This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/aad626-dace-44d8-818d-387afa0a534f/1/ZAsfh3LG70hOLNLWYmPy75j6OWg.mft
File: ZAsfh3LG70hOLNLWYmPy75j6OWg.mft (raw, json)
Hash identifier: 8CeBDHhM/2+/YBmX3JF6i/CwRGngl5zUJCLq+ILcmrw=
Subject key identifier: 4F:8B:FF:A6:B7:45:2C:38:9E:18:67:7A:72:C8:B8:0D:38:3F:FC:6F
Authority key identifier: 64:0B:1F:87:72:C6:EF:48:4E:2C:D2:D6:62:63:F2:EF:98:FA:39:68
Certificate issuer: /CN=640b1f8772c6ef484e2cd2d66263f2ef98fa3968
Certificate serial: 019C4434E9568E234A88EB8F9EBE07A84B5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZAsfh3LG70hOLNLWYmPy75j6OWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/aad626-dace-44d8-818d-387afa0a534f/1/ZAsfh3LG70hOLNLWYmPy75j6OWg.mft
Manifest number: 1811
Signing time: Mon 09 Feb 2026 21:00:44 +0000
Manifest this update: Mon 09 Feb 2026 21:00:44 +0000
Manifest next update: Tue 10 Feb 2026 21:00:44 +0000
Files and hashes: 1: DU8OixuQSBT4wDmFxWVtjuElegU.roa (hash: fAA3Up2hh08gKhdkTQ9YAofCRj3IfUFUPtWpnzTKD+E=)
2: ZAsfh3LG70hOLNLWYmPy75j6OWg.crl (hash: BI+CvQh9jgn7yr3svenLaahVpHw24fO3X4tabXe7aYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/aad626-dace-44d8-818d-387afa0a534f/1/ZAsfh3LG70hOLNLWYmPy75j6OWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/aad626-dace-44d8-818d-387afa0a534f/1/ZAsfh3LG70hOLNLWYmPy75j6OWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZAsfh3LG70hOLNLWYmPy75j6OWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:44:34:e9:56:8e:23:4a:88:eb:8f:9e:be:07:a8:4b:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=640b1f8772c6ef484e2cd2d66263f2ef98fa3968
Validity
Not Before: Feb 9 21:00:44 2026 GMT
Not After : Feb 10 21:00:44 2026 GMT
Subject: CN=4f8bffa6b7452c389e18677a72c8b80d383ffc6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c0:89:8d:f8:8c:1b:11:ff:95:b9:04:4f:31:
73:09:89:92:f5:e0:8a:64:7d:0f:1f:e3:26:39:c3:
13:e6:d1:16:9a:0c:8a:fe:69:17:8d:e7:5f:fc:ac:
8c:c3:77:4a:fe:b1:12:1e:35:9d:cc:d3:fb:07:33:
9a:8a:1e:e8:19:35:16:be:bf:24:7a:83:b0:a3:29:
1a:a6:b4:5b:3d:4d:ab:c3:62:ca:6e:21:ea:2f:62:
ea:db:91:db:10:b1:ab:55:c6:5d:65:de:df:b8:02:
41:53:e2:83:4f:c1:ce:3c:96:71:01:1f:5b:5d:0a:
0f:2f:7d:2a:3a:50:2d:b9:86:fb:dc:08:98:21:55:
0d:d3:ad:4d:ad:4e:7a:35:a8:98:ed:e8:a7:99:4f:
fe:f4:8a:f4:e9:0e:91:27:18:fd:44:93:35:f7:c5:
d2:a9:8e:5c:49:05:b4:6e:47:7e:c8:1b:bd:61:f7:
6c:fc:d8:a6:39:4b:82:ee:22:6c:5b:98:b0:5e:c3:
9f:86:34:df:5b:b5:bf:93:7f:cf:b0:49:50:c3:72:
7b:b9:02:1e:28:6b:1f:75:63:21:7e:5b:b6:bb:d1:
d6:fe:de:b4:e3:2b:e2:a1:72:31:97:95:86:c4:2f:
a9:89:71:95:13:10:83:e2:e7:bb:8d:8d:8f:17:d6:
2c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:8B:FF:A6:B7:45:2C:38:9E:18:67:7A:72:C8:B8:0D:38:3F:FC:6F
X509v3 Authority Key Identifier:
keyid:64:0B:1F:87:72:C6:EF:48:4E:2C:D2:D6:62:63:F2:EF:98:FA:39:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZAsfh3LG70hOLNLWYmPy75j6OWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/aad626-dace-44d8-818d-387afa0a534f/1/ZAsfh3LG70hOLNLWYmPy75j6OWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/aad626-dace-44d8-818d-387afa0a534f/1/ZAsfh3LG70hOLNLWYmPy75j6OWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:72:90:19:1c:20:68:df:8c:ed:a2:cc:3d:0b:a2:4d:51:17:
97:4c:92:02:6c:35:65:ed:9f:b4:a1:66:e4:2c:ae:e5:b5:17:
09:e0:75:f2:cf:87:46:55:31:82:e3:ae:27:77:09:2f:a3:1b:
8a:01:33:60:b7:68:89:1e:d6:de:0c:27:77:2b:4b:69:2a:d4:
85:b2:92:74:86:d0:80:8c:c4:cd:44:1a:db:af:bf:da:ed:59:
85:8d:e0:6a:3e:e0:68:89:55:cc:ab:8e:73:f1:fa:31:68:c9:
8e:b8:53:a0:65:e3:31:97:ba:d9:07:61:74:58:9c:24:db:0f:
16:a6:0c:bb:f8:8a:da:0e:2c:85:ca:3e:bb:f1:f9:7d:af:58:
53:40:ba:92:ca:da:75:ce:92:b3:4f:50:a3:0e:c1:70:62:4b:
90:a2:3e:54:45:2d:21:6d:c9:c9:a2:27:2f:21:7f:1b:f6:a8:
21:2d:f2:6c:fa:bb:26:08:ef:ff:4c:6b:da:3f:12:d0:46:6d:
bc:08:a2:f1:d0:da:25:19:28:70:a0:79:a7:45:bd:66:0c:e0:
51:01:0d:9f:82:1b:16:4f:ee:e5:c1:93:71:1a:0c:a3:84:0b:
53:a1:8a:9e:ab:2f:b5:3f:c9:af:5f:27:00:cc:1a:42:f6:eb:
64:f0:64:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:35:06 2026 by rpki-client