This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/463666-00e0-492e-a463-0128d97179e8/1/YnqZUJ7VHfk6M_Kk4v1mLRyNZgs.mft
File: YnqZUJ7VHfk6M_Kk4v1mLRyNZgs.mft (raw, json)
Hash identifier: cTuHomF5y1Afl48ZJcAmyYo8xUNmtlo7Ng2rvVNpAY4=
Subject key identifier: 1B:37:43:46:F4:EC:1F:BC:6E:58:BB:15:8B:AF:44:48:A4:1C:D4:E3
Authority key identifier: 62:7A:99:50:9E:D5:1D:F9:3A:33:F2:A4:E2:FD:66:2D:1C:8D:66:0B
Certificate issuer: /CN=627a99509ed51df93a33f2a4e2fd662d1c8d660b
Certificate serial: 019C438FCC3BD6C4D35C3B3AB5B0F6976A04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YnqZUJ7VHfk6M_Kk4v1mLRyNZgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/463666-00e0-492e-a463-0128d97179e8/1/YnqZUJ7VHfk6M_Kk4v1mLRyNZgs.mft
Manifest number: 03FE
Signing time: Mon 09 Feb 2026 18:00:23 +0000
Manifest this update: Mon 09 Feb 2026 18:00:23 +0000
Manifest next update: Tue 10 Feb 2026 18:00:23 +0000
Files and hashes: 1: EfXSoXJaCrM2oY0uZltd_MsMcGg.roa (hash: UdYFHNky4AHMOhO+Oudhljz1aWNykblXzASt3L7R1FM=)
2: YnqZUJ7VHfk6M_Kk4v1mLRyNZgs.crl (hash: z2/rQljbOf1wPgFHYeYpPOGUhonJJY5EG/W6Tkc3Seo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/463666-00e0-492e-a463-0128d97179e8/1/YnqZUJ7VHfk6M_Kk4v1mLRyNZgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/463666-00e0-492e-a463-0128d97179e8/1/YnqZUJ7VHfk6M_Kk4v1mLRyNZgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YnqZUJ7VHfk6M_Kk4v1mLRyNZgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:8f:cc:3b:d6:c4:d3:5c:3b:3a:b5:b0:f6:97:6a:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=627a99509ed51df93a33f2a4e2fd662d1c8d660b
Validity
Not Before: Feb 9 18:00:23 2026 GMT
Not After : Feb 10 18:00:23 2026 GMT
Subject: CN=1b374346f4ec1fbc6e58bb158baf4448a41cd4e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:3f:dd:e7:98:7f:71:40:b2:de:db:fe:e2:4e:
a5:dc:ef:9f:8d:91:8e:2e:ed:cb:d8:2d:24:69:b6:
ed:14:49:82:9a:15:3d:87:03:af:10:b3:4b:a1:34:
47:65:3d:59:8b:6b:f4:15:17:f7:60:4c:7a:ae:9b:
b1:18:d4:40:ea:7d:b6:26:dc:f1:d5:5c:60:b0:e0:
97:92:c5:21:dd:d9:76:c4:65:b2:57:46:4d:92:9d:
5c:6d:51:55:56:09:39:d2:4d:c3:1a:a1:aa:ca:7a:
b5:4e:c0:df:a4:bf:7a:ec:9c:8c:3c:a0:85:d2:82:
b3:c8:92:20:95:8e:2c:fc:10:8d:7f:c3:b0:85:f2:
10:5a:a7:81:e2:be:0c:8e:a5:a1:b0:42:d8:56:f0:
cf:9d:ea:7c:4b:29:03:f0:4f:06:d3:d8:20:a3:b3:
29:92:83:b7:03:a2:81:e6:4b:0d:99:ad:b4:43:c7:
92:12:ce:59:e4:17:73:cf:5c:ec:26:e6:96:ec:20:
42:3f:34:d0:d8:ab:69:51:2c:c1:54:14:0e:26:74:
f4:6e:b7:f3:b7:b0:66:7e:c0:9b:53:99:6a:57:cf:
cf:04:9e:6c:a5:bb:67:32:36:7b:4e:0c:8d:e2:31:
71:68:26:d5:95:a9:ca:88:bb:91:2a:64:3f:e1:db:
98:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:37:43:46:F4:EC:1F:BC:6E:58:BB:15:8B:AF:44:48:A4:1C:D4:E3
X509v3 Authority Key Identifier:
keyid:62:7A:99:50:9E:D5:1D:F9:3A:33:F2:A4:E2:FD:66:2D:1C:8D:66:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YnqZUJ7VHfk6M_Kk4v1mLRyNZgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/463666-00e0-492e-a463-0128d97179e8/1/YnqZUJ7VHfk6M_Kk4v1mLRyNZgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/463666-00e0-492e-a463-0128d97179e8/1/YnqZUJ7VHfk6M_Kk4v1mLRyNZgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:57:14:80:5c:16:a5:17:6f:8c:67:93:14:95:18:d1:0b:b0:
a8:da:f4:41:80:70:ad:b2:5f:be:e0:6b:94:1b:b6:6c:1c:99:
6a:dc:93:ad:44:fd:11:9e:12:f9:42:d2:19:41:52:d9:74:0a:
c8:02:86:74:1e:60:0a:aa:75:76:cc:5f:79:84:23:7c:5f:ac:
ac:29:39:bb:6a:c4:f5:37:ae:64:6e:7e:11:fd:32:81:e5:f9:
aa:49:8d:66:a5:e3:2b:5c:f6:05:d0:21:55:d7:9a:ef:a4:39:
c2:a2:6c:a9:b5:91:83:1c:06:e7:9b:a4:ab:88:ee:66:62:9f:
b5:a0:05:91:4d:dc:ab:17:fd:58:f4:e2:f7:42:de:4a:1c:bf:
c7:79:9d:7b:79:46:89:a2:68:ad:c0:00:e3:7e:96:c1:68:ae:
c1:63:7d:30:ad:8f:96:29:96:1f:b5:e9:2a:19:0b:3d:c5:65:
6f:e4:aa:b7:29:4f:be:42:6e:d5:bc:34:5c:e8:79:b8:ab:7e:
77:3e:b6:5c:ef:aa:4b:a0:f2:db:4f:8b:82:52:32:9f:37:3d:
79:9e:87:19:79:c6:43:59:0a:54:52:ed:4a:4d:b5:91:13:80:
09:fb:3c:04:31:3d:23:e5:21:11:b5:44:92:f2:d7:06:35:79:
f1:82:a8:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:01:20 2026 by rpki-client