This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e2e95d-2cb7-46be-a228-8317a8288d10/1/2YtaX7E4aD0ajMcBn3iXC65ngig.mft
File: 2YtaX7E4aD0ajMcBn3iXC65ngig.mft (raw, json)
Hash identifier: qdXuVOGF1r06dLpZljDNUmyvkEdvIAOCazcgdksNe1s=
Subject key identifier: 3C:7E:C6:1B:62:BA:C7:E2:F3:B7:DA:94:03:8A:0E:A6:14:D9:E8:7D
Authority key identifier: D9:8B:5A:5F:B1:38:68:3D:1A:8C:C7:01:9F:78:97:0B:AE:67:82:28
Certificate issuer: /CN=d98b5a5fb138683d1a8cc7019f78970bae678228
Certificate serial: 019C44A26454F27D035B52000C21991D44A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YtaX7E4aD0ajMcBn3iXC65ngig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/e2e95d-2cb7-46be-a228-8317a8288d10/1/2YtaX7E4aD0ajMcBn3iXC65ngig.mft
Manifest number: 113B
Signing time: Mon 09 Feb 2026 23:00:19 +0000
Manifest this update: Mon 09 Feb 2026 23:00:19 +0000
Manifest next update: Tue 10 Feb 2026 23:00:19 +0000
Files and hashes: 1: 2YtaX7E4aD0ajMcBn3iXC65ngig.crl (hash: BcMmzoDbX0B1nHHr+NUrkTx/D8L0V6c8q0rmpSlt47M=)
2: 3_erjLvBR9ChA8-FV4FDl1_qWOo.roa (hash: ODC0IK0RSmBwgajSFs0H62MxGdt/m1+W1l/+zS2FxXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/e2e95d-2cb7-46be-a228-8317a8288d10/1/2YtaX7E4aD0ajMcBn3iXC65ngig.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/e2e95d-2cb7-46be-a228-8317a8288d10/1/2YtaX7E4aD0ajMcBn3iXC65ngig.mft
rsync://rpki.ripe.net/repository/DEFAULT/2YtaX7E4aD0ajMcBn3iXC65ngig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:44:a2:64:54:f2:7d:03:5b:52:00:0c:21:99:1d:44:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d98b5a5fb138683d1a8cc7019f78970bae678228
Validity
Not Before: Feb 9 23:00:19 2026 GMT
Not After : Feb 10 23:00:19 2026 GMT
Subject: CN=3c7ec61b62bac7e2f3b7da94038a0ea614d9e87d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:aa:38:e3:63:62:ed:71:5d:c5:c6:d9:27:f3:
10:68:86:26:5c:8e:f4:87:74:d4:12:4b:93:a7:b1:
38:62:42:13:90:95:c4:64:fd:26:2c:29:aa:71:24:
50:10:3b:59:df:03:97:df:7e:b0:95:2d:a6:5e:b9:
8d:33:d6:6b:0a:8c:69:3b:51:ef:3b:e4:af:fa:8c:
93:bc:90:a8:37:20:8d:55:8a:2c:ad:62:3f:57:35:
50:9e:ad:fa:ad:2d:c5:88:0e:b0:59:3d:dd:cc:b3:
71:1e:25:10:29:9e:1a:c7:13:e3:50:9e:40:70:6d:
d1:fb:91:62:59:e8:b9:c8:e6:04:22:af:4f:a8:cd:
0c:6e:ba:60:69:c5:4d:4a:43:12:09:ed:49:04:44:
3f:83:da:77:11:45:44:a2:1b:3f:81:8f:27:72:7b:
3b:30:5f:40:85:ff:dd:5a:03:84:94:67:9d:74:68:
ab:47:d6:da:41:d2:c4:82:b6:d2:aa:4c:da:1c:4b:
f3:e3:24:b5:e8:51:8e:cf:7e:ed:99:76:2e:5c:9a:
14:2a:c1:29:1a:74:db:26:19:dd:92:41:c4:bc:45:
27:10:77:ce:98:7e:fc:3a:01:42:b9:06:15:63:b3:
a5:66:9b:8a:18:55:ad:2b:11:82:02:6c:5b:32:1e:
a7:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:7E:C6:1B:62:BA:C7:E2:F3:B7:DA:94:03:8A:0E:A6:14:D9:E8:7D
X509v3 Authority Key Identifier:
keyid:D9:8B:5A:5F:B1:38:68:3D:1A:8C:C7:01:9F:78:97:0B:AE:67:82:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YtaX7E4aD0ajMcBn3iXC65ngig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e2e95d-2cb7-46be-a228-8317a8288d10/1/2YtaX7E4aD0ajMcBn3iXC65ngig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e2e95d-2cb7-46be-a228-8317a8288d10/1/2YtaX7E4aD0ajMcBn3iXC65ngig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:42:b8:2d:62:bf:fe:e3:93:18:1d:b2:07:6c:f0:7b:27:fc:
e7:e6:ac:3e:12:66:2e:ef:df:13:b2:f9:53:3e:e0:5a:bc:cc:
0c:f5:07:c8:0c:30:9a:80:cc:09:f8:9e:cd:8c:41:b1:e4:3e:
c8:fe:45:84:cd:7b:68:48:41:17:02:19:60:08:c8:59:b6:69:
a2:e0:c2:b9:98:4a:85:2e:c0:41:e0:60:18:6c:00:b0:7c:1c:
e0:3f:84:fb:36:e4:1f:be:b7:ab:80:91:60:d5:ab:e8:78:2b:
cd:c2:09:16:f7:93:a7:0e:93:98:82:7d:ca:e3:58:42:b3:56:
3c:fc:6a:9e:29:02:80:47:d7:64:43:a9:73:13:df:85:8c:88:
c9:9f:5c:f6:77:7a:09:1a:4a:2d:76:6e:dc:68:d9:4d:64:97:
46:e6:cd:6d:d8:da:c1:9b:89:39:07:0b:4c:99:ff:42:18:09:
1d:7d:31:04:73:c8:30:30:7a:87:a2:da:8d:28:f2:c8:d4:37:
4f:2b:a3:29:bb:7e:92:c3:9e:96:54:e0:97:86:9d:93:17:fc:
dc:18:54:3e:b0:5c:7b:11:f2:23:57:e6:5c:0e:23:fa:00:60:
03:f0:6a:10:e6:51:e0:32:c9:90:b2:14:61:e4:ef:ed:91:85:
a5:0d:a8:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:21:44 2026 by rpki-client