This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/YooI4osxu-XBgS_akOfoyKSDNeg.mft
File: YooI4osxu-XBgS_akOfoyKSDNeg.mft (raw, json)
Hash identifier: WXHCOf99xgQUx6H4t/VCHs8rvHjoCDyE4ZNywShiGYg=
Subject key identifier: FB:27:8B:EA:CD:96:2E:DF:D4:53:11:B2:4A:65:E2:8E:70:02:07:00
Authority key identifier: 62:8A:08:E2:8B:31:BB:E5:C1:81:2F:DA:90:E7:E8:C8:A4:83:35:E8
Certificate issuer: /CN=628a08e28b31bbe5c1812fda90e7e8c8a48335e8
Certificate serial: 019C446BA22778D8194D6915960D25B203E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YooI4osxu-XBgS_akOfoyKSDNeg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/YooI4osxu-XBgS_akOfoyKSDNeg.mft
Manifest number: 1030
Signing time: Mon 09 Feb 2026 22:00:30 +0000
Manifest this update: Mon 09 Feb 2026 22:00:30 +0000
Manifest next update: Tue 10 Feb 2026 22:00:30 +0000
Files and hashes: 1: JiLL-z0AATIJkLmkmmltbZk5ON4.roa (hash: eZfI9F6qWUApvxYWZuIJG2uhH1zxpRLF119eP4amocA=)
2: YooI4osxu-XBgS_akOfoyKSDNeg.crl (hash: +gZF5YeuygfHknsUdboHB3/o+vPbg653nbyTwVx6eVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/YooI4osxu-XBgS_akOfoyKSDNeg.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/YooI4osxu-XBgS_akOfoyKSDNeg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YooI4osxu-XBgS_akOfoyKSDNeg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:44:6b:a2:27:78:d8:19:4d:69:15:96:0d:25:b2:03:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=628a08e28b31bbe5c1812fda90e7e8c8a48335e8
Validity
Not Before: Feb 9 22:00:30 2026 GMT
Not After : Feb 10 22:00:30 2026 GMT
Subject: CN=fb278beacd962edfd45311b24a65e28e70020700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:4a:9a:2e:fc:d8:23:f5:22:43:54:02:80:52:
61:cb:91:df:e3:50:53:26:e1:7a:f7:d2:80:ea:8f:
f6:f0:0e:cc:46:12:35:da:af:7d:6b:fa:6d:e2:86:
9f:f6:bb:22:1a:85:11:5c:96:fd:0c:02:a2:17:f8:
3e:37:c2:00:0a:ed:7f:e8:18:cd:09:b0:31:2c:71:
3a:06:93:70:b2:63:1d:59:8f:fd:e9:30:f8:c4:1a:
bc:ed:af:14:91:06:a3:ca:7c:b3:26:1a:67:37:d3:
6d:20:9f:11:47:1a:29:91:76:ca:b0:60:74:bf:9a:
38:f1:ef:ac:b9:1c:4c:71:74:f7:f2:a9:41:3f:04:
63:ec:ad:e8:ff:08:c9:98:7f:b7:86:81:bc:92:9b:
8a:0f:b5:89:54:d7:7b:bd:30:ac:2e:73:a5:b0:41:
15:0f:41:36:72:0c:b3:1a:fb:ea:fe:7c:ba:3c:f6:
57:2e:ab:df:2a:92:09:84:38:76:51:23:8c:ce:cb:
35:c5:03:48:3b:ba:72:86:b8:60:c0:60:3c:a8:ab:
d5:73:39:ba:d4:7c:5f:df:f9:d4:63:4b:29:a5:18:
c6:39:0d:ed:63:7f:ef:f0:dd:cd:ee:d5:7f:26:4a:
ed:a2:ca:24:ae:86:70:f6:4b:fb:29:ac:6a:49:8f:
40:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:27:8B:EA:CD:96:2E:DF:D4:53:11:B2:4A:65:E2:8E:70:02:07:00
X509v3 Authority Key Identifier:
keyid:62:8A:08:E2:8B:31:BB:E5:C1:81:2F:DA:90:E7:E8:C8:A4:83:35:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YooI4osxu-XBgS_akOfoyKSDNeg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/YooI4osxu-XBgS_akOfoyKSDNeg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/YooI4osxu-XBgS_akOfoyKSDNeg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:57:a4:8a:5f:22:5f:35:10:43:74:51:1f:51:b7:7f:64:95:
b5:1b:87:8f:2a:fd:e8:75:13:89:df:2f:7b:d1:35:7a:01:e1:
33:74:02:db:e3:ce:d1:75:4d:89:80:1e:54:e2:7e:f0:60:fe:
ec:68:43:99:18:49:7a:e9:94:3d:53:a8:6c:74:26:81:8f:14:
32:96:e5:39:b3:0b:96:36:c6:b4:a6:34:62:6b:07:8f:82:ee:
7c:33:fd:d3:76:b6:3a:93:8d:02:48:36:af:ce:79:32:d0:a4:
35:01:03:fe:92:48:07:0c:02:44:37:08:c5:15:b8:cf:8a:9f:
24:76:1e:85:a1:e6:96:86:9a:18:b3:13:2a:fd:0c:ea:a7:f5:
7e:81:72:34:5a:f3:97:b7:f8:1d:07:79:d0:78:99:4f:f4:b4:
21:76:6c:8a:9a:b8:2c:f7:b7:bf:05:ec:3c:41:40:df:a5:fb:
4c:03:86:52:1b:9d:48:19:fb:26:e3:7a:ad:a1:30:6f:e5:fc:
89:7a:2b:51:41:73:ea:0a:d2:d5:2a:7b:43:40:1f:b7:f6:66:
84:80:b4:7d:26:ad:de:87:67:cb:11:b2:08:eb:37:94:7e:90:
62:0d:c4:35:2e:db:a0:c6:2b:c1:47:8c:2d:fb:91:3b:a2:df:
13:e6:ae:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxEa6IneNgZTWkVlg0lsgPoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyOGEwOGUyOGIzMWJiZTVjMTgxMmZkYTkwZTdlOGM4YTQ4
MzM1ZTgwHhcNMjYwMjA5MjIwMDMwWhcNMjYwMjEwMjIwMDMwWjAzMTEwLwYDVQQD
EyhmYjI3OGJlYWNkOTYyZWRmZDQ1MzExYjI0YTY1ZTI4ZTcwMDIwNzAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEqaLvzYI/UiQ1QCgFJhy5Hf41BT
JuF699KA6o/28A7MRhI12q99a/pt4oaf9rsiGoURXJb9DAKiF/g+N8IACu1/6BjN
CbAxLHE6BpNwsmMdWY/96TD4xBq87a8UkQajynyzJhpnN9NtIJ8RRxopkXbKsGB0
v5o48e+suRxMcXT38qlBPwRj7K3o/wjJmH+3hoG8kpuKD7WJVNd7vTCsLnOlsEEV
D0E2cgyzGvvq/ny6PPZXLqvfKpIJhDh2USOMzss1xQNIO7pyhrhgwGA8qKvVczm6
1Hxf3/nUY0sppRjGOQ3tY3/v8N3N7tV/JkrtosokroZw9kv7KaxqSY9AhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPsni+rNli7f1FMRskpl4o5wAgcAMB8GA1UdIwQY
MBaAFGKKCOKLMbvlwYEv2pDn6MikgzXoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWW9vSTRvc3h1LVhCZ1NfYWtPZm95S1NETmVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS84NjkzMjUtMTJjMi00ZmMwLWIxOWIt
MGExZDRjMDIyZTUxLzEvWW9vSTRvc3h1LVhCZ1NfYWtPZm95S1NETmVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS84NjkzMjUtMTJjMi00ZmMwLWIxOWItMGExZDRjMDIyZTUx
LzEvWW9vSTRvc3h1LVhCZ1NfYWtPZm95S1NETmVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM1ekil8i
XzUQQ3RRH1G3f2SVtRuHjyr96HUTid8ve9E1egHhM3QC2+PO0XVNiYAeVOJ+8GD+
7GhDmRhJeumUPVOobHQmgY8UMpblObMLljbGtKY0YmsHj4LufDP903a2OpONAkg2
r855MtCkNQED/pJIBwwCRDcIxRW4z4qfJHYehaHmloaaGLMTKv0M6qf1foFyNFrz
l7f4HQd50HiZT/S0IXZsipq4LPe3vwXsPEFA36X7TAOGUhudSBn7JuN6raEwb+X8
iXorUUFz6grS1Sp7Q0Aft/ZmhIC0fSat3odnyxGyCOs3lH6QYg3ENS7boMYrwUeM
LfuRO6LfE+au/A==
-----END CERTIFICATE-----
Generated at Tue Feb 10 00:17:30 2026 by rpki-client