This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/b71ca7-5070-4bcc-a00d-ec97f18a794a/1/p_YpFhl_d5bOxXjqQ1L65O-JrsI.mft
File: p_YpFhl_d5bOxXjqQ1L65O-JrsI.mft (raw, json)
Hash identifier: Vy4Qqljh7ockXaph92Cmvn6ot2WCjMnHieiGPl/cRdM=
Subject key identifier: 54:05:0C:1E:F6:B4:EC:30:04:08:7D:B4:13:5F:78:A2:5D:45:C6:0E
Authority key identifier: A7:F6:29:16:19:7F:77:96:CE:C5:78:EA:43:52:FA:E4:EF:89:AE:C2
Certificate issuer: /CN=a7f62916197f7796cec578ea4352fae4ef89aec2
Certificate serial: 019C424654FF215935088BF00FB62A70A578
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_YpFhl_d5bOxXjqQ1L65O-JrsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/b71ca7-5070-4bcc-a00d-ec97f18a794a/1/p_YpFhl_d5bOxXjqQ1L65O-JrsI.mft
Manifest number: 0909
Signing time: Mon 09 Feb 2026 12:00:31 +0000
Manifest this update: Mon 09 Feb 2026 12:00:31 +0000
Manifest next update: Tue 10 Feb 2026 12:00:31 +0000
Files and hashes: 1: p_YpFhl_d5bOxXjqQ1L65O-JrsI.crl (hash: V+BIekqR+mlcW+PMFbxgq2oDpC6zRywso5THfFNXIm8=)
2: zIBznsYExuvGAYxMF0vlek62MTA.roa (hash: HZnWy7k6mRkdORmyH/fBqEuQQJtdSt6XxYg73qEplO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/b71ca7-5070-4bcc-a00d-ec97f18a794a/1/p_YpFhl_d5bOxXjqQ1L65O-JrsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/b71ca7-5070-4bcc-a00d-ec97f18a794a/1/p_YpFhl_d5bOxXjqQ1L65O-JrsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/p_YpFhl_d5bOxXjqQ1L65O-JrsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 12:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:46:54:ff:21:59:35:08:8b:f0:0f:b6:2a:70:a5:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7f62916197f7796cec578ea4352fae4ef89aec2
Validity
Not Before: Feb 9 12:00:31 2026 GMT
Not After : Feb 10 12:00:31 2026 GMT
Subject: CN=54050c1ef6b4ec3004087db4135f78a25d45c60e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b3:0e:20:b8:60:61:45:c0:85:e7:4c:a9:48:
3b:43:4c:70:1c:e5:95:3a:a0:86:89:69:ea:03:0d:
96:ca:fb:d8:c8:40:3f:09:40:e4:28:e3:31:6b:34:
af:58:a7:a6:6b:69:33:20:6d:fe:ca:d8:6b:89:21:
26:13:6d:c0:01:f6:62:e6:96:a5:a7:5f:a7:fc:53:
8e:c8:0b:d0:2d:d8:36:7d:57:67:4a:4d:63:ec:54:
36:d9:68:27:c7:6f:1d:5c:f0:fa:f4:12:95:27:97:
53:dd:25:ce:c5:6b:5b:83:56:6e:99:d5:50:98:ab:
4d:cd:66:56:40:3b:24:65:88:2d:c8:25:34:0e:67:
93:9e:ba:e3:26:08:13:f8:d1:0d:7f:6a:6a:53:8d:
1f:c4:73:e6:99:20:23:3f:23:e9:f2:44:45:c4:46:
9d:96:07:6d:92:a0:ab:ac:cf:3d:84:68:1b:01:e4:
2a:e6:54:02:8f:a4:37:f7:eb:28:f7:cb:f1:c2:1a:
56:21:5c:1e:67:3b:16:06:7b:87:8e:63:ca:81:c9:
9d:7e:c2:13:ee:3b:a5:d4:eb:01:2d:3d:9b:9e:c0:
f1:37:ba:a6:e9:e6:5e:32:b9:44:cf:00:b1:47:fb:
04:9b:4b:26:5b:50:09:00:73:3f:ee:87:2c:07:99:
c0:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:05:0C:1E:F6:B4:EC:30:04:08:7D:B4:13:5F:78:A2:5D:45:C6:0E
X509v3 Authority Key Identifier:
keyid:A7:F6:29:16:19:7F:77:96:CE:C5:78:EA:43:52:FA:E4:EF:89:AE:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_YpFhl_d5bOxXjqQ1L65O-JrsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b71ca7-5070-4bcc-a00d-ec97f18a794a/1/p_YpFhl_d5bOxXjqQ1L65O-JrsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b71ca7-5070-4bcc-a00d-ec97f18a794a/1/p_YpFhl_d5bOxXjqQ1L65O-JrsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:ef:4c:a2:fe:d7:04:35:06:a0:56:f5:5b:4c:1c:24:72:01:
b0:97:86:0a:1f:cc:22:28:2c:46:01:21:60:1e:f8:af:25:7b:
38:a5:62:4d:cd:5c:85:a8:e2:86:9e:58:0e:b3:8c:d8:92:89:
44:de:b7:8e:c5:58:49:bb:7e:d8:c2:70:46:34:fe:8f:1b:00:
66:f4:32:c7:39:56:37:be:d8:34:c4:20:3b:47:e9:ef:3d:53:
36:27:2c:d4:3e:49:df:3d:55:b3:f9:cc:45:73:b7:0a:74:d2:
d6:5b:ed:30:a8:3b:82:15:24:b0:db:7f:73:79:a5:6b:b5:ad:
24:bb:2e:7e:9d:5d:a9:ce:cd:ad:a8:c4:34:1c:42:aa:12:13:
f5:f1:79:79:9f:93:d1:db:bd:15:d3:01:cb:e7:31:87:10:26:
30:aa:16:d7:6f:7e:37:b5:6f:4e:72:01:72:7e:1c:80:dc:a7:
07:ac:48:90:11:37:23:7e:52:e7:a7:4e:6c:b1:e2:af:61:c2:
1d:94:9d:05:00:9e:39:24:2e:cc:6d:ea:40:a7:55:52:a5:4a:
9d:c1:e9:26:8b:cf:58:8f:7c:44:8a:bb:e5:d1:9e:6a:00:28:
67:13:bc:96:20:0b:7f:83:20:83:6d:d5:e4:8c:38:77:19:7e:
4d:4d:15:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:43:43 2026 by rpki-client