This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.mft
File: YiJ2252bNM3sJiDHJX3FrUrrgy0.mft (raw, json)
Hash identifier: s0qe4oxkSYNKBAUM+OOUjaIySTa6LxklMqG2RbZhL50=
Subject key identifier: A1:B5:85:6C:92:6B:B7:9A:74:64:B1:E2:19:6A:C7:61:CB:EA:A9:6F
Authority key identifier: 62:22:76:DB:9D:9B:34:CD:EC:26:20:C7:25:7D:C5:AD:4A:EB:83:2D
Certificate issuer: /CN=622276db9d9b34cdec2620c7257dc5ad4aeb832d
Certificate serial: 019C44D9F94022341C7312112747099A63F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiJ2252bNM3sJiDHJX3FrUrrgy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.mft
Manifest number: 1812
Signing time: Tue 10 Feb 2026 00:01:01 +0000
Manifest this update: Tue 10 Feb 2026 00:01:01 +0000
Manifest next update: Wed 11 Feb 2026 00:01:01 +0000
Files and hashes: 1: 1iPsYqvE-ccnXaUSDoZeDrNAomM.roa (hash: rvJ3z6CrzCzgXCYWONhujj1iC92V3sl9Uzqlk+xTEEI=)
2: YiJ2252bNM3sJiDHJX3FrUrrgy0.crl (hash: 2AaBGx00ea+Tj6VToW0pGvJf2kzPonmRs2PWuD0bQQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YiJ2252bNM3sJiDHJX3FrUrrgy0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:44:d9:f9:40:22:34:1c:73:12:11:27:47:09:9a:63:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=622276db9d9b34cdec2620c7257dc5ad4aeb832d
Validity
Not Before: Feb 10 00:01:01 2026 GMT
Not After : Feb 11 00:01:01 2026 GMT
Subject: CN=a1b5856c926bb79a7464b1e2196ac761cbeaa96f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:21:be:90:d0:b6:ef:05:39:5b:7b:73:d8:af:
21:66:f1:a8:d1:75:98:23:12:af:ff:bf:48:67:04:
31:80:82:77:dc:31:c8:6d:ec:d4:c9:a2:cf:8b:99:
02:a2:90:75:3a:aa:07:76:58:08:9a:1a:3d:32:08:
d7:7a:8a:9a:3d:b6:17:fa:39:c2:30:83:4a:ba:ec:
46:9a:fc:18:d6:be:b0:c5:64:51:92:0a:a9:d2:12:
53:f2:ad:75:ac:65:27:a0:96:14:ac:f6:ad:9b:39:
71:78:9f:6a:a4:8f:47:dc:ba:7d:5e:ce:f4:fe:61:
ce:86:a0:55:f6:98:e1:00:85:5c:55:f9:b4:f7:0e:
3e:83:e2:51:cc:18:77:66:1d:a6:37:73:49:21:eb:
10:55:f7:52:86:10:9c:83:1f:46:d0:4f:c2:a6:54:
f4:a6:cd:5b:78:c3:2b:f5:ad:f2:cf:d9:ee:0d:9f:
70:3e:5f:69:92:2d:c5:ba:83:c6:4b:af:22:2c:fe:
ea:26:d2:2e:3a:bc:17:71:7d:dc:b4:4d:97:2e:ae:
7e:b5:33:83:e3:92:3b:8e:a1:ed:9f:6d:8a:f8:93:
f5:ca:79:70:1a:15:65:1c:97:2d:6e:b8:78:b8:21:
ff:ed:9d:37:23:b9:a0:cc:97:26:ae:40:e5:08:26:
cd:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:B5:85:6C:92:6B:B7:9A:74:64:B1:E2:19:6A:C7:61:CB:EA:A9:6F
X509v3 Authority Key Identifier:
keyid:62:22:76:DB:9D:9B:34:CD:EC:26:20:C7:25:7D:C5:AD:4A:EB:83:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiJ2252bNM3sJiDHJX3FrUrrgy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/87aa3d-ca5e-4513-aa9e-e6ee5834c995/1/YiJ2252bNM3sJiDHJX3FrUrrgy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:70:de:b8:f1:e5:61:81:c7:72:4c:be:eb:4a:0b:13:34:a5:
1c:6b:77:9b:7d:48:6b:90:dd:b8:73:4c:44:f1:56:36:7d:63:
14:2f:da:56:b4:d3:8a:a5:fb:0f:18:c7:aa:e1:65:6d:79:9e:
c2:ae:b7:c3:67:94:82:f5:43:fa:15:30:84:8d:e9:30:80:37:
13:65:2f:74:5e:46:51:d4:e1:0b:0b:e5:24:63:70:ca:ab:57:
78:b2:c2:76:61:ba:86:f1:b2:bf:ba:5f:b0:e7:04:fe:20:e5:
e1:4c:0f:53:90:93:5c:9a:f2:ea:4b:3d:31:51:1c:a4:3c:d5:
74:79:e5:d5:ca:6e:a2:cf:d6:87:ae:4e:91:da:97:12:51:df:
6a:55:ae:32:75:78:7e:79:bf:88:58:54:ca:12:26:0a:2b:db:
a1:e0:2c:9e:85:c1:03:37:4c:c5:cc:2f:74:c8:15:34:1d:ea:
35:92:c7:fa:58:07:a3:43:1e:ce:bb:62:ef:e4:c4:39:bc:c3:
50:7d:23:87:66:2d:d3:f7:71:1b:ef:33:81:b2:94:b2:0e:34:
da:8c:f0:d2:b4:64:35:19:84:2d:de:7a:28:bb:29:0a:34:ee:
7e:e0:75:fd:9c:9e:a7:81:97:db:42:5c:9f:84:c1:5c:00:39:
73:8b:88:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxE2flAIjQccxIRJ0cJmmPzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyMjI3NmRiOWQ5YjM0Y2RlYzI2MjBjNzI1N2RjNWFkNGFl
YjgzMmQwHhcNMjYwMjEwMDAwMTAxWhcNMjYwMjExMDAwMTAxWjAzMTEwLwYDVQQD
EyhhMWI1ODU2YzkyNmJiNzlhNzQ2NGIxZTIxOTZhYzc2MWNiZWFhOTZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwiG+kNC27wU5W3tz2K8hZvGo0XWY
IxKv/79IZwQxgIJ33DHIbezUyaLPi5kCopB1OqoHdlgImho9MgjXeoqaPbYX+jnC
MINKuuxGmvwY1r6wxWRRkgqp0hJT8q11rGUnoJYUrPatmzlxeJ9qpI9H3Lp9Xs70
/mHOhqBV9pjhAIVcVfm09w4+g+JRzBh3Zh2mN3NJIesQVfdShhCcgx9G0E/CplT0
ps1beMMr9a3yz9nuDZ9wPl9pki3FuoPGS68iLP7qJtIuOrwXcX3ctE2XLq5+tTOD
45I7jqHtn22K+JP1ynlwGhVlHJctbrh4uCH/7Z03I7mgzJcmrkDlCCbNpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKG1hWySa7eadGSx4hlqx2HL6qlvMB8GA1UdIwQY
MBaAFGIidtudmzTN7CYgxyV9xa1K64MtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWlKMjI1MmJOTTNzSmlESEpYM0ZyVXJyZ3kwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC84N2FhM2QtY2E1ZS00NTEzLWFhOWUt
ZTZlZTU4MzRjOTk1LzEvWWlKMjI1MmJOTTNzSmlESEpYM0ZyVXJyZ3kwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC84N2FhM2QtY2E1ZS00NTEzLWFhOWUtZTZlZTU4MzRjOTk1
LzEvWWlKMjI1MmJOTTNzSmlESEpYM0ZyVXJyZ3kwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAknDeuPHl
YYHHcky+60oLEzSlHGt3m31Ia5DduHNMRPFWNn1jFC/aVrTTiqX7DxjHquFlbXme
wq63w2eUgvVD+hUwhI3pMIA3E2UvdF5GUdThCwvlJGNwyqtXeLLCdmG6hvGyv7pf
sOcE/iDl4UwPU5CTXJry6ks9MVEcpDzVdHnl1cpuos/Wh65OkdqXElHfalWuMnV4
fnm/iFhUyhImCivboeAsnoXBAzdMxcwvdMgVNB3qNZLH+lgHo0Mezrti7+TEObzD
UH0jh2Yt0/dxG+8zgbKUsg402ozw0rRkNRmELd56KLspCjTufuB1/Zyep4GX20Jc
n4TBXAA5c4uIWg==
-----END CERTIFICATE-----
Generated at Tue Feb 10 01:21:31 2026 by rpki-client