This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.mft
File: Y7UHKgcBIh4dKR8C3rjNUWnmrDI.mft (raw, json)
Hash identifier: JtiBVmfZIxt45KAZAG9cQvDewDXpd1bY5VfzXtJBZ64=
Subject key identifier: AD:1C:6E:01:CC:A8:5B:C9:E8:EF:CC:94:D3:FF:BB:7A:F8:61:F1:0C
Authority key identifier: 63:B5:07:2A:07:01:22:1E:1D:29:1F:02:DE:B8:CD:51:69:E6:AC:32
Certificate issuer: /CN=63b5072a0701221e1d291f02deb8cd5169e6ac32
Certificate serial: 019C42465EF6E1874EDB72AB6DD7F42D7939
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.mft
Manifest number: 07D9
Signing time: Mon 09 Feb 2026 12:00:33 +0000
Manifest this update: Mon 09 Feb 2026 12:00:33 +0000
Manifest next update: Tue 10 Feb 2026 12:00:33 +0000
Files and hashes: 1: Y7UHKgcBIh4dKR8C3rjNUWnmrDI.crl (hash: lUX//aSpU5Pn7kdxf0+zxwHWUOpT7fSmWbmY658DQLg=)
2: ZW-BTJk2TvWox6Tuvq9T-7dcEOA.roa (hash: yW+5VTpkbQ7W1B2SHYsFwyjyj2q/DQTztYNH8ZNOMQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 12:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:46:5e:f6:e1:87:4e:db:72:ab:6d:d7:f4:2d:79:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63b5072a0701221e1d291f02deb8cd5169e6ac32
Validity
Not Before: Feb 9 12:00:33 2026 GMT
Not After : Feb 10 12:00:33 2026 GMT
Subject: CN=ad1c6e01cca85bc9e8efcc94d3ffbb7af861f10c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:79:20:57:17:6c:28:8e:6f:91:72:8e:ee:83:
66:47:cf:6f:69:2c:96:2c:e0:e5:fc:3a:90:de:43:
62:61:cd:8b:f9:ed:d1:ac:21:84:1d:ba:9d:3b:ac:
9e:92:b9:dc:7b:5e:c9:39:a8:e8:22:39:2d:8a:2b:
cc:bc:e9:27:ff:8d:9c:9f:00:15:e4:3d:84:d9:45:
21:1a:50:c2:cc:55:b6:88:71:eb:29:52:eb:0b:3d:
6e:6f:7a:39:97:d1:47:a5:a8:1b:25:6e:3c:e6:3b:
77:7b:59:ef:74:8d:d6:81:ec:a0:cc:53:25:f1:93:
4e:05:fe:d5:19:9d:9f:bd:50:aa:96:58:4e:f4:39:
65:f4:23:45:9d:cb:69:c6:9a:56:4c:30:ae:59:b2:
c0:7d:9c:66:8f:3c:37:ef:3f:f8:40:19:8b:0f:4a:
bf:5a:99:c4:5b:75:a2:21:c5:60:11:b8:70:73:62:
ca:b6:f9:22:0b:df:db:ce:e6:93:56:87:5b:08:2e:
f3:12:ea:54:42:93:3d:b1:36:67:d8:81:5f:c9:40:
48:b1:87:59:45:72:81:e9:f1:d8:1f:d2:30:df:20:
69:12:e9:95:84:5e:bc:5d:cd:5f:7f:ec:01:de:f3:
3d:94:24:1e:7e:fc:2c:a8:0d:3d:ce:89:53:bd:5b:
ae:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:1C:6E:01:CC:A8:5B:C9:E8:EF:CC:94:D3:FF:BB:7A:F8:61:F1:0C
X509v3 Authority Key Identifier:
keyid:63:B5:07:2A:07:01:22:1E:1D:29:1F:02:DE:B8:CD:51:69:E6:AC:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fc8cb4-ce84-43e4-aa2a-f391dc117fe9/1/Y7UHKgcBIh4dKR8C3rjNUWnmrDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:a3:5d:37:93:c2:71:9e:0e:93:08:91:6d:71:2d:56:dc:c2:
ad:55:5e:b1:e3:41:31:91:a3:5f:8e:02:9e:af:3b:45:7a:fe:
7e:ba:cb:51:a8:e5:96:03:f8:39:dc:f8:7a:82:4c:bb:36:4c:
65:c5:6d:c4:f5:8e:ec:ad:f5:f8:a2:5d:c4:c5:11:b6:63:a4:
da:16:67:9a:6e:bc:d0:38:99:2e:85:31:c0:20:20:41:7e:71:
5a:97:cb:33:69:a8:bf:c9:ca:65:9f:a0:0d:05:03:29:cc:e9:
a6:ea:5d:de:27:61:be:81:35:cd:01:c2:ce:09:d8:8e:66:ae:
c9:13:0f:12:90:77:ea:7e:14:93:23:ea:3b:27:66:ca:4a:7b:
85:fa:e8:90:fa:8b:9f:7a:f7:5a:1c:b2:a8:44:4d:56:b9:58:
8c:48:e7:54:1b:25:4a:24:15:bf:f3:24:7d:76:3d:f8:dd:d6:
22:6d:9c:1c:48:f3:58:d4:7d:32:71:8f:1c:a6:b9:6a:06:3d:
b3:52:c3:10:bd:8e:d6:e3:cf:1a:37:ed:b5:c6:14:bf:00:a3:
a3:36:21:e4:8d:5e:b0:4e:d5:56:fe:79:87:95:e0:f5:ab:40:
26:de:70:d4:9c:64:51:b1:8c:e9:50:3c:e7:dc:b4:f2:f6:4c:
e6:4a:82:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:46:11 2026 by rpki-client