This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.mft
File: YI5qalQBfdO5sszjX9Wpp_KkVJg.mft (raw, json)
Hash identifier: k41a5o+OJVcM7VuSfAbFEJLga1G7LhX1rhM7cg0syOA=
Subject key identifier: B3:A5:4B:E6:7C:7F:5A:77:78:B0:15:4C:BC:DD:5F:00:D0:C9:C3:95
Authority key identifier: 60:8E:6A:6A:54:01:7D:D3:B9:B2:CC:E3:5F:D5:A9:A7:F2:A4:54:98
Certificate issuer: /CN=608e6a6a54017dd3b9b2cce35fd5a9a7f2a45498
Certificate serial: 019C1CF139B48615E728DE9F682DD4767BD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YI5qalQBfdO5sszjX9Wpp_KkVJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.mft
Manifest number: 17FF
Signing time: Mon 02 Feb 2026 06:01:36 +0000
Manifest this update: Mon 02 Feb 2026 06:01:36 +0000
Manifest next update: Tue 03 Feb 2026 06:01:36 +0000
Files and hashes: 1: EGcAzbKTUnqrJBWDw9Zl1NjvipA.roa (hash: WN1W+AcOMLOyw+Z7FxISMQd+TynXYraLEQDBrawgt44=)
2: YI5qalQBfdO5sszjX9Wpp_KkVJg.crl (hash: hGpG42JvoeR21+sTvTukU/s1F5v2QR9ruUXEtOllpoE=)
3: _tJiHAhGvLVPtYOMlLKCBsGuaeI.roa (hash: 0t/lW4HNsvLF4G+Bu7vWjQlegvcFtdB8mR4eqRFVFzU=)
4: d-N2YiUYpoOLPomAp2JVyicVc40.roa (hash: zETEJQC7tB8lRhNeIGpvA+FfF5ncGBNLatmPmvMsTNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YI5qalQBfdO5sszjX9Wpp_KkVJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Feb 2026 06:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:1c:f1:39:b4:86:15:e7:28:de:9f:68:2d:d4:76:7b:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=608e6a6a54017dd3b9b2cce35fd5a9a7f2a45498
Validity
Not Before: Feb 2 06:01:36 2026 GMT
Not After : Feb 3 06:01:36 2026 GMT
Subject: CN=b3a54be67c7f5a7778b0154cbcdd5f00d0c9c395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d1:7f:19:4d:c5:84:b8:d9:b0:7b:a9:86:a8:
de:10:19:c8:20:e2:ac:86:68:b1:63:4b:74:06:04:
79:64:53:89:4b:e1:34:da:00:25:8a:88:8e:6e:fb:
f9:bd:20:99:ca:d5:72:ce:4c:fa:cf:e2:f4:52:f9:
fe:47:03:00:d8:7d:cd:98:13:5b:8d:2a:b2:9c:ea:
5c:5f:83:2a:37:1c:4b:ca:31:b4:22:a7:80:2c:9b:
e6:b8:37:c1:fa:e4:84:a1:19:a7:45:0b:2f:3b:67:
40:2d:26:7f:3e:7a:54:f9:cf:46:59:fc:e4:79:68:
cb:1f:94:92:dc:8f:fd:57:0d:79:b5:ee:d7:eb:6d:
98:c3:f3:c1:4d:35:9d:66:62:47:d1:6f:34:b1:34:
28:7c:26:70:1a:7f:77:c9:5a:12:d3:30:c5:20:40:
18:71:dd:f8:31:1b:88:39:d8:96:3e:e0:4b:07:f5:
9a:12:8d:88:db:17:f5:3c:bc:03:91:df:9c:94:27:
32:90:a6:a8:3c:86:b4:33:e8:99:b3:b3:6d:68:bb:
81:e4:58:2b:eb:aa:9c:50:3a:81:d3:e9:e8:46:69:
d2:8f:7d:16:0d:dd:d4:cf:da:0e:a6:8c:23:61:10:
c6:a1:0c:d5:e2:8c:49:90:9a:1a:5c:23:b9:78:9e:
1b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:A5:4B:E6:7C:7F:5A:77:78:B0:15:4C:BC:DD:5F:00:D0:C9:C3:95
X509v3 Authority Key Identifier:
keyid:60:8E:6A:6A:54:01:7D:D3:B9:B2:CC:E3:5F:D5:A9:A7:F2:A4:54:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YI5qalQBfdO5sszjX9Wpp_KkVJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:be:51:87:77:0f:09:89:88:36:84:cf:4e:c9:a8:38:bb:ac:
0a:df:0c:39:ca:64:c8:3a:e3:ac:c9:f0:18:a4:f0:b5:33:54:
0e:af:dd:03:5b:9e:a1:46:11:a4:3e:61:67:f1:f0:26:7b:15:
e4:2a:93:d9:bf:63:93:1c:f1:0e:61:e0:44:3a:e7:21:ad:fa:
2d:8d:2f:07:ce:cd:07:6b:dd:83:32:da:6f:82:d2:e6:33:f3:
80:a5:61:8b:7b:d3:50:a8:3f:9c:73:d4:50:12:3a:7a:18:ea:
df:29:6f:93:db:53:71:1f:17:c8:31:4b:f2:a4:47:10:84:24:
50:9b:aa:d0:96:56:f5:a3:b6:5d:82:c3:0b:d4:b3:75:a1:60:
55:8b:6e:91:66:a1:6a:63:cb:30:06:b7:62:e4:1a:26:89:d6:
aa:11:8b:09:0c:ca:ad:8c:77:0e:84:d5:91:da:9b:6a:4d:dc:
58:5e:f2:c6:81:ef:ee:00:27:56:81:d0:25:23:7c:9a:e4:b1:
a2:7f:69:59:e9:21:a0:df:c5:da:f7:14:08:58:ab:99:92:7c:
ab:b4:c6:6c:8d:16:74:65:b8:96:fc:01:50:09:13:5f:16:e3:
62:64:78:35:8d:51:12:b5:95:13:cf:64:ad:37:1d:e9:59:63:
81:c0:ad:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:43:39 2026 by rpki-client