This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/decde3-277a-4956-bf92-f0a8123e70f9/1/YL83NiAUbm8piugtLIqDccrLexs.mft
File: YL83NiAUbm8piugtLIqDccrLexs.mft (raw, json)
Hash identifier: MYdb4EHNNBJMimaq/So5DrvazOZNbaoazL+F9ApLKyM=
Subject key identifier: 20:A6:C3:D3:CE:9E:F1:64:03:62:36:5F:FF:25:DF:8E:FD:E6:55:7E
Authority key identifier: 60:BF:37:36:20:14:6E:6F:29:8A:E8:2D:2C:8A:83:71:CA:CB:7B:1B
Certificate issuer: /CN=60bf373620146e6f298ae82d2c8a8371cacb7b1b
Certificate serial: 019C427D2BBD1C812D1BF1CC3E17954DABED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YL83NiAUbm8piugtLIqDccrLexs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/decde3-277a-4956-bf92-f0a8123e70f9/1/YL83NiAUbm8piugtLIqDccrLexs.mft
Manifest number: 1810
Signing time: Mon 09 Feb 2026 13:00:25 +0000
Manifest this update: Mon 09 Feb 2026 13:00:25 +0000
Manifest next update: Tue 10 Feb 2026 13:00:25 +0000
Files and hashes: 1: X2IqazocGBh2TzPpbjgU543EV3k.roa (hash: bpCuK7CG9CoRNnFqOKdhYMABq2l/U8E9Zuo+llQrjU0=)
2: YL83NiAUbm8piugtLIqDccrLexs.crl (hash: eKqpwZAusKDKGeWEDJI2Ygv1gY8i4YX/qP2/4qvoFuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/decde3-277a-4956-bf92-f0a8123e70f9/1/YL83NiAUbm8piugtLIqDccrLexs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/decde3-277a-4956-bf92-f0a8123e70f9/1/YL83NiAUbm8piugtLIqDccrLexs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YL83NiAUbm8piugtLIqDccrLexs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7d:2b:bd:1c:81:2d:1b:f1:cc:3e:17:95:4d:ab:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60bf373620146e6f298ae82d2c8a8371cacb7b1b
Validity
Not Before: Feb 9 13:00:25 2026 GMT
Not After : Feb 10 13:00:25 2026 GMT
Subject: CN=20a6c3d3ce9ef1640362365fff25df8efde6557e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:88:32:21:9a:41:56:21:f0:ab:d2:d0:02:e4:
16:dc:94:5f:f5:7f:9e:bc:c9:02:40:5b:65:c8:19:
74:cb:07:9d:5a:36:37:44:e4:f7:fa:be:58:92:60:
ae:31:79:8d:23:33:b5:e8:75:ab:7f:7c:37:4d:2d:
eb:df:79:d6:87:19:b2:43:00:94:a9:62:19:5b:0b:
35:77:2d:c6:14:f0:e9:c0:17:ce:fc:21:82:13:0d:
ab:7c:82:71:f3:a6:e8:7c:9d:03:37:ff:91:e1:72:
2e:f8:c9:4c:39:d8:5a:44:5b:d0:7c:12:cc:9b:d0:
d1:56:bc:54:24:c7:da:2a:05:e1:c6:c1:9f:48:b8:
84:c2:39:fb:5b:e2:1a:cd:d1:44:31:3c:cb:56:b2:
6d:5d:a6:ba:1c:e9:0d:14:df:3e:30:18:66:99:0d:
27:35:64:27:57:c4:ae:06:86:6b:d6:bf:5b:15:7c:
fe:22:ab:d6:31:c8:c5:ce:69:29:b3:7c:1c:98:ef:
d6:08:92:8d:71:fd:de:b9:6e:64:12:cb:8b:80:56:
e2:ea:01:d6:30:95:2b:f1:ce:7a:9a:9c:1f:a0:26:
d2:84:bc:90:8f:41:79:3d:22:f2:75:18:cc:36:31:
a5:bf:a4:45:bb:0e:3d:ac:3c:3e:ca:3a:4a:09:b9:
a8:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:A6:C3:D3:CE:9E:F1:64:03:62:36:5F:FF:25:DF:8E:FD:E6:55:7E
X509v3 Authority Key Identifier:
keyid:60:BF:37:36:20:14:6E:6F:29:8A:E8:2D:2C:8A:83:71:CA:CB:7B:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YL83NiAUbm8piugtLIqDccrLexs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/decde3-277a-4956-bf92-f0a8123e70f9/1/YL83NiAUbm8piugtLIqDccrLexs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/decde3-277a-4956-bf92-f0a8123e70f9/1/YL83NiAUbm8piugtLIqDccrLexs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:59:dd:ac:7f:45:c9:3c:bb:92:eb:3a:fe:2a:a5:da:1e:96:
24:26:0c:bb:5b:be:6c:f1:8a:c3:9a:57:02:bf:23:6f:4f:cd:
1d:c4:75:88:fd:fa:14:95:63:a2:57:d5:43:c6:62:cf:09:bb:
4d:e3:81:56:41:77:6e:91:e2:90:e1:1b:49:80:7a:00:0a:ad:
e8:ac:ff:ff:67:e5:61:87:c0:bf:1e:ca:16:bb:d9:98:ed:38:
31:d1:71:92:3c:b6:18:9e:0e:82:83:a3:df:af:35:fc:73:c2:
03:da:67:5b:9c:16:e9:f2:ec:cb:12:45:f9:cb:70:d6:20:af:
00:61:45:11:7a:db:1d:32:c6:a3:76:a5:5b:9f:7b:12:d2:55:
17:50:8d:79:dd:d9:f0:29:e9:26:72:11:b8:c3:f6:ce:dc:b5:
14:aa:51:ce:22:34:6b:41:a8:38:04:3b:3e:b6:c2:32:9c:df:
15:7f:e3:c2:23:3d:67:5f:72:0e:e6:eb:ce:d9:f2:03:5a:3a:
6b:b4:53:c4:52:e5:87:c5:b7:b1:e7:a9:a6:f9:d1:9f:87:01:
62:e3:5f:fe:fa:09:44:90:0a:25:ab:a6:f8:ed:31:f3:d7:ce:
c0:e0:42:63:ea:b0:8f:40:1b:a3:48:96:92:11:1c:23:47:1a:
86:d4:d4:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:45:10 2026 by rpki-client