This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.mft
File: zybJGvCrJmijYBstlX3EzgAtWYY.mft (raw, json)
Hash identifier: JxcBBxbRlt3aFk3D8m8mpjO8okddCZ2hr6bcrwNXUpE=
Subject key identifier: D2:30:CF:30:C6:F2:42:09:28:3B:BF:33:39:73:40:14:23:66:C0:61
Authority key identifier: CF:26:C9:1A:F0:AB:26:68:A3:60:1B:2D:95:7D:C4:CE:00:2D:59:86
Certificate issuer: /CN=cf26c91af0ab2668a3601b2d957dc4ce002d5986
Certificate serial: 019C438FE8E8BFC55DB834789A4064629C62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zybJGvCrJmijYBstlX3EzgAtWYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.mft
Manifest number: 1815
Signing time: Mon 09 Feb 2026 18:00:30 +0000
Manifest this update: Mon 09 Feb 2026 18:00:30 +0000
Manifest next update: Tue 10 Feb 2026 18:00:30 +0000
Files and hashes: 1: Cl9Lz5nBz_xnxuUQUJGuBR8zW9A.roa (hash: q7wtyFFM/GxuRNYmPTO3dTsPt0PKaH+4FtRYA+CX4Dg=)
2: zybJGvCrJmijYBstlX3EzgAtWYY.crl (hash: 9rulRNtNVUVfebGNQLHMsbJ0nMlMGor1QmHu1oS8850=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zybJGvCrJmijYBstlX3EzgAtWYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:8f:e8:e8:bf:c5:5d:b8:34:78:9a:40:64:62:9c:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf26c91af0ab2668a3601b2d957dc4ce002d5986
Validity
Not Before: Feb 9 18:00:30 2026 GMT
Not After : Feb 10 18:00:30 2026 GMT
Subject: CN=d230cf30c6f24209283bbf33397340142366c061
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:91:ae:2d:84:7b:0e:c0:82:a7:31:71:4d:02:
47:11:d9:35:81:47:94:c1:c9:97:ea:14:13:32:1d:
30:70:1b:53:69:a8:4c:ca:0a:b4:14:f4:db:12:38:
92:a3:4c:dc:0c:91:e3:67:4a:17:48:19:8f:21:36:
6f:1d:19:41:80:e2:d0:07:41:c5:3d:87:ad:53:3e:
81:ef:cc:e0:d1:f9:2b:94:16:7d:e1:db:25:a1:22:
2f:0e:5b:fd:27:0c:cc:52:ca:5a:43:b4:3a:89:88:
0e:78:9f:dc:24:f4:f4:da:f3:fd:e4:41:ee:4f:68:
02:d6:ef:f4:da:a2:c6:b9:9a:f7:5a:6e:75:6a:62:
bd:98:d5:6f:de:a8:0f:81:57:1d:c3:fb:1f:88:84:
8c:61:08:66:99:f9:b9:7b:60:f8:64:fa:de:88:9b:
60:c6:8f:75:28:6a:00:e7:c0:cb:f1:fc:7e:3a:59:
99:d3:35:63:ec:47:c8:0b:34:c3:c7:fc:4d:01:93:
76:5c:e3:23:d4:57:5e:06:2a:2d:e4:e0:a3:e0:45:
19:5c:e3:f7:4a:59:a5:ad:f6:ef:e1:8c:12:30:db:
0b:e6:9f:07:1e:e1:c6:83:cc:f8:f3:79:1e:b1:2b:
df:e6:92:9f:9d:40:22:87:39:2e:78:f5:90:ab:cd:
1d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:30:CF:30:C6:F2:42:09:28:3B:BF:33:39:73:40:14:23:66:C0:61
X509v3 Authority Key Identifier:
keyid:CF:26:C9:1A:F0:AB:26:68:A3:60:1B:2D:95:7D:C4:CE:00:2D:59:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zybJGvCrJmijYBstlX3EzgAtWYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:0d:ed:1d:13:1b:d3:1d:7a:a7:31:f1:18:82:74:a7:bf:0f:
50:47:db:3a:33:e5:c3:ac:a0:d5:5e:72:f1:4a:c2:26:50:b6:
83:92:54:c6:2c:43:f8:6b:81:3c:4e:33:31:86:fe:a4:6d:d3:
98:c2:06:0c:2d:65:73:b6:89:9a:0d:bc:d8:44:6d:fa:a3:85:
71:fe:a0:91:8f:2a:1d:9b:5b:81:cc:1b:81:c1:f9:a8:be:dd:
9c:2b:fa:1e:36:39:80:a4:94:1c:7a:0d:2c:7f:43:97:87:46:
13:ea:f3:9a:07:31:b7:b7:33:d6:51:5e:b6:06:58:36:45:29:
ce:6c:4c:2b:14:a3:bb:37:de:68:2c:62:1c:7b:a5:0d:33:e5:
b1:e0:c0:52:f4:86:6c:f4:88:f8:4a:d4:e0:75:20:d7:8e:fc:
cd:fa:e3:e2:25:69:fe:40:8b:b2:5d:e4:65:23:a9:8c:e0:15:
df:c4:a6:26:15:04:ac:62:69:72:a5:f7:31:bc:69:3a:b5:ec:
93:62:9a:d2:89:c5:79:82:5a:36:1e:6a:4d:7d:f7:19:fd:40:
62:db:94:3d:1a:0a:fe:a8:58:83:9a:92:43:9c:1b:51:5b:3b:
90:1a:8f:57:a5:a5:8d:03:65:67:e3:2f:9e:89:1c:69:21:a9:
c5:d4:90:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDj+jov8VduDR4mkBkYpxiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmMjZjOTFhZjBhYjI2NjhhMzYwMWIyZDk1N2RjNGNlMDAy
ZDU5ODYwHhcNMjYwMjA5MTgwMDMwWhcNMjYwMjEwMTgwMDMwWjAzMTEwLwYDVQQD
EyhkMjMwY2YzMGM2ZjI0MjA5MjgzYmJmMzMzOTczNDAxNDIzNjZjMDYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2JGuLYR7DsCCpzFxTQJHEdk1gUeU
wcmX6hQTMh0wcBtTaahMygq0FPTbEjiSo0zcDJHjZ0oXSBmPITZvHRlBgOLQB0HF
PYetUz6B78zg0fkrlBZ94dsloSIvDlv9JwzMUspaQ7Q6iYgOeJ/cJPT02vP95EHu
T2gC1u/02qLGuZr3Wm51amK9mNVv3qgPgVcdw/sfiISMYQhmmfm5e2D4ZPreiJtg
xo91KGoA58DL8fx+OlmZ0zVj7EfICzTDx/xNAZN2XOMj1FdeBiot5OCj4EUZXOP3
Slmlrfbv4YwSMNsL5p8HHuHGg8z483kesSvf5pKfnUAihzkuePWQq80dHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNIwzzDG8kIJKDu/MzlzQBQjZsBhMB8GA1UdIwQY
MBaAFM8myRrwqyZoo2AbLZV9xM4ALVmGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenliSkd2Q3JKbWlqWUJzdGxYM0V6Z0F0V1lZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS83NmRkZDctMGFmMi00M2NlLTk4NTkt
NmJjODM5NDY1NmI3LzEvenliSkd2Q3JKbWlqWUJzdGxYM0V6Z0F0V1lZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS83NmRkZDctMGFmMi00M2NlLTk4NTktNmJjODM5NDY1NmI3
LzEvenliSkd2Q3JKbWlqWUJzdGxYM0V6Z0F0V1lZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVg3tHRMb
0x16pzHxGIJ0p78PUEfbOjPlw6yg1V5y8UrCJlC2g5JUxixD+GuBPE4zMYb+pG3T
mMIGDC1lc7aJmg282ERt+qOFcf6gkY8qHZtbgcwbgcH5qL7dnCv6HjY5gKSUHHoN
LH9Dl4dGE+rzmgcxt7cz1lFetgZYNkUpzmxMKxSjuzfeaCxiHHulDTPlseDAUvSG
bPSI+ErU4HUg1478zfrj4iVp/kCLsl3kZSOpjOAV38SmJhUErGJpcqX3MbxpOrXs
k2Ka0onFeYJaNh5qTX33Gf1AYtuUPRoK/qhYg5qSQ5wbUVs7kBqPV6WljQNlZ+Mv
nokcaSGpxdSQfw==
-----END CERTIFICATE-----
Generated at Mon Feb 9 22:46:21 2026 by rpki-client