This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/54ff92-221e-4a16-8aef-194e0c651d73/1/mfCyyNezyhPFnFM3LyXiAsharcU.mft
File: mfCyyNezyhPFnFM3LyXiAsharcU.mft (raw, json)
Hash identifier: /3rYJBVSVjH1EWsyivfH6xhcEnBCy6KLv0oNQk/0IdI=
Subject key identifier: B4:42:9D:36:02:A6:FE:53:16:53:D0:06:6A:C3:23:F6:3E:3A:A5:71
Authority key identifier: 99:F0:B2:C8:D7:B3:CA:13:C5:9C:53:37:2F:25:E2:02:C8:5A:AD:C5
Certificate issuer: /CN=99f0b2c8d7b3ca13c59c53372f25e202c85aadc5
Certificate serial: 019C42EB96B7F3DD62221B85CBACB0CEF639
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mfCyyNezyhPFnFM3LyXiAsharcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/54ff92-221e-4a16-8aef-194e0c651d73/1/mfCyyNezyhPFnFM3LyXiAsharcU.mft
Manifest number: 0B15
Signing time: Mon 09 Feb 2026 15:01:01 +0000
Manifest this update: Mon 09 Feb 2026 15:01:01 +0000
Manifest next update: Tue 10 Feb 2026 15:01:01 +0000
Files and hashes: 1: mfCyyNezyhPFnFM3LyXiAsharcU.crl (hash: O91VvMIhaWmtu5YcHkR5aVNPh4qOv+5lgJPiQJA8ZVY=)
2: x2MM1e6RzNZDA4hLyDx2reSAtec.roa (hash: LoKZDS1lTFaAe/itPWyVaeaD97C4a8VpDh8K0DR+aq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/54ff92-221e-4a16-8aef-194e0c651d73/1/mfCyyNezyhPFnFM3LyXiAsharcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/54ff92-221e-4a16-8aef-194e0c651d73/1/mfCyyNezyhPFnFM3LyXiAsharcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/mfCyyNezyhPFnFM3LyXiAsharcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:eb:96:b7:f3:dd:62:22:1b:85:cb:ac:b0:ce:f6:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99f0b2c8d7b3ca13c59c53372f25e202c85aadc5
Validity
Not Before: Feb 9 15:01:01 2026 GMT
Not After : Feb 10 15:01:01 2026 GMT
Subject: CN=b4429d3602a6fe531653d0066ac323f63e3aa571
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:69:ad:c2:aa:5f:c8:47:88:7b:9b:0d:4e:dc:
71:6f:f3:c5:0f:0d:48:eb:52:af:a8:b6:2a:d0:5a:
9f:67:6d:95:81:f6:ab:42:f7:2d:31:15:cc:1d:96:
0d:88:7b:b5:64:b2:7d:88:b5:8b:18:5b:5a:d4:85:
3a:6f:1e:08:e9:eb:ad:34:85:0e:9b:2b:69:78:03:
31:6b:97:84:e1:1d:eb:e4:bb:89:4c:09:54:e1:8a:
a1:54:b8:c8:25:78:94:a2:20:85:d0:bc:2e:fc:50:
f4:aa:b2:1e:85:3e:be:ba:ca:b1:c2:d3:20:79:fd:
ad:15:85:cf:4a:5c:1b:60:79:d4:f6:c1:5c:3f:ef:
36:82:1a:07:7e:8a:cf:ca:15:fe:93:6d:10:d8:39:
df:21:3d:46:9f:34:96:5e:0b:bf:db:3f:30:0b:f5:
fa:d0:71:9b:b8:5a:db:22:01:21:b0:22:c6:e3:54:
36:9b:8e:85:6f:d8:79:4b:9f:de:3b:5d:ff:05:84:
89:91:3d:59:9a:b9:41:6c:d5:8d:46:f1:41:b1:75:
d5:f2:c2:46:55:20:0e:1b:6b:d4:56:41:0b:5d:3d:
01:40:87:07:bc:6c:49:e5:8e:2a:4f:07:f0:33:50:
5d:c0:83:e3:59:10:e9:1c:93:4f:f2:1c:87:42:49:
05:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:42:9D:36:02:A6:FE:53:16:53:D0:06:6A:C3:23:F6:3E:3A:A5:71
X509v3 Authority Key Identifier:
keyid:99:F0:B2:C8:D7:B3:CA:13:C5:9C:53:37:2F:25:E2:02:C8:5A:AD:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfCyyNezyhPFnFM3LyXiAsharcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/54ff92-221e-4a16-8aef-194e0c651d73/1/mfCyyNezyhPFnFM3LyXiAsharcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/54ff92-221e-4a16-8aef-194e0c651d73/1/mfCyyNezyhPFnFM3LyXiAsharcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:37:5c:47:04:d0:66:fa:63:37:ce:49:94:b7:d4:7d:85:b3:
01:d2:c1:7c:be:c2:b5:f2:09:a7:e8:0c:ed:3d:3f:a4:af:da:
82:a3:37:70:41:a3:16:9b:5b:a6:6d:35:ee:70:d8:4c:49:06:
98:a0:b7:65:17:0c:a3:22:4a:8d:7b:cd:47:4e:fc:7b:95:b9:
f6:83:89:f3:89:2c:4c:ee:e0:8d:d4:74:27:53:65:bc:26:5f:
d9:65:eb:84:ff:32:58:f4:8d:8c:2b:f1:0f:b6:a6:fc:33:6d:
5b:f3:11:cc:78:f1:5d:51:3b:f7:d2:89:b2:b5:a7:e8:66:44:
f0:7f:3f:64:eb:4b:9a:e5:32:5f:73:51:bc:e4:2b:f9:f6:13:
f2:51:2c:5d:8e:c5:29:08:b1:f7:a6:18:de:3c:7b:34:67:a1:
96:82:bc:8f:86:49:04:c2:2d:bf:3f:56:07:5e:09:c5:fd:bc:
f6:90:6d:a1:c6:96:c1:db:fb:40:10:51:1c:6c:6c:98:b6:54:
89:8a:1d:47:6a:48:e7:4b:1e:de:6d:97:ca:07:0f:4f:f0:ae:
0d:45:88:9e:f4:d4:25:10:8c:fc:93:12:b5:fe:12:7d:73:34:
4a:9e:26:4f:7d:a2:70:0f:42:b2:98:d4:0f:7d:f2:45:44:05:
30:2e:53:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:29:37 2026 by rpki-client