This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/5e7dc8-7bf5-4033-9092-fc7eb991db40/1/Yonrndlo7aSnlWTC4GpoOEIpegQ.mft
File: Yonrndlo7aSnlWTC4GpoOEIpegQ.mft (raw, json)
Hash identifier: dLe8iK2PoricRKrfrFWokiNoabLkFv9o24eajObTY1M=
Subject key identifier: 13:E3:8B:9F:68:39:64:53:B7:E5:0D:A8:C9:71:29:94:AC:56:AA:F6
Authority key identifier: 62:89:EB:9D:D9:68:ED:A4:A7:95:64:C2:E0:6A:68:38:42:29:7A:04
Certificate issuer: /CN=6289eb9dd968eda4a79564c2e06a683842297a04
Certificate serial: 019C435969C8DD4ED87DED4290660C6FC4E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yonrndlo7aSnlWTC4GpoOEIpegQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/5e7dc8-7bf5-4033-9092-fc7eb991db40/1/Yonrndlo7aSnlWTC4GpoOEIpegQ.mft
Manifest number: 052F
Signing time: Mon 09 Feb 2026 17:00:59 +0000
Manifest this update: Mon 09 Feb 2026 17:00:59 +0000
Manifest next update: Tue 10 Feb 2026 17:00:59 +0000
Files and hashes: 1: Yonrndlo7aSnlWTC4GpoOEIpegQ.crl (hash: Kcc9/2fG/4FDVghZwAqPGLgFuA38j+fU0oq+yZCGG5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/5e7dc8-7bf5-4033-9092-fc7eb991db40/1/Yonrndlo7aSnlWTC4GpoOEIpegQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/5e7dc8-7bf5-4033-9092-fc7eb991db40/1/Yonrndlo7aSnlWTC4GpoOEIpegQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yonrndlo7aSnlWTC4GpoOEIpegQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:59:69:c8:dd:4e:d8:7d:ed:42:90:66:0c:6f:c4:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6289eb9dd968eda4a79564c2e06a683842297a04
Validity
Not Before: Feb 9 17:00:59 2026 GMT
Not After : Feb 10 17:00:59 2026 GMT
Subject: CN=13e38b9f68396453b7e50da8c9712994ac56aaf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:79:78:cd:ee:f3:bd:07:79:5e:af:8a:90:0c:
6e:be:04:4f:f7:d7:44:54:53:63:81:45:f9:d9:b5:
c0:da:15:a1:6a:a6:b3:c1:bc:08:18:e5:74:16:06:
93:52:d6:53:0d:02:93:35:2a:0e:2f:a9:5d:3c:16:
54:0d:c5:ce:ce:18:81:35:d2:62:ee:ed:6c:5d:3f:
00:34:24:04:67:3e:6a:25:66:65:a4:47:6d:bf:16:
16:f5:84:03:5a:19:95:2c:dd:c3:d9:09:45:c6:b2:
58:a8:22:d8:64:02:c3:6a:02:f9:76:ea:01:32:e6:
58:06:40:11:0b:b1:e5:c6:5f:e3:b4:94:1d:57:25:
ef:bf:7b:22:69:e0:cb:a1:ab:5c:1a:7c:81:31:b3:
ad:cf:f7:c1:e1:de:1a:be:3b:f7:f8:88:d0:8e:f9:
4e:97:39:e5:c6:f4:db:8f:9f:ce:e3:7d:09:c1:67:
32:24:5b:e7:fd:7f:62:ce:6a:b6:f6:f9:e0:29:d5:
4f:c3:d3:26:ce:5f:03:5e:81:02:76:41:0e:31:be:
17:4a:34:3a:a2:32:97:8c:54:bc:af:93:ec:74:49:
6b:19:5f:89:b6:c4:a9:00:7e:e7:2c:0b:0e:73:cb:
01:c0:06:9a:5b:76:0c:00:98:db:06:71:c4:00:28:
6e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:E3:8B:9F:68:39:64:53:B7:E5:0D:A8:C9:71:29:94:AC:56:AA:F6
X509v3 Authority Key Identifier:
keyid:62:89:EB:9D:D9:68:ED:A4:A7:95:64:C2:E0:6A:68:38:42:29:7A:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yonrndlo7aSnlWTC4GpoOEIpegQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/5e7dc8-7bf5-4033-9092-fc7eb991db40/1/Yonrndlo7aSnlWTC4GpoOEIpegQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/5e7dc8-7bf5-4033-9092-fc7eb991db40/1/Yonrndlo7aSnlWTC4GpoOEIpegQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:ec:42:0a:d0:d8:3a:84:05:cb:cc:1d:ad:a9:e0:0c:6e:21:
b7:b8:bb:5d:b8:c9:33:9b:a7:62:d9:93:9c:e8:fd:1a:8d:e3:
ac:14:70:c4:14:2f:05:e2:4a:ba:82:d6:62:3b:4a:60:eb:ab:
5c:0c:ac:d0:e0:e5:fa:ea:6b:5d:3e:84:04:3e:40:cb:86:e5:
c5:29:b6:26:53:f3:4f:4b:00:0e:7a:07:69:1e:8f:e9:45:ee:
1b:8f:a2:21:bf:27:7d:f7:f5:3b:20:44:ae:ce:07:b0:c3:af:
43:e0:00:7a:28:2d:24:a3:ca:0d:a6:e5:61:21:3d:0d:e3:ca:
d7:b7:81:c3:da:a4:6f:50:f8:f8:9f:0c:b5:b2:17:07:95:88:
60:4b:90:89:79:a6:74:98:91:25:2e:09:67:62:2f:92:3d:e4:
f6:81:06:84:18:d8:dd:99:6b:c4:90:c9:42:ab:0c:c4:c4:90:
37:50:dc:58:08:44:02:11:71:12:1d:3e:45:f3:b2:13:8c:ab:
1a:49:30:ac:36:44:10:40:b5:91:e3:98:18:99:5c:56:19:ea:
35:81:fe:aa:36:48:c7:bf:6f:c3:ef:84:e6:b1:55:eb:7a:24:
fa:69:38:24:a1:79:d6:cf:a7:6e:72:24:c0:51:9c:d7:f7:6e:
88:fd:f7:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:16:48 2026 by rpki-client