This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/b9bd06-96c8-4e71-ba12-937754cbb505/1/yTfS9vC3jA7XW478KACdeXlhQAM.mft
File: yTfS9vC3jA7XW478KACdeXlhQAM.mft (raw, json)
Hash identifier: X0Qbyk+RsUPgRIlSOYLT1ZOnlPouvnEPZT3SCLiLnEY=
Subject key identifier: 1D:87:16:E6:87:DF:CD:DC:00:CB:39:6A:67:B4:33:34:46:3C:78:3F
Authority key identifier: C9:37:D2:F6:F0:B7:8C:0E:D7:5B:8E:FC:28:00:9D:79:79:61:40:03
Certificate issuer: /CN=c937d2f6f0b78c0ed75b8efc28009d7979614003
Certificate serial: 019C43C736903B42B9C1D1DD1A9ED24372EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yTfS9vC3jA7XW478KACdeXlhQAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/b9bd06-96c8-4e71-ba12-937754cbb505/1/yTfS9vC3jA7XW478KACdeXlhQAM.mft
Manifest number: 0760
Signing time: Mon 09 Feb 2026 19:00:54 +0000
Manifest this update: Mon 09 Feb 2026 19:00:54 +0000
Manifest next update: Tue 10 Feb 2026 19:00:54 +0000
Files and hashes: 1: 4gDbD6p8Hecme3nj2mVq2yo0wcQ.roa (hash: new/XwK7LDSQZ29SSLejk2ZrF4hRfXE6iD6WKPwdrVA=)
2: yTfS9vC3jA7XW478KACdeXlhQAM.crl (hash: CiKCWEGcUZvfYvWAIfhE1hKUqHEET3rqgE2cmWsDuzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/b9bd06-96c8-4e71-ba12-937754cbb505/1/yTfS9vC3jA7XW478KACdeXlhQAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/b9bd06-96c8-4e71-ba12-937754cbb505/1/yTfS9vC3jA7XW478KACdeXlhQAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/yTfS9vC3jA7XW478KACdeXlhQAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:c7:36:90:3b:42:b9:c1:d1:dd:1a:9e:d2:43:72:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c937d2f6f0b78c0ed75b8efc28009d7979614003
Validity
Not Before: Feb 9 19:00:54 2026 GMT
Not After : Feb 10 19:00:54 2026 GMT
Subject: CN=1d8716e687dfcddc00cb396a67b43334463c783f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:d6:d9:82:20:0a:23:b9:71:e6:53:14:19:58:
31:30:04:5b:33:77:98:e0:f9:c8:ac:2a:a4:61:37:
10:3d:a3:d8:6a:fa:60:0a:16:9d:a9:62:ad:ec:6e:
59:9d:46:b3:d7:54:19:c2:c4:92:03:fe:f2:03:cb:
bf:f1:66:c1:51:9f:55:1b:11:fc:45:a9:fb:ac:4b:
6e:6c:b2:47:36:f6:4d:af:b8:d6:44:13:4c:78:f8:
f9:08:74:c0:58:51:70:44:87:2f:dc:bf:01:9b:bc:
c3:b4:b9:ba:c9:8a:8d:af:02:9d:14:e3:d0:01:7e:
56:0e:6a:e2:4e:45:a3:ba:45:f3:1e:27:0e:92:f8:
26:7e:b9:f7:70:b9:e6:e0:7e:61:5b:2e:0d:55:8d:
83:a6:46:9a:0e:47:c4:fe:9e:42:a9:86:aa:37:7e:
22:9e:00:17:04:11:ea:6d:c0:e5:94:69:f5:6f:45:
53:12:8e:98:0b:9a:14:dc:b3:64:4a:24:29:fc:d1:
ff:0b:a0:1c:5b:dc:cd:8a:68:ed:3a:71:a4:8f:08:
59:9b:3e:08:66:7b:df:0f:e1:9c:70:1b:95:ca:c7:
47:20:46:50:2b:8a:ec:c5:39:7e:d7:61:ef:ed:1c:
6e:23:b8:af:1d:11:47:af:7b:13:12:ba:21:c3:7d:
be:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:87:16:E6:87:DF:CD:DC:00:CB:39:6A:67:B4:33:34:46:3C:78:3F
X509v3 Authority Key Identifier:
keyid:C9:37:D2:F6:F0:B7:8C:0E:D7:5B:8E:FC:28:00:9D:79:79:61:40:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yTfS9vC3jA7XW478KACdeXlhQAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b9bd06-96c8-4e71-ba12-937754cbb505/1/yTfS9vC3jA7XW478KACdeXlhQAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b9bd06-96c8-4e71-ba12-937754cbb505/1/yTfS9vC3jA7XW478KACdeXlhQAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:44:1d:77:eb:58:3e:34:85:5c:6a:9e:ab:6e:16:3d:24:14:
9b:94:44:7f:e6:73:0b:89:1b:83:75:77:4e:57:19:57:d5:5a:
0e:aa:20:ae:c6:59:c6:5f:65:39:f3:32:dd:bb:0a:b1:29:78:
6d:77:d3:d3:e8:05:60:54:39:70:31:fa:a7:85:c5:d2:76:f3:
35:5e:ff:fb:8e:06:40:5f:be:e4:91:4d:cb:3c:c8:71:41:97:
78:7d:f8:14:22:d9:23:01:64:6b:ec:66:e9:74:7b:cd:9f:4c:
8f:54:28:fd:96:bb:7b:8a:da:9b:f5:43:6a:55:52:b0:7e:7f:
31:19:1b:e5:f1:67:ad:d8:ad:0d:ec:0e:00:57:6d:35:3c:e3:
6a:34:93:83:ff:ad:cd:9d:74:b8:ba:eb:1b:af:19:4d:fb:59:
f9:ae:92:94:c9:3e:76:29:0f:41:b4:ca:47:9b:c9:32:77:fe:
89:87:bd:27:c9:e2:b1:ae:8a:be:25:80:e9:65:59:6a:c3:fe:
46:cf:5b:3b:c3:4a:7b:f0:8d:7f:88:dc:fb:4e:d8:be:76:84:
1f:02:7b:5f:f0:65:1d:d4:06:f3:d1:3e:b8:00:28:9f:27:ed:
b6:01:fb:a2:fc:a9:b1:14:54:e5:34:94:07:ed:87:61:6c:4f:
78:6e:00:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:06:26 2026 by rpki-client