This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.mft
File: yJwsxInr5I9JBYSshm_jYsQRfnU.mft (raw, json)
Hash identifier: tIn4JLOw66vxvfzMliIPvZjcXCf8QwoA0Hv12XMNoe0=
Subject key identifier: 92:15:4D:FA:1F:A2:7D:4B:03:F8:C3:7B:72:32:99:5B:C0:C9:18:6A
Authority key identifier: C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75
Certificate issuer: /CN=c89c2cc489ebe48f490584ac866fe362c4117e75
Certificate serial: 019BFB098DAB7078D94D9907963B54239C93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.mft
Manifest number: 1507
Signing time: Mon 26 Jan 2026 16:01:05 +0000
Manifest this update: Mon 26 Jan 2026 16:01:05 +0000
Manifest next update: Tue 27 Jan 2026 16:01:05 +0000
Files and hashes: 1: KbGZziqCA41JgOpe8AUOSiv8rIM.roa (hash: MBAhT/6sVckMLfrlu1S3S4sTHwbcNuOAQSyBUhp+xNk=)
2: Lr_Xbb1THDKqD6RwPgUdUA9h3EY.roa (hash: cfMlImvmxi+0oJBR3nteg7NdpbusKTlCxQY6ByRViVA=)
3: Wgv3nP3KPCzK8Vc3Ujwc5tCZFEY.roa (hash: sZiUtGsuan8lIISLSvNoUUBLxQveJeIACDPYwQFWZys=)
4: ZkNagawyRZ70RDIXLqeICJ_NWvA.roa (hash: 1+wxgjSOWcm3+O0IK2qUtncsQ8Yyn6qzh3/LjTc9BqU=)
5: fotaW3reFeI2SLYUxkvM2Rp9oWU.roa (hash: 6ry4szc/4WpgdCqU6mLC/W0kQtFV5fQ4EQEyOj83ctw=)
6: yJwsxInr5I9JBYSshm_jYsQRfnU.crl (hash: AFSFrZ32HbfSZgrrNccw82c8p7Hs2F81Gq8p4zo8XHo=)
7: yhTiQ6aF_riEAT4eOqJDdkaQDgQ.roa (hash: uZrw316MsEk/l2BZfI6IcKecY27h3x31Etnd61KuR2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 15:35:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:fb:09:8d:ab:70:78:d9:4d:99:07:96:3b:54:23:9c:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c89c2cc489ebe48f490584ac866fe362c4117e75
Validity
Not Before: Jan 26 16:01:05 2026 GMT
Not After : Jan 27 16:01:05 2026 GMT
Subject: CN=92154dfa1fa27d4b03f8c37b7232995bc0c9186a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:b6:e1:07:9b:35:a0:25:83:f3:ba:b4:68:77:
ac:5a:c8:86:82:c8:ad:bb:41:e7:90:d8:d0:ec:cf:
99:ad:c0:fe:1e:ee:62:d6:7e:af:fc:68:c9:6a:ef:
c1:1f:b7:32:f9:ab:79:bf:59:df:31:38:f2:eb:b8:
e8:69:be:58:d8:f1:3d:70:1d:06:fb:da:0a:8f:c2:
72:6d:60:55:08:43:97:e4:56:08:f8:e3:05:d5:99:
2d:67:31:b0:c3:48:21:75:45:4a:18:44:20:6a:60:
33:8b:32:90:e8:37:72:1f:61:1c:8e:f7:83:f5:97:
52:a3:b0:f9:98:91:50:48:81:a0:ea:f8:a4:58:5d:
6c:10:d1:8e:9c:05:0f:4b:ec:5d:b4:33:ef:ff:c6:
74:75:80:ef:9e:34:d4:ca:aa:c7:c7:96:62:0f:05:
40:70:0d:d6:66:15:32:7c:05:1a:37:66:35:66:12:
ab:f9:a0:f0:b1:68:d3:e5:04:74:32:22:a5:a8:51:
e6:7f:c7:9c:fc:95:bf:0c:ce:c2:d3:fd:fd:99:9f:
5a:5f:d4:74:a9:7f:32:5b:44:af:70:e8:43:10:cf:
b7:34:20:68:a6:ec:e0:d4:6a:cb:61:fb:a4:ad:49:
71:ee:7e:f8:8d:12:88:f4:27:9a:52:e1:dd:60:3e:
d3:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:15:4D:FA:1F:A2:7D:4B:03:F8:C3:7B:72:32:99:5B:C0:C9:18:6A
X509v3 Authority Key Identifier:
keyid:C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:6b:24:70:ec:70:4a:01:c2:ec:42:d6:c7:77:28:b5:05:2a:
50:57:ef:b2:ba:6b:d9:51:b9:f8:36:be:42:4e:fe:24:57:d4:
e8:5d:1a:a9:9e:05:a1:04:c4:1d:d1:0c:25:ed:e4:19:11:7b:
84:75:0c:94:f9:11:5b:70:e4:47:df:5d:23:10:8e:d8:54:a4:
3f:3d:ec:fd:2d:c0:4b:fe:05:16:89:9b:94:2b:14:c1:1b:84:
0b:97:ee:eb:3d:e8:2d:39:64:15:cf:91:ce:4d:9a:2d:bb:5a:
cb:e8:f3:6e:71:ab:10:d6:4a:f1:71:27:aa:07:7b:8d:ef:83:
3d:13:2b:74:7f:b5:a1:4f:75:6f:01:03:4c:d6:e4:ea:d4:61:
44:cb:71:ca:75:71:01:84:ff:71:2d:4f:13:46:f8:62:1b:b8:
d8:fc:e8:ad:cb:c4:25:ae:80:c8:54:01:bc:1a:0c:6a:58:9d:
54:ee:2a:b9:89:c9:e7:cf:58:be:6b:b4:b1:c2:17:77:3d:01:
f0:96:28:ce:0d:19:6d:3c:12:b3:92:43:3a:13:e5:72:5d:ff:
af:a0:98:68:21:23:ee:c3:8a:6a:8c:8e:c0:55:4d:84:d6:41:
bd:5d:59:2c:09:59:ad:3f:1c:fc:f4:b5:b4:c0:18:b3:1a:74:
9a:86:af:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv7CY2rcHjZTZkHljtUI5yTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4OWMyY2M0ODllYmU0OGY0OTA1ODRhYzg2NmZlMzYyYzQx
MTdlNzUwHhcNMjYwMTI2MTYwMTA1WhcNMjYwMTI3MTYwMTA1WjAzMTEwLwYDVQQD
Eyg5MjE1NGRmYTFmYTI3ZDRiMDNmOGMzN2I3MjMyOTk1YmMwYzkxODZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA97bhB5s1oCWD87q0aHesWsiGgsit
u0HnkNjQ7M+ZrcD+Hu5i1n6v/GjJau/BH7cy+at5v1nfMTjy67joab5Y2PE9cB0G
+9oKj8JybWBVCEOX5FYI+OMF1ZktZzGww0ghdUVKGEQgamAzizKQ6DdyH2EcjveD
9ZdSo7D5mJFQSIGg6vikWF1sENGOnAUPS+xdtDPv/8Z0dYDvnjTUyqrHx5ZiDwVA
cA3WZhUyfAUaN2Y1ZhKr+aDwsWjT5QR0MiKlqFHmf8ec/JW/DM7C0/39mZ9aX9R0
qX8yW0SvcOhDEM+3NCBopuzg1GrLYfukrUlx7n74jRKI9CeaUuHdYD7TiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJIVTfofon1LA/jDe3IymVvAyRhqMB8GA1UdIwQY
MBaAFMicLMSJ6+SPSQWErIZv42LEEX51MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUp3c3hJbnI1STlKQllTc2htX2pZc1FSZm5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9hMDBiZTItODc3ZC00MGU3LThhOGEt
YWYyY2ZhNjIyZDE4LzEveUp3c3hJbnI1STlKQllTc2htX2pZc1FSZm5VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC9hMDBiZTItODc3ZC00MGU3LThhOGEtYWYyY2ZhNjIyZDE4
LzEveUp3c3hJbnI1STlKQllTc2htX2pZc1FSZm5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu2skcOxw
SgHC7ELWx3cotQUqUFfvsrpr2VG5+Da+Qk7+JFfU6F0aqZ4FoQTEHdEMJe3kGRF7
hHUMlPkRW3DkR99dIxCO2FSkPz3s/S3AS/4FFomblCsUwRuEC5fu6z3oLTlkFc+R
zk2aLbtay+jzbnGrENZK8XEnqgd7je+DPRMrdH+1oU91bwEDTNbk6tRhRMtxynVx
AYT/cS1PE0b4Yhu42PzorcvEJa6AyFQBvBoMalidVO4quYnJ589Yvmu0scIXdz0B
8JYozg0ZbTwSs5JDOhPlcl3/r6CYaCEj7sOKaoyOwFVNhNZBvV1ZLAlZrT8c/PS1
tMAYsxp0moavJw==
-----END CERTIFICATE-----
Generated at Mon Jan 26 22:27:41 2026 by rpki-client