm6zBy6-Y4jbU6AirQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/871c6b-0f26-4c43-a0aa-7ffc4f40366a/1/zBqfcpOIwWm6zBy6-Y4jbU6AirQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/871c6b-0f26-4c43-a0aa-7ffc4f40366a/1/zBqfcpOIwWm6zBy6-Y4jbU6AirQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:cd:ba:52:25:9d:2e:ca:69:39:59:a4:4d:05:8b:ee:fe:75:
de:0e:32:77:2a:a0:ed:6f:8f:0a:26:6f:1d:32:75:31:87:dd:
c6:fd:37:04:44:fa:98:cc:61:b3:cb:c9:60:b9:30:79:a8:0b:
63:7d:c6:e0:ac:00:12:0b:52:26:41:bb:31:50:be:2d:9a:a9:
a8:91:7c:79:bd:62:e4:a0:64:ef:19:be:48:eb:fa:b2:af:5a:
70:d3:1e:1c:b9:f5:c0:4c:0c:a1:e8:e8:81:bc:bf:5a:6e:11:
0d:9a:e2:5f:97:73:ce:3f:63:b4:58:ef:16:4c:16:8b:4a:a7:
15:0b:8a:b2:5c:d4:73:7c:75:7a:7c:ca:9a:c5:98:0b:7a:59:
ca:7b:80:40:16:30:0b:d0:94:cf:02:a1:68:a3:a0:df:67:44:
1d:eb:73:db:4d:8e:b4:9d:56:2e:90:36:07:8e:5b:1c:83:9c:
d8:5a:f0:2c:9c:0a:a4:26:ee:82:a0:2e:45:e7:e7:ec:be:0b:
45:73:02:09:d8:6d:ac:1d:de:61:33:1e:60:0e:28:bb:fc:fd:
e5:32:f2:e1:7c:4e:48:e2:a9:e2:c3:cf:3a:d0:e2:21:dd:c3:
95:29:a7:84:1d:54:ca:15:7f:8f:e3:23:cb:fe:f2:33:39:af:
71:5d:c4:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:31:12 2026 by rpki-client