This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/3e9d99-610e-45b9-b749-58ca45f2eba8/1/ysJBFaIsjUEhpKBnWKqGm9HJOh4.mft
File: ysJBFaIsjUEhpKBnWKqGm9HJOh4.mft (raw, json)
Hash identifier: gaj8CNSUV8NQ8DewNLvpa3lURxEyNRXt7n3QDPsDRYI=
Subject key identifier: C4:64:B7:58:B0:A8:76:87:5D:A2:3F:84:7C:B7:58:54:7A:F5:50:91
Authority key identifier: CA:C2:41:15:A2:2C:8D:41:21:A4:A0:67:58:AA:86:9B:D1:C9:3A:1E
Certificate issuer: /CN=cac24115a22c8d4121a4a06758aa869bd1c93a1e
Certificate serial: 019C42B45E6773ACE1303174E236DAC3C950
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ysJBFaIsjUEhpKBnWKqGm9HJOh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/3e9d99-610e-45b9-b749-58ca45f2eba8/1/ysJBFaIsjUEhpKBnWKqGm9HJOh4.mft
Manifest number: 055E
Signing time: Mon 09 Feb 2026 14:00:42 +0000
Manifest this update: Mon 09 Feb 2026 14:00:42 +0000
Manifest next update: Tue 10 Feb 2026 14:00:42 +0000
Files and hashes: 1: WdcwwVvHHM9XNKKDiv408pGW0_s.roa (hash: 8+/x9c3F4SvSIKBaDBTfqOk6wDn1R73L7fhpNgptXLw=)
2: ysJBFaIsjUEhpKBnWKqGm9HJOh4.crl (hash: vYofYLNDPzDk1YMOLnEPNQhELFHV5UIUbL0kv6RFDiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/3e9d99-610e-45b9-b749-58ca45f2eba8/1/ysJBFaIsjUEhpKBnWKqGm9HJOh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/3e9d99-610e-45b9-b749-58ca45f2eba8/1/ysJBFaIsjUEhpKBnWKqGm9HJOh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ysJBFaIsjUEhpKBnWKqGm9HJOh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:b4:5e:67:73:ac:e1:30:31:74:e2:36:da:c3:c9:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cac24115a22c8d4121a4a06758aa869bd1c93a1e
Validity
Not Before: Feb 9 14:00:42 2026 GMT
Not After : Feb 10 14:00:42 2026 GMT
Subject: CN=c464b758b0a876875da23f847cb758547af55091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7f:3c:8f:b1:ea:7b:e4:7a:3d:a0:87:e2:f6:
fd:1d:74:15:14:52:b6:89:be:c3:6a:c2:cc:cc:46:
62:7e:d9:8b:23:cc:72:02:82:c7:15:89:21:bc:20:
97:06:5e:13:99:f7:e1:1a:64:33:74:d4:7a:6d:83:
51:a5:da:fe:d1:36:9d:84:fb:ab:fa:0a:1a:60:3c:
2e:7d:52:1d:a7:a4:bf:79:b5:57:5f:2b:e4:29:99:
07:5a:7a:bb:85:d5:f4:ad:ca:0d:26:1b:8a:24:ef:
ee:65:51:f4:26:16:b0:73:6d:26:9d:67:8b:a4:90:
cb:ef:9b:96:64:8d:2b:fe:db:9d:3e:59:d5:fd:0e:
a6:49:80:27:b1:12:4b:54:14:02:02:5f:7c:51:fe:
39:24:2e:de:71:0b:8a:0c:17:54:48:b3:46:e9:e9:
c0:dd:a7:51:74:bb:74:a9:9a:d9:d9:42:13:a5:b1:
b6:06:eb:a5:7a:17:bb:05:ea:a6:9d:6f:36:fb:82:
fa:38:36:d0:45:41:46:b4:88:12:b5:1c:f7:da:d5:
05:74:9d:f5:d4:65:a7:25:0f:f7:7d:23:80:88:15:
33:f2:5a:d4:92:63:bf:7a:26:2f:a1:d4:10:b5:8e:
66:7c:ae:27:66:80:0b:63:92:90:73:df:5d:f2:f2:
7f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:64:B7:58:B0:A8:76:87:5D:A2:3F:84:7C:B7:58:54:7A:F5:50:91
X509v3 Authority Key Identifier:
keyid:CA:C2:41:15:A2:2C:8D:41:21:A4:A0:67:58:AA:86:9B:D1:C9:3A:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ysJBFaIsjUEhpKBnWKqGm9HJOh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/3e9d99-610e-45b9-b749-58ca45f2eba8/1/ysJBFaIsjUEhpKBnWKqGm9HJOh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/3e9d99-610e-45b9-b749-58ca45f2eba8/1/ysJBFaIsjUEhpKBnWKqGm9HJOh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:c2:0d:bb:26:fd:4b:90:51:87:f5:96:eb:3e:a2:db:a0:83:
49:f2:b2:65:5e:9f:8f:f9:e5:68:d8:09:d8:19:a5:e9:85:af:
ff:78:69:42:53:e2:82:6e:d2:60:a9:22:5e:d1:5b:bf:58:c8:
18:b7:23:97:af:79:04:f7:12:c8:1b:b2:b0:7e:85:90:4c:71:
fe:e1:24:cb:f8:50:d6:fa:5d:20:ce:62:7f:32:13:5d:69:8b:
c1:44:7d:23:ea:33:ef:2a:c9:18:47:d7:54:61:ed:c0:f6:90:
d5:35:c7:0b:e4:60:ae:b8:3c:ac:b4:cd:46:62:46:a1:4a:ec:
83:5d:e6:34:7d:61:f6:63:f5:18:18:f1:01:ad:bb:df:01:27:
a7:f5:df:e7:d0:58:ce:f4:97:ec:a3:76:10:8e:5f:42:b3:58:
1b:64:d9:ad:0d:47:1c:b5:36:a9:8a:8f:8f:b7:40:0c:6c:da:
c9:27:ea:7f:80:63:d7:20:35:04:b0:fb:aa:67:09:5e:1a:55:
02:bf:e0:58:95:4e:ef:67:6d:1f:61:6b:06:3c:05:73:06:50:
a6:d6:b3:0c:5d:4e:94:41:b7:60:f3:bc:c3:ac:e8:cd:7f:45:
75:a3:7f:c1:db:37:b0:ce:7d:70:f6:45:4a:3f:2c:9c:45:ed:
47:55:a4:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:48:35 2026 by rpki-client