This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.mft
File: zGUyZJpq70cUhBucj1RmDYibBik.mft (raw, json)
Hash identifier: POOl36maGW2QzmM0vdafNheSyfRo5HaH9DNI7OBvqDM=
Subject key identifier: E6:53:02:02:AE:52:E3:D0:0B:09:B1:34:4C:C4:A8:25:29:44:9D:6E
Authority key identifier: CC:65:32:64:9A:6A:EF:47:14:84:1B:9C:8F:54:66:0D:88:9B:06:29
Certificate issuer: /CN=cc6532649a6aef4714841b9c8f54660d889b0629
Certificate serial: 019BF5E37ABCC1F97289FAFD00CE6B0A7AE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zGUyZJpq70cUhBucj1RmDYibBik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.mft
Manifest number: 0D96
Signing time: Sun 25 Jan 2026 16:01:24 +0000
Manifest this update: Sun 25 Jan 2026 16:01:24 +0000
Manifest next update: Mon 26 Jan 2026 16:01:24 +0000
Files and hashes: 1: QOvuUL6JmFjMR4OHkrweykbMl00.roa (hash: APm5d1yLpYTNVNqcU55k9Dr295k8B4YAIygsX75/UWA=)
2: TF8KSi-DuhED0p9n9N5dVWabzRk.roa (hash: 39Z2dsiv//rq6lSkgmQdDk1aolP4R2gp4zSwQSQYE8w=)
3: zGUyZJpq70cUhBucj1RmDYibBik.crl (hash: qHcTqOebRqM84+5P3RwoG18zVt8CpfjOn3EvlNf+7CY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.mft
rsync://rpki.ripe.net/repository/DEFAULT/zGUyZJpq70cUhBucj1RmDYibBik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f5:e3:7a:bc:c1:f9:72:89:fa:fd:00:ce:6b:0a:7a:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc6532649a6aef4714841b9c8f54660d889b0629
Validity
Not Before: Jan 25 16:01:24 2026 GMT
Not After : Jan 26 16:01:24 2026 GMT
Subject: CN=e6530202ae52e3d00b09b1344cc4a82529449d6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:54:a6:47:d9:03:5f:9e:0a:d4:d4:cc:cc:ee:
f4:3b:4a:27:0d:e3:d3:66:ef:01:2c:27:aa:74:5a:
12:75:29:e2:78:05:fd:f7:71:b0:eb:fa:a4:cf:7d:
02:ad:ea:c6:9f:f8:59:f7:9c:d8:87:1e:23:9f:a2:
0b:21:3a:e9:bc:ee:b5:87:a6:62:13:7b:68:16:00:
57:f5:2c:1f:5b:f9:18:e3:69:70:f4:18:f4:f3:08:
1b:d8:da:14:e3:e9:44:72:ea:67:08:89:a5:08:36:
0d:d8:43:36:f5:43:4c:50:95:35:c3:6d:6d:3d:cf:
a9:50:dd:bb:97:a8:f5:36:60:59:63:e8:e5:20:4c:
81:fa:d7:e9:89:87:98:51:d3:76:e0:29:44:7c:b8:
8c:05:3c:51:a9:c1:c5:d8:ad:cd:41:d8:90:04:b7:
73:cf:5f:02:25:9b:0f:42:d9:fe:06:3f:4a:35:58:
cb:4c:4e:05:23:6e:f0:5e:ed:37:17:09:17:aa:36:
06:cb:cf:0e:e3:da:f5:2f:a6:ae:d8:0c:da:c4:ba:
c8:73:e1:4c:25:2c:42:6d:ca:be:40:b2:b0:70:36:
25:45:cd:9c:ad:a6:69:bc:db:c5:65:30:99:8d:bf:
0b:ca:0c:7b:f6:73:18:6f:06:f9:a8:67:c3:79:0e:
aa:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:53:02:02:AE:52:E3:D0:0B:09:B1:34:4C:C4:A8:25:29:44:9D:6E
X509v3 Authority Key Identifier:
keyid:CC:65:32:64:9A:6A:EF:47:14:84:1B:9C:8F:54:66:0D:88:9B:06:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zGUyZJpq70cUhBucj1RmDYibBik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:47:6d:c4:ad:bc:29:36:2e:a1:b5:19:ef:16:77:76:38:16:
bd:bb:81:bc:3c:6d:b2:8a:5f:20:a2:ca:15:76:d8:6f:59:c2:
fb:56:83:a5:cb:61:09:31:af:c1:ee:e5:be:1a:47:7f:54:ba:
34:c0:d8:6f:cd:20:8d:e0:b7:08:b1:9a:8a:2e:d1:e9:cc:fc:
bd:7e:cb:d8:a0:78:42:aa:a1:e6:90:b2:34:fb:8f:00:37:c8:
6e:ba:f1:33:be:2a:ba:3f:a8:ea:95:0c:3a:78:32:ae:17:e5:
98:50:f8:77:98:ee:11:9e:30:4e:5d:e1:e2:72:da:20:de:f6:
23:9c:d9:2e:ab:a7:fe:5a:48:94:fe:0c:b2:7b:bd:b9:2b:f3:
94:1d:cf:98:26:12:8d:3b:0d:37:c3:27:46:0f:e2:9b:b5:7b:
92:9a:b5:f4:2b:e4:07:f6:9e:65:d2:3c:5b:a7:aa:26:5a:fd:
85:f1:d1:3c:37:16:a9:10:b6:02:32:b5:a1:20:4f:c8:5a:51:
d6:4a:e9:25:85:75:92:55:1d:31:16:04:8a:15:6c:33:6f:23:
96:9b:0c:78:f6:e2:0b:36:f7:a0:3c:e0:01:5f:dd:a6:e2:74:
5b:92:ce:6f:cd:5e:80:d8:94:99:e9:64:70:2e:e4:11:d6:c6:
ce:3d:ca:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv143q8wflyifr9AM5rCnrgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjNjUzMjY0OWE2YWVmNDcxNDg0MWI5YzhmNTQ2NjBkODg5
YjA2MjkwHhcNMjYwMTI1MTYwMTI0WhcNMjYwMTI2MTYwMTI0WjAzMTEwLwYDVQQD
EyhlNjUzMDIwMmFlNTJlM2QwMGIwOWIxMzQ0Y2M0YTgyNTI5NDQ5ZDZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0VSmR9kDX54K1NTMzO70O0onDePT
Zu8BLCeqdFoSdSnieAX993Gw6/qkz30CrerGn/hZ95zYhx4jn6ILITrpvO61h6Zi
E3toFgBX9SwfW/kY42lw9Bj08wgb2NoU4+lEcupnCImlCDYN2EM29UNMUJU1w21t
Pc+pUN27l6j1NmBZY+jlIEyB+tfpiYeYUdN24ClEfLiMBTxRqcHF2K3NQdiQBLdz
z18CJZsPQtn+Bj9KNVjLTE4FI27wXu03FwkXqjYGy88O49r1L6au2AzaxLrIc+FM
JSxCbcq+QLKwcDYlRc2craZpvNvFZTCZjb8Lygx79nMYbwb5qGfDeQ6qKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOZTAgKuUuPQCwmxNEzEqCUpRJ1uMB8GA1UdIwQY
MBaAFMxlMmSaau9HFIQbnI9UZg2ImwYpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekdVeVpKcHE3MGNVaEJ1Y2oxUm1EWWliQmlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8zMTBkMzQtZjVkOC00ZTk2LTliN2Mt
NjQ4ZjUwMWFmYWU1LzEvekdVeVpKcHE3MGNVaEJ1Y2oxUm1EWWliQmlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC8zMTBkMzQtZjVkOC00ZTk2LTliN2MtNjQ4ZjUwMWFmYWU1
LzEvekdVeVpKcHE3MGNVaEJ1Y2oxUm1EWWliQmlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfEdtxK28
KTYuobUZ7xZ3djgWvbuBvDxtsopfIKLKFXbYb1nC+1aDpcthCTGvwe7lvhpHf1S6
NMDYb80gjeC3CLGaii7R6cz8vX7L2KB4Qqqh5pCyNPuPADfIbrrxM74quj+o6pUM
OngyrhflmFD4d5juEZ4wTl3h4nLaIN72I5zZLqun/lpIlP4Msnu9uSvzlB3PmCYS
jTsNN8MnRg/im7V7kpq19CvkB/aeZdI8W6eqJlr9hfHRPDcWqRC2AjK1oSBPyFpR
1krpJYV1klUdMRYEihVsM28jlpsMePbiCzb3oDzgAV/dpuJ0W5LOb81egNiUmelk
cC7kEdbGzj3KDg==
-----END CERTIFICATE-----
Generated at Sun Jan 25 22:36:59 2026 by rpki-client