This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft
File: Zt93QokBc5J5NSBqKO-_SBI-eHw.mft (raw, json)
Hash identifier: /UyYFX/smoXPgAD9beAvklgKS99VW72Aq1JahAwSpF0=
Subject key identifier: F5:82:A0:88:84:57:9E:0A:A4:ED:A4:C8:27:7D:B4:ED:F8:56:6A:E1
Authority key identifier: 66:DF:77:42:89:01:73:92:79:35:20:6A:28:EF:BF:48:12:3E:78:7C
Certificate issuer: /CN=66df7742890173927935206a28efbf48123e787c
Certificate serial: 019BF42BCB6C7DE56199A2F24300E64ADE9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft
Manifest number: 1834
Signing time: Sun 25 Jan 2026 08:01:09 +0000
Manifest this update: Sun 25 Jan 2026 08:01:09 +0000
Manifest next update: Mon 26 Jan 2026 08:01:09 +0000
Files and hashes: 1: 1YosK2bs-CaTfjpVd5NwlTvXFM8.roa (hash: lm/8j8Y6n/TMsVGpFA+ZRagcGuoQKRzJ2ZtpQEbhM6U=)
2: D4beAc045-n-__O8Gk3mL0QKXy4.roa (hash: bZMnyNhz7wqKN+xhHuK1PScbmxRd26BHp97U83X0MoY=)
3: DVHYb-pZlSy1I34qmjXe9-5z8lo.roa (hash: 8EmE6oBE41/d15O1xkgHkFli675J8du5T29Z3Bu2RK0=)
4: F9ITnVEHWmrH38FN-4Yy__PcPes.roa (hash: coMHaf6T97R9MWINk2OZjXgbisk+psO+8Wz23Z68OLw=)
5: LXvuXQ4yMGcXtOjADcxVweQB4nM.roa (hash: o9QKodPZuQiUAKy8mnVpttxyyoCbk6D5e4LiR/nhdvQ=)
6: Zt93QokBc5J5NSBqKO-_SBI-eHw.crl (hash: Wc3jtBMTvJv7MCwaOcZdyggC2nERKfBA1pR6P7kVSrM=)
7: eseKyzjF5Jbp8eRTsB-WjLQeKgI.roa (hash: ysSTN/ZbzBymumy8WtevS9Ii6l7aJCwQV+TV+2MP2bk=)
8: fidzehmMgKJA4RL0wKlxLjEsWA8.roa (hash: kL52QqXCo2r9qooo6CGQ5XawwbVkzS/ERGh3yMgAMec=)
9: isNFxDMxMO_jCRsot29OR1lOtZ4.roa (hash: zhnPH4ETfrhVo9bikf8ExJ78o9KtLZ7fPA9NFAQkp+4=)
10: niEeLvXb5CloZEFBb2Sl6VPcuL8.roa (hash: P1ZaUFgxLp8sColQT0HmfAoaWsxqEl8F8Cm8ZTaKCG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f4:2b:cb:6c:7d:e5:61:99:a2:f2:43:00:e6:4a:de:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66df7742890173927935206a28efbf48123e787c
Validity
Not Before: Jan 25 08:01:09 2026 GMT
Not After : Jan 26 08:01:09 2026 GMT
Subject: CN=f582a08884579e0aa4eda4c8277db4edf8566ae1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b5:8b:59:6f:aa:22:e3:32:c2:36:48:ee:e8:
8c:92:1b:f6:e0:13:60:f1:32:b0:ac:78:34:c9:78:
f5:e4:8a:73:c9:2e:69:dd:e5:b8:f5:bf:b2:27:74:
9d:12:2d:02:34:b4:3b:0d:e3:c8:63:e1:74:2c:41:
d0:63:ec:fb:0e:f2:99:40:15:b8:95:55:09:86:3d:
49:f4:e1:84:7c:57:6d:b9:a2:5a:7c:ed:44:9a:1c:
22:0b:a4:f2:8f:65:04:aa:ff:5e:38:bb:5d:68:55:
cf:05:52:d6:c8:d9:0c:78:fd:4b:97:86:f0:24:99:
a5:27:46:b5:b4:c0:85:b8:a2:7b:fa:39:5b:88:09:
36:f4:c0:ec:7c:a0:7b:0f:ab:f8:ef:35:73:a4:fe:
4f:9b:6a:4e:d6:f5:d4:58:57:b3:55:09:fd:34:99:
95:57:2c:e4:bd:3c:2f:f6:c9:44:08:6b:50:36:d6:
a2:60:f5:2d:e5:5f:44:62:20:25:21:ab:3e:ee:54:
2e:2e:34:e3:39:f1:10:4b:cf:22:31:5f:c9:1f:97:
c1:79:9b:1a:db:09:ff:b9:30:b2:eb:59:eb:10:cf:
64:4d:87:f7:1a:f8:e2:60:2f:16:5a:0e:ce:ba:6a:
f9:04:d0:56:0e:26:f5:66:28:8d:79:6e:f0:0d:ed:
49:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:82:A0:88:84:57:9E:0A:A4:ED:A4:C8:27:7D:B4:ED:F8:56:6A:E1
X509v3 Authority Key Identifier:
keyid:66:DF:77:42:89:01:73:92:79:35:20:6A:28:EF:BF:48:12:3E:78:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:ca:98:04:06:82:ab:6b:f9:8b:6d:47:04:c2:87:aa:18:b4:
92:c5:11:6c:f8:45:ac:78:93:40:35:5a:c9:c3:3d:fb:b2:7c:
c3:d2:d0:82:7b:1a:e4:6c:a2:9d:cd:eb:87:65:27:05:70:60:
0a:be:96:d9:56:92:5b:e0:b7:15:97:82:4c:ee:13:0c:4b:10:
cc:2f:45:92:17:82:fb:09:10:16:26:cb:8c:32:14:f6:8e:28:
80:89:39:22:96:e8:58:80:e1:84:e5:14:51:f4:3d:8f:57:5c:
fa:70:dd:12:7b:86:31:92:1c:49:8c:98:10:9c:c0:ec:7a:f9:
07:69:b6:16:7c:81:e5:0c:3b:4f:53:f3:32:3d:a7:0e:c6:96:
59:1a:c7:52:73:a2:37:ad:a0:6d:bf:8b:51:4e:d4:59:70:68:
66:e8:9a:69:da:a8:34:4a:19:3d:94:50:5f:c8:fb:e1:ac:3e:
72:57:45:cc:1d:23:34:df:37:77:87:cf:29:e0:5a:23:3a:2e:
50:e8:eb:b3:d1:76:6f:4e:20:13:9d:2a:10:33:62:e8:de:fd:
da:4a:c7:02:ad:b7:56:f2:fc:ef:37:1e:27:07:94:8a:dc:ca:
62:bf:e6:0f:d4:7c:80:b5:30:71:33:da:4d:7a:80:e6:8a:10:
16:d7:e3:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:30:15 2026 by rpki-client