This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/98c860-5298-4846-beaa-356c096bc6f9/1/ZAGt7bycjxxs8jifx_dB7fTxnyw.mft
File: ZAGt7bycjxxs8jifx_dB7fTxnyw.mft (raw, json)
Hash identifier: kHOuwEaG+vr6PXqaaIHo7QbVQ06IlC7hhnKiaex0Nkk=
Subject key identifier: B0:2B:9B:5E:DF:9D:18:F2:FF:C5:E9:DA:55:ED:C8:B1:5D:D3:7C:2E
Authority key identifier: 64:01:AD:ED:BC:9C:8F:1C:6C:F2:38:9F:C7:F7:41:ED:F4:F1:9F:2C
Certificate issuer: /CN=6401adedbc9c8f1c6cf2389fc7f741edf4f19f2c
Certificate serial: 019C42466ABAC70E213B1A72595375799DAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZAGt7bycjxxs8jifx_dB7fTxnyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/98c860-5298-4846-beaa-356c096bc6f9/1/ZAGt7bycjxxs8jifx_dB7fTxnyw.mft
Manifest number: 0E6C
Signing time: Mon 09 Feb 2026 12:00:36 +0000
Manifest this update: Mon 09 Feb 2026 12:00:36 +0000
Manifest next update: Tue 10 Feb 2026 12:00:36 +0000
Files and hashes: 1: KSszcmUpPo8JBR4sfrdc2vv2aRg.roa (hash: ew+549kVqxTodrfZ3xKjeuTH8QTf9/NbVOyVAUCiCUA=)
2: ZAGt7bycjxxs8jifx_dB7fTxnyw.crl (hash: pi+7aojYwLyaD8xWRcBiDDEQ1iAyM+SfR6aenNJX0OA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/98c860-5298-4846-beaa-356c096bc6f9/1/ZAGt7bycjxxs8jifx_dB7fTxnyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/98c860-5298-4846-beaa-356c096bc6f9/1/ZAGt7bycjxxs8jifx_dB7fTxnyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZAGt7bycjxxs8jifx_dB7fTxnyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 12:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:46:6a:ba:c7:0e:21:3b:1a:72:59:53:75:79:9d:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6401adedbc9c8f1c6cf2389fc7f741edf4f19f2c
Validity
Not Before: Feb 9 12:00:36 2026 GMT
Not After : Feb 10 12:00:36 2026 GMT
Subject: CN=b02b9b5edf9d18f2ffc5e9da55edc8b15dd37c2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:6a:bf:6d:f2:39:00:67:3b:e0:66:c0:ef:2b:
a3:28:fe:fc:b1:fd:a1:d4:c3:56:3d:dc:b2:18:fd:
74:90:23:63:fa:16:db:25:b9:70:d6:f4:ac:3a:63:
22:29:a6:11:94:e5:59:bd:e1:a7:0e:77:46:7d:67:
1e:94:24:12:27:98:af:fa:b5:dd:59:98:b3:9d:7c:
a8:2e:ea:63:c8:cf:a5:04:51:90:24:9a:74:81:f7:
17:9e:48:8b:96:a1:1c:87:04:c9:dd:9a:5b:91:5b:
1c:48:15:b4:b3:41:e2:9f:08:9b:03:31:ba:0a:59:
ab:a0:8b:fc:eb:b5:54:cb:4d:e4:f8:1f:aa:42:aa:
38:3c:29:62:15:f8:44:83:8a:74:a5:f0:51:c7:26:
5f:42:54:01:8f:a5:63:f5:d1:9e:a8:2a:5e:a2:00:
26:29:05:74:cf:c7:4d:75:22:4e:c4:ae:e5:62:97:
12:00:4f:89:91:6e:12:ba:a9:f0:86:95:c2:bc:60:
a7:4d:e7:ad:96:b2:56:db:45:36:0e:9a:0c:c6:d3:
fc:b8:61:75:6e:a1:49:91:31:8c:a3:98:80:12:19:
51:f7:52:59:98:b9:46:ee:18:c0:fa:f4:dc:49:25:
0b:82:0e:06:e8:ed:10:b3:be:13:05:1e:d5:73:ba:
db:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:2B:9B:5E:DF:9D:18:F2:FF:C5:E9:DA:55:ED:C8:B1:5D:D3:7C:2E
X509v3 Authority Key Identifier:
keyid:64:01:AD:ED:BC:9C:8F:1C:6C:F2:38:9F:C7:F7:41:ED:F4:F1:9F:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZAGt7bycjxxs8jifx_dB7fTxnyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/98c860-5298-4846-beaa-356c096bc6f9/1/ZAGt7bycjxxs8jifx_dB7fTxnyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/98c860-5298-4846-beaa-356c096bc6f9/1/ZAGt7bycjxxs8jifx_dB7fTxnyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:43:07:ad:5d:0e:7e:2e:67:73:fd:cc:5b:63:6d:42:52:4d:
23:d8:7f:14:76:4e:f8:6c:7d:44:42:de:22:22:9e:f7:ad:52:
4b:a3:82:a6:1b:26:28:06:4b:1d:ba:f7:cc:43:5c:24:62:33:
e0:56:b9:0f:85:cf:86:9f:e3:a6:52:ff:1d:99:5c:0c:73:f8:
85:12:d2:b3:43:06:a3:7e:7b:40:c5:00:ce:84:63:30:59:7e:
4f:ac:06:58:4b:ed:ea:59:b7:a8:c6:d8:15:51:1f:0c:3e:c2:
c7:2e:4b:62:63:f6:26:45:8f:b8:13:4d:27:f0:fd:f2:97:0d:
1e:72:87:94:9d:eb:b2:66:73:23:cf:17:11:21:47:af:3d:89:
3f:53:3d:9c:e5:af:87:f8:56:68:16:98:ff:b6:4a:a5:01:f0:
35:f6:07:32:25:15:51:a8:3e:82:25:56:54:07:62:69:df:b6:
42:c0:bf:78:03:14:e6:e0:9f:99:59:7f:85:99:8b:26:fa:07:
d1:e4:df:d7:97:31:25:e9:18:80:a3:3f:29:0e:00:84:ae:5e:
99:11:79:75:93:aa:8e:54:7d:27:85:45:8d:b8:02:37:f0:b3:
95:04:95:7b:0a:e1:01:e6:ae:f4:71:0f:2b:64:ae:e1:79:77:
a9:e5:94:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:13:28 2026 by rpki-client