This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/9adbe4-3363-4523-9278-2f8121a28bf0/1/Yo_i0jQ88o4ie1T4BLLOAy09GJU.mft
File: Yo_i0jQ88o4ie1T4BLLOAy09GJU.mft (raw, json)
Hash identifier: CbTkQcdfs89AIULNWojlKZxiuhEEJsz4Zrhh6G7Jdeg=
Subject key identifier: D9:E0:12:72:14:8A:C6:BC:8D:50:6A:FA:EA:29:20:7A:0D:BB:E8:82
Authority key identifier: 62:8F:E2:D2:34:3C:F2:8E:22:7B:54:F8:04:B2:CE:03:2D:3D:18:95
Certificate issuer: /CN=628fe2d2343cf28e227b54f804b2ce032d3d1895
Certificate serial: 019C42465B78123A40D4E4901C7B732F1B25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yo_i0jQ88o4ie1T4BLLOAy09GJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/9adbe4-3363-4523-9278-2f8121a28bf0/1/Yo_i0jQ88o4ie1T4BLLOAy09GJU.mft
Manifest number: 0266
Signing time: Mon 09 Feb 2026 12:00:33 +0000
Manifest this update: Mon 09 Feb 2026 12:00:33 +0000
Manifest next update: Tue 10 Feb 2026 12:00:33 +0000
Files and hashes: 1: Yo_i0jQ88o4ie1T4BLLOAy09GJU.crl (hash: hMHtmzJrS3JWIJGUJS1LpskU+FfdSlXmSLncTxLswCE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/9adbe4-3363-4523-9278-2f8121a28bf0/1/Yo_i0jQ88o4ie1T4BLLOAy09GJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/9adbe4-3363-4523-9278-2f8121a28bf0/1/Yo_i0jQ88o4ie1T4BLLOAy09GJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yo_i0jQ88o4ie1T4BLLOAy09GJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 12:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:46:5b:78:12:3a:40:d4:e4:90:1c:7b:73:2f:1b:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=628fe2d2343cf28e227b54f804b2ce032d3d1895
Validity
Not Before: Feb 9 12:00:33 2026 GMT
Not After : Feb 10 12:00:33 2026 GMT
Subject: CN=d9e01272148ac6bc8d506afaea29207a0dbbe882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:93:ce:6e:4f:f7:cd:2a:f3:c2:31:ee:1d:83:
b7:5e:52:42:12:fc:f6:cf:93:da:77:99:91:83:43:
d9:af:97:12:ac:c8:d6:9a:8d:c4:b3:d1:5b:f4:2f:
02:3b:72:3a:14:8a:24:cf:61:d9:2e:f6:75:a4:fb:
d4:a7:df:f3:87:8b:2f:23:1d:5d:45:fa:9c:23:ab:
5f:fe:e0:df:fd:8c:ca:4e:a1:40:25:d8:dc:9c:48:
82:48:0d:3a:75:10:bc:e9:93:96:4a:e3:a9:5d:de:
a2:b3:4d:2c:a2:91:b1:0e:3c:42:03:5b:3b:c3:1a:
d6:1d:2c:d3:d4:2b:16:e4:f8:1d:53:58:c6:12:e6:
49:70:a5:b8:99:84:c4:39:e6:7a:28:e0:a2:a6:bf:
c9:ee:2a:1f:a3:ed:1a:fa:b7:2a:09:e0:a1:3a:db:
2f:04:0f:ec:21:ea:64:1a:ef:4e:35:85:74:f0:15:
b9:35:73:a9:36:6d:dd:62:a1:83:5f:a7:6c:cc:6b:
4c:fa:4e:31:e4:8d:9d:a1:eb:70:76:b8:2a:2c:f7:
f7:be:51:0b:27:e5:e2:40:71:8d:ec:67:a3:2e:fd:
59:77:39:e7:5a:3c:6b:46:71:f9:d9:e8:ea:da:6c:
f3:25:67:05:2c:c6:c6:e0:2a:85:8d:b5:b1:c6:d8:
65:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:E0:12:72:14:8A:C6:BC:8D:50:6A:FA:EA:29:20:7A:0D:BB:E8:82
X509v3 Authority Key Identifier:
keyid:62:8F:E2:D2:34:3C:F2:8E:22:7B:54:F8:04:B2:CE:03:2D:3D:18:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yo_i0jQ88o4ie1T4BLLOAy09GJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/9adbe4-3363-4523-9278-2f8121a28bf0/1/Yo_i0jQ88o4ie1T4BLLOAy09GJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/9adbe4-3363-4523-9278-2f8121a28bf0/1/Yo_i0jQ88o4ie1T4BLLOAy09GJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:c8:2d:b6:2e:39:51:47:a5:b6:e3:1c:02:64:03:50:0c:4e:
19:ca:10:be:2b:8e:a7:78:38:9b:5a:72:be:f3:fe:7a:1d:56:
f7:10:97:46:ca:b0:88:fc:0a:a7:d5:f1:d5:8b:00:15:12:db:
84:ad:3d:74:ba:4a:8b:47:58:4f:d6:07:f7:92:14:9c:d3:c2:
ac:b2:a4:95:20:88:84:ef:83:02:99:a6:45:df:63:b2:bb:75:
a9:db:8a:10:9e:37:24:58:d3:31:a4:d6:4a:7f:28:3d:be:e9:
fd:30:03:e0:4a:39:a3:ec:ce:ae:ad:fa:03:8f:60:19:16:e7:
ba:a5:28:e4:46:69:6a:36:b1:d2:14:f6:aa:49:bb:d0:87:e6:
33:2e:3d:a5:8d:c6:7e:1d:ae:47:af:df:2c:0d:3f:8a:cb:d2:
f9:c6:be:18:72:88:d2:0b:89:19:49:94:7b:12:8d:dc:d6:e9:
4d:c9:fb:bd:58:ca:0a:de:cc:f6:96:76:88:44:c7:cd:e5:81:
10:db:01:51:2f:6b:d6:3a:ea:5a:01:c1:21:52:fe:0f:37:a4:
bf:1b:00:3d:af:52:44:02:98:6a:f0:61:cf:0a:0a:08:d0:6f:
dd:7b:09:4a:88:98:83:4a:08:a1:35:38:fc:3d:50:87:0a:0a:
67:86:63:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:33:23 2026 by rpki-client