This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft
File: CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft (raw, json)
Hash identifier: dHr8H6jHqK1opggFdh4bFPI5TDQAK0WfRRirq114ie8=
Subject key identifier: AC:7F:18:86:99:11:99:9D:D2:54:61:2D:36:F0:F1:DD:BF:A2:CF:6E
Authority key identifier: 09:9D:A0:6B:80:FA:74:90:68:02:8B:59:7B:E3:E5:0E:8B:11:87:86
Certificate issuer: /CN=099da06b80fa749068028b597be3e50e8b118786
Certificate serial: 019C360C1A6B9C1CCBF4BCC690B24684A3EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZ2ga4D6dJBoAotZe-PlDosRh4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft
Manifest number: 0624
Signing time: Sat 07 Feb 2026 03:01:28 +0000
Manifest this update: Sat 07 Feb 2026 03:01:28 +0000
Manifest next update: Sun 08 Feb 2026 03:01:28 +0000
Files and hashes: 1: CZ2ga4D6dJBoAotZe-PlDosRh4Y.crl (hash: e3IixsHKGq5SVPcWvU+K49BDnP7BBAkhhMIyR/TRzNw=)
2: G33itK1qq3WeYfI2JZv_Df-F-kM.roa (hash: M48oQ7e0L/CLHTbH2STVHWlHyf+bv796hviSQB+beow=)
3: lSqq2t5j5uhQNwBWbI6WL7tpfgY.roa (hash: O4mt9ymqocsZDQGjjG1ro7L0no6+r2S8A/5/+O3vsZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZ2ga4D6dJBoAotZe-PlDosRh4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Feb 2026 02:16:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:36:0c:1a:6b:9c:1c:cb:f4:bc:c6:90:b2:46:84:a3:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099da06b80fa749068028b597be3e50e8b118786
Validity
Not Before: Feb 7 03:01:28 2026 GMT
Not After : Feb 8 03:01:28 2026 GMT
Subject: CN=ac7f18869911999dd254612d36f0f1ddbfa2cf6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:de:0e:02:d1:09:3b:69:91:75:13:89:95:4a:
1e:db:93:2c:d0:1b:16:bc:42:37:51:9c:ce:6e:0a:
b0:cb:17:10:b3:d9:9a:6a:08:1e:48:13:ff:b5:72:
dc:49:08:7c:fa:b6:3f:5c:aa:5f:cc:a3:f6:a8:21:
57:4e:26:13:b3:da:ae:1a:b4:6a:0a:a0:7f:ec:7a:
1c:9a:a5:e5:bb:65:d2:80:e1:87:ab:b1:fd:8a:0e:
1c:02:80:da:a0:67:44:1e:f8:be:d2:50:99:11:ad:
7d:1d:e6:32:64:be:f7:27:9f:eb:20:ee:bb:ff:4d:
87:d0:cf:46:62:7b:54:35:c0:92:6d:fe:44:db:8a:
87:91:9a:29:92:e6:5b:a2:52:17:6b:fe:1d:f0:45:
b9:19:ff:ec:fb:98:e2:21:0a:24:d0:67:bf:de:2a:
6a:e9:df:a0:7d:24:18:13:fb:19:d1:3d:b6:fb:55:
11:ca:07:f5:34:54:a7:df:52:cd:49:6c:c3:dc:9a:
15:a6:af:a7:2e:12:7f:cd:6a:89:39:bb:c4:cc:cf:
37:4b:64:a5:5d:c5:d2:2f:1f:be:ba:ad:b5:cf:59:
82:b0:dd:ee:51:28:dc:35:ef:fa:59:a9:a4:2a:2c:
e5:ea:17:b2:6e:27:bf:49:09:77:b3:98:36:ca:2e:
de:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:7F:18:86:99:11:99:9D:D2:54:61:2D:36:F0:F1:DD:BF:A2:CF:6E
X509v3 Authority Key Identifier:
keyid:09:9D:A0:6B:80:FA:74:90:68:02:8B:59:7B:E3:E5:0E:8B:11:87:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZ2ga4D6dJBoAotZe-PlDosRh4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:f3:34:a1:70:51:9d:64:c5:64:89:64:78:5a:2a:ca:87:3a:
17:f3:ee:5c:07:fb:13:cc:a2:5f:64:18:a4:4f:b6:57:14:0e:
59:f1:b0:3b:e0:a1:1c:6a:73:d3:d8:4f:fb:a9:2e:79:fc:75:
5e:6d:0a:f6:fd:da:7b:b3:dc:ce:5e:3b:cf:e8:45:b0:4f:94:
56:8c:d0:85:df:06:bf:41:ac:01:6f:0d:15:12:ed:a8:38:34:
a7:32:44:0e:31:f2:f5:70:ff:51:7e:d6:63:86:33:ca:77:e2:
38:26:ef:23:8d:7b:94:70:04:c0:e1:5a:b2:3f:d7:9f:69:d5:
b7:cd:58:d4:9b:7e:cd:8d:ae:54:73:0e:28:a4:5a:51:c6:b1:
c5:af:b7:59:37:c2:df:d2:e7:d0:00:d5:93:e2:ba:86:c9:7a:
0b:86:5f:b7:32:16:35:f8:cd:ae:6f:95:0d:24:83:02:37:51:
10:fe:1e:54:a0:1e:3a:e7:64:11:0a:c5:98:b2:a8:6f:81:d2:
ea:98:53:d7:e1:c3:d0:8d:1d:8d:9a:86:de:5d:89:54:98:71:
84:24:bd:58:b4:54:e6:a1:49:4b:15:3c:02:d2:f7:cd:77:06:
b6:e5:42:47:b4:9b:6e:92:3c:fb:1d:c2:9b:b3:e6:23:48:b2:
f7:96:78:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZw2DBprnBzL9LzGkLJGhKPqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5OWRhMDZiODBmYTc0OTA2ODAyOGI1OTdiZTNlNTBlOGIx
MTg3ODYwHhcNMjYwMjA3MDMwMTI4WhcNMjYwMjA4MDMwMTI4WjAzMTEwLwYDVQQD
EyhhYzdmMTg4Njk5MTE5OTlkZDI1NDYxMmQzNmYwZjFkZGJmYTJjZjZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7t4OAtEJO2mRdROJlUoe25Ms0BsW
vEI3UZzObgqwyxcQs9maaggeSBP/tXLcSQh8+rY/XKpfzKP2qCFXTiYTs9quGrRq
CqB/7HocmqXlu2XSgOGHq7H9ig4cAoDaoGdEHvi+0lCZEa19HeYyZL73J5/rIO67
/02H0M9GYntUNcCSbf5E24qHkZopkuZbolIXa/4d8EW5Gf/s+5jiIQok0Ge/3ipq
6d+gfSQYE/sZ0T22+1URygf1NFSn31LNSWzD3JoVpq+nLhJ/zWqJObvEzM83S2Sl
XcXSLx++uq21z1mCsN3uUSjcNe/6WamkKizl6heybie/SQl3s5g2yi7eSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKx/GIaZEZmd0lRhLTbw8d2/os9uMB8GA1UdIwQY
MBaAFAmdoGuA+nSQaAKLWXvj5Q6LEYeGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1oyZ2E0RDZkSkJvQW90WmUtUGxEb3NSaDRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9iNDA0YzctYmQzZC00NzUyLThhZGUt
MzFmY2M0NTU1NzVlLzEvQ1oyZ2E0RDZkSkJvQW90WmUtUGxEb3NSaDRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9iNDA0YzctYmQzZC00NzUyLThhZGUtMzFmY2M0NTU1NzVl
LzEvQ1oyZ2E0RDZkSkJvQW90WmUtUGxEb3NSaDRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiPM0oXBR
nWTFZIlkeFoqyoc6F/PuXAf7E8yiX2QYpE+2VxQOWfGwO+ChHGpz09hP+6kuefx1
Xm0K9v3ae7Pczl47z+hFsE+UVozQhd8Gv0GsAW8NFRLtqDg0pzJEDjHy9XD/UX7W
Y4YzynfiOCbvI417lHAEwOFasj/Xn2nVt81Y1Jt+zY2uVHMOKKRaUcaxxa+3WTfC
39Ln0ADVk+K6hsl6C4ZftzIWNfjNrm+VDSSDAjdREP4eVKAeOudkEQrFmLKob4HS
6phT1+HD0I0djZqG3l2JVJhxhCS9WLRU5qFJSxU8AtL3zXcGtuVCR7SbbpI8+x3C
m7PmI0iy95Z45Q==
-----END CERTIFICATE-----
Generated at Sat Feb 7 12:15:58 2026 by rpki-client