This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/bc3441-3e8f-44ed-913e-ed78cb76661c/1/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.mft
File: Z4vWSQc2RsH0w7AcrKpy4gnp2v8.mft (raw, json)
Hash identifier: 8G8cr1pr51ZWF7ciCbPzdteNW7SMw21EwAsPfbY0Y00=
Subject key identifier: 47:67:B1:41:0C:E3:A5:1B:D2:B9:18:95:14:0E:00:DF:A7:28:6D:37
Authority key identifier: 67:8B:D6:49:07:36:46:C1:F4:C3:B0:1C:AC:AA:72:E2:09:E9:DA:FF
Certificate issuer: /CN=678bd649073646c1f4c3b01cacaa72e209e9daff
Certificate serial: 019C4358FA32A599B018593C1201FFF53D24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/bc3441-3e8f-44ed-913e-ed78cb76661c/1/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.mft
Manifest number: 0E9E
Signing time: Mon 09 Feb 2026 17:00:30 +0000
Manifest this update: Mon 09 Feb 2026 17:00:30 +0000
Manifest next update: Tue 10 Feb 2026 17:00:30 +0000
Files and hashes: 1: T2P54fQEJ29T8zkG4REnv1KBcII.roa (hash: PRiFWXA5qsnF671GN/Mmlr54ZQnO2Um/bwjz6a5tUPw=)
2: Z4vWSQc2RsH0w7AcrKpy4gnp2v8.crl (hash: xUO4x7cgCO0Z4D+Pr7p4EWSkTs7PqOU/GZK4nTSoPT0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/bc3441-3e8f-44ed-913e-ed78cb76661c/1/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/bc3441-3e8f-44ed-913e-ed78cb76661c/1/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:58:fa:32:a5:99:b0:18:59:3c:12:01:ff:f5:3d:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=678bd649073646c1f4c3b01cacaa72e209e9daff
Validity
Not Before: Feb 9 17:00:30 2026 GMT
Not After : Feb 10 17:00:30 2026 GMT
Subject: CN=4767b1410ce3a51bd2b91895140e00dfa7286d37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6c:35:9a:a7:41:f1:07:8e:09:44:a5:c1:73:
6c:b7:b3:90:43:48:27:c7:94:37:e6:80:9a:4b:11:
d6:cf:f3:92:d4:83:4d:2e:19:04:79:f2:ba:86:b8:
fa:17:16:d5:41:d0:86:ca:52:8d:ad:88:7b:ea:4e:
02:e4:3c:0c:de:de:07:8a:1b:42:d7:73:51:1b:df:
75:1c:7f:dc:7d:53:06:36:9a:c4:45:39:8b:49:93:
f1:2c:d3:9b:66:c2:96:01:5a:66:c4:b4:57:33:5b:
51:d9:4a:e9:53:fe:b9:3e:71:04:43:1f:d5:d6:cf:
39:7e:4a:5f:69:33:52:d0:0b:7f:de:a9:2f:a7:41:
83:39:57:fd:b5:90:98:6d:5f:7b:a9:90:31:c3:9c:
05:01:04:35:4a:14:cb:44:b6:cb:a1:2b:b5:bb:aa:
28:d5:59:df:ee:ed:2a:fc:cb:ff:66:0a:43:08:70:
13:75:df:88:9c:ea:77:36:29:a2:9d:d4:f0:a5:46:
ae:38:0d:5f:65:c2:0d:ef:f2:ff:54:95:84:41:9e:
66:00:23:c6:a9:8a:10:77:83:28:57:ca:b7:c8:c0:
e8:21:49:2a:b0:ef:7c:80:1a:60:8e:52:79:8e:32:
cb:00:88:98:17:54:66:78:75:a0:ea:58:18:4a:eb:
ca:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:67:B1:41:0C:E3:A5:1B:D2:B9:18:95:14:0E:00:DF:A7:28:6D:37
X509v3 Authority Key Identifier:
keyid:67:8B:D6:49:07:36:46:C1:F4:C3:B0:1C:AC:AA:72:E2:09:E9:DA:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/bc3441-3e8f-44ed-913e-ed78cb76661c/1/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/bc3441-3e8f-44ed-913e-ed78cb76661c/1/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:d9:aa:a4:b7:89:34:79:fb:e9:48:f1:d6:7a:a9:f9:6f:d8:
6a:1c:81:d3:b2:98:59:3a:3a:37:b3:7f:ef:ff:80:19:e8:24:
32:cd:e0:90:27:a8:a3:29:77:bd:f0:7a:29:25:4e:69:e4:ba:
69:36:ac:ae:3a:7e:3e:c3:0b:7b:a9:3a:34:a1:08:42:e2:ec:
5a:29:22:1f:c9:67:c0:4f:74:0d:e6:b1:b2:ca:41:1b:6f:1e:
1b:67:05:00:11:9b:e0:15:ce:14:5c:f3:2c:40:2a:5a:54:1f:
ad:10:8f:d3:3d:9a:f0:90:40:b8:81:d4:62:bb:98:f3:33:e0:
57:6f:a0:21:80:10:8a:fe:3d:22:3d:44:7b:40:07:3e:a9:d9:
cf:92:b0:98:0e:42:79:05:8a:6c:26:31:0e:fe:1d:29:b4:f1:
30:7d:f9:76:97:fe:85:e7:2b:e3:57:43:76:d5:62:f5:36:3e:
77:dc:a8:e4:8d:0f:f7:3f:8d:95:b5:24:3f:df:35:a1:01:58:
92:73:4e:0e:ec:03:36:26:5c:16:9d:b2:6d:48:7b:2f:bf:ed:
af:9d:f2:c2:7f:82:a3:b7:38:4a:9d:d4:4b:4b:a5:66:a7:76:
ae:57:30:38:c0:f9:b4:b4:f3:43:bd:d1:d8:da:50:e2:ec:ef:
1d:6b:be:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:06:02 2026 by rpki-client