This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/Yf4ur6ZKzq8fz8-8phUKei01vko.mft
File: Yf4ur6ZKzq8fz8-8phUKei01vko.mft (raw, json)
Hash identifier: TFJvt1XDoBlDQ7F+HTRoLzg6Rn901QjFXl236mAqaYU=
Subject key identifier: 8A:30:6C:9A:9D:A1:35:26:AF:2F:60:9C:49:13:8D:67:1B:40:FB:C2
Authority key identifier: 61:FE:2E:AF:A6:4A:CE:AF:1F:CF:CF:BC:A6:15:0A:7A:2D:35:BE:4A
Certificate issuer: /CN=61fe2eafa64aceaf1fcfcfbca6150a7a2d35be4a
Certificate serial: 019C41A2562FC10AA994422F532B203A46FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yf4ur6ZKzq8fz8-8phUKei01vko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/Yf4ur6ZKzq8fz8-8phUKei01vko.mft
Manifest number: 1812
Signing time: Mon 09 Feb 2026 09:01:23 +0000
Manifest this update: Mon 09 Feb 2026 09:01:23 +0000
Manifest next update: Tue 10 Feb 2026 09:01:23 +0000
Files and hashes: 1: UJudbdHaQF50Sph8SS93Ii0CNBg.roa (hash: BhW8Ppudpr7Ja11wBjitKBz/FAThXnQThhUCrlT7gwQ=)
2: Yf4ur6ZKzq8fz8-8phUKei01vko.crl (hash: zBTE0LfvSgoDQ6g5AdQqJkFLMeUa3DOXjkVxboTwDCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/Yf4ur6ZKzq8fz8-8phUKei01vko.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/Yf4ur6ZKzq8fz8-8phUKei01vko.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yf4ur6ZKzq8fz8-8phUKei01vko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 09:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:a2:56:2f:c1:0a:a9:94:42:2f:53:2b:20:3a:46:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61fe2eafa64aceaf1fcfcfbca6150a7a2d35be4a
Validity
Not Before: Feb 9 09:01:23 2026 GMT
Not After : Feb 10 09:01:23 2026 GMT
Subject: CN=8a306c9a9da13526af2f609c49138d671b40fbc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:3c:55:93:98:69:ed:bf:f5:e0:ad:55:2b:e7:
f0:bc:ee:07:46:a9:e6:32:d3:10:88:63:e5:d4:5e:
96:e9:f6:23:ea:90:11:4a:15:4b:2d:ea:6c:78:12:
fe:6b:70:67:49:bc:b2:01:ee:02:32:29:0f:03:23:
fd:30:15:a1:01:be:fb:36:39:e8:e5:ec:e1:c6:11:
da:41:de:ae:e5:d2:6f:6c:9d:bb:6e:a5:94:79:e0:
2e:19:58:8b:27:26:81:16:7d:a4:c5:f5:cd:38:f6:
8d:d5:8b:d9:c1:47:4d:87:45:2d:81:5a:8d:78:ca:
18:73:8c:3a:cb:43:a6:6b:66:39:4e:d1:34:2c:14:
2e:94:6d:15:2f:c4:8c:78:8d:f9:8c:4b:1c:59:a3:
8a:1d:3b:04:25:74:ea:01:1f:e5:05:4d:9c:3a:0a:
a7:97:b2:f7:81:51:ef:da:e8:72:cf:4a:b8:d4:32:
9c:91:4b:96:a3:80:74:16:50:87:90:bb:95:6a:b0:
aa:95:19:ad:31:90:98:71:bb:b6:cd:58:73:33:a9:
ee:aa:ff:bd:c6:4e:96:27:14:4b:30:dc:84:97:bf:
53:a1:9f:8f:af:a4:5e:72:a9:c0:c0:54:96:5a:a2:
5e:13:e3:1e:7d:e5:02:65:76:f2:b1:23:a2:27:14:
4e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:30:6C:9A:9D:A1:35:26:AF:2F:60:9C:49:13:8D:67:1B:40:FB:C2
X509v3 Authority Key Identifier:
keyid:61:FE:2E:AF:A6:4A:CE:AF:1F:CF:CF:BC:A6:15:0A:7A:2D:35:BE:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yf4ur6ZKzq8fz8-8phUKei01vko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/Yf4ur6ZKzq8fz8-8phUKei01vko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/Yf4ur6ZKzq8fz8-8phUKei01vko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:67:5e:4c:10:3c:00:99:bc:26:ea:8c:bb:05:53:3f:98:9c:
47:d2:86:42:49:c2:b2:9b:97:e8:43:23:ef:ac:b4:57:df:f8:
cd:5f:36:6c:ab:d6:8a:73:26:30:39:0e:87:15:e6:85:e9:95:
2f:da:97:51:cf:ee:d2:d8:94:f2:8b:ea:d0:81:2c:39:9d:31:
9e:12:39:77:ab:68:8a:b3:c6:e9:75:83:bc:b6:c5:f4:40:06:
2b:e2:26:c9:42:9e:ef:4d:1d:aa:5f:27:29:4a:8b:49:57:03:
5e:db:fc:2e:1e:94:76:da:f9:96:11:77:16:72:17:1d:59:11:
42:8b:4a:f4:12:f1:42:56:f5:3c:a1:18:11:24:35:75:84:44:
9f:4a:99:6d:2f:4a:d4:4a:c4:c7:21:ef:89:a0:bd:e9:d3:1d:
18:47:ed:1b:b1:7b:48:9e:49:d4:36:6a:b4:38:67:f7:2b:9f:
26:f2:96:7a:5d:ad:97:e8:be:23:47:9d:da:40:3f:24:98:e0:
3a:90:de:8e:96:ba:9c:ba:be:73:52:c7:c4:11:cb:ce:e1:4d:
d4:e8:d7:31:90:6d:69:c2:0f:d3:ec:e1:d5:ea:f4:88:af:55:
19:9d:0b:b6:3e:0b:a1:f6:ad:d0:96:a6:56:8f:90:98:5d:af:
0a:99:44:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:40:40 2026 by rpki-client