This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/YbgkuFq6e8NRKxIUs4XeVw-ylL8.mft
File: YbgkuFq6e8NRKxIUs4XeVw-ylL8.mft (raw, json)
Hash identifier: 0TaOpcaUgF3q4yFwRfg99z6w6aTpFSB8dFMXDj8+JIk=
Subject key identifier: BF:53:AA:78:85:80:F7:F9:75:14:52:63:E5:FB:8B:11:48:B9:89:DA
Authority key identifier: 61:B8:24:B8:5A:BA:7B:C3:51:2B:12:14:B3:85:DE:57:0F:B2:94:BF
Certificate issuer: /CN=61b824b85aba7bc3512b1214b385de570fb294bf
Certificate serial: 019C44350A6C1B33DE2E5AAF0B4993367CF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbgkuFq6e8NRKxIUs4XeVw-ylL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/YbgkuFq6e8NRKxIUs4XeVw-ylL8.mft
Manifest number: 0E0D
Signing time: Mon 09 Feb 2026 21:00:52 +0000
Manifest this update: Mon 09 Feb 2026 21:00:52 +0000
Manifest next update: Tue 10 Feb 2026 21:00:52 +0000
Files and hashes: 1: YbgkuFq6e8NRKxIUs4XeVw-ylL8.crl (hash: pzKqGjIaBQGjhP97OPWCM+lvQYFEOKllATv4mpa0Tpo=)
2: e265eCVZ_zfTOldsmbK9OxkmQeY.roa (hash: YosQ/clAH+U408bmGplqWhphkTjsVjwp5LPxq1REEA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/YbgkuFq6e8NRKxIUs4XeVw-ylL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/YbgkuFq6e8NRKxIUs4XeVw-ylL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbgkuFq6e8NRKxIUs4XeVw-ylL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:44:35:0a:6c:1b:33:de:2e:5a:af:0b:49:93:36:7c:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b824b85aba7bc3512b1214b385de570fb294bf
Validity
Not Before: Feb 9 21:00:52 2026 GMT
Not After : Feb 10 21:00:52 2026 GMT
Subject: CN=bf53aa788580f7f975145263e5fb8b1148b989da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:81:99:9b:e4:dc:98:76:86:bf:11:5c:06:a1:
04:f1:7d:a4:69:f5:f2:cd:85:09:d2:00:40:64:39:
3c:8b:ca:27:40:27:ad:f9:ab:49:37:21:5b:8b:1b:
9b:fb:2f:a4:7e:be:3f:47:19:af:39:10:f2:c4:89:
1c:41:0a:e2:0e:ab:f9:b9:f3:71:63:2a:7c:3d:ed:
cb:9c:26:af:a6:59:a5:04:df:4b:ec:e4:2d:0f:3c:
2c:f6:52:ed:62:dc:ac:8d:aa:38:0f:05:51:1c:66:
c8:87:a0:07:b5:99:4c:fa:92:b7:18:18:ca:59:18:
0f:d4:7f:73:5b:7b:f6:78:77:6c:02:67:71:ea:20:
e2:e5:87:bb:b8:da:45:20:9b:1f:80:fd:ed:75:1e:
ab:12:79:67:e0:85:a8:f5:c2:4c:66:c9:24:3d:aa:
54:b0:1c:ae:e2:50:09:30:6b:3a:80:81:76:77:3a:
4f:7e:e1:5b:56:a4:9a:2c:59:2f:e7:cf:d6:5a:ce:
7f:18:24:58:10:25:d5:8c:f2:79:bd:36:bc:7c:8b:
7b:36:a8:73:7d:7a:53:43:f3:48:a1:20:9b:56:8e:
42:f6:6d:a3:05:e3:c3:a1:90:ba:4b:07:9c:26:4d:
c6:03:47:74:b5:b9:e4:dc:77:4d:d5:19:8b:f2:1f:
f2:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:53:AA:78:85:80:F7:F9:75:14:52:63:E5:FB:8B:11:48:B9:89:DA
X509v3 Authority Key Identifier:
keyid:61:B8:24:B8:5A:BA:7B:C3:51:2B:12:14:B3:85:DE:57:0F:B2:94:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbgkuFq6e8NRKxIUs4XeVw-ylL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/YbgkuFq6e8NRKxIUs4XeVw-ylL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/YbgkuFq6e8NRKxIUs4XeVw-ylL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:93:95:d3:7a:e3:75:f7:9c:c2:4e:e8:0f:bd:88:97:1b:d0:
f7:16:14:6e:1a:81:df:50:7f:db:a9:a3:8f:66:10:00:df:a1:
10:53:29:c1:18:40:d9:a2:87:a2:90:cf:c3:fb:59:cd:0c:12:
3c:1d:25:b0:57:dd:f5:f4:b0:6d:ba:06:04:d8:ff:64:88:7c:
04:61:d1:96:a7:3d:ea:86:47:fd:bc:0b:49:5a:9d:33:a4:54:
16:54:cb:13:23:95:74:44:c7:5f:f4:24:98:f8:eb:10:12:68:
d8:4f:cf:49:24:36:08:c7:f5:db:d6:a3:83:77:d0:7b:1e:2c:
2e:aa:11:40:98:03:84:3a:f2:61:64:1c:41:04:ae:77:48:ca:
b1:5b:e8:0f:97:23:57:33:65:6c:7b:c3:42:e1:7a:5a:34:72:
93:76:25:91:09:24:a8:2f:0f:6a:9e:b0:94:b4:eb:44:3d:c4:
a1:05:bd:c0:9b:30:c1:d0:e0:57:a6:35:54:f1:79:04:7c:e5:
3b:3b:e6:f1:06:41:e6:6e:b6:32:74:fb:e0:05:b8:19:42:55:
16:a2:d5:2b:30:33:ba:3b:23:eb:ba:e4:03:c6:7a:72:3b:8c:
38:3f:b9:16:d6:3e:98:19:75:75:16:fa:a2:69:13:12:c9:47:
86:91:b0:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:48:48 2026 by rpki-client