This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/zyddD-Y5mOobfTnlGPsyn3a-0WY.mft
File: zyddD-Y5mOobfTnlGPsyn3a-0WY.mft (raw, json)
Hash identifier: 6+3nTmPbly2tdCY4mncXVpz3gGBjW0CgicpbrmEqFdI=
Subject key identifier: 53:60:E9:94:03:60:0F:C8:BD:A8:FE:EF:26:10:F9:10:7E:B6:47:7D
Authority key identifier: CF:27:5D:0F:E6:39:98:EA:1B:7D:39:E5:18:FB:32:9F:76:BE:D1:66
Certificate issuer: /CN=cf275d0fe63998ea1b7d39e518fb329f76bed166
Certificate serial: 019C43FE0CC51C750934AE7E46896D4ABEF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zyddD-Y5mOobfTnlGPsyn3a-0WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/zyddD-Y5mOobfTnlGPsyn3a-0WY.mft
Manifest number: 0601
Signing time: Mon 09 Feb 2026 20:00:48 +0000
Manifest this update: Mon 09 Feb 2026 20:00:48 +0000
Manifest next update: Tue 10 Feb 2026 20:00:48 +0000
Files and hashes: 1: u9YBJLq1t7JkE_DkFNdRSbpZK_c.roa (hash: 5V5Kj6vkFdjgMDloiXkl7ryE2xGCQQ4Ob+s+u5uVqwM=)
2: zyddD-Y5mOobfTnlGPsyn3a-0WY.crl (hash: 8LUjpfrwLDd1my2mRGOoeW57R76mdNDtWaDIoB4aPtA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/zyddD-Y5mOobfTnlGPsyn3a-0WY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/zyddD-Y5mOobfTnlGPsyn3a-0WY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zyddD-Y5mOobfTnlGPsyn3a-0WY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 20:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:fe:0c:c5:1c:75:09:34:ae:7e:46:89:6d:4a:be:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf275d0fe63998ea1b7d39e518fb329f76bed166
Validity
Not Before: Feb 9 20:00:48 2026 GMT
Not After : Feb 10 20:00:48 2026 GMT
Subject: CN=5360e99403600fc8bda8feef2610f9107eb6477d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:63:56:98:38:a9:bb:da:ec:ec:d8:52:4d:a0:
00:97:cf:b8:29:46:d6:97:a3:ff:0d:fd:e0:27:48:
fa:c6:23:5e:b5:92:ec:a2:50:b9:5a:9b:48:8d:10:
b5:2f:95:03:59:59:e7:f4:14:b8:ed:0d:cb:64:6a:
ed:24:ed:62:d4:6f:2c:d9:6c:c6:e4:4a:ca:04:ee:
cb:19:80:0a:9e:08:0d:bb:5c:fc:40:7e:d4:3e:17:
fe:60:27:74:13:d4:84:92:16:d1:f9:4c:52:b4:59:
7d:0e:fe:2e:68:3c:9f:b6:f1:49:3b:81:8d:92:24:
34:f3:e8:84:b5:ec:83:cf:ff:94:7d:49:c2:19:4c:
5c:27:ed:b6:5d:63:49:0e:a1:7a:0b:af:ab:0f:de:
e9:dc:ea:f7:56:1c:68:8e:ac:cd:d8:e3:26:cb:33:
0f:37:9a:29:d1:d9:9f:ed:6b:a6:e2:58:78:67:cf:
c9:0c:f9:1f:06:7c:a4:60:68:e5:13:e6:12:12:5a:
ce:81:48:3f:81:ec:3f:aa:a1:a8:a4:de:35:88:60:
e2:88:01:54:cd:70:eb:01:db:25:c4:84:33:df:c7:
ac:73:c4:df:20:cd:73:8d:0f:b4:ac:54:c6:ae:f5:
44:6c:36:09:1b:2b:31:d8:bd:b9:17:38:5e:24:0a:
e5:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:60:E9:94:03:60:0F:C8:BD:A8:FE:EF:26:10:F9:10:7E:B6:47:7D
X509v3 Authority Key Identifier:
keyid:CF:27:5D:0F:E6:39:98:EA:1B:7D:39:E5:18:FB:32:9F:76:BE:D1:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zyddD-Y5mOobfTnlGPsyn3a-0WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/zyddD-Y5mOobfTnlGPsyn3a-0WY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/zyddD-Y5mOobfTnlGPsyn3a-0WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:5a:ca:20:d2:0f:f2:c6:47:c2:12:1d:ef:11:09:0d:37:6a:
32:22:2d:d8:24:df:8c:e9:e8:85:15:47:03:57:fc:02:d2:55:
12:b9:63:44:b5:36:21:3b:b6:77:7a:f1:38:8e:bf:20:8f:2c:
85:3d:4b:c3:f4:f4:79:86:64:6f:6d:0f:af:2d:72:bd:f1:94:
55:58:46:ab:be:e4:cc:e9:20:f3:f4:1e:67:e9:52:d9:2d:02:
98:20:5c:ed:c3:e4:84:ad:0d:88:47:bc:f8:ef:7f:6c:f1:65:
8b:fc:53:23:3d:21:97:1b:9e:5a:a7:ca:b8:36:b2:50:3b:f4:
1f:85:9d:ab:eb:bc:fa:d5:f2:60:4c:e0:87:f8:6b:7c:51:88:
8a:5c:ea:b4:b9:2b:36:d8:2b:50:21:4f:0a:60:46:ad:b8:07:
b5:0e:46:d0:b0:9c:44:90:32:3a:ab:42:d9:da:bd:f5:c7:74:
6d:95:1a:be:22:40:b4:53:49:c7:b0:7d:da:c3:96:20:e5:04:
50:21:93:62:b8:c8:e4:f3:d6:f9:7d:e6:22:d0:72:12:33:cf:
69:95:b3:16:d5:db:d0:41:e3:41:b3:6a:c1:cf:bc:08:4f:c6:
a6:35:7b:9d:31:b6:61:d1:1e:50:ff:25:c9:5b:6b:f5:39:6e:
0f:bd:e4:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:45:33 2026 by rpki-client