This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/773600-838f-414c-ac0c-d87019512716/1/zy_MDEv1TV6ct_obsf4anZRhA5A.mft File: zy_MDEv1TV6ct_obsf4anZRhA5A.mft (raw, json) Hash identifier: 3ijrKHF6BqOto8fqgUMl7dZyRCc3aeYA2ggjMSgyu98= Subject key identifier: 8C:B8:E2:3B:33:4D:0F:07:73:DA:D4:E1:EE:59:43:68:79:71:45:3E Authority key identifier: CF:2F:CC:0C:4B:F5:4D:5E:9C:B7:FA:1B:B1:FE:1A:9D:94:61:03:90 Certificate issuer: /CN=cf2fcc0c4bf54d5e9cb7fa1bb1fe1a9d94610390 Certificate serial: 019C438FD48E33ABB98FCF0657BF1E704FE7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zy_MDEv1TV6ct_obsf4anZRhA5A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/773600-838f-414c-ac0c-d87019512716/1/zy_MDEv1TV6ct_obsf4anZRhA5A.mft Manifest number: 99 Signing time: Mon 09 Feb 2026 18:00:25 +0000 Manifest this update: Mon 09 Feb 2026 18:00:25 +0000 Manifest next update: Tue 10 Feb 2026 18:00:25 +0000 Files and hashes: 1: TFVe-dXGuNawzmnfdegYq6flUl8.roa (hash: vQbZ+TX1ZBjYH0NW4eiYLXLkpBqwSOxwA5OLO5L2sYg=) 2: zy_MDEv1TV6ct_obsf4anZRhA5A.crl (hash: cARswH2LLschot50SDLu3oqoFeHaxMaa5T7BoW90w5I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/773600-838f-414c-ac0c-d87019512716/1/zy_MDEv1TV6ct_obsf4anZRhA5A.crl rsync://rpki.ripe.net/repository/DEFAULT/37/773600-838f-414c-ac0c-d87019512716/1/zy_MDEv1TV6ct_obsf4anZRhA5A.mft rsync://rpki.ripe.net/repository/DEFAULT/zy_MDEv1TV6ct_obsf4anZRhA5A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:8f:d4:8e:33:ab:b9:8f:cf:06:57:bf:1e:70:4f:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf2fcc0c4bf54d5e9cb7fa1bb1fe1a9d94610390 Validity Not Before: Feb 9 18:00:25 2026 GMT Not After : Feb 10 18:00:25 2026 GMT Subject: CN=8cb8e23b334d0f0773dad4e1ee5943687971453e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:04:ec:2c:da:70:89:36:0f:5d:a2:25:06:34: 2b:a0:ac:09:a4:39:18:c7:ff:aa:76:ac:af:b9:a3: 24:90:19:50:22:b6:4d:e5:ad:ed:4b:1e:2d:32:00: 3c:f8:4c:d9:78:10:24:90:c5:fd:d7:8f:b2:d6:dc: e8:7a:ea:71:cf:cf:e2:f7:b3:d6:7d:ec:88:94:c9: 3a:d4:47:e9:7a:64:13:e0:34:05:3e:66:a2:88:ce: 7c:e4:2e:a2:b8:2a:84:40:24:ab:88:44:07:d3:7d: dc:43:a5:26:cf:7a:c8:26:06:b6:fa:36:4c:b2:57: 33:90:a2:04:a4:73:ce:47:52:2a:37:eb:d0:19:69: 60:aa:f0:27:0d:ab:5a:a2:80:67:8f:4e:33:cb:14: 34:e1:81:42:8b:73:d9:c1:35:40:2f:8d:f6:e9:b3: 88:83:ed:98:00:12:85:e9:fb:8d:17:3e:6d:c3:9a: 94:c1:8a:89:6c:c1:86:c0:0a:d0:57:9b:de:7d:ad: 50:38:5c:e4:81:ad:7a:7d:d3:ba:e2:5d:a6:3a:31: f8:f0:45:9b:fb:83:64:7c:cc:8f:44:a0:88:2b:86: f0:ff:ca:c8:b3:cb:cd:b0:6b:89:3c:8c:a0:f1:08: 15:23:2a:f9:32:fc:ca:12:d5:2d:da:26:a3:ca:11: af:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:B8:E2:3B:33:4D:0F:07:73:DA:D4:E1:EE:59:43:68:79:71:45:3E X509v3 Authority Key Identifier: keyid:CF:2F:CC:0C:4B:F5:4D:5E:9C:B7:FA:1B:B1:FE:1A:9D:94:61:03:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zy_MDEv1TV6ct_obsf4anZRhA5A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/773600-838f-414c-ac0c-d87019512716/1/zy_MDEv1TV6ct_obsf4anZRhA5A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/773600-838f-414c-ac0c-d87019512716/1/zy_MDEv1TV6ct_obsf4anZRhA5A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:15:72:5d:a4:c3:2e:10:3f:90:2d:d4:4c:fd:d9:11:42:d0: db:84:bd:08:24:79:11:11:a2:7e:78:58:64:ba:bc:7d:74:1a: 24:44:c0:05:b9:cc:3a:f9:2f:ce:34:dc:1f:da:bc:48:a0:12: b9:c6:cd:0e:d8:3a:34:47:08:d7:39:45:66:b7:af:8f:c9:39: 8a:4a:a3:3a:c2:69:3a:50:dd:1a:d2:a0:09:e4:c0:f2:c6:a4: c6:7d:4f:44:4c:df:e9:25:e2:4e:ad:23:84:81:cc:38:64:a3: bc:a1:4f:6d:d8:f6:9b:32:cb:32:ee:18:78:8f:ec:d7:57:13: 98:f5:db:98:15:89:56:77:d5:b4:c6:1b:1a:da:5b:29:59:e5: 8d:49:88:5a:d4:d2:d4:aa:bf:60:2b:35:28:83:6f:fb:02:df: ce:38:96:32:72:7f:10:2b:e6:ff:ce:d9:97:39:e1:c4:f5:67: 5c:68:04:5d:06:53:ec:d2:65:60:dd:46:91:62:f1:04:c7:8f: 1b:6e:43:0b:f4:cb:5b:bd:8b:12:40:b1:58:ed:af:b8:b2:e4: c6:be:74:91:f7:f3:7f:53:b3:bb:e3:a7:df:1c:05:85:ec:71: 58:f5:ba:26:fd:76:33:8b:b5:3d:d8:5a:9e:fa:1f:ad:b2:a0: e4:b5:03:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDj9SOM6u5j88GV78ecE/nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmMmZjYzBjNGJmNTRkNWU5Y2I3ZmExYmIxZmUxYTlkOTQ2 MTAzOTAwHhcNMjYwMjA5MTgwMDI1WhcNMjYwMjEwMTgwMDI1WjAzMTEwLwYDVQQD Eyg4Y2I4ZTIzYjMzNGQwZjA3NzNkYWQ0ZTFlZTU5NDM2ODc5NzE0NTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5wTsLNpwiTYPXaIlBjQroKwJpDkY x/+qdqyvuaMkkBlQIrZN5a3tSx4tMgA8+EzZeBAkkMX914+y1tzoeupxz8/i97PW feyIlMk61EfpemQT4DQFPmaiiM585C6iuCqEQCSriEQH033cQ6Umz3rIJga2+jZM slczkKIEpHPOR1IqN+vQGWlgqvAnDataooBnj04zyxQ04YFCi3PZwTVAL4326bOI g+2YABKF6fuNFz5tw5qUwYqJbMGGwArQV5vefa1QOFzkga16fdO64l2mOjH48EWb +4NkfMyPRKCIK4bw/8rIs8vNsGuJPIyg8QgVIyr5MvzKEtUt2iajyhGvAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIy44jszTQ8Hc9rU4e5ZQ2h5cUU+MB8GA1UdIwQY MBaAFM8vzAxL9U1enLf6G7H+Gp2UYQOQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenlfTURFdjFUVjZjdF9vYnNmNGFuWlJoQTVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy83NzM2MDAtODM4Zi00MTRjLWFjMGMt ZDg3MDE5NTEyNzE2LzEvenlfTURFdjFUVjZjdF9vYnNmNGFuWlJoQTVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy83NzM2MDAtODM4Zi00MTRjLWFjMGMtZDg3MDE5NTEyNzE2 LzEvenlfTURFdjFUVjZjdF9vYnNmNGFuWlJoQTVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfBVyXaTD LhA/kC3UTP3ZEULQ24S9CCR5ERGifnhYZLq8fXQaJETABbnMOvkvzjTcH9q8SKAS ucbNDtg6NEcI1zlFZrevj8k5ikqjOsJpOlDdGtKgCeTA8sakxn1PREzf6SXiTq0j hIHMOGSjvKFPbdj2mzLLMu4YeI/s11cTmPXbmBWJVnfVtMYbGtpbKVnljUmIWtTS 1Kq/YCs1KINv+wLfzjiWMnJ/ECvm/87ZlznhxPVnXGgEXQZT7NJlYN1GkWLxBMeP G25DC/TLW72LEkCxWO2vuLLkxr50kffzf1Ozu+On3xwFhexxWPW6Jv12M4u1Pdha nvofrbKg5LUDRw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:53:27 2026 by rpki-client