This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/c38360-743a-428f-ab97-6369b17ff178/1/zS0l92kTYIeMus6YWJC59e_PfZU.mft
File: zS0l92kTYIeMus6YWJC59e_PfZU.mft (raw, json)
Hash identifier: 000gyrwfnTGJBeVZPEbh5DgnE0cJp/DztKd5oWkCfU4=
Subject key identifier: 1F:A7:F4:44:34:D0:48:B2:51:E4:B9:AB:C9:2D:FB:55:EB:A3:9A:EF
Authority key identifier: CD:2D:25:F7:69:13:60:87:8C:BA:CE:98:58:90:B9:F5:EF:CF:7D:95
Certificate issuer: /CN=cd2d25f7691360878cbace985890b9f5efcf7d95
Certificate serial: 019BF5E363321519DFE838172590EC0DE6F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zS0l92kTYIeMus6YWJC59e_PfZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/c38360-743a-428f-ab97-6369b17ff178/1/zS0l92kTYIeMus6YWJC59e_PfZU.mft
Manifest number: 173F
Signing time: Sun 25 Jan 2026 16:01:18 +0000
Manifest this update: Sun 25 Jan 2026 16:01:18 +0000
Manifest next update: Mon 26 Jan 2026 16:01:18 +0000
Files and hashes: 1: RqKPi2xz-dA9iWopa2S6eD63VNM.roa (hash: sh/U5dfnaz+hJ1QK4InqZNRlbTTXVEErKQaPltkS37U=)
2: zS0l92kTYIeMus6YWJC59e_PfZU.crl (hash: 3JmNa9SIc2TusNkk71YOzkZa54VTKxnwJamY5/XiynY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/c38360-743a-428f-ab97-6369b17ff178/1/zS0l92kTYIeMus6YWJC59e_PfZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/c38360-743a-428f-ab97-6369b17ff178/1/zS0l92kTYIeMus6YWJC59e_PfZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/zS0l92kTYIeMus6YWJC59e_PfZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f5:e3:63:32:15:19:df:e8:38:17:25:90:ec:0d:e6:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd2d25f7691360878cbace985890b9f5efcf7d95
Validity
Not Before: Jan 25 16:01:18 2026 GMT
Not After : Jan 26 16:01:18 2026 GMT
Subject: CN=1fa7f44434d048b251e4b9abc92dfb55eba39aef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:76:40:fa:4e:0a:50:8d:58:65:b8:4f:fc:1e:
50:af:1f:10:55:fe:ac:6d:4f:f6:17:06:44:8f:2e:
d6:b6:69:34:44:e2:55:ba:25:aa:2f:44:98:17:e5:
31:a4:df:67:44:4d:d4:08:2b:d1:35:bc:f0:61:6d:
5a:2e:49:ab:44:53:f9:a2:d9:2d:7c:fa:fc:16:49:
aa:f7:53:50:4a:1d:a2:7e:b5:60:d7:65:02:a1:a2:
ca:e4:90:5a:81:6e:ad:78:e0:0e:3f:1b:0b:a4:a6:
56:96:f9:e3:b8:34:92:b1:85:a5:75:c6:60:22:28:
c4:69:b0:fb:59:97:8f:69:ca:56:81:52:6a:e2:8c:
90:f6:73:03:a9:fb:44:40:dd:c0:ae:8d:5f:e6:25:
b5:b9:34:25:2f:59:84:8a:12:e5:d1:b4:aa:a7:a9:
8c:64:c4:2e:fd:95:f1:c7:c6:d0:e0:7f:2b:15:0d:
16:af:61:79:7d:dd:f2:43:90:8e:a0:7d:5d:e5:3b:
ca:c2:69:17:88:d3:73:9c:5a:0b:12:8b:24:2a:f4:
1b:0f:ef:78:98:3d:26:06:79:22:4f:b5:7b:63:90:
8f:0b:5f:0c:45:a5:95:dc:fe:ad:74:47:57:d6:cf:
c0:9a:27:04:64:f9:4a:0c:ab:5c:93:b0:63:26:6a:
a5:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:A7:F4:44:34:D0:48:B2:51:E4:B9:AB:C9:2D:FB:55:EB:A3:9A:EF
X509v3 Authority Key Identifier:
keyid:CD:2D:25:F7:69:13:60:87:8C:BA:CE:98:58:90:B9:F5:EF:CF:7D:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zS0l92kTYIeMus6YWJC59e_PfZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c38360-743a-428f-ab97-6369b17ff178/1/zS0l92kTYIeMus6YWJC59e_PfZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c38360-743a-428f-ab97-6369b17ff178/1/zS0l92kTYIeMus6YWJC59e_PfZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:71:3b:d7:bc:a1:99:46:db:3e:96:b9:1b:a5:9e:37:d0:79:
5a:20:90:61:1c:d2:73:2b:8e:3d:04:41:15:51:36:3e:b2:94:
14:bd:54:0c:b4:2a:29:04:50:99:fb:ec:1f:7b:9c:f5:18:58:
c9:10:98:44:75:c3:56:4b:86:3f:d2:9c:65:36:98:3d:57:db:
d6:57:5e:9e:94:6c:4c:d3:aa:43:18:f0:21:94:e3:08:6e:fb:
67:b8:52:77:d8:67:0b:75:ce:8e:bc:1c:c0:80:e9:81:c1:31:
e3:81:88:3d:0f:39:57:bf:ec:e3:07:fc:cc:ba:69:4c:13:25:
86:bb:3f:85:29:01:fb:2a:b5:16:74:bb:6b:64:e5:39:9d:6a:
09:76:25:92:73:f3:80:a1:82:f8:85:15:a8:bd:e5:db:e5:ff:
a4:1e:ff:14:b6:22:89:81:3f:17:f7:2d:d6:95:53:10:3c:f5:
65:dd:1d:a2:5c:1a:30:e5:6c:42:ec:14:e8:14:22:96:cb:99:
2e:bb:9b:55:0c:57:5c:91:cf:66:d0:fe:62:e9:33:55:8f:5d:
cf:e4:5f:88:50:f9:d2:4d:66:01:bb:eb:8c:44:ff:22:a9:55:
e8:17:44:9b:a3:2f:57:21:69:c1:47:cf:3f:cc:09:b0:9f:7e:
cd:ea:de:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv142MyFRnf6DgXJZDsDebzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkMmQyNWY3NjkxMzYwODc4Y2JhY2U5ODU4OTBiOWY1ZWZj
ZjdkOTUwHhcNMjYwMTI1MTYwMTE4WhcNMjYwMTI2MTYwMTE4WjAzMTEwLwYDVQQD
EygxZmE3ZjQ0NDM0ZDA0OGIyNTFlNGI5YWJjOTJkZmI1NWViYTM5YWVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHZA+k4KUI1YZbhP/B5Qrx8QVf6s
bU/2FwZEjy7Wtmk0ROJVuiWqL0SYF+UxpN9nRE3UCCvRNbzwYW1aLkmrRFP5otkt
fPr8Fkmq91NQSh2ifrVg12UCoaLK5JBagW6teOAOPxsLpKZWlvnjuDSSsYWldcZg
IijEabD7WZePacpWgVJq4oyQ9nMDqftEQN3Aro1f5iW1uTQlL1mEihLl0bSqp6mM
ZMQu/ZXxx8bQ4H8rFQ0Wr2F5fd3yQ5COoH1d5TvKwmkXiNNznFoLEoskKvQbD+94
mD0mBnkiT7V7Y5CPC18MRaWV3P6tdEdX1s/AmicEZPlKDKtck7BjJmqlKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB+n9EQ00EiyUeS5q8kt+1Xro5rvMB8GA1UdIwQY
MBaAFM0tJfdpE2CHjLrOmFiQufXvz32VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelMwbDkya1RZSWVNdXM2WVdKQzU5ZV9QZlpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9jMzgzNjAtNzQzYS00MjhmLWFiOTct
NjM2OWIxN2ZmMTc4LzEvelMwbDkya1RZSWVNdXM2WVdKQzU5ZV9QZlpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS9jMzgzNjAtNzQzYS00MjhmLWFiOTctNjM2OWIxN2ZmMTc4
LzEvelMwbDkya1RZSWVNdXM2WVdKQzU5ZV9QZlpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ3E717yh
mUbbPpa5G6WeN9B5WiCQYRzScyuOPQRBFVE2PrKUFL1UDLQqKQRQmfvsH3uc9RhY
yRCYRHXDVkuGP9KcZTaYPVfb1ldenpRsTNOqQxjwIZTjCG77Z7hSd9hnC3XOjrwc
wIDpgcEx44GIPQ85V7/s4wf8zLppTBMlhrs/hSkB+yq1FnS7a2TlOZ1qCXYlknPz
gKGC+IUVqL3l2+X/pB7/FLYiiYE/F/ct1pVTEDz1Zd0dolwaMOVsQuwU6BQilsuZ
LrubVQxXXJHPZtD+YukzVY9dz+RfiFD50k1mAbvrjET/IqlV6BdEm6MvVyFpwUfP
P8wJsJ9+zere5w==
-----END CERTIFICATE-----
Generated at Mon Jan 26 01:50:44 2026 by rpki-client