This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/df757c-499d-4020-a5c3-61161a65d3d6/1/zivMENFrD-0oVekpX8QJ1lB7Q9Y.mft
File: zivMENFrD-0oVekpX8QJ1lB7Q9Y.mft (raw, json)
Hash identifier: 19oTbinrSSLKYE64ycYQ/1V74v6ksNLVk2OUL67qwjg=
Subject key identifier: 98:EA:72:48:5B:FF:6F:C1:5B:91:DF:DC:A8:6B:E0:4C:96:F5:77:DE
Authority key identifier: CE:2B:CC:10:D1:6B:0F:ED:28:55:E9:29:5F:C4:09:D6:50:7B:43:D6
Certificate issuer: /CN=ce2bcc10d16b0fed2855e9295fc409d6507b43d6
Certificate serial: 019C4246A24360554F4296E44E28F852C905
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zivMENFrD-0oVekpX8QJ1lB7Q9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/df757c-499d-4020-a5c3-61161a65d3d6/1/zivMENFrD-0oVekpX8QJ1lB7Q9Y.mft
Manifest number: 030C
Signing time: Mon 09 Feb 2026 12:00:51 +0000
Manifest this update: Mon 09 Feb 2026 12:00:51 +0000
Manifest next update: Tue 10 Feb 2026 12:00:51 +0000
Files and hashes: 1: Vxijl7ZHOsV704q8evglEcbFwBs.roa (hash: KARNA+c405NIrwYFEYCF2kgsRfVWL6vXKf3QD7GyrdE=)
2: zivMENFrD-0oVekpX8QJ1lB7Q9Y.crl (hash: xCbW63wy8zpCv6EtuiLZ1oIIWI1u+7WXdpDHUh4j2Ng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/df757c-499d-4020-a5c3-61161a65d3d6/1/zivMENFrD-0oVekpX8QJ1lB7Q9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/df757c-499d-4020-a5c3-61161a65d3d6/1/zivMENFrD-0oVekpX8QJ1lB7Q9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/zivMENFrD-0oVekpX8QJ1lB7Q9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 12:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:46:a2:43:60:55:4f:42:96:e4:4e:28:f8:52:c9:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce2bcc10d16b0fed2855e9295fc409d6507b43d6
Validity
Not Before: Feb 9 12:00:51 2026 GMT
Not After : Feb 10 12:00:51 2026 GMT
Subject: CN=98ea72485bff6fc15b91dfdca86be04c96f577de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e2:bc:b7:70:66:18:c3:9a:dc:ef:21:e5:5e:
e3:46:db:05:d6:37:41:de:f3:62:bd:cd:a9:cb:07:
eb:09:b6:c5:3c:1b:e9:7a:13:8b:ba:e2:96:ec:e3:
51:96:27:7a:a8:3c:12:97:b8:9a:4a:c0:e2:da:d4:
62:a2:80:ff:fe:dc:4b:1f:88:c7:6b:93:c3:80:47:
fe:c3:19:3b:4a:18:30:65:ff:8d:a7:01:bb:5f:dc:
68:45:52:9b:b5:96:ec:5d:cc:f0:0d:a0:ac:2b:9a:
7d:e7:84:72:16:02:fb:ed:0c:1b:56:b5:48:7b:02:
88:09:29:ab:e6:20:b7:db:ab:5e:10:b7:72:8d:e1:
a0:af:6c:fa:14:66:87:33:8f:90:64:4b:01:91:50:
17:87:fd:fa:55:e8:37:b0:aa:5d:d3:28:b3:2b:b9:
01:ae:27:b9:b2:c1:4c:49:a8:90:69:0a:78:b5:fe:
35:33:e8:3a:69:e5:72:32:11:e8:b8:98:3c:a5:96:
34:87:21:dc:4a:48:e4:78:82:00:07:df:27:89:72:
4f:25:77:87:c5:c8:66:6d:d3:a3:90:1e:2d:ab:df:
7e:fb:71:88:15:9e:c7:6f:be:0c:98:b2:43:ff:f1:
a8:db:cd:0f:4e:8a:fb:df:c4:66:39:bb:5c:1d:dc:
2f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:EA:72:48:5B:FF:6F:C1:5B:91:DF:DC:A8:6B:E0:4C:96:F5:77:DE
X509v3 Authority Key Identifier:
keyid:CE:2B:CC:10:D1:6B:0F:ED:28:55:E9:29:5F:C4:09:D6:50:7B:43:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zivMENFrD-0oVekpX8QJ1lB7Q9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/df757c-499d-4020-a5c3-61161a65d3d6/1/zivMENFrD-0oVekpX8QJ1lB7Q9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/df757c-499d-4020-a5c3-61161a65d3d6/1/zivMENFrD-0oVekpX8QJ1lB7Q9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:77:d5:76:3d:26:19:ca:97:b8:0d:67:34:97:a3:0c:83:ba:
ae:d5:14:7a:c0:20:36:de:d7:8b:41:1a:58:df:78:7a:c6:98:
9f:96:a0:db:cf:e3:d6:0c:09:2c:ff:a6:4c:be:b0:3a:cf:37:
0f:e6:a3:1b:93:e1:e4:9e:f2:07:71:76:28:46:86:e1:33:e5:
42:df:0a:3e:72:ed:95:be:8b:bc:a2:34:e6:5c:6d:48:d9:14:
54:2c:36:1e:b8:01:a5:7c:ee:04:0b:12:8b:19:37:dc:c9:1a:
63:d9:1f:2d:db:1e:54:2a:27:5a:8a:f0:3a:85:97:80:eb:f2:
ce:85:2b:36:ac:48:21:cb:7d:50:9b:34:70:2d:85:22:eb:02:
56:19:24:c8:0c:20:92:af:07:f9:c4:72:3a:7b:ce:f0:80:ab:
d1:fe:99:53:be:f5:13:1e:35:5c:69:1e:c9:3f:df:ac:b6:83:
28:f9:8f:8a:c7:75:8b:6e:3b:ec:09:46:a7:99:8f:af:d8:8b:
b4:77:6c:f3:ff:d1:78:97:56:05:05:27:cc:85:c7:18:84:8b:
59:6b:a2:e0:f4:1d:d8:e8:d4:b1:9d:20:7d:20:1a:94:9d:70:
10:83:06:9e:8e:e1:47:c0:3a:5c:56:9b:94:3a:09:6d:a7:14:
a0:84:3e:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:53:32 2026 by rpki-client