This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.mft
File: yBECloayyAp_BGC2xu8bkIZygJc.mft (raw, json)
Hash identifier: HVXnOd/9xIMewSzL12de+863P34/an4pdE7EA98T0uM=
Subject key identifier: 2D:B5:4E:9A:23:7F:B1:7C:0C:A5:5D:11:26:E2:9D:87:08:31:15:94
Authority key identifier: C8:11:02:96:86:B2:C8:0A:7F:04:60:B6:C6:EF:1B:90:86:72:80:97
Certificate issuer: /CN=c811029686b2c80a7f0460b6c6ef1b9086728097
Certificate serial: 019C05C471D12A26BA8F177675A666F07914
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yBECloayyAp_BGC2xu8bkIZygJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.mft
Manifest number: 0702
Signing time: Wed 28 Jan 2026 18:01:26 +0000
Manifest this update: Wed 28 Jan 2026 18:01:26 +0000
Manifest next update: Thu 29 Jan 2026 18:01:26 +0000
Files and hashes: 1: 1xRS3NEJjEx5UZbwpqmlKAt2jws.roa (hash: js9Axf4ESCujTVZU7VYFjkx4kXDlOUsMLJ+P9IJ0OBk=)
2: FGHSySotSpOKaNLpsAxEZbVXQws.roa (hash: nxZE3ZEDAfrFSYoAOUMwq235qoOhi9CvADpYdOkFcZU=)
3: yBECloayyAp_BGC2xu8bkIZygJc.crl (hash: rv4K0j8n9df34DYT6nCY/aqSpl0UqxV88CBzeKk0sy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/yBECloayyAp_BGC2xu8bkIZygJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Jan 2026 17:24:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:05:c4:71:d1:2a:26:ba:8f:17:76:75:a6:66:f0:79:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c811029686b2c80a7f0460b6c6ef1b9086728097
Validity
Not Before: Jan 28 18:01:26 2026 GMT
Not After : Jan 29 18:01:26 2026 GMT
Subject: CN=2db54e9a237fb17c0ca55d1126e29d8708311594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c2:84:14:c3:9e:27:20:e7:41:94:d1:cc:18:
10:c1:42:cf:85:d3:c7:59:2e:00:8e:a4:9b:94:a0:
f2:7c:33:d4:6e:37:6a:7c:b4:e9:ba:cc:41:c3:19:
76:b7:ea:61:0b:1b:a2:c6:fe:6a:1e:80:95:a9:8e:
ce:7a:3c:8f:37:99:73:90:3d:a7:d8:23:a2:ca:09:
46:cf:17:ae:91:37:d9:12:dc:44:0c:53:d7:f3:36:
f8:c6:b9:53:2c:cf:a5:63:e0:d2:93:f5:fd:db:a0:
eb:02:ba:6c:96:12:1f:63:a2:a7:26:77:d5:a6:b0:
51:49:f0:3d:d3:38:a5:f8:e9:dd:a0:72:ba:73:8e:
c6:50:59:e0:58:8c:29:0c:bc:51:e0:46:f7:cb:45:
2f:00:da:c8:4b:af:74:c1:32:4e:75:dc:c0:e9:7e:
ef:53:65:63:6b:de:3b:f0:40:e5:0a:ab:2b:aa:5b:
b9:3d:24:e6:8f:b1:64:fd:4e:8d:b7:2d:bb:bf:d2:
37:ef:57:a8:b1:34:17:d1:6a:a5:07:13:c5:34:5b:
c4:e7:f1:04:a8:ab:f3:e0:c5:70:53:53:8d:ee:32:
49:26:25:89:09:a9:c6:73:f2:41:be:13:16:1b:43:
ac:07:37:bd:67:b1:55:a1:c1:04:86:b5:5f:cb:77:
e1:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:B5:4E:9A:23:7F:B1:7C:0C:A5:5D:11:26:E2:9D:87:08:31:15:94
X509v3 Authority Key Identifier:
keyid:C8:11:02:96:86:B2:C8:0A:7F:04:60:B6:C6:EF:1B:90:86:72:80:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yBECloayyAp_BGC2xu8bkIZygJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:fa:38:14:f0:d4:df:e3:52:e6:94:d4:0a:3b:55:be:d8:d4:
19:4f:64:c4:ff:9e:44:e6:9a:02:81:aa:23:b2:63:6d:b7:a6:
da:0e:ce:06:5f:4d:ae:dc:65:b6:cf:98:c6:9b:be:09:c8:71:
38:8d:4b:48:b8:f1:1d:a4:3d:bc:e8:b2:ef:50:41:e7:b2:f4:
32:17:20:ae:8c:4b:a1:bd:96:d5:5a:66:30:41:53:5a:3a:00:
bf:28:7f:60:6e:36:c0:dd:02:80:3b:4d:0b:cf:77:62:9e:bb:
f9:82:d7:a2:48:95:f7:c7:51:c8:75:d6:53:f6:8d:fc:48:04:
82:9a:20:45:0d:20:d9:fd:d4:db:94:3b:08:a7:74:92:4b:a2:
15:ae:d6:44:4a:63:de:2e:b6:1f:9a:3a:64:67:7c:35:c3:94:
40:3d:35:be:67:e5:48:e8:dc:d3:7a:d7:8d:2c:7c:43:0f:76:
0f:c8:51:a8:b7:bb:94:e1:ab:6d:dc:ed:84:7f:97:69:4c:a1:
29:3d:5e:76:f3:01:2d:b5:8f:e2:64:48:2e:26:be:7a:ba:79:
11:9a:2d:42:38:4c:66:bc:2b:c2:f6:aa:5b:f0:c9:b8:bd:df:
fd:79:f6:7c:5f:f7:bf:68:2e:66:79:14:c7:eb:6e:7a:84:a5:
79:c7:44:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 28 21:04:37 2026 by rpki-client