This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/2168ba-1c4c-4206-9299-1653e0de4050/1/yJgrANxgA9zFz9fSe1WV0MrKXaE.mft
File: yJgrANxgA9zFz9fSe1WV0MrKXaE.mft (raw, json)
Hash identifier: nBrZuIzfI1U1LwzcxmC5txBmMq8WIXiD16hQqbfLffQ=
Subject key identifier: 87:9F:E6:F5:E5:2D:AB:82:80:76:BA:A5:D8:1C:F2:DD:5B:A5:5A:8B
Authority key identifier: C8:98:2B:00:DC:60:03:DC:C5:CF:D7:D2:7B:55:95:D0:CA:CA:5D:A1
Certificate issuer: /CN=c8982b00dc6003dcc5cfd7d27b5595d0caca5da1
Certificate serial: 019C439007F93AF34AAED92F21B428C4369D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yJgrANxgA9zFz9fSe1WV0MrKXaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/2168ba-1c4c-4206-9299-1653e0de4050/1/yJgrANxgA9zFz9fSe1WV0MrKXaE.mft
Manifest number: 1812
Signing time: Mon 09 Feb 2026 18:00:38 +0000
Manifest this update: Mon 09 Feb 2026 18:00:38 +0000
Manifest next update: Tue 10 Feb 2026 18:00:38 +0000
Files and hashes: 1: 1-DbHlApWvHSbpBcMnUYSNB33bx0.roa (hash: OBuf9H667a+ueEzKXN1f4R7v9DKwH4hbK0fjD7m4gDM=)
2: yJgrANxgA9zFz9fSe1WV0MrKXaE.crl (hash: gIY2fCuEUrsR2/zhtOZyhJvy3wR3yAsb52UKCpJ0Ly8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/2168ba-1c4c-4206-9299-1653e0de4050/1/yJgrANxgA9zFz9fSe1WV0MrKXaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/2168ba-1c4c-4206-9299-1653e0de4050/1/yJgrANxgA9zFz9fSe1WV0MrKXaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yJgrANxgA9zFz9fSe1WV0MrKXaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 18:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:90:07:f9:3a:f3:4a:ae:d9:2f:21:b4:28:c4:36:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8982b00dc6003dcc5cfd7d27b5595d0caca5da1
Validity
Not Before: Feb 9 18:00:38 2026 GMT
Not After : Feb 10 18:00:38 2026 GMT
Subject: CN=879fe6f5e52dab828076baa5d81cf2dd5ba55a8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:21:45:f0:3f:9e:ba:09:99:fb:d1:f1:2f:91:
40:8e:c1:fa:8e:b3:5c:21:15:8b:d2:54:4a:37:37:
3d:35:2b:eb:9a:45:24:6c:67:3a:05:ae:d5:9e:a1:
48:bb:d0:2a:e3:2f:0e:1d:8c:69:5e:9e:b9:1b:7c:
ac:bd:32:98:ff:bf:87:29:60:eb:cc:b7:eb:92:d1:
fa:2a:f2:26:cb:b9:db:89:a8:56:a9:61:5e:a5:fa:
bb:96:28:ca:83:99:5c:92:82:fc:2f:0e:fe:be:db:
7b:bb:7e:50:29:01:7e:84:d0:26:91:b2:4d:18:f2:
7f:7c:c2:45:1b:84:42:81:ab:69:40:b4:2c:b5:4d:
08:08:c2:81:0c:e2:fa:50:14:9a:13:64:c7:e4:c7:
9d:48:89:06:4e:59:d5:f0:c3:fe:83:db:1a:3a:b8:
e5:cd:49:71:26:95:3e:ee:30:77:ed:34:73:c9:9b:
04:0b:d3:fc:90:f7:22:83:72:19:05:ab:35:32:4d:
bc:cd:56:0e:20:fa:f2:7c:81:97:7a:ad:eb:82:05:
5c:25:f4:44:b1:90:da:55:7e:4c:56:96:dd:b7:65:
49:53:92:85:c9:38:4b:2b:4e:2a:65:e8:7f:e1:25:
b5:ae:90:f9:97:58:f1:5b:13:93:80:4c:35:8b:31:
12:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:9F:E6:F5:E5:2D:AB:82:80:76:BA:A5:D8:1C:F2:DD:5B:A5:5A:8B
X509v3 Authority Key Identifier:
keyid:C8:98:2B:00:DC:60:03:DC:C5:CF:D7:D2:7B:55:95:D0:CA:CA:5D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yJgrANxgA9zFz9fSe1WV0MrKXaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2168ba-1c4c-4206-9299-1653e0de4050/1/yJgrANxgA9zFz9fSe1WV0MrKXaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2168ba-1c4c-4206-9299-1653e0de4050/1/yJgrANxgA9zFz9fSe1WV0MrKXaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:47:f8:db:66:82:4b:8f:56:61:c8:95:17:76:98:d0:df:b8:
d1:0d:40:c2:fd:1c:bf:dd:f6:5a:4a:ae:c8:86:6a:f3:1d:33:
17:25:d4:fb:04:4d:55:99:3f:f7:42:48:df:2d:2d:9a:5b:c2:
62:81:84:b0:5a:74:ac:f0:f7:4e:e1:2e:5c:53:44:60:3d:a2:
cc:6f:15:dd:86:ca:8e:40:0f:01:6d:3c:a1:76:64:ed:cd:c1:
7b:e6:ce:52:1a:4e:99:1a:c1:f9:6b:ed:2e:01:41:4e:0b:65:
33:1e:9a:a2:e3:46:5a:50:91:c2:72:fa:7b:86:bb:da:45:1d:
1b:5e:18:6f:67:23:7c:e0:72:ef:b2:ef:cd:4b:ab:3e:c5:4b:
60:dc:fc:98:13:6f:bd:ff:8d:2e:0b:00:87:7d:4c:6c:11:6f:
f9:1b:0d:e8:e8:f6:ab:26:53:37:44:c8:34:eb:8e:02:a0:3b:
9c:ee:69:82:d9:d5:09:b1:44:a9:da:a3:cb:ea:a0:9f:df:28:
ac:06:be:ee:85:03:1f:78:83:51:2f:c2:a2:ff:25:fd:04:1c:
9f:67:b9:1f:95:69:7a:b1:65:0e:c2:36:b3:5e:25:74:5e:8a:
fe:d1:08:32:ad:5f:69:a9:48:60:b5:1a:cd:11:a2:d0:84:86:
29:1f:53:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:38:41 2026 by rpki-client