This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/1fc853-6526-4091-95f4-f9f601c0686e/1/YB4KrpPrBf9dQt1wFvXeo4H7hmA.mft
File: YB4KrpPrBf9dQt1wFvXeo4H7hmA.mft (raw, json)
Hash identifier: wwLuuyRRB60tgDkFPu8jD2MppYgp8PGqSHB1aLK/AMU=
Subject key identifier: 49:02:DF:17:2F:E0:94:36:7C:FE:6F:61:62:75:9F:49:0E:16:9E:2C
Authority key identifier: 60:1E:0A:AE:93:EB:05:FF:5D:42:DD:70:16:F5:DE:A3:81:FB:86:60
Certificate issuer: /CN=601e0aae93eb05ff5d42dd7016f5dea381fb8660
Certificate serial: 019C43C6B1715BD2BCDDAB9B9730B6EF6F41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YB4KrpPrBf9dQt1wFvXeo4H7hmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/1fc853-6526-4091-95f4-f9f601c0686e/1/YB4KrpPrBf9dQt1wFvXeo4H7hmA.mft
Manifest number: 180C
Signing time: Mon 09 Feb 2026 19:00:20 +0000
Manifest this update: Mon 09 Feb 2026 19:00:20 +0000
Manifest next update: Tue 10 Feb 2026 19:00:20 +0000
Files and hashes: 1: YB4KrpPrBf9dQt1wFvXeo4H7hmA.crl (hash: t5oUYwvKE5g246rGrqB0/b4kekUMEgAcGFdqhyTmo+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/1fc853-6526-4091-95f4-f9f601c0686e/1/YB4KrpPrBf9dQt1wFvXeo4H7hmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/1fc853-6526-4091-95f4-f9f601c0686e/1/YB4KrpPrBf9dQt1wFvXeo4H7hmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/YB4KrpPrBf9dQt1wFvXeo4H7hmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:c6:b1:71:5b:d2:bc:dd:ab:9b:97:30:b6:ef:6f:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=601e0aae93eb05ff5d42dd7016f5dea381fb8660
Validity
Not Before: Feb 9 19:00:20 2026 GMT
Not After : Feb 10 19:00:20 2026 GMT
Subject: CN=4902df172fe094367cfe6f6162759f490e169e2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:41:ad:eb:65:3d:8d:ef:e7:5a:f1:00:2c:b2:
fb:20:c2:e9:6b:42:b6:be:9d:c5:f4:3f:39:f0:b3:
d7:29:c6:7e:53:e3:77:90:d1:9c:f3:3e:5e:46:6d:
42:5d:bc:bd:bb:1f:f7:9f:34:c6:9d:27:75:7e:02:
65:b8:50:e9:76:f1:c4:1a:c1:81:b4:7b:90:e2:c1:
57:3b:28:b8:3c:03:5a:89:fd:fa:b4:9b:c7:b6:f6:
c2:0e:19:02:4c:05:8b:f3:72:51:b9:cb:79:7f:7f:
92:88:f4:5a:c3:52:d8:a1:74:89:5c:ef:ab:df:a3:
f5:b1:bc:4d:61:55:93:ef:af:f5:84:48:4b:e9:3d:
7e:99:01:49:0d:65:72:b9:1b:af:4e:80:56:9f:bd:
9e:92:19:3a:86:ad:89:4c:c4:ac:7d:4a:2e:5b:e9:
dd:5d:75:97:a9:5d:6c:d9:7e:28:58:5e:35:48:25:
2d:ca:12:77:e1:ab:1d:90:b9:f9:14:bc:52:16:ea:
87:c0:ed:d0:17:36:f3:3a:84:78:f3:d8:39:e2:eb:
65:a6:ee:c6:82:24:33:e6:01:57:49:d7:5d:de:74:
01:96:a2:5d:2c:a9:06:6b:c5:a2:c2:f9:0a:6a:d6:
9e:2d:d8:60:74:49:bf:65:de:8b:00:38:80:2b:2c:
8b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:02:DF:17:2F:E0:94:36:7C:FE:6F:61:62:75:9F:49:0E:16:9E:2C
X509v3 Authority Key Identifier:
keyid:60:1E:0A:AE:93:EB:05:FF:5D:42:DD:70:16:F5:DE:A3:81:FB:86:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YB4KrpPrBf9dQt1wFvXeo4H7hmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/1fc853-6526-4091-95f4-f9f601c0686e/1/YB4KrpPrBf9dQt1wFvXeo4H7hmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/1fc853-6526-4091-95f4-f9f601c0686e/1/YB4KrpPrBf9dQt1wFvXeo4H7hmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:5f:cb:01:56:85:60:30:33:ea:db:8e:19:eb:55:37:64:ab:
ec:9b:ab:6e:75:65:9d:99:eb:36:59:1f:a1:85:b2:09:25:65:
cb:7d:da:be:b1:b5:a6:d3:16:2f:73:47:01:57:45:d2:d1:25:
13:ee:52:ec:49:83:2f:e2:f8:e0:df:f3:60:11:69:6a:7c:65:
c8:e6:91:22:b6:ee:56:78:91:36:b0:f4:f9:fc:63:c6:5b:7d:
a9:ad:04:20:8f:47:c1:41:a1:31:84:f4:77:d6:c4:21:d5:c0:
46:8d:8b:b8:4a:59:c1:5f:98:99:f9:a6:e7:70:da:30:b9:fc:
01:de:82:7a:73:ee:a9:c2:68:d2:8f:85:5f:70:9a:bd:a5:c8:
b2:57:0d:4d:33:47:7f:de:c5:fb:96:1f:ee:e7:3e:59:57:be:
0b:48:93:f1:be:80:fc:54:fb:4d:d4:0d:f2:10:86:c5:92:37:
c0:44:10:18:68:5b:96:fc:f1:20:85:47:92:93:04:f8:3c:cf:
58:10:b1:2a:70:07:84:a4:3c:8b:15:b4:d4:ef:7a:2e:6c:aa:
56:b3:10:6b:3f:ae:78:fa:78:61:8b:e4:2b:cd:3b:40:3a:69:
3c:b6:4b:71:c5:76:2c:b3:af:d3:50:db:49:c4:e2:91:04:1c:
78:09:c6:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:09:51 2026 by rpki-client