This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.mft
File: zlY2BiTMG0xJ2nK8Ml9btqtNgwA.mft (raw, json)
Hash identifier: JDmNIiE9hm7gIcqfW/UuMJLlnsogn7Vx7weebhnJcnQ=
Subject key identifier: 3F:3D:1B:B2:0B:41:01:D5:1D:0A:40:3A:78:C7:37:0F:B8:C4:BC:98
Authority key identifier: CE:56:36:06:24:CC:1B:4C:49:DA:72:BC:32:5F:5B:B6:AB:4D:83:00
Certificate issuer: /CN=ce56360624cc1b4c49da72bc325f5bb6ab4d8300
Certificate serial: 019C420FBC283EFF6D053798ED47D0EEBE32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.mft
Manifest number: 08AC
Signing time: Mon 09 Feb 2026 11:00:53 +0000
Manifest this update: Mon 09 Feb 2026 11:00:53 +0000
Manifest next update: Tue 10 Feb 2026 11:00:53 +0000
Files and hashes: 1: Fq4x87XmupBOAkCisYEcN7XqoZE.roa (hash: xhD7nGAh96AYY5dfhK9D1eKT7BFTs6JVCiD3DWI5RbU=)
2: GNvJW18bYA7Iq3h7nGvfqYocolI.roa (hash: FgGibrDdMqKVVsL/e+tMDlZ3wp8xt85KBE6mvBGDeGA=)
3: NC1kNBCi5IA0F53iafyWv28tEdg.roa (hash: 8XZEHga4sRd8LXiMX0n/9qmmvIkKf8zzb9XvKz8gxCo=)
4: _C1dxAYzgojRgjfg932a5o53DHI.roa (hash: MWoWdwypjbLGhZ5K85xQtJNC5yRCwOAiowUMTjpjyv8=)
5: mX5I2M6iUKt8zF4BPfPZOGSFhgk.roa (hash: 0QO3Ga/khcmLBiYg4OsBbI4MsveK0cBOujs5qnZ+UZ4=)
6: zlY2BiTMG0xJ2nK8Ml9btqtNgwA.crl (hash: /tlJLSwufxu1TBknXTa7u/AWUKXS/3yq5vVFh+zBKGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:0f:bc:28:3e:ff:6d:05:37:98:ed:47:d0:ee:be:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce56360624cc1b4c49da72bc325f5bb6ab4d8300
Validity
Not Before: Feb 9 11:00:53 2026 GMT
Not After : Feb 10 11:00:53 2026 GMT
Subject: CN=3f3d1bb20b4101d51d0a403a78c7370fb8c4bc98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:37:5b:d6:46:c2:df:29:ee:50:d5:ce:54:b9:
b5:79:fe:d8:8f:93:fb:3f:14:ff:bd:f8:83:6a:c9:
9f:be:d4:46:73:56:2b:22:9b:42:7c:89:57:33:49:
f2:66:90:63:f4:22:3f:2a:a1:93:31:bb:6e:5e:42:
b4:a8:70:62:7b:56:41:b0:9a:ea:19:d8:d7:66:d8:
6e:21:1b:b8:39:17:01:cd:16:38:28:cb:97:06:d2:
61:ae:e3:0f:3b:a1:04:91:5d:53:33:ed:49:83:1a:
8b:6d:b1:44:9a:0c:8e:4c:e4:78:0e:b7:70:0d:de:
19:9e:aa:d6:31:b1:dd:bc:98:91:03:2e:54:7b:bb:
80:df:42:11:3b:53:18:28:e3:dc:b6:21:e2:4f:5e:
89:e7:0a:1c:ce:b5:4f:00:1a:1a:c3:73:4b:28:c4:
17:16:9c:58:1a:7a:41:a6:d9:92:f4:4f:17:b3:34:
64:34:7c:3c:61:14:b3:23:05:56:d9:51:7c:63:62:
a2:51:8f:71:f1:98:2e:6e:88:04:b4:e4:bf:26:d6:
c2:23:f1:f3:57:64:7c:aa:4b:68:f5:e0:b4:90:56:
a8:0e:f9:14:ae:ac:d8:b9:5c:85:a6:5a:6b:ce:a0:
70:88:76:0d:9b:c9:f4:cc:fd:55:ad:92:70:09:6d:
aa:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:3D:1B:B2:0B:41:01:D5:1D:0A:40:3A:78:C7:37:0F:B8:C4:BC:98
X509v3 Authority Key Identifier:
keyid:CE:56:36:06:24:CC:1B:4C:49:DA:72:BC:32:5F:5B:B6:AB:4D:83:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:f0:f7:1c:62:02:1d:9b:c0:5d:a6:f3:a3:fa:d4:1c:c4:33:
d7:ee:ff:b8:a8:01:98:ee:a5:d3:70:02:07:19:9b:f2:a4:fa:
b1:6a:cf:62:96:27:63:84:ab:ed:36:14:85:8e:1a:8c:f0:92:
9a:f5:c4:6b:a7:5b:7e:94:c1:45:82:50:aa:cb:19:30:bb:ca:
8a:fa:f7:e5:f5:d4:d7:e9:d8:92:5f:09:ec:32:8e:3f:29:4c:
35:4b:9c:27:db:a3:71:68:cb:fd:8c:00:a3:20:2b:d8:ba:3e:
8f:a8:29:21:31:23:0d:27:3a:5e:cb:1f:91:26:2f:aa:6f:79:
9f:98:c6:e9:67:c4:82:c7:a1:1f:87:69:d4:05:53:68:e2:15:
1c:e1:4c:51:c3:4b:11:20:93:ea:be:e7:fa:76:bf:3d:a2:c5:
64:a1:e5:0f:85:58:5a:15:b8:dc:93:5d:8c:fc:57:64:9d:01:
a1:95:87:b8:3a:88:ed:71:99:95:dd:2b:58:28:47:bc:8f:b4:
5b:e1:1b:35:78:55:6b:96:73:cb:8e:22:58:a5:3a:f9:27:aa:
6c:2b:11:e8:23:31:12:8d:14:ed:18:fb:e2:4f:4e:a2:2f:f3:
3f:64:5f:39:d8:ab:f8:c5:7a:9c:67:f2:87:41:3a:33:4f:2d:
e9:b8:8b:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:02:12 2026 by rpki-client