This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.mft
File: z59vv-AKCFkre7Dt_cIAK_xytXg.mft (raw, json)
Hash identifier: fi7enl5bw/Fz6nhIUtUQnuWd24TKCo6nhmKbi7ShyZc=
Subject key identifier: A3:F1:56:A6:EA:42:C1:85:68:6D:2C:69:47:EB:B8:03:2F:99:74:96
Authority key identifier: CF:9F:6F:BF:E0:0A:08:59:2B:7B:B0:ED:FD:C2:00:2B:FC:72:B5:78
Certificate issuer: /CN=cf9f6fbfe00a08592b7bb0edfdc2002bfc72b578
Certificate serial: 019BF87623FC6771FF4BF197405A3CC2ACEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z59vv-AKCFkre7Dt_cIAK_xytXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.mft
Manifest number: 03C8
Signing time: Mon 26 Jan 2026 04:00:50 +0000
Manifest this update: Mon 26 Jan 2026 04:00:50 +0000
Manifest next update: Tue 27 Jan 2026 04:00:50 +0000
Files and hashes: 1: XUebERbWFz0VzzOPVclokPtH7ZI.roa (hash: etgcVhxSEjllJBOIBBKIy18UocYNVDG++pFKb9lFGWM=)
2: Y66UbTTLpbAqCBvMHynaZXB7I7g.roa (hash: YXu6+ED9r1lcgi1tW7PjncfqdS8ytXCfpiDpwPC9OQo=)
3: z59vv-AKCFkre7Dt_cIAK_xytXg.crl (hash: sF/drmnlbgpQ/qkII/Dq/kzZfJS3l+6PpVBzhuykdB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/z59vv-AKCFkre7Dt_cIAK_xytXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f8:76:23:fc:67:71:ff:4b:f1:97:40:5a:3c:c2:ac:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf9f6fbfe00a08592b7bb0edfdc2002bfc72b578
Validity
Not Before: Jan 26 04:00:50 2026 GMT
Not After : Jan 27 04:00:50 2026 GMT
Subject: CN=a3f156a6ea42c185686d2c6947ebb8032f997496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e5:7d:8a:05:d6:0f:86:f7:00:4f:5e:51:7e:
70:d3:4e:82:8d:85:35:f5:f4:6b:b2:25:40:48:a6:
28:fc:38:6b:a4:5e:d7:1a:8d:72:64:c9:4d:47:38:
96:ce:e0:52:e4:21:19:fe:46:df:31:50:d8:f4:d5:
1b:86:0e:88:f7:ba:70:09:8e:6e:90:f1:7f:a0:1a:
3b:a9:92:5b:76:47:c8:19:d2:d8:a5:af:c1:a3:8e:
9a:ec:13:8d:9a:13:af:a9:75:05:21:36:9b:91:ac:
dd:34:ed:cb:19:8f:17:10:cd:3e:5a:f8:29:bf:62:
fb:6b:73:03:4d:27:6e:f7:00:aa:ea:8b:31:82:93:
24:13:57:bd:1a:5d:dd:52:e1:53:df:24:5e:ac:e4:
82:fd:7d:03:63:2a:94:b9:60:a1:ac:50:64:bc:56:
98:e2:87:38:2a:3f:b1:6b:49:89:ee:f6:24:bb:96:
df:1b:a7:69:a8:6b:2b:db:b5:a1:da:b5:30:99:60:
fe:ac:64:26:76:17:10:69:90:6d:49:83:d2:9f:d0:
17:6a:26:ee:31:57:5d:ae:fe:a1:01:4d:b6:47:a6:
a3:a0:49:ea:23:26:97:f9:b8:0e:0c:10:2d:4a:08:
cd:fe:6a:40:e1:48:43:9a:fb:ea:d7:2d:44:3f:e7:
26:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:F1:56:A6:EA:42:C1:85:68:6D:2C:69:47:EB:B8:03:2F:99:74:96
X509v3 Authority Key Identifier:
keyid:CF:9F:6F:BF:E0:0A:08:59:2B:7B:B0:ED:FD:C2:00:2B:FC:72:B5:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z59vv-AKCFkre7Dt_cIAK_xytXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:8b:15:70:68:a4:98:fa:61:ed:52:a9:07:a0:77:a8:c9:68:
ed:1a:98:a6:97:2c:0f:15:ed:1e:c3:fb:39:dc:17:0c:03:0b:
04:3d:25:9a:86:8f:92:f4:85:6c:51:a5:0e:0f:7e:e4:e9:9a:
18:8f:ed:b5:c8:35:3a:da:e6:e0:95:20:d6:ad:c4:e2:5e:67:
74:3f:b2:da:f5:6b:5d:cb:f2:cc:3f:ec:05:a0:d0:e0:b6:18:
e9:29:9d:5c:cd:dc:ed:3e:0c:7f:25:79:b4:02:6e:97:07:0c:
f7:5d:5b:ca:73:c5:27:6e:90:e8:17:89:36:a1:ca:ef:f0:d6:
dc:f4:84:fe:14:7c:b4:c8:ff:29:23:f9:d9:58:7d:02:91:0c:
3f:c4:87:28:49:88:0e:8c:a4:a9:5a:00:6b:18:b8:d4:46:4d:
27:05:45:d6:44:69:35:f2:32:1a:ed:71:96:8c:ae:76:08:5d:
e9:fc:aa:9a:0d:16:d2:d8:ec:54:80:f0:66:67:61:e6:ed:97:
71:98:7a:bf:e7:db:04:b7:85:2b:1c:87:39:dd:a0:99:8f:a5:
55:26:10:d8:03:83:f0:23:7f:13:b7:96:6a:10:8c:1e:06:49:
8b:1d:44:72:00:ef:98:3d:57:fe:55:9b:cc:48:49:28:45:bb:
cb:d6:9f:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv4diP8Z3H/S/GXQFo8wqzuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmOWY2ZmJmZTAwYTA4NTkyYjdiYjBlZGZkYzIwMDJiZmM3
MmI1NzgwHhcNMjYwMTI2MDQwMDUwWhcNMjYwMTI3MDQwMDUwWjAzMTEwLwYDVQQD
EyhhM2YxNTZhNmVhNDJjMTg1Njg2ZDJjNjk0N2ViYjgwMzJmOTk3NDk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruV9igXWD4b3AE9eUX5w006CjYU1
9fRrsiVASKYo/DhrpF7XGo1yZMlNRziWzuBS5CEZ/kbfMVDY9NUbhg6I97pwCY5u
kPF/oBo7qZJbdkfIGdLYpa/Bo46a7BONmhOvqXUFITabkazdNO3LGY8XEM0+Wvgp
v2L7a3MDTSdu9wCq6osxgpMkE1e9Gl3dUuFT3yRerOSC/X0DYyqUuWChrFBkvFaY
4oc4Kj+xa0mJ7vYku5bfG6dpqGsr27Wh2rUwmWD+rGQmdhcQaZBtSYPSn9AXaibu
MVddrv6hAU22R6ajoEnqIyaX+bgODBAtSgjN/mpA4UhDmvvq1y1EP+cm6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKPxVqbqQsGFaG0saUfruAMvmXSWMB8GA1UdIwQY
MBaAFM+fb7/gCghZK3uw7f3CACv8crV4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejU5dnYtQUtDRmtyZTdEdF9jSUFLX3h5dFhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS83MzM5ODktZjEzMS00NWU5LTliNzUt
MzQyYTllZTczZDg1LzEvejU5dnYtQUtDRmtyZTdEdF9jSUFLX3h5dFhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS83MzM5ODktZjEzMS00NWU5LTliNzUtMzQyYTllZTczZDg1
LzEvejU5dnYtQUtDRmtyZTdEdF9jSUFLX3h5dFhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB4sVcGik
mPph7VKpB6B3qMlo7RqYppcsDxXtHsP7OdwXDAMLBD0lmoaPkvSFbFGlDg9+5Oma
GI/ttcg1Otrm4JUg1q3E4l5ndD+y2vVrXcvyzD/sBaDQ4LYY6SmdXM3c7T4MfyV5
tAJulwcM911bynPFJ26Q6BeJNqHK7/DW3PSE/hR8tMj/KSP52Vh9ApEMP8SHKEmI
DoykqVoAaxi41EZNJwVF1kRpNfIyGu1xloyudghd6fyqmg0W0tjsVIDwZmdh5u2X
cZh6v+fbBLeFKxyHOd2gmY+lVSYQ2AOD8CN/E7eWahCMHgZJix1EcgDvmD1X/lWb
zEhJKEW7y9afdA==
-----END CERTIFICATE-----
Generated at Mon Jan 26 08:42:44 2026 by rpki-client