This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/y4muY2SP0cie1Wo2G9jB4RlWv7o.mft
File: y4muY2SP0cie1Wo2G9jB4RlWv7o.mft (raw, json)
Hash identifier: Z3eK+PZxVwWxcsL9YKDviBtpcgZkXaB5sFkNcfhn+0M=
Subject key identifier: 59:E1:E7:37:FB:33:32:EC:33:53:BB:A0:99:20:C9:58:53:6F:B6:6F
Authority key identifier: CB:89:AE:63:64:8F:D1:C8:9E:D5:6A:36:1B:D8:C1:E1:19:56:BF:BA
Certificate issuer: /CN=cb89ae63648fd1c89ed56a361bd8c1e11956bfba
Certificate serial: 019C42B425FD41BCAF5161E644ADAE5856D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y4muY2SP0cie1Wo2G9jB4RlWv7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/y4muY2SP0cie1Wo2G9jB4RlWv7o.mft
Manifest number: 1511
Signing time: Mon 09 Feb 2026 14:00:28 +0000
Manifest this update: Mon 09 Feb 2026 14:00:28 +0000
Manifest next update: Tue 10 Feb 2026 14:00:28 +0000
Files and hashes: 1: oOe43u0rDz6F_hHXzn-flvvUaKU.roa (hash: w4KlXnKVNrmrMIj8p2+E6Qm85PcdsOMyZs6adtK9znE=)
2: y4muY2SP0cie1Wo2G9jB4RlWv7o.crl (hash: BE90Xf8NKFbpysaaBB/KSSOz6Oj6m+3An9ETWAFt+5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/y4muY2SP0cie1Wo2G9jB4RlWv7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/y4muY2SP0cie1Wo2G9jB4RlWv7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/y4muY2SP0cie1Wo2G9jB4RlWv7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 14:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:b4:25:fd:41:bc:af:51:61:e6:44:ad:ae:58:56:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb89ae63648fd1c89ed56a361bd8c1e11956bfba
Validity
Not Before: Feb 9 14:00:28 2026 GMT
Not After : Feb 10 14:00:28 2026 GMT
Subject: CN=59e1e737fb3332ec3353bba09920c958536fb66f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:85:6b:12:4e:c7:3d:c9:40:05:0c:a2:f8:11:
4e:69:1b:e4:35:cb:48:ed:ab:7b:97:aa:2c:31:0f:
ff:f8:44:4f:c6:4f:05:f8:f4:17:ec:89:81:0e:7c:
2a:af:66:ce:d3:62:61:b7:05:ed:fb:5d:b5:ac:f7:
7e:76:f2:81:9b:15:66:c6:3e:2d:93:ea:0a:f4:96:
a8:21:ab:9a:15:59:2b:0d:7d:63:67:19:e9:3b:54:
f0:46:55:d6:a1:55:75:23:b0:75:4b:14:4f:cd:ca:
60:1a:66:d0:b1:79:2b:8b:3d:92:ce:cf:80:eb:b5:
ad:50:fd:dd:ac:3e:d0:3c:8a:5b:f7:b8:4c:0d:6e:
2f:4e:20:30:83:32:d6:f5:f4:d4:fe:3d:64:d5:19:
68:2b:ef:58:3e:33:fb:3e:83:db:1a:4c:eb:df:e5:
ab:0c:af:da:0b:e2:23:26:b2:37:97:f4:b3:a7:97:
78:83:47:79:56:0c:11:b9:59:05:01:f8:b8:a2:af:
cb:ac:08:6e:30:f5:99:79:e6:d6:fe:a4:14:02:a7:
fc:e7:07:47:33:29:5c:16:c8:fc:66:0f:52:b2:de:
f3:d7:52:7a:b1:07:df:3b:60:0e:e1:8a:f3:a7:14:
b9:7e:8a:8f:da:79:06:44:7a:b2:b4:5e:f1:59:d0:
3f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:E1:E7:37:FB:33:32:EC:33:53:BB:A0:99:20:C9:58:53:6F:B6:6F
X509v3 Authority Key Identifier:
keyid:CB:89:AE:63:64:8F:D1:C8:9E:D5:6A:36:1B:D8:C1:E1:19:56:BF:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y4muY2SP0cie1Wo2G9jB4RlWv7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/y4muY2SP0cie1Wo2G9jB4RlWv7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/y4muY2SP0cie1Wo2G9jB4RlWv7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:45:82:58:96:aa:71:a0:9c:30:f5:27:07:da:92:4b:a6:b5:
e0:30:26:15:28:74:80:c7:17:4c:d8:7d:8f:58:57:ad:15:06:
0e:be:8a:6c:0e:9c:50:50:6e:ca:89:32:f8:6c:6a:6d:22:51:
ea:06:52:f5:fa:fe:15:76:54:68:f3:b7:53:3a:5f:37:2a:82:
d0:84:9c:a3:1d:5c:0c:27:2f:5a:62:be:4a:cd:5b:0d:1d:eb:
a3:9f:68:49:e2:2f:92:7b:52:da:62:e9:4d:c7:94:53:19:4d:
aa:27:5d:b8:d9:98:21:0d:34:70:9c:26:1c:42:1e:8a:5c:a3:
94:35:60:03:b3:3c:f5:75:e2:fa:4a:9d:29:db:12:a4:d9:e5:
5b:3c:9f:d3:af:73:8b:7a:62:8f:9f:a1:72:0f:5e:84:d1:88:
e5:91:7c:50:86:41:8b:4e:ad:8b:2e:a8:7c:e0:af:76:d1:b0:
a0:f6:ea:8b:19:a6:1e:a5:03:b2:70:e1:e0:6a:1c:49:c9:39:
e9:de:42:53:52:9c:6a:d8:f9:1c:24:1f:22:5e:98:23:c1:4c:
21:0b:a3:48:60:bc:c9:b7:49:7e:70:de:38:3d:4b:92:13:6f:
58:17:5a:67:32:07:bb:e1:47:2f:f3:31:ef:49:ba:96:42:65:
23:df:27:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCtCX9QbyvUWHmRK2uWFbVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiODlhZTYzNjQ4ZmQxYzg5ZWQ1NmEzNjFiZDhjMWUxMTk1
NmJmYmEwHhcNMjYwMjA5MTQwMDI4WhcNMjYwMjEwMTQwMDI4WjAzMTEwLwYDVQQD
Eyg1OWUxZTczN2ZiMzMzMmVjMzM1M2JiYTA5OTIwYzk1ODUzNmZiNjZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5IVrEk7HPclABQyi+BFOaRvkNctI
7at7l6osMQ//+ERPxk8F+PQX7ImBDnwqr2bO02JhtwXt+121rPd+dvKBmxVmxj4t
k+oK9JaoIauaFVkrDX1jZxnpO1TwRlXWoVV1I7B1SxRPzcpgGmbQsXkriz2Szs+A
67WtUP3drD7QPIpb97hMDW4vTiAwgzLW9fTU/j1k1RloK+9YPjP7PoPbGkzr3+Wr
DK/aC+IjJrI3l/Szp5d4g0d5VgwRuVkFAfi4oq/LrAhuMPWZeebW/qQUAqf85wdH
MylcFsj8Zg9Sst7z11J6sQffO2AO4YrzpxS5foqP2nkGRHqytF7xWdA/fwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFnh5zf7MzLsM1O7oJkgyVhTb7ZvMB8GA1UdIwQY
MBaAFMuJrmNkj9HIntVqNhvYweEZVr+6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTRtdVkyU1AwY2llMVdvMkc5akI0UmxXdjdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8xYmE2ZGYtNTQ4Yy00NGVhLWIxZDUt
ZjRlYjBmZjViYjczLzEveTRtdVkyU1AwY2llMVdvMkc5akI0UmxXdjdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC8xYmE2ZGYtNTQ4Yy00NGVhLWIxZDUtZjRlYjBmZjViYjcz
LzEveTRtdVkyU1AwY2llMVdvMkc5akI0UmxXdjdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvEWCWJaq
caCcMPUnB9qSS6a14DAmFSh0gMcXTNh9j1hXrRUGDr6KbA6cUFBuyoky+GxqbSJR
6gZS9fr+FXZUaPO3UzpfNyqC0IScox1cDCcvWmK+Ss1bDR3ro59oSeIvkntS2mLp
TceUUxlNqidduNmYIQ00cJwmHEIeilyjlDVgA7M89XXi+kqdKdsSpNnlWzyf069z
i3pij5+hcg9ehNGI5ZF8UIZBi06tiy6ofOCvdtGwoPbqixmmHqUDsnDh4GocSck5
6d5CU1Kcatj5HCQfIl6YI8FMIQujSGC8ybdJfnDeOD1LkhNvWBdaZzIHu+FHL/Mx
70m6lkJlI98n7A==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:32:34 2026 by rpki-client