This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/YL_5RwTkpHU3ThcMvhc2X6if4Hs.mft
File: YL_5RwTkpHU3ThcMvhc2X6if4Hs.mft (raw, json)
Hash identifier: g1bRWO8et8Se4FssxB8HzF/w3qVwtMeg3QQBFx59Vao=
Subject key identifier: 7A:D3:7F:42:CC:C2:0F:4A:0C:87:12:51:38:98:43:E5:7C:C0:FB:0B
Authority key identifier: 60:BF:F9:47:04:E4:A4:75:37:4E:17:0C:BE:17:36:5F:A8:9F:E0:7B
Certificate issuer: /CN=60bff94704e4a475374e170cbe17365fa89fe07b
Certificate serial: 019C4359417428783910D15AFFAC5DE73DCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YL_5RwTkpHU3ThcMvhc2X6if4Hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/YL_5RwTkpHU3ThcMvhc2X6if4Hs.mft
Manifest number: 1417
Signing time: Mon 09 Feb 2026 17:00:48 +0000
Manifest this update: Mon 09 Feb 2026 17:00:48 +0000
Manifest next update: Tue 10 Feb 2026 17:00:48 +0000
Files and hashes: 1: 4xLNM1gfFHioLqXsNxKtGlvCRlw.roa (hash: uhrmuI7oCSVyONxL+SSY9ejEzbrz6KWmcurexFcyOu4=)
2: YL_5RwTkpHU3ThcMvhc2X6if4Hs.crl (hash: h8I491cvRJ/QnI4Q1CLxAco9AMsshPokASdlKsw9G88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/YL_5RwTkpHU3ThcMvhc2X6if4Hs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/YL_5RwTkpHU3ThcMvhc2X6if4Hs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YL_5RwTkpHU3ThcMvhc2X6if4Hs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:59:41:74:28:78:39:10:d1:5a:ff:ac:5d:e7:3d:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60bff94704e4a475374e170cbe17365fa89fe07b
Validity
Not Before: Feb 9 17:00:48 2026 GMT
Not After : Feb 10 17:00:48 2026 GMT
Subject: CN=7ad37f42ccc20f4a0c871251389843e57cc0fb0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:11:cc:64:9f:f8:13:c6:af:b6:d9:8c:35:71:
de:a6:58:35:4f:17:ad:e1:97:87:9d:8f:72:78:9b:
b4:f1:c6:4b:20:23:35:3d:16:68:74:46:40:95:15:
72:ab:44:45:5d:1c:ce:45:92:2b:2d:25:c5:a9:43:
49:f1:6f:9b:e1:67:4c:6b:15:5d:e0:9d:6b:60:1f:
81:6d:b3:93:b4:19:1a:56:82:03:ad:96:d1:a0:b8:
69:43:30:5a:42:6f:db:2d:68:12:20:f7:a6:26:da:
3c:34:50:73:eb:11:e8:bb:3e:27:df:e8:7e:f5:d2:
85:00:44:1a:d4:35:a0:af:3b:63:a8:f0:8c:fd:48:
3e:62:97:6b:01:11:c1:9f:3d:30:1a:a0:d1:3d:7f:
7c:3b:37:cb:a7:25:0e:d7:5f:0a:4d:f8:1a:8d:9a:
c3:49:dc:59:fd:fe:a7:45:c3:5b:84:71:f8:a4:1e:
5c:ef:cc:d6:54:43:22:c4:0e:3b:a7:a4:fa:40:4d:
c0:b3:88:85:e1:a2:0e:70:76:df:3c:1d:91:a8:23:
bb:52:04:11:8e:db:64:4d:fc:f0:d9:4c:e8:d1:ee:
7d:5f:26:fb:16:a5:04:a7:b5:86:e7:04:4b:5d:bf:
e4:73:93:9c:d1:0d:c7:6d:45:b1:04:25:4b:a3:11:
94:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:D3:7F:42:CC:C2:0F:4A:0C:87:12:51:38:98:43:E5:7C:C0:FB:0B
X509v3 Authority Key Identifier:
keyid:60:BF:F9:47:04:E4:A4:75:37:4E:17:0C:BE:17:36:5F:A8:9F:E0:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YL_5RwTkpHU3ThcMvhc2X6if4Hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/YL_5RwTkpHU3ThcMvhc2X6if4Hs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/672fdd-cc7c-4449-9f55-023995906c46/1/YL_5RwTkpHU3ThcMvhc2X6if4Hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:7f:e8:51:c2:6e:49:82:33:8c:66:9f:16:e6:cd:18:09:3d:
9e:1d:14:52:30:09:c6:b4:7b:32:78:d5:cb:40:99:b1:3c:3b:
aa:8f:d5:2a:d5:7a:21:5a:c8:ea:a3:47:5a:f8:25:11:8b:c2:
7b:d8:55:be:36:c2:f2:fb:25:69:19:ee:2d:df:f2:9c:4e:28:
9f:07:3b:48:b7:8b:1a:b7:c2:f0:50:ac:e1:d9:46:4a:7d:11:
5d:23:7a:cf:ca:26:bb:65:42:b6:51:43:5b:ad:69:3f:f5:b1:
79:16:eb:eb:a2:67:bb:96:62:06:aa:63:32:7d:1e:d6:57:21:
a6:7f:b1:e6:28:01:d6:d9:18:9c:38:24:49:f5:d0:e1:b6:3c:
8c:50:24:9d:11:6c:f0:2e:f3:51:7f:54:a0:35:21:0b:45:86:
8d:22:d4:91:11:92:69:2e:ee:4a:17:63:27:1d:46:48:26:d7:
7b:1c:24:72:3c:05:29:8a:cc:87:49:71:14:48:0e:8a:de:0a:
fe:9a:37:ae:6c:bb:a7:f8:21:6b:54:c6:d9:b0:e1:2e:f9:5a:
21:1c:06:79:4b:6a:fe:aa:0e:00:b1:2a:f6:fd:1b:ce:60:95:
f0:cc:68:28:ee:d9:17:1b:c8:c4:42:01:f9:70:2d:81:99:23:
93:77:19:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDWUF0KHg5ENFa/6xd5z3LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwYmZmOTQ3MDRlNGE0NzUzNzRlMTcwY2JlMTczNjVmYTg5
ZmUwN2IwHhcNMjYwMjA5MTcwMDQ4WhcNMjYwMjEwMTcwMDQ4WjAzMTEwLwYDVQQD
Eyg3YWQzN2Y0MmNjYzIwZjRhMGM4NzEyNTEzODk4NDNlNTdjYzBmYjBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRHMZJ/4E8avttmMNXHeplg1Txet
4ZeHnY9yeJu08cZLICM1PRZodEZAlRVyq0RFXRzORZIrLSXFqUNJ8W+b4WdMaxVd
4J1rYB+BbbOTtBkaVoIDrZbRoLhpQzBaQm/bLWgSIPemJto8NFBz6xHouz4n3+h+
9dKFAEQa1DWgrztjqPCM/Ug+YpdrARHBnz0wGqDRPX98OzfLpyUO118KTfgajZrD
SdxZ/f6nRcNbhHH4pB5c78zWVEMixA47p6T6QE3As4iF4aIOcHbfPB2RqCO7UgQR
jttkTfzw2Uzo0e59Xyb7FqUEp7WG5wRLXb/kc5Oc0Q3HbUWxBCVLoxGUZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHrTf0LMwg9KDIcSUTiYQ+V8wPsLMB8GA1UdIwQY
MBaAFGC/+UcE5KR1N04XDL4XNl+on+B7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUxfNVJ3VGtwSFUzVGhjTXZoYzJYNmlmNEhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS82NzJmZGQtY2M3Yy00NDQ5LTlmNTUt
MDIzOTk1OTA2YzQ2LzEvWUxfNVJ3VGtwSFUzVGhjTXZoYzJYNmlmNEhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS82NzJmZGQtY2M3Yy00NDQ5LTlmNTUtMDIzOTk1OTA2YzQ2
LzEvWUxfNVJ3VGtwSFUzVGhjTXZoYzJYNmlmNEhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASH/oUcJu
SYIzjGafFubNGAk9nh0UUjAJxrR7MnjVy0CZsTw7qo/VKtV6IVrI6qNHWvglEYvC
e9hVvjbC8vslaRnuLd/ynE4onwc7SLeLGrfC8FCs4dlGSn0RXSN6z8omu2VCtlFD
W61pP/WxeRbr66Jnu5ZiBqpjMn0e1lchpn+x5igB1tkYnDgkSfXQ4bY8jFAknRFs
8C7zUX9UoDUhC0WGjSLUkRGSaS7uShdjJx1GSCbXexwkcjwFKYrMh0lxFEgOit4K
/po3rmy7p/gha1TG2bDhLvlaIRwGeUtq/qoOALEq9v0bzmCV8MxoKO7ZFxvIxEIB
+XAtgZkjk3cZjA==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:33:54 2026 by rpki-client