This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.mft
File: ZCurhFmUi3l0dkjhPpm50KWCUGo.mft (raw, json)
Hash identifier: oswZoBoyPKmlmcUqNBP+cSK1w1bCzRewXZJjkJGqKZk=
Subject key identifier: C0:D7:1A:59:3A:08:1C:37:53:64:C5:08:47:0F:CD:F8:59:CE:6D:E9
Authority key identifier: 64:2B:AB:84:59:94:8B:79:74:76:48:E1:3E:99:B9:D0:A5:82:50:6A
Certificate issuer: /CN=642bab8459948b79747648e13e99b9d0a582506a
Certificate serial: 019C43C73081ECFD554CE2C2D16616982ED8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZCurhFmUi3l0dkjhPpm50KWCUGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.mft
Manifest number: 0B7A
Signing time: Mon 09 Feb 2026 19:00:53 +0000
Manifest this update: Mon 09 Feb 2026 19:00:53 +0000
Manifest next update: Tue 10 Feb 2026 19:00:53 +0000
Files and hashes: 1: 5tnuY_EervGGDUz3gXIn8wuI43w.roa (hash: uBzgwllDY08L9s6zjrsvT8VveqDxCL0p3GokO0+Zm4I=)
2: ZCurhFmUi3l0dkjhPpm50KWCUGo.crl (hash: COHPTnq6pcYGm6Fc+EPGt/ox6sMLWpKurs14yMK/Pfs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZCurhFmUi3l0dkjhPpm50KWCUGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:c7:30:81:ec:fd:55:4c:e2:c2:d1:66:16:98:2e:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=642bab8459948b79747648e13e99b9d0a582506a
Validity
Not Before: Feb 9 19:00:53 2026 GMT
Not After : Feb 10 19:00:53 2026 GMT
Subject: CN=c0d71a593a081c375364c508470fcdf859ce6de9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e7:78:9c:4f:2d:fd:41:fa:45:f8:21:fa:72:
37:84:5e:65:3b:6a:0c:e7:ed:6d:56:a7:f4:52:a4:
a4:0e:74:3a:1c:e2:47:f4:b5:8d:92:91:cf:a5:64:
50:2d:13:26:1b:ca:3b:fc:bb:df:29:03:bc:fd:6d:
36:72:d7:cc:ea:31:9c:39:69:4d:96:80:4a:ba:fa:
ee:b8:9c:b7:28:1d:53:8d:e6:74:3d:b6:31:dc:96:
33:1b:8c:d0:4b:4f:23:62:20:89:87:f2:bb:8d:b3:
3b:68:67:12:8b:83:c6:ff:24:ed:9a:a5:88:cf:a1:
48:eb:9e:5d:a6:fa:43:ea:04:1f:1a:ce:1d:05:b6:
e4:b4:3c:c7:80:9a:13:db:9d:04:3d:58:4a:c6:b7:
a7:25:5b:74:8e:3c:39:d4:6f:1a:05:04:ff:a1:91:
d3:c3:2a:f4:ce:a3:84:e2:0b:57:7b:72:5d:40:74:
7c:a7:30:f3:7a:f6:cd:9f:51:05:9a:7e:a7:bd:e8:
cb:a6:1e:f3:fc:4b:c8:ac:b7:1f:25:37:eb:f5:3a:
f3:24:5e:6f:bc:75:15:ec:3b:c6:08:6f:d6:46:dd:
87:a3:23:90:5f:b3:fa:12:2f:84:86:15:d1:d6:bd:
ce:3f:ce:84:91:31:09:04:2c:ea:ff:e6:21:00:a3:
63:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:D7:1A:59:3A:08:1C:37:53:64:C5:08:47:0F:CD:F8:59:CE:6D:E9
X509v3 Authority Key Identifier:
keyid:64:2B:AB:84:59:94:8B:79:74:76:48:E1:3E:99:B9:D0:A5:82:50:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCurhFmUi3l0dkjhPpm50KWCUGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:80:ce:12:e2:03:50:e9:e0:0d:9c:81:3f:46:ff:05:ab:c2:
85:ce:f6:3f:db:b7:f2:5e:1d:1f:b8:a8:20:e1:61:e4:1e:1f:
aa:4c:50:20:89:e9:d3:d5:a6:9d:0c:e6:39:6c:80:b1:af:76:
3f:86:54:52:4b:3c:0d:e0:a5:df:ae:1d:cd:ec:2f:5a:28:fa:
c7:51:69:f9:ab:32:c0:1e:a6:28:14:d7:db:b0:a3:a8:de:64:
7f:c0:a9:28:0c:80:cb:64:3e:1f:a2:eb:b9:cf:ee:da:0d:fa:
ae:61:db:f7:64:07:d7:9e:76:fa:40:8d:f0:bc:90:e2:87:59:
c1:39:84:46:e0:37:2d:4b:86:a4:9d:8e:33:d5:34:9c:cf:42:
d6:1d:d4:53:6b:a2:11:92:a5:61:10:74:b9:1d:ea:78:40:69:
95:30:a2:d6:57:47:b0:c7:42:99:87:1d:10:66:8a:e9:ac:f8:
cb:2a:61:3e:41:68:73:8c:81:a4:c9:67:58:8e:7e:0b:23:24:
5d:7c:e8:d0:31:18:94:4c:5b:e9:1e:dd:e3:f7:5f:47:e2:2f:
fb:d7:19:95:5e:ba:ab:94:18:63:ec:60:94:c8:15:20:85:f5:
7e:7a:c1:f6:ac:93:c4:ef:12:cd:28:f0:bb:f5:6c:22:73:ee:
11:77:f3:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:40:29 2026 by rpki-client