This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/ff6b18-7ddf-46f5-a0d5-06d4475b7fe5/1/Y4UAVfJ-xAdWKX_811nrhh7vc8E.mft
File: Y4UAVfJ-xAdWKX_811nrhh7vc8E.mft (raw, json)
Hash identifier: fspTwXc2pZp0ya2WvJBJEZRPhxD/lgJ0UjPboUforUA=
Subject key identifier: 1A:10:7E:3B:48:EA:74:65:1B:45:CD:DD:21:18:EE:85:18:ED:F9:E4
Authority key identifier: 63:85:00:55:F2:7E:C4:07:56:29:7F:FC:D7:59:EB:86:1E:EF:73:C1
Certificate issuer: /CN=63850055f27ec40756297ffcd759eb861eef73c1
Certificate serial: 019C4510CA0A601BBF5B9A53F2FF43C6968A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y4UAVfJ-xAdWKX_811nrhh7vc8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/ff6b18-7ddf-46f5-a0d5-06d4475b7fe5/1/Y4UAVfJ-xAdWKX_811nrhh7vc8E.mft
Manifest number: 02C5
Signing time: Tue 10 Feb 2026 01:00:54 +0000
Manifest this update: Tue 10 Feb 2026 01:00:54 +0000
Manifest next update: Wed 11 Feb 2026 01:00:54 +0000
Files and hashes: 1: Y4UAVfJ-xAdWKX_811nrhh7vc8E.crl (hash: yMeAKcxUY6qThcS9KY6ct2cydJfGRNqSxTp8a/pdMsc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/ff6b18-7ddf-46f5-a0d5-06d4475b7fe5/1/Y4UAVfJ-xAdWKX_811nrhh7vc8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/ff6b18-7ddf-46f5-a0d5-06d4475b7fe5/1/Y4UAVfJ-xAdWKX_811nrhh7vc8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y4UAVfJ-xAdWKX_811nrhh7vc8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:45:10:ca:0a:60:1b:bf:5b:9a:53:f2:ff:43:c6:96:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63850055f27ec40756297ffcd759eb861eef73c1
Validity
Not Before: Feb 10 01:00:54 2026 GMT
Not After : Feb 11 01:00:54 2026 GMT
Subject: CN=1a107e3b48ea74651b45cddd2118ee8518edf9e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3a:04:93:ec:a2:81:df:73:93:c3:d2:ab:49:
17:4a:0f:c1:19:4f:83:c3:66:87:9f:49:89:c7:b2:
96:07:04:d0:69:34:0f:ed:81:15:8a:11:0d:5b:9f:
c6:34:64:2f:08:60:bd:73:82:4c:9c:81:cf:3e:7c:
7e:98:d6:39:6b:46:ff:c7:46:33:8f:62:1f:f6:31:
11:5f:84:1c:4f:69:5e:45:3d:91:07:b3:6d:71:f2:
12:65:17:89:c5:f1:ce:a4:d1:d5:47:19:9d:e4:99:
7b:ed:8d:bd:4a:db:f5:58:70:b0:7b:2f:d4:b6:e9:
8a:de:7a:4d:12:67:64:f9:d5:77:1a:a5:1e:59:05:
c7:c8:3a:4a:9a:38:81:1c:6f:1a:11:4d:52:70:90:
84:b8:1c:50:60:bd:36:75:3d:d2:48:53:c1:b4:c6:
b5:24:a1:0e:d1:6d:cf:82:a1:9a:3a:34:9e:a2:db:
4b:bb:4b:d0:37:57:af:82:bc:d5:00:f4:70:7e:66:
61:3e:26:11:e7:f5:a5:d8:f4:e5:65:e2:5a:c4:6e:
2a:bb:ec:21:03:46:96:e6:1a:60:ab:bf:62:1a:53:
db:2e:78:5d:56:26:c9:56:10:0a:5a:46:24:22:b9:
e6:66:c6:50:0f:fb:5d:54:f3:ab:c6:98:98:04:f5:
80:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:10:7E:3B:48:EA:74:65:1B:45:CD:DD:21:18:EE:85:18:ED:F9:E4
X509v3 Authority Key Identifier:
keyid:63:85:00:55:F2:7E:C4:07:56:29:7F:FC:D7:59:EB:86:1E:EF:73:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4UAVfJ-xAdWKX_811nrhh7vc8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/ff6b18-7ddf-46f5-a0d5-06d4475b7fe5/1/Y4UAVfJ-xAdWKX_811nrhh7vc8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/ff6b18-7ddf-46f5-a0d5-06d4475b7fe5/1/Y4UAVfJ-xAdWKX_811nrhh7vc8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:37:8e:6e:d9:1f:ab:2d:37:54:fd:de:2d:48:8d:4a:15:af:
ca:b3:fe:83:e8:c9:cf:e7:45:3c:da:0f:db:f8:a9:e1:61:99:
dc:5a:cb:4c:87:43:14:33:06:0b:c0:66:ae:9a:6a:69:bd:d6:
9c:51:ef:e0:57:27:c5:a2:30:bf:db:d7:e5:cf:26:1d:c6:bc:
1f:15:47:7a:c0:9b:e1:88:92:a8:8f:cb:52:8f:d7:22:95:34:
64:11:fd:c0:1d:0c:17:ae:8c:8e:32:19:5a:1c:50:7d:4e:3a:
d3:f5:a7:0f:70:da:c5:f4:79:41:f4:99:79:e5:f6:18:b6:34:
be:5b:24:c5:52:5c:75:c4:0c:4e:a7:75:63:82:f2:37:3f:25:
09:81:d5:69:7f:f3:58:88:06:81:56:af:fe:9d:5b:37:21:7a:
ae:4f:d1:7b:f3:a8:c6:7b:24:29:5b:6f:20:2d:c9:b2:cc:de:
c7:11:f5:ba:3d:e3:9e:99:76:1a:a6:6c:59:14:e7:95:94:53:
2f:7d:03:3f:e8:5c:72:36:6d:49:c8:ab:8b:71:71:bd:7b:e3:
97:5f:83:bf:a7:fd:f6:40:af:ca:d3:bd:1e:05:eb:d6:c0:ca:
ab:24:03:8f:d0:27:ac:dd:4b:b4:4c:b2:c1:65:75:89:c3:e6:
03:4c:bb:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 02:59:56 2026 by rpki-client