This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/5e29b5-f217-4b6b-8d2f-8973b2d7062c/1/ybcNl-3yjHYHbA8Gm1K82OJq4L0.mft
File: ybcNl-3yjHYHbA8Gm1K82OJq4L0.mft (raw, json)
Hash identifier: 5EoxdTOmu1AxLI3l8BbmuenCDtz5NlLgYfHs3SLRtpQ=
Subject key identifier: 14:19:2F:99:D7:0A:FF:5D:C5:CF:9C:26:82:C2:67:89:C9:F3:04:2B
Authority key identifier: C9:B7:0D:97:ED:F2:8C:76:07:6C:0F:06:9B:52:BC:D8:E2:6A:E0:BD
Certificate issuer: /CN=c9b70d97edf28c76076c0f069b52bcd8e26ae0bd
Certificate serial: 019C44A293DA52C4A3CC427BF93351968E8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ybcNl-3yjHYHbA8Gm1K82OJq4L0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/5e29b5-f217-4b6b-8d2f-8973b2d7062c/1/ybcNl-3yjHYHbA8Gm1K82OJq4L0.mft
Manifest number: 180F
Signing time: Mon 09 Feb 2026 23:00:31 +0000
Manifest this update: Mon 09 Feb 2026 23:00:31 +0000
Manifest next update: Tue 10 Feb 2026 23:00:31 +0000
Files and hashes: 1: pEMOAtuePyeesz_PpC1UjRHNACE.roa (hash: 6RgHrtS23ZSyoQWavExnsqZLXuo4UZSBu3C0i/+czxA=)
2: ybcNl-3yjHYHbA8Gm1K82OJq4L0.crl (hash: z17D86Yh8+BRMX0WVOxrsLvR4fRLX+nNlQv1wzOqkjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/5e29b5-f217-4b6b-8d2f-8973b2d7062c/1/ybcNl-3yjHYHbA8Gm1K82OJq4L0.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/5e29b5-f217-4b6b-8d2f-8973b2d7062c/1/ybcNl-3yjHYHbA8Gm1K82OJq4L0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ybcNl-3yjHYHbA8Gm1K82OJq4L0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:44:a2:93:da:52:c4:a3:cc:42:7b:f9:33:51:96:8e:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9b70d97edf28c76076c0f069b52bcd8e26ae0bd
Validity
Not Before: Feb 9 23:00:31 2026 GMT
Not After : Feb 10 23:00:31 2026 GMT
Subject: CN=14192f99d70aff5dc5cf9c2682c26789c9f3042b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:99:24:c5:5a:9b:37:4f:58:0a:74:37:e5:9e:
26:79:a4:07:f5:36:79:09:a7:a4:12:17:d6:be:b0:
3d:7f:44:61:8c:54:9b:4a:99:82:e4:fe:ce:00:16:
5a:0a:0e:0b:d1:88:4e:89:66:35:1f:76:c7:fc:dc:
18:1c:ce:2a:3b:77:80:67:a6:a2:c9:d2:de:ec:8c:
e5:15:2a:75:11:f0:e6:f5:e7:1b:88:ea:a5:45:3b:
d9:91:21:c6:4a:0b:5a:00:82:b9:0c:bf:71:8c:5a:
25:5a:ed:8e:c9:a2:e1:1d:42:a9:94:24:60:aa:4d:
00:96:4f:54:8f:10:9a:ec:ca:58:a5:61:e7:3f:d6:
cf:dc:80:f8:0d:14:37:2d:79:9e:27:6f:8d:03:a5:
d1:f7:47:9c:44:33:fa:e3:53:98:59:ac:82:d0:38:
93:19:7f:5f:85:73:d7:08:93:68:6a:cc:49:41:0f:
6f:cb:a5:c1:91:84:b9:63:11:de:87:7c:ca:58:60:
3c:82:c1:50:2a:a9:8f:d1:05:ae:ac:c7:09:4a:8a:
27:45:24:ae:b8:89:2b:0e:ad:81:23:db:e6:ba:da:
6f:b6:56:de:22:98:6e:29:90:90:bc:3b:ae:ed:22:
a1:51:ed:06:c6:a2:d3:1f:99:d5:aa:c5:5e:63:ed:
3b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:19:2F:99:D7:0A:FF:5D:C5:CF:9C:26:82:C2:67:89:C9:F3:04:2B
X509v3 Authority Key Identifier:
keyid:C9:B7:0D:97:ED:F2:8C:76:07:6C:0F:06:9B:52:BC:D8:E2:6A:E0:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ybcNl-3yjHYHbA8Gm1K82OJq4L0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5e29b5-f217-4b6b-8d2f-8973b2d7062c/1/ybcNl-3yjHYHbA8Gm1K82OJq4L0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5e29b5-f217-4b6b-8d2f-8973b2d7062c/1/ybcNl-3yjHYHbA8Gm1K82OJq4L0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:e4:c0:ad:f7:7a:17:a7:7e:6b:2c:15:5b:17:f1:ad:52:f6:
8e:81:bb:b4:51:b5:2b:3e:df:f1:7c:d8:bb:07:79:33:1e:41:
d2:3a:8d:68:38:a2:fa:ac:b3:69:7c:c8:01:4c:88:76:e1:5c:
fe:fb:65:ea:51:71:93:3a:40:d0:9a:5b:e7:b1:1c:a2:e8:3f:
a8:ca:8c:12:1e:6d:64:85:b3:b0:ef:ee:99:be:36:22:ae:da:
d8:60:8a:e9:f9:ce:11:ce:b3:eb:0e:6c:2e:05:82:3f:76:c5:
f5:db:f2:b4:4e:62:8a:c5:37:74:3f:89:4e:18:dc:0e:8a:e8:
be:f6:04:45:ce:02:f9:3b:7f:56:43:d7:24:78:7a:48:18:f8:
a9:c9:80:de:df:08:cb:ae:5b:b7:f8:91:b4:17:b2:ca:f9:d8:
a9:7c:f1:20:7b:f0:44:11:25:4c:ce:bc:41:aa:e6:1c:5b:a9:
00:d6:05:05:ab:e6:4c:8a:a1:7a:3d:11:4a:44:b9:0e:91:08:
14:df:67:cc:60:3d:e2:0a:b7:66:94:0a:7c:64:0e:2b:9a:59:
c8:f1:4b:5a:c6:5d:e4:38:27:dc:ac:c0:ff:c2:a7:e6:49:17:
48:b4:2f:b2:fe:21:d4:d7:1e:ec:d6:7d:7e:3e:9d:87:6c:5a:
ef:b5:6e:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxEopPaUsSjzEJ7+TNRlo6OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5YjcwZDk3ZWRmMjhjNzYwNzZjMGYwNjliNTJiY2Q4ZTI2
YWUwYmQwHhcNMjYwMjA5MjMwMDMxWhcNMjYwMjEwMjMwMDMxWjAzMTEwLwYDVQQD
EygxNDE5MmY5OWQ3MGFmZjVkYzVjZjljMjY4MmMyNjc4OWM5ZjMwNDJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5kkxVqbN09YCnQ35Z4meaQH9TZ5
CaekEhfWvrA9f0RhjFSbSpmC5P7OABZaCg4L0YhOiWY1H3bH/NwYHM4qO3eAZ6ai
ydLe7IzlFSp1EfDm9ecbiOqlRTvZkSHGSgtaAIK5DL9xjFolWu2OyaLhHUKplCRg
qk0Alk9UjxCa7MpYpWHnP9bP3ID4DRQ3LXmeJ2+NA6XR90ecRDP641OYWayC0DiT
GX9fhXPXCJNoasxJQQ9vy6XBkYS5YxHeh3zKWGA8gsFQKqmP0QWurMcJSoonRSSu
uIkrDq2BI9vmutpvtlbeIphuKZCQvDuu7SKhUe0GxqLTH5nVqsVeY+07GwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBQZL5nXCv9dxc+cJoLCZ4nJ8wQrMB8GA1UdIwQY
MBaAFMm3DZft8ox2B2wPBptSvNjiauC9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWJjTmwtM3lqSFlIYkE4R20xSzgyT0pxNEwwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS81ZTI5YjUtZjIxNy00YjZiLThkMmYt
ODk3M2IyZDcwNjJjLzEveWJjTmwtM3lqSFlIYkE4R20xSzgyT0pxNEwwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS81ZTI5YjUtZjIxNy00YjZiLThkMmYtODk3M2IyZDcwNjJj
LzEveWJjTmwtM3lqSFlIYkE4R20xSzgyT0pxNEwwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOeTArfd6
F6d+aywVWxfxrVL2joG7tFG1Kz7f8XzYuwd5Mx5B0jqNaDii+qyzaXzIAUyIduFc
/vtl6lFxkzpA0Jpb57Ecoug/qMqMEh5tZIWzsO/umb42Iq7a2GCK6fnOEc6z6w5s
LgWCP3bF9dvytE5iisU3dD+JThjcDorovvYERc4C+Tt/VkPXJHh6SBj4qcmA3t8I
y65bt/iRtBeyyvnYqXzxIHvwRBElTM68QarmHFupANYFBavmTIqhej0RSkS5DpEI
FN9nzGA94gq3ZpQKfGQOK5pZyPFLWsZd5Dgn3KzA/8Kn5kkXSLQvsv4h1Nce7NZ9
fj6dh2xa77Vurw==
-----END CERTIFICATE-----
Generated at Tue Feb 10 05:32:44 2026 by rpki-client