This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.mft
File: ZcXa1UTfSXFghevoDb6C62iiCck.mft (raw, json)
Hash identifier: tioq5QePUdJbb/SX9+vYoXQ0sClHKhBkSj/sfAfZ6ag=
Subject key identifier: AC:67:4F:77:07:0E:CB:A8:74:3E:99:26:1D:68:61:9D:78:32:A1:96
Authority key identifier: 65:C5:DA:D5:44:DF:49:71:60:85:EB:E8:0D:BE:82:EB:68:A2:09:C9
Certificate issuer: /CN=65c5dad544df49716085ebe80dbe82eb68a209c9
Certificate serial: 019BF83F149A16EB9F4890DE26CCE1455B5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZcXa1UTfSXFghevoDb6C62iiCck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.mft
Manifest number: 1006
Signing time: Mon 26 Jan 2026 03:00:41 +0000
Manifest this update: Mon 26 Jan 2026 03:00:41 +0000
Manifest next update: Tue 27 Jan 2026 03:00:41 +0000
Files and hashes: 1: SLxH_u9zeCm0sBzFGpjFyprUq1k.roa (hash: YHV8hHdigULABzb/Rh8IYMXXingzJr+tiIat3maLhrg=)
2: ZcXa1UTfSXFghevoDb6C62iiCck.crl (hash: /0AIhbeXPZIn2/mc++b6afzRIJnlSJ4/dWqxO7LCdG4=)
3: qWNtslR5VeuzsdBANHUyp5ZAUOU.roa (hash: rgvLkD6mm+PX1WOuRNNO3Ee9uRmn0UljGpNc3jlNEWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZcXa1UTfSXFghevoDb6C62iiCck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 01:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f8:3f:14:9a:16:eb:9f:48:90:de:26:cc:e1:45:5b:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65c5dad544df49716085ebe80dbe82eb68a209c9
Validity
Not Before: Jan 26 03:00:41 2026 GMT
Not After : Jan 27 03:00:41 2026 GMT
Subject: CN=ac674f77070ecba8743e99261d68619d7832a196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b5:8e:f7:2a:05:4d:6c:68:d2:9f:4f:7d:02:
b0:26:8e:db:b1:41:af:56:a8:a0:57:59:bf:a1:88:
15:15:86:23:30:9c:bb:93:a1:b4:2a:e9:94:5e:44:
40:6c:cb:04:84:2d:86:92:ee:d3:57:67:3b:af:21:
70:de:74:33:4c:60:be:44:00:ca:45:10:21:f3:2a:
ae:00:3b:d6:54:07:ac:bd:b3:ad:38:a1:8c:b3:2e:
d1:a8:ee:ab:24:28:cc:94:f9:14:2e:cf:c5:d1:28:
da:51:0f:7f:89:0d:eb:a7:6b:09:a7:a2:11:b8:ec:
ca:32:64:3a:a7:fc:96:a8:f2:ff:a1:7b:25:82:0c:
ff:81:f4:3d:9e:a5:d1:06:51:98:24:e2:6a:e7:90:
d5:6c:47:e1:78:aa:82:15:e5:75:b6:99:1d:d6:c3:
3f:70:f6:5a:9a:6a:b3:6a:29:51:64:57:09:42:8a:
96:0b:1c:da:90:89:56:fd:8f:c4:db:ec:69:50:63:
37:ac:db:4d:4d:db:39:3f:80:6b:3d:df:5d:1a:d7:
28:7b:28:cb:85:88:c1:ed:ed:fb:ad:d8:e2:f2:69:
b9:5a:9a:08:70:be:fa:75:87:88:74:8a:9d:60:9b:
a0:03:49:0f:51:85:11:08:c5:17:05:27:28:83:ef:
b1:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:67:4F:77:07:0E:CB:A8:74:3E:99:26:1D:68:61:9D:78:32:A1:96
X509v3 Authority Key Identifier:
keyid:65:C5:DA:D5:44:DF:49:71:60:85:EB:E8:0D:BE:82:EB:68:A2:09:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZcXa1UTfSXFghevoDb6C62iiCck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:5a:10:4c:f0:54:45:e5:2c:81:f9:4f:e2:cc:c8:3a:03:21:
b6:25:50:39:19:b6:2a:8f:56:c5:7f:b3:3d:bb:cc:7e:87:c2:
a8:56:88:3e:2e:a0:26:b3:d4:e5:f4:70:f7:0f:67:8c:8f:f9:
91:bb:05:11:7a:3d:07:8f:45:72:74:f9:35:01:a7:80:13:4a:
5b:a0:9a:80:3d:c4:a4:95:c5:1d:03:b4:76:7b:2a:6d:75:87:
93:f3:93:0a:45:71:5a:b2:b5:a3:4c:f8:7c:e4:e2:f1:7d:ea:
06:43:a3:b7:64:3d:e8:c8:e3:e7:4b:9d:a2:98:93:91:76:1e:
6d:89:da:ce:1f:58:c7:3a:78:5e:91:35:48:1e:89:7b:14:9d:
19:a6:0d:0b:8a:0c:76:55:79:56:4f:4b:18:73:a3:c6:ef:f8:
b1:2f:de:0a:4d:8e:b4:d5:17:7c:8b:d8:00:7f:e5:98:1b:8f:
8b:e7:bd:72:88:20:71:e6:99:33:07:b5:ee:36:24:71:9d:ef:
0e:26:a1:c1:37:36:c6:60:fe:21:e8:0f:ed:e3:04:5a:68:7a:
32:57:7e:49:16:0b:9c:30:57:64:02:5b:e6:a7:1d:f0:b6:cd:
d3:97:8d:2f:41:a2:33:0d:54:9f:24:52:18:3a:4c:7d:a0:d1:
88:57:29:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 09:02:04 2026 by rpki-client