This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/a2b2b8-cf1c-43e3-b0d3-fd31e1e3f5b9/1/DYYRtReZGJkx4wrhvpWs2oHj4cw.mft
File: DYYRtReZGJkx4wrhvpWs2oHj4cw.mft (raw, json)
Hash identifier: cIZGmBs8FC0QUbYnkelRCt2MT874AyuF25Re5Wvk/Oo=
Subject key identifier: 38:A7:97:1F:9D:B9:F4:C1:C9:88:F1:AB:05:D8:17:BA:0D:54:14:17
Authority key identifier: 0D:86:11:B5:17:99:18:99:31:E3:0A:E1:BE:95:AC:DA:81:E3:E1:CC
Certificate issuer: /CN=0d8611b51799189931e30ae1be95acda81e3e1cc
Certificate serial: 019C43C6A21E6DDB4F92B93B1CA702B620DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DYYRtReZGJkx4wrhvpWs2oHj4cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/a2b2b8-cf1c-43e3-b0d3-fd31e1e3f5b9/1/DYYRtReZGJkx4wrhvpWs2oHj4cw.mft
Manifest number: 120B
Signing time: Mon 09 Feb 2026 19:00:16 +0000
Manifest this update: Mon 09 Feb 2026 19:00:16 +0000
Manifest next update: Tue 10 Feb 2026 19:00:16 +0000
Files and hashes: 1: DYYRtReZGJkx4wrhvpWs2oHj4cw.crl (hash: CihS2oQH8nguzp7LJxK0XDq8YkROCwg5q1JT2vyyXT0=)
2: VioAP3Sp-sEl8X9cNMDH4e3VLXo.roa (hash: IqbTP2M4+QLgn00WwMpRsWioAmun/oCczD7J45nxBPY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/a2b2b8-cf1c-43e3-b0d3-fd31e1e3f5b9/1/DYYRtReZGJkx4wrhvpWs2oHj4cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/a2b2b8-cf1c-43e3-b0d3-fd31e1e3f5b9/1/DYYRtReZGJkx4wrhvpWs2oHj4cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DYYRtReZGJkx4wrhvpWs2oHj4cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:c6:a2:1e:6d:db:4f:92:b9:3b:1c:a7:02:b6:20:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d8611b51799189931e30ae1be95acda81e3e1cc
Validity
Not Before: Feb 9 19:00:16 2026 GMT
Not After : Feb 10 19:00:16 2026 GMT
Subject: CN=38a7971f9db9f4c1c988f1ab05d817ba0d541417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:01:97:06:cc:ec:cd:2b:16:da:66:33:41:23:
d3:2b:b2:84:f6:dc:9a:a2:bd:e0:d5:a1:97:e0:1d:
df:c9:c8:bc:1d:b1:67:25:ff:c4:2c:0a:05:72:fc:
f1:29:59:cc:21:f5:a4:e3:4b:d9:60:92:cd:4a:2e:
39:b9:84:70:f9:f8:a7:1b:13:77:20:6c:d5:8e:09:
db:e2:9b:57:3c:81:a7:2e:db:e2:cf:6b:76:09:1e:
ea:6a:88:0f:94:b9:6f:96:ae:dd:7c:fb:ae:be:36:
9a:30:69:3f:b9:29:69:37:ca:0e:35:5f:ab:1e:26:
c5:72:e6:e8:e3:33:4d:0e:9d:ce:6f:35:66:07:73:
f3:43:40:0a:68:35:81:ae:cc:87:4a:c8:6e:d7:ca:
62:ea:57:6b:cb:aa:62:1d:66:fe:dd:fe:30:99:49:
7d:fa:86:57:a1:ef:7b:5e:bd:e1:38:b7:85:8b:a5:
19:a1:88:0f:ed:12:36:66:c6:b8:8e:5d:28:12:d7:
db:88:55:27:42:c3:31:5e:18:22:82:cd:23:c5:93:
3c:cb:42:b4:f1:03:d4:e5:29:a3:a7:6e:62:f9:51:
3c:ec:be:92:13:98:8d:8a:65:01:af:07:15:14:ca:
02:4d:ac:e1:19:6b:4b:35:bd:c4:44:41:a1:8a:90:
1a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:A7:97:1F:9D:B9:F4:C1:C9:88:F1:AB:05:D8:17:BA:0D:54:14:17
X509v3 Authority Key Identifier:
keyid:0D:86:11:B5:17:99:18:99:31:E3:0A:E1:BE:95:AC:DA:81:E3:E1:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYYRtReZGJkx4wrhvpWs2oHj4cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/a2b2b8-cf1c-43e3-b0d3-fd31e1e3f5b9/1/DYYRtReZGJkx4wrhvpWs2oHj4cw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/a2b2b8-cf1c-43e3-b0d3-fd31e1e3f5b9/1/DYYRtReZGJkx4wrhvpWs2oHj4cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:30:ec:46:45:d9:70:23:36:0f:13:a3:ba:08:d5:12:f5:df:
41:04:a5:0a:2a:20:5e:a5:ec:01:f1:86:d2:ee:ff:35:d4:77:
f0:97:2a:7b:c5:f9:45:be:35:86:cd:8b:52:ae:67:9d:fb:aa:
da:d0:51:a1:de:c4:07:02:ab:0a:f7:2b:f1:f7:73:38:26:2f:
e5:05:5f:15:01:ef:d8:07:84:4b:b6:2d:a8:06:c9:31:11:a1:
4a:f2:fd:a6:7b:af:b2:20:2c:ee:2a:e0:69:5f:52:2f:09:ce:
64:1f:d4:a3:42:a1:f7:8a:27:fe:f1:66:f1:e0:43:94:31:a6:
40:6f:0f:9e:58:96:69:7d:4d:e6:34:0e:68:a9:b8:ce:7b:bb:
7f:ec:3c:79:ee:fe:22:7e:50:a6:4e:77:5a:6e:22:c4:29:bc:
12:27:f7:8e:cb:ef:61:40:e7:90:da:bf:d9:63:3e:42:5f:f4:
95:cf:e0:da:cc:5d:98:6b:0d:d2:f5:53:ea:f2:a4:13:6c:eb:
8c:f0:99:fe:f3:bc:27:4c:0b:6d:c8:e6:fb:a8:67:18:a1:3d:
4f:22:4c:e2:97:a6:e2:99:d8:89:91:40:33:50:db:06:34:5b:
90:c1:e0:a0:4f:8b:37:c1:0e:ea:1d:8e:df:ae:a5:0b:ce:b8:
af:d4:80:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 23:52:45 2026 by rpki-client