This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/862320-c938-4751-ad07-f484da8e67c3/1/yXZVaQIejbR5y9ZKWgsrr74qjqw.mft
File: yXZVaQIejbR5y9ZKWgsrr74qjqw.mft (raw, json)
Hash identifier: h7td+5+Ah7Uk171IEIl4HceUHQy0IYWFqylNfLzkxEg=
Subject key identifier: 31:C4:9B:F7:F3:0D:4D:15:A0:F1:BD:13:1E:EA:09:3B:4A:B0:5D:37
Authority key identifier: C9:76:55:69:02:1E:8D:B4:79:CB:D6:4A:5A:0B:2B:AF:BE:2A:8E:AC
Certificate issuer: /CN=c9765569021e8db479cbd64a5a0b2bafbe2a8eac
Certificate serial: 019C273D768E52EE4D6FA557597C55210B66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yXZVaQIejbR5y9ZKWgsrr74qjqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/862320-c938-4751-ad07-f484da8e67c3/1/yXZVaQIejbR5y9ZKWgsrr74qjqw.mft
Manifest number: 087E
Signing time: Wed 04 Feb 2026 06:01:05 +0000
Manifest this update: Wed 04 Feb 2026 06:01:05 +0000
Manifest next update: Thu 05 Feb 2026 06:01:05 +0000
Files and hashes: 1: XWyAqC54PDULToqtQuYDZQ188QY.roa (hash: IxPpQQWBadj7ekB4qtQqu1qywEMiFrvG8tw5fpRStfs=)
2: yXZVaQIejbR5y9ZKWgsrr74qjqw.crl (hash: qQNSH4NQFfIofEW15s77xBUe13fDYhF3OgXBilCycfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/862320-c938-4751-ad07-f484da8e67c3/1/yXZVaQIejbR5y9ZKWgsrr74qjqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/862320-c938-4751-ad07-f484da8e67c3/1/yXZVaQIejbR5y9ZKWgsrr74qjqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/yXZVaQIejbR5y9ZKWgsrr74qjqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Feb 2026 06:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:27:3d:76:8e:52:ee:4d:6f:a5:57:59:7c:55:21:0b:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9765569021e8db479cbd64a5a0b2bafbe2a8eac
Validity
Not Before: Feb 4 06:01:05 2026 GMT
Not After : Feb 5 06:01:05 2026 GMT
Subject: CN=31c49bf7f30d4d15a0f1bd131eea093b4ab05d37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:de:52:64:b0:65:46:9a:d2:ab:c5:b3:41:67:
38:9e:b1:a6:db:a1:29:70:1d:76:c5:9d:2f:84:ca:
05:49:f5:34:36:70:3c:8e:8a:69:ea:24:e7:a2:04:
f1:10:a7:eb:18:89:8e:b9:9e:ed:55:19:a5:91:55:
ed:44:82:0c:f6:8b:3c:e2:3e:97:b3:79:f1:4b:41:
c7:29:d7:44:6b:49:a2:bb:76:ec:b8:fa:67:ac:c4:
d5:8a:0c:45:8b:a8:4e:c5:a6:33:71:0b:ae:84:32:
f4:ab:cc:a7:a8:9a:ce:b5:f7:98:ac:fe:ff:46:f0:
04:2f:f0:da:36:af:a2:86:98:6f:18:a3:2e:c3:41:
a4:03:ff:51:6d:98:14:46:24:76:0f:ac:0c:e3:08:
ea:6b:d1:e5:e6:71:c6:bf:47:4d:6e:69:09:ca:65:
52:55:7e:8a:26:44:2c:d3:93:ed:c0:9c:60:89:7d:
80:c5:ee:d7:e7:dc:71:d5:3c:4c:dd:f0:c8:f2:7c:
15:6a:8d:01:fd:e7:5e:cf:07:14:6f:4f:65:8d:18:
d8:a0:03:6f:7f:0f:e8:ad:72:7a:2a:30:a8:79:45:
44:a1:d0:08:45:bd:48:a5:3b:3c:33:18:96:5c:63:
0a:fc:34:bc:af:b8:28:f7:3e:ba:93:b5:bc:25:fe:
20:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:C4:9B:F7:F3:0D:4D:15:A0:F1:BD:13:1E:EA:09:3B:4A:B0:5D:37
X509v3 Authority Key Identifier:
keyid:C9:76:55:69:02:1E:8D:B4:79:CB:D6:4A:5A:0B:2B:AF:BE:2A:8E:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yXZVaQIejbR5y9ZKWgsrr74qjqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/862320-c938-4751-ad07-f484da8e67c3/1/yXZVaQIejbR5y9ZKWgsrr74qjqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/862320-c938-4751-ad07-f484da8e67c3/1/yXZVaQIejbR5y9ZKWgsrr74qjqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:0d:49:bb:a5:3d:6c:0d:cc:fc:20:6a:0d:ce:76:6c:21:56:
c2:62:35:18:9c:9f:a6:37:b4:90:07:44:a6:69:dc:b4:35:25:
3a:fa:86:38:65:f2:b1:c6:16:d7:0c:15:ea:17:da:51:80:3e:
b8:0a:60:0f:0d:ee:9e:94:ff:72:2a:87:78:0f:2c:f5:99:a6:
1f:f8:1c:25:8a:d0:56:b6:cc:3e:25:7c:68:0c:f6:2e:3c:aa:
99:0a:9d:9f:d0:fd:cb:9f:7b:04:a7:22:2d:cc:c8:4b:03:55:
37:44:62:b7:0b:1c:f7:96:7e:3b:df:a2:c2:d9:08:d3:56:7a:
b6:5c:27:4a:00:cf:ba:ef:bb:6b:61:c9:e2:6d:cf:3a:08:0c:
24:b1:a0:07:fc:c0:6e:e4:db:25:b4:80:d4:6c:08:63:8d:02:
34:43:4a:29:c8:a5:e8:49:fd:93:c0:70:4a:5a:ff:43:a1:be:
f4:b7:be:68:d1:78:90:15:c6:d8:12:95:6f:00:f2:2e:e1:24:
7e:a4:7a:fe:40:5f:36:27:ec:c4:24:fc:a1:45:52:2e:38:99:
58:0a:5d:52:00:fc:e2:ce:db:92:5a:ae:e0:9a:cd:88:10:fb:
c2:d6:8e:1b:20:11:fb:de:00:b7:83:46:25:76:d1:d5:63:f1:
f7:0c:7f:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 4 15:11:23 2026 by rpki-client