This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.mft
File: lYXBmRVFWDVFdBPvIip9N1spkB0.mft (raw, json)
Hash identifier: dUFSLbX/XQhgRY5aEXxpnJKmWi89ApVWOzI7t9fThnU=
Subject key identifier: A1:3F:41:FF:42:A1:9B:C0:63:67:18:9D:26:20:EE:6C:1F:BD:BE:33
Authority key identifier: 95:85:C1:99:15:45:58:35:45:74:13:EF:22:2A:7D:37:5B:29:90:1D
Certificate issuer: /CN=9585c19915455835457413ef222a7d375b29901d
Certificate serial: 019C427D6F512CE34D5F7DB165FB018CDDCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lYXBmRVFWDVFdBPvIip9N1spkB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.mft
Manifest number: 1811
Signing time: Mon 09 Feb 2026 13:00:42 +0000
Manifest this update: Mon 09 Feb 2026 13:00:42 +0000
Manifest next update: Tue 10 Feb 2026 13:00:42 +0000
Files and hashes: 1: MDOYojRzK_b13iyI5P24Yv-1OfI.roa (hash: 9C3SntnocakqcNtFoy8WdbT469VxGnuBBybMiDuCskI=)
2: lYXBmRVFWDVFdBPvIip9N1spkB0.crl (hash: TshMLJb/0mgVrSiRwaN2Ywz/SwQ7kHGHnL8iv2jBokU=)
3: tD3EeMEBT3yEWBttpsWGl0bRetk.roa (hash: ckduoJYFFvUfXMRG101fPH5je/+Pxdi1LergZOeIB/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/lYXBmRVFWDVFdBPvIip9N1spkB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7d:6f:51:2c:e3:4d:5f:7d:b1:65:fb:01:8c:dd:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9585c19915455835457413ef222a7d375b29901d
Validity
Not Before: Feb 9 13:00:42 2026 GMT
Not After : Feb 10 13:00:42 2026 GMT
Subject: CN=a13f41ff42a19bc06367189d2620ee6c1fbdbe33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:2f:a1:05:b5:61:bf:68:98:c7:b7:b3:82:4b:
1b:3d:b9:59:c2:77:df:a2:d9:75:2b:a4:4b:aa:ae:
8b:30:23:06:df:66:26:1a:8b:e1:c0:c7:3b:d8:1b:
2c:6e:45:5d:68:b6:73:91:43:e3:0b:b1:ee:c3:10:
09:e3:67:2f:da:fd:4e:9a:3c:d6:97:aa:1a:26:7a:
aa:c7:d9:fa:9c:93:3b:4f:cc:b1:fc:0c:6d:bd:03:
0c:d3:60:d1:11:40:5f:f4:6a:08:ed:3d:85:c7:9f:
e5:5b:57:78:10:f0:cc:e5:1d:7e:6f:73:95:ff:06:
80:df:9e:de:16:6a:33:e3:d7:1e:91:66:5f:3d:52:
bb:98:79:25:89:9c:f7:ce:2c:ad:c3:9a:6a:76:a5:
e4:1a:c8:df:ca:8c:4c:a6:bd:22:5f:7f:48:0c:18:
2d:36:00:8a:02:c2:37:2a:a2:66:6c:d3:8c:cf:27:
51:f2:3f:b4:25:81:ff:4c:ed:00:84:33:1f:43:b9:
06:a9:7a:eb:21:14:2f:6e:7f:a0:84:ed:fe:2b:64:
5a:4c:76:d5:36:69:73:b7:89:b8:52:28:5a:e5:3d:
66:5b:43:fb:a6:92:c0:2d:6f:8c:9a:3e:d2:f8:18:
a5:0e:26:4c:16:16:65:d5:f5:86:b2:45:59:ae:95:
bc:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:3F:41:FF:42:A1:9B:C0:63:67:18:9D:26:20:EE:6C:1F:BD:BE:33
X509v3 Authority Key Identifier:
keyid:95:85:C1:99:15:45:58:35:45:74:13:EF:22:2A:7D:37:5B:29:90:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lYXBmRVFWDVFdBPvIip9N1spkB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:f9:01:c8:77:3d:57:b8:88:7b:8b:30:42:cb:0b:9c:a6:1f:
24:53:f8:29:99:81:f6:fd:cc:7f:c0:31:b5:88:2e:b1:55:7e:
17:89:cf:c0:4a:4d:97:e9:c6:5f:15:a3:59:31:33:0f:7b:c4:
67:e2:10:f1:17:48:5d:7b:26:61:ed:b6:ca:b6:86:1f:01:6f:
76:e5:4f:c7:01:51:65:35:27:96:a7:9d:9a:52:8f:4c:82:c0:
f2:f6:da:ca:ae:4c:df:4c:2a:c2:76:a8:74:b8:b2:58:b4:62:
6b:12:9f:39:b4:75:cb:93:8e:3e:c2:e1:73:14:8e:65:a7:60:
74:de:b3:e3:b8:b0:1d:e7:54:a2:57:cd:18:2d:d2:1a:af:fe:
3a:b1:d3:d8:86:22:66:08:a8:47:17:4c:18:ba:d1:51:33:24:
15:99:c5:af:c6:4a:7f:8b:70:89:36:c0:54:aa:8e:79:9e:b8:
38:2f:5b:f6:66:6f:4b:d5:3c:9d:05:7c:23:98:16:bf:3c:34:
ab:d4:be:6c:4b:eb:49:a3:fa:12:9a:71:4c:2e:c4:78:e8:8e:
1f:58:67:19:5f:46:97:25:58:fd:0a:49:76:79:ae:f2:8d:5c:
0a:f7:d0:fd:3c:b5:64:e5:d0:10:fb:d1:c0:6d:0f:1c:e4:8a:
df:fd:34:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCfW9RLONNX32xZfsBjN3LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1ODVjMTk5MTU0NTU4MzU0NTc0MTNlZjIyMmE3ZDM3NWIy
OTkwMWQwHhcNMjYwMjA5MTMwMDQyWhcNMjYwMjEwMTMwMDQyWjAzMTEwLwYDVQQD
EyhhMTNmNDFmZjQyYTE5YmMwNjM2NzE4OWQyNjIwZWU2YzFmYmRiZTMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyC+hBbVhv2iYx7ezgksbPblZwnff
otl1K6RLqq6LMCMG32YmGovhwMc72BssbkVdaLZzkUPjC7HuwxAJ42cv2v1OmjzW
l6oaJnqqx9n6nJM7T8yx/AxtvQMM02DREUBf9GoI7T2Fx5/lW1d4EPDM5R1+b3OV
/waA357eFmoz49cekWZfPVK7mHkliZz3ziytw5pqdqXkGsjfyoxMpr0iX39IDBgt
NgCKAsI3KqJmbNOMzydR8j+0JYH/TO0AhDMfQ7kGqXrrIRQvbn+ghO3+K2RaTHbV
Nmlzt4m4Uiha5T1mW0P7ppLALW+Mmj7S+BilDiZMFhZl1fWGskVZrpW8DQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKE/Qf9CoZvAY2cYnSYg7mwfvb4zMB8GA1UdIwQY
MBaAFJWFwZkVRVg1RXQT7yIqfTdbKZAdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFlYQm1SVkZXRFZGZEJQdklpcDlOMXNwa0IwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9jZjU3NTgtYWZmNy00ZDg4LWI3ZGMt
NzcyOTE4ZmZmNTQ0LzEvbFlYQm1SVkZXRFZGZEJQdklpcDlOMXNwa0IwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9jZjU3NTgtYWZmNy00ZDg4LWI3ZGMtNzcyOTE4ZmZmNTQ0
LzEvbFlYQm1SVkZXRFZGZEJQdklpcDlOMXNwa0IwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFvkByHc9
V7iIe4swQssLnKYfJFP4KZmB9v3Mf8AxtYgusVV+F4nPwEpNl+nGXxWjWTEzD3vE
Z+IQ8RdIXXsmYe22yraGHwFvduVPxwFRZTUnlqedmlKPTILA8vbayq5M30wqwnao
dLiyWLRiaxKfObR1y5OOPsLhcxSOZadgdN6z47iwHedUolfNGC3SGq/+OrHT2IYi
ZgioRxdMGLrRUTMkFZnFr8ZKf4twiTbAVKqOeZ64OC9b9mZvS9U8nQV8I5gWvzw0
q9S+bEvrSaP6EppxTC7EeOiOH1hnGV9GlyVY/QpJdnmu8o1cCvfQ/Ty1ZOXQEPvR
wG0PHOSK3/005w==
-----END CERTIFICATE-----
Generated at Mon Feb 9 16:55:32 2026 by rpki-client