This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/445228-b442-4e16-ad69-8ffddb5e3c26/1/ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.mft
File: ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.mft (raw, json)
Hash identifier: G/73FPiZol/Q5kcaLwAzOT8wj5oWVudfw65XSFw+dBo=
Subject key identifier: D4:C0:AE:41:CF:B0:CE:46:1A:AB:03:E8:10:59:9D:96:5C:D8:9B:FB
Authority key identifier: 64:17:B1:E1:3D:32:ED:3A:64:A7:C3:52:27:51:62:3E:EF:AB:E5:F3
Certificate issuer: /CN=6417b1e13d32ed3a64a7c3522751623eefabe5f3
Certificate serial: 019BF876A0C6C1077712DC311E708604FD6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/445228-b442-4e16-ad69-8ffddb5e3c26/1/ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.mft
Manifest number: 0721
Signing time: Mon 26 Jan 2026 04:01:22 +0000
Manifest this update: Mon 26 Jan 2026 04:01:22 +0000
Manifest next update: Tue 27 Jan 2026 04:01:22 +0000
Files and hashes: 1: YDyC5kBhNI8thKV1LynCzapFE7Q.roa (hash: QeALQ6HX+21WYDZockRGHmyT4aXfggw6UzIeai2uvuw=)
2: ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.crl (hash: qEbrMO8/T6T1yJduPojr96Kg9SvB/RNFYsi/iJlFP4g=)
3: uhkofDxDROlcHCvXKtjXZmbwMcM.roa (hash: VNaYu0cLAzaNZcXisiMMcDQwN9FyAi7e1kpMVNW8PJk=)
4: v4c0sHmxAwTKfvbI0ce_dZkGZqc.roa (hash: HE5E+h78gyc1LIpKVk4+W1mq58iu0Ssx5TmwVEIggic=)
5: wOkpHSGw-U8KI9tK8aag-rxFIFI.roa (hash: eMuVT13Zj6Uew2bZcSNq7VO8ffPMy9zKzbd96LA2Eac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/445228-b442-4e16-ad69-8ffddb5e3c26/1/ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/445228-b442-4e16-ad69-8ffddb5e3c26/1/ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f8:76:a0:c6:c1:07:77:12:dc:31:1e:70:86:04:fd:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6417b1e13d32ed3a64a7c3522751623eefabe5f3
Validity
Not Before: Jan 26 04:01:22 2026 GMT
Not After : Jan 27 04:01:22 2026 GMT
Subject: CN=d4c0ae41cfb0ce461aab03e810599d965cd89bfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6e:51:bf:81:82:3d:1e:9c:c4:af:bd:9d:bf:
60:41:b4:fa:79:b8:9c:0a:7c:ad:ae:63:7e:1a:71:
e3:3c:ed:08:52:dd:d3:1c:e1:c8:57:a6:42:ba:72:
bd:e5:60:95:62:b0:d4:91:d7:7a:d0:69:4a:cf:c6:
e9:85:18:bc:f9:51:84:f7:de:bd:ee:ff:8d:07:3f:
7e:94:85:cc:3c:4c:8f:7a:ae:81:ad:24:d8:a7:7d:
cd:29:e3:33:4c:57:80:d6:85:27:1d:de:81:77:26:
b8:ed:ad:99:25:15:ec:5d:17:7e:9b:62:b6:e3:d0:
92:9a:dc:32:47:0b:a4:e7:51:b3:e2:ff:ed:f6:33:
82:fe:0d:b9:8b:91:05:1b:66:50:f8:76:7d:36:10:
1e:73:6a:29:82:19:af:dd:79:04:b0:9a:73:85:ca:
f7:7c:2d:bb:20:32:7f:f5:1a:4d:d1:0f:21:bb:5f:
97:49:76:ad:2e:f4:c9:e1:70:b1:20:00:1c:fb:21:
3c:9b:80:d1:1c:75:55:b8:58:d9:b6:f2:95:b2:15:
6e:05:c0:0f:d1:ea:5d:31:e2:44:a9:f0:77:2b:d1:
8c:6c:42:6f:83:f6:77:c4:e0:ce:e2:12:9e:7a:8b:
e5:27:11:8a:f0:ba:cc:bb:a2:27:20:89:fe:ea:05:
96:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:C0:AE:41:CF:B0:CE:46:1A:AB:03:E8:10:59:9D:96:5C:D8:9B:FB
X509v3 Authority Key Identifier:
keyid:64:17:B1:E1:3D:32:ED:3A:64:A7:C3:52:27:51:62:3E:EF:AB:E5:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/445228-b442-4e16-ad69-8ffddb5e3c26/1/ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/445228-b442-4e16-ad69-8ffddb5e3c26/1/ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:6d:5e:04:91:ab:ea:1d:0a:65:46:fa:1f:5e:87:f6:6f:54:
6f:b3:3d:32:cc:7b:f1:5b:9d:49:de:ab:28:9c:95:5d:f3:a7:
62:c8:c6:54:8f:e0:09:49:b5:c8:5e:01:b3:0d:04:bd:79:fe:
0f:f3:be:60:5e:e8:1d:0e:e3:8d:b7:93:cd:18:54:72:8f:cf:
95:8f:76:17:9e:57:53:87:fa:ce:43:93:45:95:db:bd:fc:fa:
de:cd:2b:4c:59:a9:f8:75:1e:92:27:cb:c6:f8:3d:c2:9f:d4:
01:22:fb:db:85:6d:81:43:d2:c8:64:51:5f:22:43:c1:f6:bc:
2c:d6:a6:4f:25:c1:92:4e:53:92:9e:b2:5d:27:41:8e:51:a3:
d4:01:c3:cf:c4:83:02:a6:16:2c:e0:e7:8e:0c:f1:7f:2d:a2:
20:35:7c:c3:2a:c2:47:ff:45:3b:ea:e1:de:d8:f6:90:e1:6a:
5d:a0:5d:6c:53:d6:98:99:5c:75:e9:d9:f0:d3:53:28:51:8b:
42:71:3f:e4:68:12:33:70:d8:2b:dd:2a:4e:7c:f9:43:46:56:
1d:d5:f0:61:9f:3c:f4:77:6f:06:4f:96:12:91:7b:f9:ec:cd:
e1:96:f9:97:11:7f:cb:c9:75:48:32:c0:ef:59:7f:c3:4c:60:
80:74:20:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 08:42:39 2026 by rpki-client