This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.mft
File: 0Zk_eMrkRZqbniaJrTDwvETMZyQ.mft (raw, json)
Hash identifier: Jpl0jcHOOc4hS4MKlubmWAMZAHRy1qUCkpsGVJWAwjM=
Subject key identifier: 05:F5:02:AA:4E:40:86:DF:03:F1:C1:19:C6:E3:BD:10:07:80:8E:D0
Authority key identifier: D1:99:3F:78:CA:E4:45:9A:9B:9E:26:89:AD:30:F0:BC:44:CC:67:24
Certificate issuer: /CN=d1993f78cae4459a9b9e2689ad30f0bc44cc6724
Certificate serial: 019C42465F707844FAAA806BD1DCD8C7A3FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Zk_eMrkRZqbniaJrTDwvETMZyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.mft
Manifest number: 0564
Signing time: Mon 09 Feb 2026 12:00:34 +0000
Manifest this update: Mon 09 Feb 2026 12:00:34 +0000
Manifest next update: Tue 10 Feb 2026 12:00:34 +0000
Files and hashes: 1: 0Zk_eMrkRZqbniaJrTDwvETMZyQ.crl (hash: LGrkuElAegBmmQ8Cspva91nk+MPjIH16v7x3rHbyNz0=)
2: qo4K2MxKuprqgn2JH-P6sbefGGQ.roa (hash: 5nQ7RiiW8bFTZTK/XJeOeCamYJvNUIxvBcEODwO0sgE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Zk_eMrkRZqbniaJrTDwvETMZyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 12:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:46:5f:70:78:44:fa:aa:80:6b:d1:dc:d8:c7:a3:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1993f78cae4459a9b9e2689ad30f0bc44cc6724
Validity
Not Before: Feb 9 12:00:34 2026 GMT
Not After : Feb 10 12:00:34 2026 GMT
Subject: CN=05f502aa4e4086df03f1c119c6e3bd1007808ed0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:30:e1:02:86:27:1d:d9:86:f3:7f:e4:bb:96:
cb:d2:32:51:fe:68:1b:47:20:56:fe:4f:1e:a6:46:
e1:fa:18:5a:3f:4e:4d:e3:96:30:93:82:ac:14:8e:
33:df:55:1a:d8:79:63:9f:2e:2b:8e:93:7f:16:71:
b2:34:5a:a8:41:22:2a:b0:dd:96:f0:2b:a5:a3:89:
67:cc:ee:7c:a8:cf:6f:a6:55:7a:03:57:f2:a1:84:
f6:31:27:e6:84:bd:c5:bd:9b:bd:85:0f:76:06:54:
a4:dd:89:78:c2:2a:0f:60:77:b6:a8:6d:a9:be:e1:
cc:2c:d1:b8:b1:fa:86:c7:23:db:85:78:cc:1e:5e:
2d:7d:de:bc:bc:ac:3f:3d:5a:37:94:eb:e5:b2:87:
84:7e:37:a7:28:b8:88:70:36:51:47:c3:04:e4:0d:
48:eb:fb:54:32:dc:d1:43:a5:c5:f6:28:04:39:6c:
c1:d3:f9:cb:76:c0:e5:74:ff:8f:1e:9b:e1:ba:97:
73:5f:76:10:27:39:09:ac:e3:76:e7:f7:79:cc:97:
56:0c:03:2c:1b:5c:26:2c:75:ee:fd:8e:08:4e:30:
b7:99:d9:ed:c0:e1:5d:1c:99:8a:23:7f:e8:85:b0:
34:1b:9b:cf:0f:89:47:38:99:d0:f3:8c:7b:3e:63:
3c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:F5:02:AA:4E:40:86:DF:03:F1:C1:19:C6:E3:BD:10:07:80:8E:D0
X509v3 Authority Key Identifier:
keyid:D1:99:3F:78:CA:E4:45:9A:9B:9E:26:89:AD:30:F0:BC:44:CC:67:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Zk_eMrkRZqbniaJrTDwvETMZyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:04:34:f2:83:09:ce:36:b3:64:34:7b:fd:96:3b:40:28:08:
b2:40:dc:fe:1d:32:33:3f:e5:86:6d:c2:0d:3c:76:6e:c3:00:
03:a6:e4:3a:7b:57:36:e7:ce:26:7f:08:79:fa:3f:54:ab:23:
04:b1:e2:05:41:18:4a:8e:f0:bd:0b:18:73:22:30:a0:ab:5a:
a0:d3:f5:df:07:08:fc:1f:5f:d3:ca:9d:89:79:58:cc:3d:e1:
9b:1e:21:53:af:2e:a5:1e:3f:d9:6e:ef:4c:26:f1:1c:e3:0c:
58:56:04:81:9a:93:c8:89:19:26:dd:44:c8:a7:42:79:38:b0:
4e:b4:a8:e5:2c:34:a2:9a:aa:47:aa:74:dd:24:29:af:e0:b5:
2b:ce:ee:f8:eb:a8:70:5a:24:28:53:74:93:22:85:89:b7:07:
96:34:74:52:08:a9:a0:a6:00:1c:43:36:12:97:76:af:dc:ca:
fb:5f:55:4d:57:55:72:97:d0:65:c3:71:ce:81:36:71:27:b5:
d9:4b:8e:6a:fc:44:ad:2d:46:42:f0:db:f0:13:f2:59:7b:db:
12:43:4c:77:47:01:78:f6:14:4e:10:64:df:68:35:71:1c:9c:
f3:50:74:5b:4a:58:d5:78:da:6d:8b:95:72:98:fe:4e:10:ef:
e3:b8:62:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:45:58 2026 by rpki-client