This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/b0d3ba-eedb-476e-ade4-66a6adb1dc91/1/zvcELPfCTHnXmEiy6MqzNXpkD9s.mft
File: zvcELPfCTHnXmEiy6MqzNXpkD9s.mft (raw, json)
Hash identifier: BCsRmOfUoOtEudISgjgJsiiqcqiXizTJX1j3G6hcufs=
Subject key identifier: DB:09:6B:59:61:C5:AE:80:D1:74:92:B2:87:66:7E:D4:3C:5A:BA:3C
Authority key identifier: CE:F7:04:2C:F7:C2:4C:79:D7:98:48:B2:E8:CA:B3:35:7A:64:0F:DB
Certificate issuer: /CN=cef7042cf7c24c79d79848b2e8cab3357a640fdb
Certificate serial: 019C4133B2A379B4E8133B2CD24345A1C5CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvcELPfCTHnXmEiy6MqzNXpkD9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/b0d3ba-eedb-476e-ade4-66a6adb1dc91/1/zvcELPfCTHnXmEiy6MqzNXpkD9s.mft
Manifest number: 0A2D
Signing time: Mon 09 Feb 2026 07:00:32 +0000
Manifest this update: Mon 09 Feb 2026 07:00:32 +0000
Manifest next update: Tue 10 Feb 2026 07:00:32 +0000
Files and hashes: 1: zvcELPfCTHnXmEiy6MqzNXpkD9s.crl (hash: jIrRAYa7pTyjO+xrM7eCY6uqKMcRetIvlrY0FeyWTa4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/b0d3ba-eedb-476e-ade4-66a6adb1dc91/1/zvcELPfCTHnXmEiy6MqzNXpkD9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/b0d3ba-eedb-476e-ade4-66a6adb1dc91/1/zvcELPfCTHnXmEiy6MqzNXpkD9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvcELPfCTHnXmEiy6MqzNXpkD9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 07:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:33:b2:a3:79:b4:e8:13:3b:2c:d2:43:45:a1:c5:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cef7042cf7c24c79d79848b2e8cab3357a640fdb
Validity
Not Before: Feb 9 07:00:32 2026 GMT
Not After : Feb 10 07:00:32 2026 GMT
Subject: CN=db096b5961c5ae80d17492b287667ed43c5aba3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:23:44:5c:c7:98:bb:60:4a:58:53:3e:64:b6:
df:cd:da:68:a8:0e:66:43:69:5e:ef:09:c5:0a:e3:
0a:e7:96:60:39:11:72:74:59:0f:0f:2e:0a:fd:c9:
28:e4:f9:9a:5d:95:9f:60:6b:e9:49:74:53:4b:0d:
06:26:d1:f4:78:ff:da:6a:b1:4c:6d:59:bb:48:57:
b1:7e:e4:56:75:fd:f6:5e:4e:99:a0:ca:c0:45:c1:
db:07:c9:de:9f:82:52:25:d1:28:2f:ee:0d:e1:a1:
ef:26:d2:2d:8a:e3:3a:ee:cf:ea:2d:87:bf:14:6d:
19:ce:a1:63:64:5b:93:55:34:4c:06:21:97:0c:19:
23:2c:e9:5f:7d:b9:32:84:3e:fd:14:9e:4c:73:a1:
bf:90:e6:e8:b4:6e:ee:cf:c2:c2:8c:0b:e5:d1:50:
00:7e:5b:61:f2:7b:44:f6:4f:91:46:13:7d:c8:c8:
89:d0:80:8b:5d:4b:67:3d:e7:82:1e:75:08:3e:57:
14:13:3b:6a:8a:af:f5:e6:a4:ba:c8:1c:61:6c:09:
c6:e0:bc:de:2c:52:29:7d:c6:a2:f4:c2:08:0b:9b:
dd:8f:92:4e:e2:e5:25:91:aa:c8:87:c6:60:44:fc:
6c:5b:41:30:78:1e:ef:2d:1d:e3:d1:e8:5d:14:7f:
6b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:09:6B:59:61:C5:AE:80:D1:74:92:B2:87:66:7E:D4:3C:5A:BA:3C
X509v3 Authority Key Identifier:
keyid:CE:F7:04:2C:F7:C2:4C:79:D7:98:48:B2:E8:CA:B3:35:7A:64:0F:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvcELPfCTHnXmEiy6MqzNXpkD9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b0d3ba-eedb-476e-ade4-66a6adb1dc91/1/zvcELPfCTHnXmEiy6MqzNXpkD9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b0d3ba-eedb-476e-ade4-66a6adb1dc91/1/zvcELPfCTHnXmEiy6MqzNXpkD9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:bb:ca:51:55:96:91:12:2e:29:a5:42:d7:12:8a:b5:6b:b9:
46:67:f6:42:15:c0:87:83:49:57:da:04:0f:c5:ef:e5:a2:1d:
53:21:63:cf:77:a7:0c:23:86:83:c7:cd:32:fa:54:1a:09:99:
02:0d:a4:b5:f1:9c:65:a3:b2:8a:9f:ef:94:e6:bf:c7:d8:d5:
cf:5f:1c:56:15:34:1d:ec:23:f6:39:cb:fb:ec:c7:ab:be:b6:
f9:e5:17:06:da:1d:d4:73:c4:c4:9e:ea:3e:ef:95:75:b4:52:
a3:1b:4b:1b:ae:df:d8:67:bd:4f:e0:01:2e:2b:67:b2:34:4b:
4a:06:51:86:48:54:4a:f2:bd:83:2b:db:74:71:63:a7:5a:44:
b3:c1:61:0a:06:92:a0:1f:4b:80:0a:7d:30:d3:12:62:a7:46:
7c:fe:5a:da:a0:21:bd:83:2b:1a:a5:d2:f5:a9:7e:d7:72:e9:
12:1d:7e:27:87:23:8e:15:b0:ad:c3:93:ef:4b:32:d6:cc:d4:
af:2e:ff:e6:f1:7f:9d:04:a8:e7:84:bc:b9:62:ba:30:11:a1:
db:4a:a8:ca:bd:ad:42:6a:13:2b:8f:82:39:09:6d:30:b9:95:
25:f5:3d:49:fe:4d:5e:3f:9c:26:b8:66:20:96:3d:f2:09:59:
b8:4d:c6:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:56:24 2026 by rpki-client