This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.mft
File: 2ZpHzcifRjQvkLDaPDDZ7F_WMjg.mft (raw, json)
Hash identifier: BurCrLDr2YeFHomDFOWM1JAmHu9DAza8NvL7gMBgqIg=
Subject key identifier: 61:FF:62:A3:B5:21:AD:BF:78:07:32:7F:79:30:8B:EA:A3:96:BE:FA
Authority key identifier: D9:9A:47:CD:C8:9F:46:34:2F:90:B0:DA:3C:30:D9:EC:5F:D6:32:38
Certificate issuer: /CN=d99a47cdc89f46342f90b0da3c30d9ec5fd63238
Certificate serial: 019BF83F51A32BA5CF559D8F834C103C3B10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.mft
Manifest number: 089F
Signing time: Mon 26 Jan 2026 03:00:57 +0000
Manifest this update: Mon 26 Jan 2026 03:00:57 +0000
Manifest next update: Tue 27 Jan 2026 03:00:57 +0000
Files and hashes: 1: 2ZpHzcifRjQvkLDaPDDZ7F_WMjg.crl (hash: W5ivyzTqGA69UombF2CQrWLQ6Qzgi8bZF5AvSyg1RIA=)
2: 48OS4sWYglwtZBn1YxiPqc26nTU.roa (hash: NBM10gWvuZSa38kRQAx40WjX3amxqFeb96LnMyUj85Q=)
3: HUZvsXoFqmpwitLw4aku7m5jYa8.roa (hash: rhpAJ7/RvlTCzRrbypi+sM57yT9OZ8RJ46KD4H90XuY=)
4: Rl0xX2L5u9e-WU3LxVTHfDCZoEQ.roa (hash: iB5ApjU6OfFGOZU2O/uqHAaYYGIEkIhRygeaclVc054=)
5: hih4fzkJ3O9yEk3BE5UpAZ6h-8Q.roa (hash: R7mk0homAMVaYBl/kyf6p+7Cu/DPi0srKaEKzzxe+Sc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 01:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f8:3f:51:a3:2b:a5:cf:55:9d:8f:83:4c:10:3c:3b:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d99a47cdc89f46342f90b0da3c30d9ec5fd63238
Validity
Not Before: Jan 26 03:00:57 2026 GMT
Not After : Jan 27 03:00:57 2026 GMT
Subject: CN=61ff62a3b521adbf7807327f79308beaa396befa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b6:30:a1:32:c2:91:13:0e:d5:3a:4c:b6:b2:
3f:a1:35:b4:7d:2e:05:5e:e5:ae:33:f2:98:b9:3a:
45:8e:e7:5c:9e:a2:db:83:2b:ab:73:41:a6:65:e9:
22:b8:a6:e2:8f:51:67:f3:dc:12:e2:3c:1b:be:bb:
7f:05:44:03:ee:9c:e6:af:5d:d0:af:9d:96:2e:51:
c1:1a:56:f9:f2:0d:16:7c:c2:c0:f6:bd:ac:0d:5f:
19:a6:5d:72:e2:46:89:30:ae:9c:43:dc:48:40:35:
b2:42:38:1c:a7:b7:7b:37:f6:0f:58:bf:68:fa:df:
fb:db:5f:56:cc:25:63:13:f2:85:a5:1d:e0:fa:d0:
71:29:67:cd:89:fd:7a:a0:30:66:d4:e5:6e:f1:9b:
25:e5:73:f9:7d:1f:d2:11:8d:59:d0:34:07:d2:03:
9d:b5:d2:17:57:97:ad:07:26:b2:77:7b:da:c8:e0:
0c:6d:06:55:04:6f:d0:92:8a:dd:40:f0:65:a3:8f:
5e:b4:9c:8b:d1:e2:48:6f:2d:6e:77:db:9e:65:a4:
f2:60:95:44:1c:2a:9e:d6:39:16:85:ea:9e:5b:5e:
a7:ec:43:6f:53:e7:58:f4:72:0a:50:d3:ee:56:46:
e5:23:1b:c4:06:af:71:c2:e1:b0:3f:2e:48:0b:2f:
5d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:FF:62:A3:B5:21:AD:BF:78:07:32:7F:79:30:8B:EA:A3:96:BE:FA
X509v3 Authority Key Identifier:
keyid:D9:9A:47:CD:C8:9F:46:34:2F:90:B0:DA:3C:30:D9:EC:5F:D6:32:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:10:e2:68:93:51:f8:89:87:10:e9:e4:77:c2:57:12:eb:f7:
1d:77:b1:65:de:8c:a4:2e:d5:45:31:f2:ac:bd:7a:67:79:2a:
e7:38:67:1e:b3:fa:57:f5:5a:45:de:0b:b2:4f:48:c7:de:6b:
07:ff:70:ff:d6:4b:ec:b0:12:b7:c9:ae:19:1f:fc:76:a7:b9:
fc:17:72:ec:18:5b:70:32:2c:b2:8e:9e:e8:98:76:68:be:32:
de:3c:16:a9:2f:08:01:c1:68:ce:3a:8e:b1:6a:f2:44:5a:95:
b3:4e:7d:c1:6e:c4:b1:82:93:58:66:1c:c6:d8:83:81:58:72:
9e:8f:5e:38:20:50:68:63:2a:50:38:c3:54:40:95:3d:6d:64:
26:34:f4:dc:8c:21:cb:45:5e:59:71:b4:2c:8a:16:7b:1f:fd:
20:c6:ae:79:6d:74:bc:0c:94:cf:06:bd:f5:86:d7:0c:51:32:
00:45:34:6c:b9:7a:e8:70:de:b5:d8:8d:2e:29:69:a3:d7:bf:
c6:8c:0a:04:93:a4:e8:de:0e:fa:98:a4:40:99:32:d1:5c:21:
21:ec:85:bf:f6:c5:a4:b3:30:04:c0:1b:31:82:ac:50:5b:8e:
f8:17:48:ed:9e:01:bb:8f:bc:96:15:34:03:47:0c:06:fd:59:
1a:e9:12:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 10:17:54 2026 by rpki-client