This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.mft
File: yMHc9MAjRn2zvy7vPdFbLv7rK9c.mft (raw, json)
Hash identifier: 88kftnThM/4mt95uExMvf4ECoGCVKXUN6JAeKB752wM=
Subject key identifier: BE:FE:B9:DE:2E:A7:AF:2D:63:51:BB:1F:B6:C7:E2:5F:08:58:52:00
Authority key identifier: C8:C1:DC:F4:C0:23:46:7D:B3:BF:2E:EF:3D:D1:5B:2E:FE:EB:2B:D7
Certificate issuer: /CN=c8c1dcf4c023467db3bf2eef3dd15b2efeeb2bd7
Certificate serial: 019C42EB847B50A05B48E598A8E8D1C0342A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yMHc9MAjRn2zvy7vPdFbLv7rK9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.mft
Manifest number: 0DCA
Signing time: Mon 09 Feb 2026 15:00:56 +0000
Manifest this update: Mon 09 Feb 2026 15:00:56 +0000
Manifest next update: Tue 10 Feb 2026 15:00:56 +0000
Files and hashes: 1: cN4RDtGLM5l2DvX_T4i1shDStCU.roa (hash: yvuehCFR0SYwl9RZeEUmpN0/FZZPNS0ZYV+AhmYhkto=)
2: yMHc9MAjRn2zvy7vPdFbLv7rK9c.crl (hash: SNTVw2BgwJKAFL8igIQ4sCiNc4u7WLfEnvabuH6Quho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/yMHc9MAjRn2zvy7vPdFbLv7rK9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:eb:84:7b:50:a0:5b:48:e5:98:a8:e8:d1:c0:34:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8c1dcf4c023467db3bf2eef3dd15b2efeeb2bd7
Validity
Not Before: Feb 9 15:00:56 2026 GMT
Not After : Feb 10 15:00:56 2026 GMT
Subject: CN=befeb9de2ea7af2d6351bb1fb6c7e25f08585200
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e2:35:46:b8:19:ff:37:cd:71:c1:17:e5:1e:
71:b3:f0:53:f6:70:b2:10:e4:a9:de:f6:98:ce:1b:
c6:12:b4:19:21:5d:6d:d6:a3:77:27:15:c4:6e:e4:
64:88:96:d3:67:63:6b:11:96:2e:23:1a:5c:aa:d8:
6e:4b:26:e9:a1:05:e3:3a:d6:38:72:33:46:ff:05:
27:fd:52:71:86:f7:e8:27:a1:7e:83:c9:29:23:8f:
6c:a6:1e:76:e7:d4:bf:f1:46:5b:43:9c:5a:86:42:
9f:aa:af:66:49:79:58:04:86:73:44:89:93:97:85:
7f:d9:30:86:51:5f:cd:44:cd:c9:21:ae:31:73:2d:
74:54:09:b9:eb:a6:94:fd:ae:54:55:06:d0:e8:b1:
4f:57:77:16:82:19:ba:38:bd:27:49:20:62:df:aa:
7a:ee:09:44:ab:28:69:3e:9a:67:7c:47:c9:b8:bd:
f0:5a:6a:4e:1f:d1:3d:6c:37:1a:5a:7e:a1:ec:f2:
08:7a:4b:86:88:10:58:2b:ea:2f:12:f9:c8:8a:02:
35:13:b2:1b:39:0b:1c:98:ee:11:8e:d4:d9:3d:5b:
20:9f:ae:22:6d:b6:7d:8f:a4:b3:b1:74:c8:94:91:
52:a7:fa:f9:d9:e6:b2:14:63:f7:8d:28:66:0d:e5:
84:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:FE:B9:DE:2E:A7:AF:2D:63:51:BB:1F:B6:C7:E2:5F:08:58:52:00
X509v3 Authority Key Identifier:
keyid:C8:C1:DC:F4:C0:23:46:7D:B3:BF:2E:EF:3D:D1:5B:2E:FE:EB:2B:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yMHc9MAjRn2zvy7vPdFbLv7rK9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:ee:2b:c4:c1:8a:07:88:43:79:5e:b1:ae:75:10:0e:b2:0b:
d9:2a:54:88:3a:3e:76:62:0f:44:77:ca:e4:7a:eb:19:36:63:
44:59:dd:18:45:67:28:88:f5:89:47:60:ca:42:f2:38:1d:90:
a3:fc:09:08:4f:f7:0f:ba:f0:d1:8d:ec:5e:da:25:62:ae:5b:
14:cb:cb:43:26:68:f2:33:47:c8:03:a3:5b:fa:cd:0c:8e:ca:
1a:7b:01:71:88:d2:06:a2:50:61:7a:09:04:9d:91:d6:e3:5f:
83:69:4b:ac:b0:af:36:29:0e:f8:01:0e:6b:d5:d7:f9:48:c3:
d1:59:1f:7a:38:37:09:2a:75:72:af:53:73:f7:d4:65:1a:ce:
6b:34:43:5a:c0:f3:ab:08:a4:4d:ce:1f:95:d6:e4:0c:7c:50:
a4:73:a0:b3:34:6d:f9:2d:44:7e:a5:df:3c:ae:39:05:20:a7:
ae:50:f3:2f:9e:c6:99:61:d2:b4:84:10:1a:2c:f2:81:e7:75:
21:00:62:58:da:9f:a0:ef:5e:0e:b9:b1:0c:56:3f:99:31:08:
7f:0f:a7:d8:c7:55:23:ba:d6:ed:12:57:f3:ea:95:64:c4:f9:
21:76:17:fb:06:db:68:27:0f:43:91:19:df:65:26:4d:8e:f9:
7b:65:af:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:42:16 2026 by rpki-client