This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/yPN0bgxrBTFHtSpO9AxIxwp_HNg.mft
File: yPN0bgxrBTFHtSpO9AxIxwp_HNg.mft (raw, json)
Hash identifier: A0yEJr7tHralU/LTe6TUpfftNowb7TERzgZzjfsfryc=
Subject key identifier: 9D:A6:06:3F:23:24:3A:20:62:4B:B5:B3:BB:AF:12:AC:69:64:73:E7
Authority key identifier: C8:F3:74:6E:0C:6B:05:31:47:B5:2A:4E:F4:0C:48:C7:0A:7F:1C:D8
Certificate issuer: /CN=c8f3746e0c6b053147b52a4ef40c48c70a7f1cd8
Certificate serial: 019C42EBB3924D0347D4CCAE10269078CEAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yPN0bgxrBTFHtSpO9AxIxwp_HNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/yPN0bgxrBTFHtSpO9AxIxwp_HNg.mft
Manifest number: 01A5
Signing time: Mon 09 Feb 2026 15:01:08 +0000
Manifest this update: Mon 09 Feb 2026 15:01:08 +0000
Manifest next update: Tue 10 Feb 2026 15:01:08 +0000
Files and hashes: 1: Pk6dmv-1h5zWIXu5Oty1Pp_3yV4.roa (hash: /ND/9TFeaNgP6XF6YHep3PGuc7vk/LLfQoeSDsS92Uk=)
2: yPN0bgxrBTFHtSpO9AxIxwp_HNg.crl (hash: BLmZqh4CIOUJ2jgzPCvkzV0jDXhd4eBnZcKzmY8pbZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/yPN0bgxrBTFHtSpO9AxIxwp_HNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/yPN0bgxrBTFHtSpO9AxIxwp_HNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yPN0bgxrBTFHtSpO9AxIxwp_HNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:eb:b3:92:4d:03:47:d4:cc:ae:10:26:90:78:ce:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8f3746e0c6b053147b52a4ef40c48c70a7f1cd8
Validity
Not Before: Feb 9 15:01:08 2026 GMT
Not After : Feb 10 15:01:08 2026 GMT
Subject: CN=9da6063f23243a20624bb5b3bbaf12ac696473e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:4d:ea:c0:fe:8d:a5:94:d2:a7:cd:6f:78:96:
c3:3b:a1:e4:aa:4c:4e:4f:e2:f8:e6:9c:42:09:37:
1e:44:3f:05:ca:27:9b:10:24:6f:ef:13:c6:18:4b:
e8:9d:ce:47:df:d6:0a:43:60:ff:93:a4:55:fa:8d:
82:b8:24:00:06:b4:2e:38:15:18:7d:c9:ec:04:71:
41:a2:45:a2:0b:e9:d5:3a:52:cd:22:6d:b9:02:27:
d8:4a:a5:54:af:a2:60:5b:4e:57:bb:1e:0d:f6:da:
69:d2:3a:09:8a:5a:80:fe:fa:97:64:90:d3:6c:a9:
d7:c6:c4:82:8a:f1:07:9b:b8:ca:2a:4a:fe:80:14:
99:bd:67:b3:46:78:fb:8d:4e:69:8f:59:08:47:1b:
d2:1f:73:18:f0:68:23:9c:d7:85:60:b5:dd:aa:04:
bd:76:5e:c2:d2:2b:e9:2a:74:27:ec:35:ca:ed:4f:
b3:71:52:60:2c:89:23:30:c9:ee:83:d7:cf:15:f5:
de:e6:b9:a5:fe:6f:4f:b0:81:a3:20:66:65:5d:39:
86:d0:6a:76:02:0f:c7:54:22:05:7c:f2:ec:c1:3c:
04:9a:13:3b:69:c4:8b:b9:d8:2d:a2:6c:d6:5e:07:
b3:14:1b:5d:13:d5:ee:9f:d0:0f:8e:f9:e8:44:38:
9c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:A6:06:3F:23:24:3A:20:62:4B:B5:B3:BB:AF:12:AC:69:64:73:E7
X509v3 Authority Key Identifier:
keyid:C8:F3:74:6E:0C:6B:05:31:47:B5:2A:4E:F4:0C:48:C7:0A:7F:1C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPN0bgxrBTFHtSpO9AxIxwp_HNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/yPN0bgxrBTFHtSpO9AxIxwp_HNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/yPN0bgxrBTFHtSpO9AxIxwp_HNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:7d:bd:0c:ed:43:2a:e6:5c:4e:4b:8b:79:f0:64:7d:cc:48:
b6:db:1f:7c:b5:48:f2:48:1a:4a:fb:b1:6a:cc:2a:22:80:59:
f6:81:08:1b:c8:7c:3a:b5:90:8c:39:52:be:26:e4:61:90:d6:
d0:2b:5d:40:15:6e:08:f1:d4:e5:87:4f:7c:5d:bc:c0:2b:a7:
5d:c4:34:79:49:a3:5d:54:56:fe:f9:76:f6:60:46:73:41:ad:
2f:89:e6:f3:1a:74:52:56:a6:c0:bb:dc:5e:4b:89:12:5d:65:
0d:80:a7:89:fc:d1:8b:eb:d0:b8:0f:27:88:f8:9d:3d:68:84:
0d:d8:e9:ea:15:c2:d3:e2:d7:51:73:64:08:83:ad:4a:55:77:
68:49:be:84:8a:6c:8b:1b:2c:3f:90:19:7e:76:92:04:08:c1:
a7:2f:90:ed:76:1c:f0:7d:bc:cf:97:cd:f7:ff:5f:5c:ee:fb:
5c:02:1d:53:46:16:91:cd:bf:89:d6:d6:5f:59:48:1c:c2:09:
cd:2b:71:ad:0a:d5:17:17:d3:15:d6:ee:15:cf:ce:af:bc:14:
d7:ea:f8:32:b1:a7:2d:17:82:ce:c5:4b:ab:fb:cb:4b:22:91:
ba:fb:73:6e:b0:1e:92:dd:7a:f4:62:e7:83:fb:f1:6e:e4:db:
f9:4a:8c:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:00:58 2026 by rpki-client