This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.mft
File: zABy2pgRQZPBBM4aYJ2SppdvnEA.mft (raw, json)
Hash identifier: zBCJA1wUzKrbHHEZJBMkhof9sM9hvn1Ua0l25EO4yaA=
Subject key identifier: 01:50:71:44:38:D5:D1:0B:9B:65:4D:54:1B:23:FD:51:E7:A2:18:BC
Authority key identifier: CC:00:72:DA:98:11:41:93:C1:04:CE:1A:60:9D:92:A6:97:6F:9C:40
Certificate issuer: /CN=cc0072da98114193c104ce1a609d92a6976f9c40
Certificate serial: 019C2DAD1B2708A5F868BD6AD06762C6024B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zABy2pgRQZPBBM4aYJ2SppdvnEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.mft
Manifest number: 0E63
Signing time: Thu 05 Feb 2026 12:00:45 +0000
Manifest this update: Thu 05 Feb 2026 12:00:45 +0000
Manifest next update: Fri 06 Feb 2026 12:00:45 +0000
Files and hashes: 1: MZXty06Zl0SzNmooJ_8YDA7IJCo.roa (hash: CxYqpGtTZxJ+XJM89fQrjKOfOuAfJMmZBcg+oB/Yo2U=)
2: zABy2pgRQZPBBM4aYJ2SppdvnEA.crl (hash: oXDVY/uvjyYLdBXkcalpUUJ1xWrYtEjxmIwQNZrGh7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zABy2pgRQZPBBM4aYJ2SppdvnEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Feb 2026 12:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:2d:ad:1b:27:08:a5:f8:68:bd:6a:d0:67:62:c6:02:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc0072da98114193c104ce1a609d92a6976f9c40
Validity
Not Before: Feb 5 12:00:45 2026 GMT
Not After : Feb 6 12:00:45 2026 GMT
Subject: CN=0150714438d5d10b9b654d541b23fd51e7a218bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:39:02:1a:c7:65:93:bd:e1:eb:43:d3:71:47:
85:d3:af:64:75:43:16:f1:7c:9c:7a:d8:f3:68:1d:
14:31:0f:3a:11:66:94:83:f0:4a:4a:f7:63:fd:4b:
4d:c0:a7:d5:3d:a1:37:79:f1:12:12:4e:fd:f7:9a:
ea:ae:c8:11:3c:3d:f0:42:4c:39:6d:5f:36:05:c6:
bd:c8:f3:6a:9a:78:54:d9:3a:fa:4b:5e:c5:68:c4:
f9:9a:56:f9:75:a0:ce:3c:7e:27:b4:10:29:ab:6b:
e6:f2:9c:4b:69:77:0c:c7:fc:11:ab:ea:d2:71:49:
74:a3:8b:1a:be:7b:bd:05:85:6b:23:74:46:85:71:
80:b9:f9:18:cb:c6:dd:f0:be:99:8c:14:a0:3f:89:
22:08:3a:9c:38:fa:0c:83:71:a9:f1:59:e5:4b:21:
34:d9:77:d5:9d:09:ff:cc:41:c4:c4:32:bd:7a:b5:
5f:3f:5b:22:a2:c2:47:97:fb:87:88:87:bb:24:f0:
fb:4b:94:1f:85:8c:cc:b0:95:ef:19:59:be:d8:4d:
b9:e7:42:f6:e6:e6:0d:a4:6a:fb:80:b8:63:94:9f:
54:34:08:42:0e:bf:3d:65:b5:7e:08:54:41:83:1d:
df:91:02:ee:36:25:9a:15:0d:ac:a3:2c:1f:9a:82:
9a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:50:71:44:38:D5:D1:0B:9B:65:4D:54:1B:23:FD:51:E7:A2:18:BC
X509v3 Authority Key Identifier:
keyid:CC:00:72:DA:98:11:41:93:C1:04:CE:1A:60:9D:92:A6:97:6F:9C:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zABy2pgRQZPBBM4aYJ2SppdvnEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:a0:0f:b9:e0:db:57:c6:a4:09:7d:49:2b:9a:79:d3:93:e9:
35:48:96:e6:b2:7e:5d:e5:be:56:93:be:8a:25:79:e8:3e:87:
f8:f4:5b:ce:99:43:17:c9:41:34:00:3d:65:4d:21:eb:e1:7c:
bc:5a:39:11:52:61:00:46:48:03:bb:8a:d3:bd:aa:37:3c:6e:
da:d9:0b:8c:86:95:cd:fb:de:9c:58:6e:a9:58:66:bc:16:6f:
de:f4:2e:43:57:f4:46:a9:ac:61:14:0e:b6:6d:d8:f4:11:4a:
a5:64:25:2e:5d:43:81:c2:4c:1d:8a:db:00:3c:a7:14:ec:e8:
cb:b3:29:a2:8a:71:9e:ad:4d:06:3b:10:b0:1e:64:0c:34:23:
9f:d6:51:bd:b1:49:e7:33:6c:84:80:04:c9:a3:13:c2:5d:a0:
8f:c7:5e:14:36:c0:c7:14:8a:40:fc:31:93:02:ed:b0:6f:07:
2f:61:88:45:d6:cb:83:b7:24:4a:84:90:0b:13:74:12:0e:19:
34:e0:94:25:bb:06:8b:59:85:8f:fb:62:74:3d:0e:94:9a:b4:
41:66:67:43:3c:76:31:a3:6d:25:54:1a:f4:ff:84:46:29:1e:
7a:bc:26:db:bb:36:05:dc:bf:4a:4f:cd:9a:ac:9e:7c:21:fd:
e1:df:47:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 5 20:50:19 2026 by rpki-client