This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/1e4a1c-b14c-46b5-87cc-5d14a0ff6dee/1/zGQrH13XOvfTrQVIfghgAd_5suc.mft
File: zGQrH13XOvfTrQVIfghgAd_5suc.mft (raw, json)
Hash identifier: uQDKMHKalY6j3P+xTRe+nVWafHozrEHZWWHd/aOYiTg=
Subject key identifier: D2:82:C9:A5:12:00:6A:A4:4C:09:3F:7A:28:EB:F7:AD:BD:08:F8:30
Authority key identifier: CC:64:2B:1F:5D:D7:3A:F7:D3:AD:05:48:7E:08:60:01:DF:F9:B2:E7
Certificate issuer: /CN=cc642b1f5dd73af7d3ad05487e086001dff9b2e7
Certificate serial: 019C427D70D0A5DB8CB4BFE417A8159A7BDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zGQrH13XOvfTrQVIfghgAd_5suc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/1e4a1c-b14c-46b5-87cc-5d14a0ff6dee/1/zGQrH13XOvfTrQVIfghgAd_5suc.mft
Manifest number: 05D6
Signing time: Mon 09 Feb 2026 13:00:43 +0000
Manifest this update: Mon 09 Feb 2026 13:00:43 +0000
Manifest next update: Tue 10 Feb 2026 13:00:43 +0000
Files and hashes: 1: JbQaL2RBjoHVTuti7UfCcrYJr_A.roa (hash: iaksrkAEfaFgIKF/4+Tz3YZIiRYiBmDSf/pDYQdploo=)
2: zGQrH13XOvfTrQVIfghgAd_5suc.crl (hash: DRqMGFdwnWN5AbtyWzJTB/c6Q2gVqDLeG0VJUi5VpLQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/1e4a1c-b14c-46b5-87cc-5d14a0ff6dee/1/zGQrH13XOvfTrQVIfghgAd_5suc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/1e4a1c-b14c-46b5-87cc-5d14a0ff6dee/1/zGQrH13XOvfTrQVIfghgAd_5suc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zGQrH13XOvfTrQVIfghgAd_5suc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7d:70:d0:a5:db:8c:b4:bf:e4:17:a8:15:9a:7b:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc642b1f5dd73af7d3ad05487e086001dff9b2e7
Validity
Not Before: Feb 9 13:00:43 2026 GMT
Not After : Feb 10 13:00:43 2026 GMT
Subject: CN=d282c9a512006aa44c093f7a28ebf7adbd08f830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:a4:d9:1f:5c:74:94:ba:29:bb:23:2e:83:ce:
a5:90:b2:38:f9:09:0c:df:44:ce:2c:a3:91:5b:75:
10:10:b9:76:93:c5:12:39:86:07:01:0d:27:36:55:
30:41:21:61:a7:c5:be:66:2a:50:b5:af:82:3a:a0:
29:9b:56:3d:8c:e7:58:cf:a4:63:97:dd:43:f2:b4:
67:dd:e1:8c:e6:9c:91:be:71:9d:28:71:ba:60:52:
c2:7a:8a:9b:40:ec:47:40:63:35:1d:35:df:23:72:
3d:65:73:9d:37:29:db:a6:b5:d7:0e:c7:b0:37:42:
50:d8:6d:ff:34:6a:9d:01:b5:bf:20:dc:c4:b7:85:
1b:5b:61:13:af:14:68:32:dd:f8:88:e1:08:be:5b:
4d:ef:0f:db:03:c1:44:e4:36:6a:5d:c2:98:c3:d3:
e2:43:33:64:03:04:84:18:f8:f0:82:c5:1e:dc:8d:
af:b1:db:49:9a:c5:17:5a:c8:1e:92:da:63:fe:ec:
ff:3b:a4:7f:8b:7b:cb:d9:8d:60:b2:30:35:0d:5e:
77:da:c9:b9:70:97:8b:53:26:18:95:df:d0:c6:08:
45:da:98:db:22:6f:48:0b:97:f9:60:f6:4d:3b:8a:
f6:99:94:37:b3:9c:04:a2:2b:ac:c9:b3:b9:8b:14:
23:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:82:C9:A5:12:00:6A:A4:4C:09:3F:7A:28:EB:F7:AD:BD:08:F8:30
X509v3 Authority Key Identifier:
keyid:CC:64:2B:1F:5D:D7:3A:F7:D3:AD:05:48:7E:08:60:01:DF:F9:B2:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zGQrH13XOvfTrQVIfghgAd_5suc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/1e4a1c-b14c-46b5-87cc-5d14a0ff6dee/1/zGQrH13XOvfTrQVIfghgAd_5suc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/1e4a1c-b14c-46b5-87cc-5d14a0ff6dee/1/zGQrH13XOvfTrQVIfghgAd_5suc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:29:a9:7e:f2:b6:95:47:f8:54:ec:08:f4:a5:91:88:f8:88:
64:af:3f:f7:16:64:23:5c:3a:e7:c6:47:7d:30:28:dd:88:8d:
89:dd:8e:5d:a0:0c:63:0c:08:42:88:74:a3:55:56:d6:9b:e4:
37:da:28:b1:00:a5:47:06:95:59:93:23:3a:17:d1:94:44:b7:
52:c7:db:d1:72:15:8d:56:42:90:5c:02:3f:e9:73:86:be:1c:
8a:18:98:80:ec:ef:57:61:5b:d1:3c:ac:d3:97:36:78:60:f1:
15:09:a0:cc:b8:01:4c:51:49:a6:6f:9d:f1:33:e7:95:69:66:
cd:da:b4:92:aa:fe:26:24:dd:09:0a:c2:31:bd:b1:7a:54:48:
b8:aa:04:16:c1:d9:e3:22:0d:13:14:52:b4:18:12:72:ea:5d:
3a:39:0a:3f:25:63:5d:39:95:9d:c8:ec:54:75:ed:3c:d1:13:
d0:30:d1:58:bb:21:f8:3e:dd:a3:cd:3e:2f:ae:0c:11:ff:0f:
fa:c7:d3:3a:80:20:e3:dd:8b:e5:ab:88:4c:52:d8:cc:d7:ad:
94:c0:d8:53:b3:8a:03:aa:0a:1c:c3:9a:8f:1a:e5:d7:41:29:
6c:59:71:0d:46:86:7a:1a:a7:63:bb:1b:6f:5a:9c:d6:95:0f:
81:e2:ff:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:59:23 2026 by rpki-client