This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/78aad1-d61f-416e-af4c-93637d4168bd/1/y34FPHGZWsyb8TM_55w9W_1ulk4.mft
File: y34FPHGZWsyb8TM_55w9W_1ulk4.mft (raw, json)
Hash identifier: nbXDLr6otT6dIlmcld5wRfTikoJXogY06tcCv4EnvnE=
Subject key identifier: D4:93:5B:58:44:91:6E:C8:5F:CE:7F:41:C1:F1:AB:F5:D5:4E:1A:4A
Authority key identifier: CB:7E:05:3C:71:99:5A:CC:9B:F1:33:3F:E7:9C:3D:5B:FD:6E:96:4E
Certificate issuer: /CN=cb7e053c71995acc9bf1333fe79c3d5bfd6e964e
Certificate serial: 019C43C7228659DD7AB2BF75AFA7FC8A9FA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y34FPHGZWsyb8TM_55w9W_1ulk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/78aad1-d61f-416e-af4c-93637d4168bd/1/y34FPHGZWsyb8TM_55w9W_1ulk4.mft
Manifest number: 0E7F
Signing time: Mon 09 Feb 2026 19:00:49 +0000
Manifest this update: Mon 09 Feb 2026 19:00:49 +0000
Manifest next update: Tue 10 Feb 2026 19:00:49 +0000
Files and hashes: 1: o0HqlxaDoWc3G-_HSVzsO-Lq4bU.roa (hash: HuIvoJlDnjzT1p9vthorLP3YOQAv0oGxz+pUKFAvCsk=)
2: y34FPHGZWsyb8TM_55w9W_1ulk4.crl (hash: O1OAY+m0cFDiB4dN24lULbF3tLh7zLll7BWoIlnpCGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/78aad1-d61f-416e-af4c-93637d4168bd/1/y34FPHGZWsyb8TM_55w9W_1ulk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/78aad1-d61f-416e-af4c-93637d4168bd/1/y34FPHGZWsyb8TM_55w9W_1ulk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/y34FPHGZWsyb8TM_55w9W_1ulk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:c7:22:86:59:dd:7a:b2:bf:75:af:a7:fc:8a:9f:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb7e053c71995acc9bf1333fe79c3d5bfd6e964e
Validity
Not Before: Feb 9 19:00:49 2026 GMT
Not After : Feb 10 19:00:49 2026 GMT
Subject: CN=d4935b5844916ec85fce7f41c1f1abf5d54e1a4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0b:6d:77:e9:64:98:1a:e5:b8:43:75:3c:e4:
41:e7:d9:41:08:4e:90:b8:ad:03:3a:af:bd:1d:c6:
3f:b6:95:59:37:6d:8a:14:3b:26:f5:9f:0f:80:38:
9c:30:58:d3:87:59:56:91:b3:9c:17:eb:94:6b:96:
f3:c3:9d:83:61:1f:9b:ab:00:5c:d2:8a:ce:4c:f9:
81:b9:3d:d7:d9:45:4a:68:65:d2:e8:05:df:d4:9c:
03:82:56:7e:eb:d8:0d:df:31:e0:09:74:81:4a:27:
26:31:0b:52:58:bb:0b:75:c5:e5:d3:a5:a0:c8:79:
4f:39:d0:71:e0:50:bc:0b:b3:54:80:7c:78:d0:5b:
35:56:0a:55:0b:60:a6:33:07:fd:c7:61:22:79:81:
10:1b:58:5a:52:62:f8:c0:8c:c2:4e:0d:f8:9c:30:
43:d8:c8:ca:a3:42:f1:9e:38:2d:e6:d2:33:8e:75:
29:74:36:1f:cc:3f:7a:9b:07:45:a1:84:0e:6e:e4:
54:d6:aa:25:a8:d8:74:04:1d:c1:d1:38:6a:4e:b8:
7e:3a:bc:ca:43:0e:dc:3c:07:69:95:0e:dc:53:9d:
10:af:8b:85:6c:7a:5f:45:7e:b7:42:71:dc:26:12:
a9:cc:b5:59:0b:70:ff:a8:a4:45:c4:33:8a:16:17:
e9:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:93:5B:58:44:91:6E:C8:5F:CE:7F:41:C1:F1:AB:F5:D5:4E:1A:4A
X509v3 Authority Key Identifier:
keyid:CB:7E:05:3C:71:99:5A:CC:9B:F1:33:3F:E7:9C:3D:5B:FD:6E:96:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y34FPHGZWsyb8TM_55w9W_1ulk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/78aad1-d61f-416e-af4c-93637d4168bd/1/y34FPHGZWsyb8TM_55w9W_1ulk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/78aad1-d61f-416e-af4c-93637d4168bd/1/y34FPHGZWsyb8TM_55w9W_1ulk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:8a:22:70:0e:e3:36:81:be:16:47:7e:cc:b6:a9:90:04:8c:
92:e6:3a:6d:b6:fc:c1:a5:85:97:d9:be:f8:86:52:ce:a5:14:
91:33:85:50:6f:2e:78:b1:1b:b3:eb:6a:95:02:fb:1d:8d:45:
b2:e3:89:45:e0:a5:0f:c9:75:0a:c9:8d:84:3c:cb:38:1a:d7:
7e:39:3d:90:98:c6:f1:16:97:62:68:c7:ff:de:5c:57:88:e9:
f6:f8:47:01:4e:84:14:3d:20:44:b6:11:53:3c:3d:d3:0e:c1:
15:d6:68:8a:6e:63:c0:9c:6a:ec:f0:97:de:af:1d:3f:cf:fc:
35:8a:af:7e:23:70:a3:72:28:6a:ee:e8:49:5f:fa:22:e3:15:
a0:2e:22:f2:bb:6a:e7:2b:ed:28:1d:80:83:4d:66:cc:ce:5b:
0e:85:4a:d7:3b:5c:df:f5:13:7f:e5:71:e8:b7:54:41:e0:de:
69:9f:50:5d:8a:29:73:85:82:44:97:d3:22:2a:ab:c0:28:69:
a9:62:31:9e:56:fd:c2:ab:64:8c:1a:59:99:05:ed:a3:17:b6:
1a:77:a9:31:3b:83:23:d6:36:07:31:b3:32:58:50:56:6a:46:
8b:61:30:42:d7:07:6b:e3:ea:42:10:c8:f1:8e:3b:f2:57:e2:
3f:a9:e8:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 03:03:21 2026 by rpki-client