This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/a89c01-6bb1-477c-94bc-5abe93aff642/1/yQDvPdXdG-FdCLuTy91jtKyGDms.mft
File: yQDvPdXdG-FdCLuTy91jtKyGDms.mft (raw, json)
Hash identifier: ABFZ/TiJFJykYpbIfArUqxbn1Qh+qINn2i+wdbrZPyY=
Subject key identifier: 44:46:7C:AF:F4:35:04:D5:75:DC:F1:18:89:2A:41:6F:01:F9:94:31
Authority key identifier: C9:00:EF:3D:D5:DD:1B:E1:5D:08:BB:93:CB:DD:63:B4:AC:86:0E:6B
Certificate issuer: /CN=c900ef3dd5dd1be15d08bb93cbdd63b4ac860e6b
Certificate serial: 019C4390CBB599E8A8D72E4B2E4707C61171
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yQDvPdXdG-FdCLuTy91jtKyGDms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/a89c01-6bb1-477c-94bc-5abe93aff642/1/yQDvPdXdG-FdCLuTy91jtKyGDms.mft
Manifest number: 1281
Signing time: Mon 09 Feb 2026 18:01:28 +0000
Manifest this update: Mon 09 Feb 2026 18:01:28 +0000
Manifest next update: Tue 10 Feb 2026 18:01:28 +0000
Files and hashes: 1: 49DXB44yIji8t0Vtkb2JOEt-9YU.roa (hash: Q0egqvB13KLmhzjLlUFrH7e6woM10xcOj+hIzVjBTDA=)
2: yQDvPdXdG-FdCLuTy91jtKyGDms.crl (hash: iQWAcYEys71AMVpXHTFWp+6m3OOhsbCGj0aK8QdQxto=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/a89c01-6bb1-477c-94bc-5abe93aff642/1/yQDvPdXdG-FdCLuTy91jtKyGDms.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/a89c01-6bb1-477c-94bc-5abe93aff642/1/yQDvPdXdG-FdCLuTy91jtKyGDms.mft
rsync://rpki.ripe.net/repository/DEFAULT/yQDvPdXdG-FdCLuTy91jtKyGDms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:90:cb:b5:99:e8:a8:d7:2e:4b:2e:47:07:c6:11:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c900ef3dd5dd1be15d08bb93cbdd63b4ac860e6b
Validity
Not Before: Feb 9 18:01:28 2026 GMT
Not After : Feb 10 18:01:28 2026 GMT
Subject: CN=44467caff43504d575dcf118892a416f01f99431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a8:07:aa:ab:a1:1b:87:3e:dc:52:bf:49:64:
48:25:1b:10:a6:14:ef:cd:e0:73:a6:4f:a8:c7:12:
fd:c6:51:ba:15:7f:8c:a7:32:68:e7:1c:93:25:7b:
f1:1a:91:d3:88:42:d8:37:52:48:d8:2e:bc:36:49:
0e:12:b5:bb:93:2e:36:98:60:ea:e4:03:92:74:31:
70:ce:0d:a7:49:5f:83:90:d9:49:c4:12:39:ef:1a:
74:58:1f:36:82:6b:ce:c2:73:e8:60:b1:50:11:98:
be:e3:9e:4b:65:be:6a:a3:ca:08:cd:9b:8a:26:a4:
3b:bc:0e:56:55:5f:1b:af:42:12:91:d3:cd:91:5a:
0b:8f:3a:59:17:79:dc:31:82:23:3c:9e:a1:96:2d:
b8:40:40:fa:49:7b:2e:65:43:51:ec:a6:93:2f:aa:
37:42:0e:63:b2:20:7f:6d:de:dd:a1:ad:24:cf:bf:
7b:1a:01:87:fa:71:79:3b:b1:f1:f5:46:c6:6a:6e:
40:38:d0:6d:e3:54:1f:de:f7:c5:ae:09:70:52:2c:
7c:98:cd:de:e3:7a:12:5d:d1:47:9a:3a:15:9c:50:
23:8e:96:7b:83:2c:a9:7f:15:a5:67:b0:df:ec:fe:
3b:3b:f3:09:fc:6c:2a:ad:04:10:35:b1:e5:0d:5b:
ac:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:46:7C:AF:F4:35:04:D5:75:DC:F1:18:89:2A:41:6F:01:F9:94:31
X509v3 Authority Key Identifier:
keyid:C9:00:EF:3D:D5:DD:1B:E1:5D:08:BB:93:CB:DD:63:B4:AC:86:0E:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yQDvPdXdG-FdCLuTy91jtKyGDms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/a89c01-6bb1-477c-94bc-5abe93aff642/1/yQDvPdXdG-FdCLuTy91jtKyGDms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/a89c01-6bb1-477c-94bc-5abe93aff642/1/yQDvPdXdG-FdCLuTy91jtKyGDms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:aa:20:85:78:07:82:f8:17:90:2e:4e:fc:32:8b:ba:29:78:
59:df:7b:31:76:8c:6c:0a:66:15:5d:d5:ee:ed:c7:c7:63:55:
ac:90:41:9f:6f:0f:30:70:da:61:fb:bb:87:aa:35:29:ae:bf:
73:7c:dd:f1:40:dd:35:73:e9:57:2e:fc:fe:85:c5:c3:12:58:
ea:a1:86:75:a1:75:e5:81:e5:c0:88:b5:c6:94:85:9e:15:83:
30:bf:1f:86:97:67:be:ab:5d:6e:e4:d1:b5:b0:be:f4:1f:e3:
9b:bc:29:a9:14:7e:fc:d4:5a:a8:95:ad:b9:cf:aa:9a:1f:58:
b3:43:5a:8c:5c:8b:c0:9d:1a:45:bc:f7:b9:d9:0c:d5:9e:8a:
4f:f1:01:f6:39:0a:d2:aa:1a:88:98:9a:ad:f6:26:02:c7:ec:
ad:f0:a4:56:6c:e3:30:7d:d3:9a:a6:44:a4:ae:2a:57:f4:73:
44:5c:06:2d:56:4b:df:ea:03:bf:35:3d:58:bb:80:91:a4:dd:
cf:c3:b1:94:1e:7b:8c:d4:69:e3:5a:2a:dc:0d:bf:ce:d4:f4:
7a:7f:40:39:11:ac:0b:5c:bf:7e:38:92:cd:ab:70:11:68:ef:
c3:e7:76:34:df:0b:d0:82:ae:ff:1c:1e:a7:41:18:a3:ff:a4:
7c:f5:90:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:54:23 2026 by rpki-client