This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.mft
File: yteUrGAc4lBbZfl1p9UWovAKWzE.mft (raw, json)
Hash identifier: ERuuhEfF4XbgAY/bJv4dFafpG3L17ggHwu7DaUTn2JM=
Subject key identifier: 9F:92:74:F7:13:9A:D0:EC:01:D6:BC:28:1E:C1:C8:C3:9A:E4:91:75
Authority key identifier: CA:D7:94:AC:60:1C:E2:50:5B:65:F9:75:A7:D5:16:A2:F0:0A:5B:31
Certificate issuer: /CN=cad794ac601ce2505b65f975a7d516a2f00a5b31
Certificate serial: 019BDDDAC08D30A95AE0CE5EFC88A2EB338E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yteUrGAc4lBbZfl1p9UWovAKWzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.mft
Manifest number: 17E5
Signing time: Wed 21 Jan 2026 00:00:59 +0000
Manifest this update: Wed 21 Jan 2026 00:00:59 +0000
Manifest next update: Thu 22 Jan 2026 00:00:59 +0000
Files and hashes: 1: HqGTGlJNCwD8iNo3O2yITxmeCwc.roa (hash: lYCD20DI0iQge3ODQugwP5cP7vicqwIE+12AsMdZEFg=)
2: PZTHXJOe6Rub2_B35Qp_XWm1nCI.roa (hash: ECesKQ6eT4CAViBPjtKG3epmntO2VSEJzUCQqkLEU1U=)
3: aFAces1pfL2Gf7A82Ua9HdY5M_8.roa (hash: ihoy12eYWp6w4F3+SZfOyRsI/MGwgD7ZEiY1ooLQCpo=)
4: aPG3EYw2VofOCEzLOdUvwSZioag.roa (hash: Wotu54IXEWdJ5q1KogRg82/7w2mseyamEfZGS9yMPLs=)
5: sR1oPQtW-Makp0q2GEwGGGWP6-4.roa (hash: 42QylWBVPcRn+sQtIzfk5m8WJP9tWYlxV8MBA5fdb50=)
6: uNpGJTkDf9vfyQ-rWsMHOZPhKY4.roa (hash: DmupEvIL4K/NQQ7P0WNq04y0+5V0bCdj/6N1toh/r7g=)
7: yteUrGAc4lBbZfl1p9UWovAKWzE.crl (hash: UYlp0u3YMM5FG6zipTRIMhc3e1ddsl2XnMjPZpUh7q4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yteUrGAc4lBbZfl1p9UWovAKWzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Jan 2026 00:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:dd:da:c0:8d:30:a9:5a:e0:ce:5e:fc:88:a2:eb:33:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cad794ac601ce2505b65f975a7d516a2f00a5b31
Validity
Not Before: Jan 21 00:00:59 2026 GMT
Not After : Jan 22 00:00:59 2026 GMT
Subject: CN=9f9274f7139ad0ec01d6bc281ec1c8c39ae49175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:08:fc:39:e7:24:bc:5c:f5:a9:8f:22:6a:42:
9d:7b:ba:05:6c:38:dd:e6:f9:42:1f:a0:85:b9:01:
76:41:72:df:ed:12:75:e4:5c:05:99:a0:c4:02:91:
05:68:07:3d:8b:ad:72:e3:ff:e1:66:a4:c0:6a:8c:
c1:67:1a:11:04:68:df:99:87:08:75:99:61:34:fc:
c5:31:4d:d0:c4:42:55:e9:73:a5:2d:b3:18:e6:ea:
00:db:cd:27:88:3e:20:54:01:25:af:a8:ed:4e:d6:
d2:9f:6e:43:44:67:07:df:dc:1f:bb:17:1f:04:29:
7f:27:90:77:c3:fd:c2:fb:36:ff:50:5b:6d:a0:5f:
98:23:ae:76:4e:31:3e:e4:ad:27:69:3f:ae:c5:10:
86:5f:0f:bf:8e:65:97:f7:79:df:f1:90:42:32:fa:
34:19:9f:d2:ae:f3:69:56:bb:fd:6f:ea:8e:b6:ad:
17:bc:24:8e:c5:bd:27:b8:6a:0d:16:53:e0:73:4b:
de:71:31:0c:df:e6:7f:73:d6:27:fb:9c:af:1f:f8:
c9:b7:d2:10:b3:4d:26:fa:c4:91:ee:29:51:52:15:
f5:8b:e3:ee:3a:39:23:41:a1:74:f9:49:07:18:64:
95:d7:de:34:69:69:30:e7:e7:eb:e3:37:c7:91:19:
f3:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:92:74:F7:13:9A:D0:EC:01:D6:BC:28:1E:C1:C8:C3:9A:E4:91:75
X509v3 Authority Key Identifier:
keyid:CA:D7:94:AC:60:1C:E2:50:5B:65:F9:75:A7:D5:16:A2:F0:0A:5B:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yteUrGAc4lBbZfl1p9UWovAKWzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:de:f2:51:81:e9:f2:1e:42:39:39:87:92:17:b3:51:5e:54:
7e:34:25:f4:a7:bc:d2:05:d7:ca:f1:1e:91:bc:12:59:6a:07:
ec:af:89:26:08:3f:b1:33:dd:86:09:f6:b6:bf:ba:c7:03:bc:
f8:a5:07:97:18:2e:d2:54:59:d5:48:1f:eb:91:19:da:58:e5:
58:5d:f5:36:5a:e9:06:27:dd:b9:db:ff:ac:8e:e6:0a:22:94:
f4:00:cb:52:9d:2d:98:da:3d:17:c9:17:75:c7:4c:c8:08:13:
5a:37:97:15:1d:eb:27:9a:13:c9:df:d1:75:d9:3f:93:a3:5b:
73:63:fe:e4:5c:2e:41:5f:2c:96:97:f3:57:d2:a1:1e:20:7f:
f2:4c:7c:e3:c9:e9:3e:c5:37:ec:43:65:cd:e2:db:51:d6:05:
2a:70:4f:47:00:cb:8d:58:6c:5d:c6:b8:f5:7f:26:b6:41:ae:
1b:a6:b1:0a:65:67:60:22:b4:55:73:c0:12:16:3b:a8:df:da:
cb:f8:52:ed:46:25:03:43:33:d4:59:c8:9d:46:7f:b4:e6:42:
ed:1b:fa:ec:25:3d:7b:ba:9e:a0:ed:65:84:8c:2d:a3:85:fa:
1e:d2:b7:7e:c6:16:9b:53:67:76:f1:4f:ea:93:b5:b6:9b:6e:
3b:19:7b:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZvd2sCNMKla4M5e/Iii6zOOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhZDc5NGFjNjAxY2UyNTA1YjY1Zjk3NWE3ZDUxNmEyZjAw
YTViMzEwHhcNMjYwMTIxMDAwMDU5WhcNMjYwMTIyMDAwMDU5WjAzMTEwLwYDVQQD
Eyg5ZjkyNzRmNzEzOWFkMGVjMDFkNmJjMjgxZWMxYzhjMzlhZTQ5MTc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQj8OeckvFz1qY8iakKde7oFbDjd
5vlCH6CFuQF2QXLf7RJ15FwFmaDEApEFaAc9i61y4//hZqTAaozBZxoRBGjfmYcI
dZlhNPzFMU3QxEJV6XOlLbMY5uoA280niD4gVAElr6jtTtbSn25DRGcH39wfuxcf
BCl/J5B3w/3C+zb/UFttoF+YI652TjE+5K0naT+uxRCGXw+/jmWX93nf8ZBCMvo0
GZ/SrvNpVrv9b+qOtq0XvCSOxb0nuGoNFlPgc0vecTEM3+Z/c9Yn+5yvH/jJt9IQ
s00m+sSR7ilRUhX1i+PuOjkjQaF0+UkHGGSV1940aWkw5+fr4zfHkRnzowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ+SdPcTmtDsAda8KB7ByMOa5JF1MB8GA1UdIwQY
MBaAFMrXlKxgHOJQW2X5dafVFqLwClsxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXRlVXJHQWM0bEJiWmZsMXA5VVdvdkFLV3pFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9mOWE0YmUtZDc5Yy00MTkyLWE2YjMt
M2I5ODhmMTg4ZDkxLzEveXRlVXJHQWM0bEJiWmZsMXA5VVdvdkFLV3pFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi9mOWE0YmUtZDc5Yy00MTkyLWE2YjMtM2I5ODhmMTg4ZDkx
LzEveXRlVXJHQWM0bEJiWmZsMXA5VVdvdkFLV3pFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAod7yUYHp
8h5COTmHkhezUV5UfjQl9Ke80gXXyvEekbwSWWoH7K+JJgg/sTPdhgn2tr+6xwO8
+KUHlxgu0lRZ1Ugf65EZ2ljlWF31NlrpBifdudv/rI7mCiKU9ADLUp0tmNo9F8kX
dcdMyAgTWjeXFR3rJ5oTyd/Rddk/k6Nbc2P+5FwuQV8slpfzV9KhHiB/8kx848np
PsU37ENlzeLbUdYFKnBPRwDLjVhsXca49X8mtkGuG6axCmVnYCK0VXPAEhY7qN/a
y/hS7UYlA0Mz1FnInUZ/tOZC7Rv67CU9e7qeoO1lhIwto4X6HtK3fsYWm1NndvFP
6pO1tptuOxl7mQ==
-----END CERTIFICATE-----
Generated at Wed Jan 21 07:04:55 2026 by rpki-client