This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/5f0e0d-4d90-40c8-a0b8-2a9c56f6328b/1/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.mft
File: ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.mft (raw, json)
Hash identifier: Xw2KA/OfWTLSDhJQ+7f3IPS32gXmFzYTC/Wv8H6XxHM=
Subject key identifier: AF:21:49:AD:AE:9C:43:8C:2F:74:E9:9C:23:CF:1D:71:80:FA:19:31
Authority key identifier: 67:03:CF:CC:88:C2:5D:3E:87:6B:53:2C:F1:13:01:22:5E:CA:1B:0C
Certificate issuer: /CN=6703cfcc88c25d3e876b532cf11301225eca1b0c
Certificate serial: 019C432247D22EC51D28E0BE0F9B99157385
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/5f0e0d-4d90-40c8-a0b8-2a9c56f6328b/1/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.mft
Manifest number: 180D
Signing time: Mon 09 Feb 2026 16:00:45 +0000
Manifest this update: Mon 09 Feb 2026 16:00:45 +0000
Manifest next update: Tue 10 Feb 2026 16:00:45 +0000
Files and hashes: 1: ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.crl (hash: FNo0ZnPUiJ3ZHLaP6asc2tjs9jxfrCJW1oOO2PuB6Go=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/5f0e0d-4d90-40c8-a0b8-2a9c56f6328b/1/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/5f0e0d-4d90-40c8-a0b8-2a9c56f6328b/1/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 16:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:22:47:d2:2e:c5:1d:28:e0:be:0f:9b:99:15:73:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6703cfcc88c25d3e876b532cf11301225eca1b0c
Validity
Not Before: Feb 9 16:00:45 2026 GMT
Not After : Feb 10 16:00:45 2026 GMT
Subject: CN=af2149adae9c438c2f74e99c23cf1d7180fa1931
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:50:26:2e:67:53:21:a4:97:ab:25:d5:b1:a2:
c6:1c:9a:e8:90:8a:a4:4c:12:d6:fa:9a:a6:d9:6e:
20:7d:b8:c5:e7:78:60:02:b0:23:4f:ec:3d:f5:a1:
37:54:fa:7f:35:e5:e8:c1:32:c3:dd:96:fb:da:92:
ba:47:5e:37:1d:40:82:51:96:5d:2a:9e:38:64:2c:
c8:3d:0f:f1:a4:f0:22:a9:88:9e:fa:53:ad:2e:cb:
fd:fe:e0:cf:4e:5f:54:e5:2a:00:c2:56:4e:12:9d:
bb:f5:4b:56:4d:f0:90:63:9f:bc:5c:fa:de:b7:92:
6c:98:de:a3:8d:54:37:2f:79:35:9f:39:77:23:fa:
95:0c:73:5f:6d:af:fd:a9:9a:be:30:dc:05:55:55:
61:14:70:53:06:8b:b6:5b:49:55:59:c7:b3:9b:90:
24:7c:82:d0:6f:2c:fc:c1:6d:70:24:fb:c3:84:ee:
3f:83:55:60:4b:15:bf:c8:94:20:03:61:0d:35:90:
d8:44:34:42:a2:89:1f:77:dc:dd:82:e0:8f:90:ef:
03:8e:63:3d:d4:41:86:bf:0a:11:00:f0:a6:30:34:
07:64:27:86:94:48:91:b7:10:d1:3c:9a:79:89:57:
cf:43:24:cb:b5:2f:67:2d:1e:ac:69:44:69:c6:a1:
fe:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:21:49:AD:AE:9C:43:8C:2F:74:E9:9C:23:CF:1D:71:80:FA:19:31
X509v3 Authority Key Identifier:
keyid:67:03:CF:CC:88:C2:5D:3E:87:6B:53:2C:F1:13:01:22:5E:CA:1B:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5f0e0d-4d90-40c8-a0b8-2a9c56f6328b/1/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5f0e0d-4d90-40c8-a0b8-2a9c56f6328b/1/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:a1:79:e2:81:5e:c7:43:d1:56:9e:dc:c8:08:af:94:e8:34:
52:a2:1d:c6:33:a0:84:f5:97:60:b5:96:ad:4b:c1:10:f1:5c:
66:1e:ec:08:0f:d6:75:b5:f9:06:8e:59:c1:a8:1e:ea:54:5a:
ca:ad:ce:bc:d4:7f:00:c0:62:a5:1c:59:84:72:86:5d:ab:48:
c7:89:60:bb:f9:55:9b:77:34:06:05:17:71:c1:79:d5:a9:8b:
13:2e:7a:51:11:2d:87:e4:0d:62:8d:4a:66:a7:fa:ad:15:fe:
2d:bc:d1:5c:ca:0d:f0:14:53:e0:8d:14:94:f1:07:9e:72:fe:
ef:8a:50:ef:64:4b:f2:35:4d:39:35:2c:6a:65:14:34:fe:70:
68:7b:41:0e:59:3d:87:0b:6c:db:98:26:c5:df:7a:55:4a:b8:
a3:95:a7:dc:f3:19:4e:14:82:d8:0c:a1:1e:79:4d:c6:9a:56:
a3:eb:cb:a0:9f:dc:ca:98:ad:39:ee:a5:8b:cd:c3:77:88:76:
50:d0:f5:8d:9d:d7:b4:b6:cd:96:c0:cc:c8:56:d3:e2:e0:de:
00:19:6e:b9:f3:c2:f7:4b:75:71:59:92:6c:e8:53:b8:85:67:
33:45:50:04:c3:2d:5e:57:ba:6c:09:38:d6:4a:4a:6e:7a:59:
df:ad:e5:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:35:09 2026 by rpki-client