This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft
File: Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft (raw, json)
Hash identifier: y9Qt0QJHfdQUsNBLmGlL54T/JgAty8doISzjJKElBHw=
Subject key identifier: C0:99:E6:A8:94:FA:75:B8:DD:A4:1B:C7:E1:88:0F:C0:B0:80:C5:3A
Authority key identifier: 61:AE:DF:DC:71:33:E9:5F:42:49:8F:77:60:F6:8F:B8:0F:AA:84:AC
Certificate issuer: /CN=61aedfdc7133e95f42498f7760f68fb80faa84ac
Certificate serial: 019C43C71CAA5843C0EA784F331FBFCB3E93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ya7f3HEz6V9CSY93YPaPuA-qhKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft
Manifest number: 1162
Signing time: Mon 09 Feb 2026 19:00:48 +0000
Manifest this update: Mon 09 Feb 2026 19:00:48 +0000
Manifest next update: Tue 10 Feb 2026 19:00:48 +0000
Files and hashes: 1: WEResR1vKVF1XFqQZFnpiSVDhdQ.roa (hash: nNBq14HUZikLjgzpH3qRgEC7vVQNRFCy0PpayQuzXVc=)
2: Ya7f3HEz6V9CSY93YPaPuA-qhKw.crl (hash: gVV2VqK1etwGL3XMSnCHcearRon6qByBU1VrzdTTmXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ya7f3HEz6V9CSY93YPaPuA-qhKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 19:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:c7:1c:aa:58:43:c0:ea:78:4f:33:1f:bf:cb:3e:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61aedfdc7133e95f42498f7760f68fb80faa84ac
Validity
Not Before: Feb 9 19:00:48 2026 GMT
Not After : Feb 10 19:00:48 2026 GMT
Subject: CN=c099e6a894fa75b8dda41bc7e1880fc0b080c53a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:12:95:2f:b0:a3:7a:4b:f5:d0:ba:4a:d2:18:
eb:8c:d9:ea:35:6a:6e:1b:e6:6d:b6:f2:de:48:96:
4c:82:d7:b2:13:97:40:ab:d0:b5:fe:a9:92:d3:72:
42:95:b7:50:4c:c3:33:4f:a4:6e:c5:81:50:57:c1:
9d:78:a5:1e:df:d8:eb:4c:65:b2:aa:40:27:a5:82:
79:3a:8d:dc:9f:59:0d:2e:19:27:e4:a8:30:ff:65:
45:62:10:69:7e:d2:5d:86:66:f6:e0:a8:03:3f:b6:
ca:96:83:29:78:ef:fc:d2:c1:5c:57:22:b8:21:33:
92:23:b9:8a:69:fd:19:bb:5c:4b:64:ec:36:a8:d3:
86:3e:42:52:8e:c4:a1:75:e4:96:c1:e7:cd:c2:40:
99:09:3d:e8:2a:42:d9:ed:99:12:8d:76:02:ca:b9:
44:9c:4e:59:5d:32:13:35:06:73:b3:12:23:72:f9:
bc:b0:7d:d3:f9:0b:f4:23:4d:78:56:f7:e1:d2:cc:
d8:a4:97:61:db:ab:5b:87:05:99:f3:77:11:85:27:
64:6e:df:2f:b5:d3:63:33:f1:f8:8f:cd:45:47:fe:
01:14:03:c0:0f:25:ea:2d:8f:c9:7a:78:e3:26:d2:
91:4b:f6:84:b8:62:05:08:72:50:b9:87:e6:0d:df:
0d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:99:E6:A8:94:FA:75:B8:DD:A4:1B:C7:E1:88:0F:C0:B0:80:C5:3A
X509v3 Authority Key Identifier:
keyid:61:AE:DF:DC:71:33:E9:5F:42:49:8F:77:60:F6:8F:B8:0F:AA:84:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ya7f3HEz6V9CSY93YPaPuA-qhKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/02b522-9f08-46fc-99ea-9f3e8f9efc99/1/Ya7f3HEz6V9CSY93YPaPuA-qhKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:8e:27:93:fb:c8:e5:69:86:82:aa:31:63:6a:94:b4:c0:b1:
4b:c0:6f:73:96:2a:d0:af:ab:eb:86:73:10:ef:80:3f:e6:dc:
e6:60:b0:0a:ce:41:cf:6d:26:12:54:af:d3:d2:76:84:2b:0d:
78:77:f8:fb:f0:e3:38:51:c0:fd:86:8e:d5:f1:80:6a:dc:01:
a4:df:03:23:63:ac:be:70:18:f4:8a:d6:72:7a:08:ba:df:6e:
c4:50:6b:d1:52:1c:36:ea:6e:2c:d9:de:93:9e:dc:e5:ff:5c:
9e:fd:ad:97:d3:aa:b1:36:4f:e9:44:d8:46:6e:16:d3:60:e3:
f7:bb:bf:43:c2:47:59:a6:5e:f7:bf:2b:fc:c2:85:e0:e0:6c:
26:69:05:e9:ef:89:73:b5:c2:a1:40:8e:48:e7:f7:99:bf:82:
36:c3:e4:7e:4d:35:c5:ae:cc:20:f2:6b:88:0c:76:d1:1f:ae:
c9:18:8d:47:c0:6e:b0:61:a0:d5:97:66:16:c5:c6:91:6d:67:
47:f6:80:47:64:5c:e0:65:91:e0:5f:87:b7:4f:0a:4a:b2:2e:
93:56:70:ab:97:fc:a2:11:31:51:03:5f:dc:f7:0b:e1:51:67:
fc:72:6a:bc:0b:f0:3e:6f:d4:cd:3d:78:88:7d:ef:d4:20:ad:
61:40:34:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDxxyqWEPA6nhPMx+/yz6TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxYWVkZmRjNzEzM2U5NWY0MjQ5OGY3NzYwZjY4ZmI4MGZh
YTg0YWMwHhcNMjYwMjA5MTkwMDQ4WhcNMjYwMjEwMTkwMDQ4WjAzMTEwLwYDVQQD
EyhjMDk5ZTZhODk0ZmE3NWI4ZGRhNDFiYzdlMTg4MGZjMGIwODBjNTNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8hKVL7Cjekv10LpK0hjrjNnqNWpu
G+ZttvLeSJZMgteyE5dAq9C1/qmS03JClbdQTMMzT6RuxYFQV8GdeKUe39jrTGWy
qkAnpYJ5Oo3cn1kNLhkn5Kgw/2VFYhBpftJdhmb24KgDP7bKloMpeO/80sFcVyK4
ITOSI7mKaf0Zu1xLZOw2qNOGPkJSjsShdeSWwefNwkCZCT3oKkLZ7ZkSjXYCyrlE
nE5ZXTITNQZzsxIjcvm8sH3T+Qv0I014Vvfh0szYpJdh26tbhwWZ83cRhSdkbt8v
tdNjM/H4j81FR/4BFAPADyXqLY/JenjjJtKRS/aEuGIFCHJQuYfmDd8N+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMCZ5qiU+nW43aQbx+GID8CwgMU6MB8GA1UdIwQY
MBaAFGGu39xxM+lfQkmPd2D2j7gPqoSsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWE3ZjNIRXo2VjlDU1k5M1lQYVB1QS1xaEt3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8wMmI1MjItOWYwOC00NmZjLTk5ZWEt
OWYzZThmOWVmYzk5LzEvWWE3ZjNIRXo2VjlDU1k5M1lQYVB1QS1xaEt3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi8wMmI1MjItOWYwOC00NmZjLTk5ZWEtOWYzZThmOWVmYzk5
LzEvWWE3ZjNIRXo2VjlDU1k5M1lQYVB1QS1xaEt3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ44nk/vI
5WmGgqoxY2qUtMCxS8Bvc5Yq0K+r64ZzEO+AP+bc5mCwCs5Bz20mElSv09J2hCsN
eHf4+/DjOFHA/YaO1fGAatwBpN8DI2OsvnAY9IrWcnoIut9uxFBr0VIcNupuLNne
k57c5f9cnv2tl9OqsTZP6UTYRm4W02Dj97u/Q8JHWaZe978r/MKF4OBsJmkF6e+J
c7XCoUCOSOf3mb+CNsPkfk01xa7MIPJriAx20R+uyRiNR8BusGGg1ZdmFsXGkW1n
R/aAR2Rc4GWR4F+Ht08KSrIuk1Zwq5f8ohExUQNf3PcL4VFn/HJqvAvwPm/UzT14
iH3v1CCtYUA0HQ==
-----END CERTIFICATE-----
Generated at Tue Feb 10 01:22:16 2026 by rpki-client