This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.mft
File: y0-6CRkLdoSf_z0m1YB5DlT6wuM.mft (raw, json)
Hash identifier: rSyaCX+P2BGuJeP3EjSc6V0q/mggyOW+8DjIUSfB01g=
Subject key identifier: 4A:F8:23:76:F4:3A:44:DB:84:EE:F0:2D:1D:BF:2C:56:75:F9:86:45
Authority key identifier: CB:4F:BA:09:19:0B:76:84:9F:FF:3D:26:D5:80:79:0E:54:FA:C2:E3
Certificate issuer: /CN=cb4fba09190b76849fff3d26d580790e54fac2e3
Certificate serial: 019C420F59A3B1638874D04BEE658FCAAC95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y0-6CRkLdoSf_z0m1YB5DlT6wuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.mft
Manifest number: 1810
Signing time: Mon 09 Feb 2026 11:00:28 +0000
Manifest this update: Mon 09 Feb 2026 11:00:28 +0000
Manifest next update: Tue 10 Feb 2026 11:00:28 +0000
Files and hashes: 1: Zu8UuGG4D2VbmJDnyhSG0Cawt4M.roa (hash: 0v9+1D6+nPkZSNsJJaK1p3wg2xF1SbrepfZyyi1iP3c=)
2: y0-6CRkLdoSf_z0m1YB5DlT6wuM.crl (hash: lyejfhhygKeuHppBhuMFC5tJ9Ft/y3c3Pw5CNBBfThM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.mft
rsync://rpki.ripe.net/repository/DEFAULT/y0-6CRkLdoSf_z0m1YB5DlT6wuM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:0f:59:a3:b1:63:88:74:d0:4b:ee:65:8f:ca:ac:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb4fba09190b76849fff3d26d580790e54fac2e3
Validity
Not Before: Feb 9 11:00:28 2026 GMT
Not After : Feb 10 11:00:28 2026 GMT
Subject: CN=4af82376f43a44db84eef02d1dbf2c5675f98645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1a:0f:1d:a2:b8:52:67:b0:eb:89:fe:3d:76:
64:04:08:d5:53:46:0d:2b:24:58:77:af:e1:17:ad:
ae:4a:32:b5:d2:88:93:4d:ee:0f:76:bd:7a:5b:8b:
34:c7:b0:d7:8c:92:b3:d8:6f:50:ca:6c:a5:6c:00:
20:45:88:66:6b:a0:8d:f2:88:1c:a8:ef:84:27:32:
06:a5:7f:35:04:5f:ea:f4:f4:03:cf:51:51:44:6f:
8d:c5:d3:06:20:31:3e:62:04:74:95:bb:3e:4e:00:
a1:80:62:b6:12:0a:86:bf:79:24:b3:f2:db:57:78:
17:02:71:84:b5:12:10:f1:ca:3b:84:16:2e:56:98:
4c:f8:9e:21:26:74:ca:87:de:c3:80:7c:28:b9:a4:
8b:34:e2:9a:b7:b6:7b:a7:77:16:b1:23:29:ce:e7:
bd:75:21:63:0a:ab:83:4b:1d:c7:e1:ff:de:e5:90:
b6:df:e0:74:7a:b9:40:96:85:2f:77:9f:60:e6:8f:
39:c9:dc:b2:dd:92:92:e7:d6:2e:06:b6:1b:fa:e3:
80:9c:c1:ee:9c:aa:cf:ec:35:00:e1:ec:c0:93:67:
e2:81:af:a4:94:35:63:26:89:42:2f:e4:65:5f:ae:
8a:d4:f8:7c:6d:82:18:37:47:6d:7a:38:a0:96:1c:
4b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:F8:23:76:F4:3A:44:DB:84:EE:F0:2D:1D:BF:2C:56:75:F9:86:45
X509v3 Authority Key Identifier:
keyid:CB:4F:BA:09:19:0B:76:84:9F:FF:3D:26:D5:80:79:0E:54:FA:C2:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y0-6CRkLdoSf_z0m1YB5DlT6wuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:a8:0b:c6:d5:bb:3b:e5:11:61:3e:d3:30:9c:77:10:ab:37:
fc:6c:1e:f8:18:d5:73:93:8e:de:0b:ea:57:19:66:fd:ec:e8:
a3:8b:d9:f0:a4:ba:55:9a:28:87:5b:f0:11:2c:af:50:cc:b3:
bf:7b:79:a3:c8:7f:04:6b:74:e3:34:10:e6:cd:eb:74:05:03:
cb:40:1c:55:44:16:af:4d:22:59:5f:e3:6b:67:41:c1:d4:cf:
4e:d9:fd:95:5d:03:10:cf:55:16:60:45:f0:71:33:f0:40:2b:
6d:e1:6b:f4:a1:24:b4:77:56:28:b1:4d:11:95:ff:f2:2d:78:
63:34:9b:4d:e4:41:23:b3:6a:7f:5b:85:65:19:d6:a2:a9:08:
9f:e8:62:e4:86:74:23:ce:21:e0:1c:54:80:f6:b3:b2:77:b3:
4b:d2:c7:ab:b2:88:93:a3:f2:35:a8:d9:58:e9:eb:da:73:fd:
0d:1d:dd:51:27:c1:a4:e7:09:1b:96:d2:ef:d2:07:86:95:e0:
55:c9:90:a7:c5:76:26:83:9e:e5:25:e9:0a:e6:49:62:86:ba:
e2:f9:38:1c:e4:af:4d:1f:a8:d3:2c:5c:97:79:1d:d4:11:03:
96:21:c2:73:45:95:6d:33:97:be:29:6b:6e:8b:61:6a:6f:ba:
ba:b9:f5:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:10:19 2026 by rpki-client