This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/yTsGP8Y-ihq6H0MLLQdNvicL45U.mft
File: yTsGP8Y-ihq6H0MLLQdNvicL45U.mft (raw, json)
Hash identifier: BosDjOs8adT8/2H3Kj7NtbZvDgNO8WC1Tdg0ma7OLp4=
Subject key identifier: 28:C6:1F:10:22:77:12:43:10:59:FE:FA:EE:FD:90:4C:83:74:7C:8E
Authority key identifier: C9:3B:06:3F:C6:3E:8A:1A:BA:1F:43:0B:2D:07:4D:BE:27:0B:E3:95
Certificate issuer: /CN=c93b063fc63e8a1aba1f430b2d074dbe270be395
Certificate serial: 019C43222EC809C26C171110D9A3DD51CF3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yTsGP8Y-ihq6H0MLLQdNvicL45U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/yTsGP8Y-ihq6H0MLLQdNvicL45U.mft
Manifest number: 1810
Signing time: Mon 09 Feb 2026 16:00:39 +0000
Manifest this update: Mon 09 Feb 2026 16:00:39 +0000
Manifest next update: Tue 10 Feb 2026 16:00:39 +0000
Files and hashes: 1: Nb1S4rIJytNZ9EyG1Fq9oCGchKk.roa (hash: E0krvPCL+AC9YfaXQIlTvkeNOsHIRhUhj8ZYv72osZM=)
2: yTsGP8Y-ihq6H0MLLQdNvicL45U.crl (hash: xjpyl6aLjo9IuabqspbsMd31IAtICVeDOYKEuQOZXBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/yTsGP8Y-ihq6H0MLLQdNvicL45U.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/yTsGP8Y-ihq6H0MLLQdNvicL45U.mft
rsync://rpki.ripe.net/repository/DEFAULT/yTsGP8Y-ihq6H0MLLQdNvicL45U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:22:2e:c8:09:c2:6c:17:11:10:d9:a3:dd:51:cf:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c93b063fc63e8a1aba1f430b2d074dbe270be395
Validity
Not Before: Feb 9 16:00:39 2026 GMT
Not After : Feb 10 16:00:39 2026 GMT
Subject: CN=28c61f10227712431059fefaeefd904c83747c8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a6:17:9e:cd:8c:47:92:d5:4e:b2:20:eb:82:
f2:bb:ea:21:46:e5:aa:80:c7:17:c7:be:19:aa:18:
a6:06:5b:b3:1f:51:21:08:2e:4e:27:59:94:fc:e9:
0d:b2:df:04:7d:e5:88:85:42:1d:ab:5f:b6:78:85:
2f:40:fb:fa:1b:09:4f:68:48:64:4c:83:7c:4d:7d:
7b:42:1a:8f:27:6e:1f:ab:bf:e6:d7:7f:c5:6b:9d:
f8:46:5b:31:c3:b7:2c:a2:cc:fe:ec:95:9d:49:48:
ce:85:61:15:92:af:d9:4f:4f:b0:98:8b:7b:5c:8f:
6d:de:bb:cf:6d:69:8a:d2:9b:e1:e9:7b:93:e9:ac:
4b:64:e9:5a:ec:f2:7b:a8:72:f1:7a:86:20:28:61:
b6:e1:3c:b3:25:6c:bf:19:ad:22:e6:91:ee:e2:44:
3e:ae:03:08:8e:33:6e:36:2a:dc:b9:52:74:ad:f2:
ed:a6:e2:05:8a:d0:c4:e2:51:07:af:25:95:4f:ea:
98:dc:ae:30:c1:95:bc:ab:a1:7e:d9:e2:ae:fc:a1:
ba:ca:0b:a1:e5:b5:6e:5d:fd:b0:39:df:5c:d0:e8:
5a:77:a6:62:41:14:80:dd:25:83:49:2d:60:ad:28:
4f:69:2c:2d:86:f4:7a:9a:97:84:bc:b0:1e:6e:ff:
2a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:C6:1F:10:22:77:12:43:10:59:FE:FA:EE:FD:90:4C:83:74:7C:8E
X509v3 Authority Key Identifier:
keyid:C9:3B:06:3F:C6:3E:8A:1A:BA:1F:43:0B:2D:07:4D:BE:27:0B:E3:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yTsGP8Y-ihq6H0MLLQdNvicL45U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/yTsGP8Y-ihq6H0MLLQdNvicL45U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/yTsGP8Y-ihq6H0MLLQdNvicL45U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:43:30:29:d8:a7:31:6c:40:68:26:9b:e9:d4:60:c8:60:b9:
40:1f:57:d0:05:86:e6:a1:65:56:cc:3f:4e:8b:89:70:c7:4d:
95:f6:84:12:55:2c:e1:c4:46:64:8b:1a:ff:05:bd:06:af:91:
8e:62:d4:b8:d0:59:a6:a0:12:f1:d8:bc:2b:c2:c7:9f:04:24:
54:d2:12:af:a7:aa:ba:4d:4b:82:43:4d:68:e0:5e:7d:20:d9:
4a:97:a7:59:49:fb:14:83:aa:75:6c:71:9d:21:0f:ef:71:6f:
4d:86:02:38:9b:58:f7:56:2b:ea:3d:67:fc:41:1a:c1:9f:d7:
16:9e:4e:b2:a5:62:aa:6f:1c:cd:80:ce:6a:5b:a7:13:ae:70:
4c:a1:c5:78:5f:08:1a:1e:c1:75:d7:09:a9:c2:fd:fb:89:0e:
9d:e5:ff:59:3e:b9:25:e2:eb:1d:a0:cf:74:14:83:f9:a6:ed:
e7:8b:3c:33:48:38:46:de:50:9b:1f:58:f6:d0:c3:b2:dc:b3:
61:e2:39:e1:2c:e4:4e:8f:b7:04:58:34:78:0e:7e:17:87:c8:
0a:c5:81:11:d0:e7:f7:0d:60:7b:0a:15:7a:fa:19:85:85:78:
07:6b:df:4e:e1:46:2f:7f:f6:30:96:7c:51:bf:26:4c:4b:9c:
b9:cd:64:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:53:29 2026 by rpki-client