This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft
File: zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft (raw, json)
Hash identifier: EtGH10Fs89EovDRyB21cq96rXh3IudK0S7c+dCgdeYw=
Subject key identifier: 5E:55:67:1E:0D:A5:46:43:08:0A:55:56:DB:43:14:8E:91:D5:B2:B1
Authority key identifier: CE:9D:06:47:DC:17:14:1D:84:2B:32:F5:11:5D:99:AA:9C:9F:33:DD
Certificate issuer: /CN=ce9d0647dc17141d842b32f5115d99aa9c9f33dd
Certificate serial: 019C420F3B15CFAB2799EAE26CA257D98541
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zp0GR9wXFB2EKzL1EV2ZqpyfM90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft
Manifest number: 0824
Signing time: Mon 09 Feb 2026 11:00:20 +0000
Manifest this update: Mon 09 Feb 2026 11:00:20 +0000
Manifest next update: Tue 10 Feb 2026 11:00:20 +0000
Files and hashes: 1: uqlwtwz2Qs2EiNBrxD0-ZbsYVHs.roa (hash: IkhV4yizozk2dsaRcLN2hmBNAiBYulp+U7a9yEZXbLk=)
2: zp0GR9wXFB2EKzL1EV2ZqpyfM90.crl (hash: gjC5C1pVfQk99x3EbBvijyrf26WjsR+2i85AtdBNXVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft
rsync://rpki.ripe.net/repository/DEFAULT/zp0GR9wXFB2EKzL1EV2ZqpyfM90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:0f:3b:15:cf:ab:27:99:ea:e2:6c:a2:57:d9:85:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce9d0647dc17141d842b32f5115d99aa9c9f33dd
Validity
Not Before: Feb 9 11:00:20 2026 GMT
Not After : Feb 10 11:00:20 2026 GMT
Subject: CN=5e55671e0da54643080a5556db43148e91d5b2b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:84:91:19:a7:8e:5d:33:f7:fa:bd:fa:36:37:
ad:5f:e4:d1:72:66:2c:58:4e:26:dc:fb:26:85:45:
c8:06:8e:b7:65:91:e1:5d:c8:70:03:a9:e9:3f:7c:
f2:c4:32:25:e4:81:bf:03:d0:96:c2:2f:84:f7:8b:
13:d5:35:2b:b6:c6:d2:12:0f:45:6e:87:70:d3:79:
aa:10:66:d4:3b:00:55:3b:cc:37:56:f9:b1:50:df:
66:14:3c:2d:77:1e:da:03:1c:89:7d:21:4b:99:34:
0f:04:b5:6a:29:00:9c:95:10:8d:7e:8f:17:73:61:
e9:3e:3e:03:a0:8a:3e:4f:57:8e:7b:78:94:f5:8d:
2f:e6:72:16:e6:90:51:97:e5:2a:a7:fa:03:71:f5:
d4:ba:7b:a3:7a:f6:d2:82:4f:5a:f3:07:40:37:96:
10:75:a7:a8:d8:16:07:8d:76:1d:ee:ed:e0:f1:c3:
74:b5:6d:dc:68:73:92:1c:b8:99:49:0f:a1:5c:9c:
11:4c:da:4d:90:61:01:5b:3b:64:06:28:c1:a2:c9:
8c:48:17:6e:f2:3b:67:89:ba:18:df:10:58:dc:fd:
d2:d2:65:4a:48:d9:c3:67:81:57:1f:31:dd:61:f2:
da:d9:33:1b:97:27:33:66:13:b9:2c:0c:5a:21:e6:
c3:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:55:67:1E:0D:A5:46:43:08:0A:55:56:DB:43:14:8E:91:D5:B2:B1
X509v3 Authority Key Identifier:
keyid:CE:9D:06:47:DC:17:14:1D:84:2B:32:F5:11:5D:99:AA:9C:9F:33:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zp0GR9wXFB2EKzL1EV2ZqpyfM90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:f5:85:4a:62:ce:a1:f4:17:99:40:a2:88:f2:c8:f8:93:fa:
cf:8c:a9:44:af:45:a0:5d:46:6e:60:cb:6a:97:02:da:83:71:
f0:b1:71:df:f3:92:5d:6c:55:74:ce:49:41:f4:d9:6f:53:ed:
b8:19:b0:c4:e0:02:ce:18:e3:69:d5:be:6c:9f:1c:bf:33:2f:
5f:01:5b:01:74:50:59:25:92:26:cd:08:1c:5d:18:b7:20:8f:
eb:21:08:04:4b:2f:e5:b2:9d:d5:b3:2e:ef:a0:04:44:45:0e:
a5:91:41:88:18:c4:da:04:79:29:7f:cc:f0:90:78:e0:fe:19:
07:34:51:5a:b0:44:23:74:59:01:2d:88:81:62:80:22:c1:ce:
01:c2:0f:b3:39:b0:74:91:8e:e2:73:ea:96:31:e0:59:e4:c7:
ee:9e:95:57:49:9c:c0:91:53:b8:00:9d:56:ef:41:f7:73:1b:
89:fe:50:ed:da:b9:87:02:c6:31:a8:64:4c:08:3f:4d:1c:8c:
6b:91:89:4a:2f:e4:0f:41:d9:77:05:b8:4f:c1:d1:2e:f1:a4:
00:c0:c7:e5:52:b8:1a:5e:42:2a:6c:4d:81:49:78:41:e8:6e:
74:2b:10:b7:0b:ff:0a:d1:ce:53:8a:34:a8:81:e5:04:05:96:
db:f8:85:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:07:19 2026 by rpki-client