This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.mft
File: nZibOZjhn8APhnDPbJ10AXFc808.mft (raw, json)
Hash identifier: SWRhQBoWQBCuomr7Jt/C3t3GD2kOZXdEUW+DkNwgBFc=
Subject key identifier: EB:F4:23:36:D9:DF:61:27:DE:FA:1A:C7:C4:74:20:A3:C4:98:E3:95
Authority key identifier: 9D:98:9B:39:98:E1:9F:C0:0F:86:70:CF:6C:9D:74:01:71:5C:F3:4F
Certificate issuer: /CN=9d989b3998e19fc00f8670cf6c9d7401715cf34f
Certificate serial: 019C42B49B016DA539E975B524935BE99917
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nZibOZjhn8APhnDPbJ10AXFc808.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.mft
Manifest number: 0308
Signing time: Mon 09 Feb 2026 14:00:58 +0000
Manifest this update: Mon 09 Feb 2026 14:00:58 +0000
Manifest next update: Tue 10 Feb 2026 14:00:58 +0000
Files and hashes: 1: 0hivjmx3zESdF4O-A2SSYqLGRzk.roa (hash: shH0/H2kUggaPw7GkO5zNoGa7K6ORDulOONVmqwNyzg=)
2: 34ts3PIYYIFWGi911YLJC_MNTy0.roa (hash: 4pjAppUY+fw8yDaAV/Qux+rVoBRiKl+Kw/H8kkGtDI4=)
3: 3iXoIa0Tnc6nSmaQlZwJpvHoBP4.roa (hash: 92O5pIZ5W4yGOk4rHe6wXslYmPaUdiXeWtRLQm4goss=)
4: 4BsASipyNhMfne7kcDB1nUMHv4U.roa (hash: gNxM9v4Ci9bVQzz6zMSsl4HxARtJa2mrpaEAF1ssvBc=)
5: 51oAIofJkFXpGxq0u0pMpGIor0Y.roa (hash: luFon6hTssLT0GVFCEnyosU6nzOcK0/WHgWU8mcIjfk=)
6: 6v6eeI5cY68j_2oFbpbr5jPTgdU.roa (hash: zqirwLCXgdjJFeXHZFQIYNjwkSF+pg6w51CqhX494MQ=)
7: HHVyXzUcc_YIy8baKZaV2Y45k38.roa (hash: ndUe7viQWWyFXFChfyWy877/Y7Q3qjUplP6K/mFzfDE=)
8: SodBob46gHvkE9f0X3aM1jnjv_0.roa (hash: USjt5jELYEu1iaW09TQw060b9YelZ/w0+6LrYh++vTo=)
9: bCcuJlZ7M57UlbvTbB3xJ5-RVYo.roa (hash: JYxMnFiCRaisfCjM99QzlqqTlxpJrwkoJa68usH9YxI=)
10: cHAy_4A-CMasQbGFupRjCXJRveA.roa (hash: Z5sX4UD5pwFqxzXI/4DJgcahhJVYCnCAo+Vk4S1WDik=)
11: fwIX4p6uDI8a1ig_uNG57F-CyyQ.roa (hash: sPu4yXxTGRc2nkq1SBHu8c/xRYRB8YjHSE2w/qhSkXw=)
12: kEgukI4x5ATV385AVFHglji0HH0.roa (hash: 7W67j4OKnAJPYfKA7VB2yMPYazX4qvOU73e4/HvQ//o=)
13: nZibOZjhn8APhnDPbJ10AXFc808.crl (hash: u/eZ+Dbcrl4K4coYuDnEIMQt08dcwXHUpCxAm+iNYV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.mft
rsync://rpki.ripe.net/repository/DEFAULT/nZibOZjhn8APhnDPbJ10AXFc808.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 14:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:b4:9b:01:6d:a5:39:e9:75:b5:24:93:5b:e9:99:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d989b3998e19fc00f8670cf6c9d7401715cf34f
Validity
Not Before: Feb 9 14:00:58 2026 GMT
Not After : Feb 10 14:00:58 2026 GMT
Subject: CN=ebf42336d9df6127defa1ac7c47420a3c498e395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:62:be:c1:ef:1e:77:57:b4:7f:24:18:94:32:
28:b4:5f:82:57:83:9c:9b:3c:8b:84:3c:96:22:8b:
d9:b8:15:5a:c3:33:bf:a8:ac:66:ba:70:a9:76:b2:
1d:3f:1e:50:97:00:34:66:e4:73:ac:ef:d6:ec:f2:
8c:6a:da:5e:c8:64:33:1f:b1:67:28:0b:5a:4c:e1:
b1:21:9f:7c:48:e4:e3:2b:31:33:c9:34:ca:ff:eb:
b1:04:9e:09:5b:60:08:f0:2c:fb:b6:48:90:43:3e:
5d:1a:de:46:fb:c6:ca:6c:79:87:e2:45:b1:e9:6d:
2d:1e:6f:95:4d:ea:8d:21:96:df:ad:14:02:22:4d:
dc:10:b3:68:e1:f5:d1:63:33:51:4d:4c:a9:aa:6f:
2f:41:4e:2f:6b:cc:c4:15:ec:b4:79:ea:58:1c:46:
5e:10:2a:5e:03:d7:37:e3:ab:c4:ff:fe:ea:2e:ee:
c4:c6:30:25:53:ca:a4:a8:15:1d:5f:2e:db:79:b9:
40:98:0b:95:f8:e0:9e:51:78:53:88:2f:90:7c:fa:
ec:33:8c:dc:47:df:c3:45:37:58:05:2d:ae:fb:dc:
71:48:f8:c1:13:72:60:5a:7b:d3:46:e0:96:6b:86:
cd:6a:87:3b:4b:47:19:46:df:36:02:ee:9b:b5:00:
9f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:F4:23:36:D9:DF:61:27:DE:FA:1A:C7:C4:74:20:A3:C4:98:E3:95
X509v3 Authority Key Identifier:
keyid:9D:98:9B:39:98:E1:9F:C0:0F:86:70:CF:6C:9D:74:01:71:5C:F3:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nZibOZjhn8APhnDPbJ10AXFc808.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:fe:ed:ac:c7:5c:28:c7:3a:ff:57:3e:1c:11:7f:16:86:ad:
b0:2e:af:12:fe:98:51:e2:31:ec:a0:a3:73:68:3f:d3:cd:c2:
e8:db:b2:8f:82:58:30:7c:38:c9:fc:e3:85:c3:78:51:c2:b0:
c3:07:37:12:9b:70:c6:99:85:d9:ac:79:b3:38:bf:13:db:f0:
6b:2f:1e:e7:ba:8b:d0:10:96:26:be:88:b7:b7:69:d5:9c:bd:
c9:30:0a:3b:ec:00:cc:7c:fc:f9:46:78:4c:09:f6:f5:a0:ff:
8b:46:06:1a:99:fe:e8:c1:7d:15:de:3e:ea:5a:ce:00:c9:5b:
72:e2:ec:e6:61:d2:57:94:86:4e:65:90:ce:13:a4:71:6f:2a:
4f:33:21:0d:e2:5b:7a:65:06:05:8c:2a:b0:8b:4d:d6:75:36:
74:84:f0:f5:48:94:cc:83:c8:f4:a4:12:8e:6a:48:26:f7:93:
40:d3:b9:fa:47:68:68:70:45:d8:54:98:da:66:d5:b0:37:1f:
ce:d2:d1:1e:ae:cd:ca:98:31:ac:b5:1b:58:bd:a6:bd:d9:c1:
90:8f:19:13:ad:08:80:69:97:74:fb:bc:d4:7a:e3:90:6b:97:
b4:ae:65:08:41:d8:39:a6:05:ba:e1:7f:dc:d1:7c:b9:28:65:
94:cb:5d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:19:40 2026 by rpki-client