This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.mft
File: zisQ2JtVN5E1AxJ-uHImr7idGy0.mft (raw, json)
Hash identifier: liMVjeq8EfkE7Ns0sgNKVU4LdSsX4MwI8aq0csobthQ=
Subject key identifier: C1:EB:D3:BA:7C:F1:59:99:DF:53:E7:78:41:4B:84:9F:00:03:F8:85
Authority key identifier: CE:2B:10:D8:9B:55:37:91:35:03:12:7E:B8:72:26:AF:B8:9D:1B:2D
Certificate issuer: /CN=ce2b10d89b5537913503127eb87226afb89d1b2d
Certificate serial: 019C41D9033C71FC2E392F6094B263A0DCF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zisQ2JtVN5E1AxJ-uHImr7idGy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.mft
Manifest number: 1810
Signing time: Mon 09 Feb 2026 10:01:07 +0000
Manifest this update: Mon 09 Feb 2026 10:01:07 +0000
Manifest next update: Tue 10 Feb 2026 10:01:07 +0000
Files and hashes: 1: vZ8MxOiXegtHuoU9azc_92OWfV4.roa (hash: iwh0Pl3Hne1gOnuU6enDkJTWZ+3nLBGQ17Ta8mwUfwg=)
2: zisQ2JtVN5E1AxJ-uHImr7idGy0.crl (hash: xMosxllKCzQLG6dp5yVbBT+bV0lZwX2kalXbD7Gmes8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zisQ2JtVN5E1AxJ-uHImr7idGy0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 10:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:d9:03:3c:71:fc:2e:39:2f:60:94:b2:63:a0:dc:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce2b10d89b5537913503127eb87226afb89d1b2d
Validity
Not Before: Feb 9 10:01:07 2026 GMT
Not After : Feb 10 10:01:07 2026 GMT
Subject: CN=c1ebd3ba7cf15999df53e778414b849f0003f885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:98:1f:52:0f:52:32:21:45:04:3e:b9:e3:a3:
2d:35:56:99:fa:ad:05:dc:d3:80:93:a2:5b:b0:b2:
49:3a:7b:f8:5d:a7:49:25:02:a4:8c:24:96:be:42:
24:6a:a5:2a:f4:72:e1:d2:72:2b:85:a7:e4:59:22:
80:fc:fc:ba:f3:7b:67:27:3a:ae:43:ad:45:b6:47:
62:cc:5a:96:bb:68:f5:3e:d2:f2:cd:f4:72:b2:96:
f0:d6:c9:bc:10:a9:fa:dc:d4:d6:49:ed:38:40:a0:
af:04:30:ec:5c:54:d9:6f:eb:5c:46:b3:ec:40:5a:
ae:bb:60:3c:27:25:2c:63:be:c4:43:09:01:b4:48:
40:e1:28:61:2d:c9:2d:54:f6:7b:ce:d5:c9:71:0b:
54:13:07:a5:63:7c:9a:86:bb:ad:05:84:f3:38:84:
c3:d5:98:1a:79:71:94:c2:7a:d5:e7:de:5c:0e:8f:
1a:33:56:94:0b:10:6c:e0:aa:d0:3f:ac:dc:91:16:
bb:18:8d:24:58:ec:7f:ce:18:f1:6b:9e:d3:d0:44:
96:7a:e5:42:a7:b1:76:4d:1f:44:68:7f:7b:f4:51:
4a:57:0f:6e:49:56:64:70:91:c8:df:60:dc:a4:76:
98:a6:bb:b5:24:ee:2b:87:4c:ad:8e:c0:77:d1:dc:
5c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:EB:D3:BA:7C:F1:59:99:DF:53:E7:78:41:4B:84:9F:00:03:F8:85
X509v3 Authority Key Identifier:
keyid:CE:2B:10:D8:9B:55:37:91:35:03:12:7E:B8:72:26:AF:B8:9D:1B:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zisQ2JtVN5E1AxJ-uHImr7idGy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:3e:0c:47:79:ed:93:40:ad:19:83:f1:3f:81:f3:6e:10:82:
a7:63:4d:2a:4f:eb:30:00:c7:05:6f:ed:51:b1:e8:f2:fc:21:
ad:04:36:56:73:bb:2d:f6:df:b6:4b:92:44:43:c2:bd:cf:ec:
31:e3:ce:24:91:52:65:f8:2a:b7:88:db:22:3d:40:e7:cf:ec:
9c:75:a8:d7:4e:6e:8c:55:2a:5f:48:fb:7d:73:05:e6:06:b3:
c5:95:99:08:4b:5f:a5:3f:8f:03:e6:d5:e1:bf:8f:d5:3a:a0:
fd:b4:16:4b:d5:c8:3e:c3:de:c4:c3:72:39:1b:bb:10:0d:ca:
cf:a8:25:47:bc:19:44:ec:11:e3:cc:7e:ed:8b:9a:61:cc:8f:
5b:84:71:eb:0c:5f:79:60:ad:9f:71:2c:e3:64:2a:10:1e:8f:
22:de:49:78:2b:4b:0a:ac:fb:3a:39:3c:a4:c0:1d:6c:ca:25:
4b:f2:da:c3:c8:5f:98:d8:75:71:b0:cf:b4:de:fd:d7:16:61:
23:1e:f3:c3:c7:3e:21:f1:b9:60:d3:3c:76:a8:79:1c:72:59:
6d:c9:47:02:e3:b7:88:59:8c:40:69:6c:2c:28:71:b0:e3:6e:
27:db:56:78:74:cb:1c:14:e8:2b:f5:12:6d:12:b9:a4:88:19:
60:59:1e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:30:57 2026 by rpki-client