This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/d25015-7d24-4ad5-a2c1-ac4e28c2c5b6/1/yoFg7-OfGjB3_dL68ipkgEtUE4I.mft
File: yoFg7-OfGjB3_dL68ipkgEtUE4I.mft (raw, json)
Hash identifier: 6d6iQ+uTYnHbYD+HMQrdPlR9kwnk+rAJn2NQnzjR4GY=
Subject key identifier: 6F:AD:16:F9:60:2A:82:E3:CC:C2:E1:34:34:8A:BC:48:CE:A8:E0:14
Authority key identifier: CA:81:60:EF:E3:9F:1A:30:77:FD:D2:FA:F2:2A:64:80:4B:54:13:82
Certificate issuer: /CN=ca8160efe39f1a3077fdd2faf22a64804b541382
Certificate serial: 019C43FDCC0446A122EE43BCB3E04036AA5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yoFg7-OfGjB3_dL68ipkgEtUE4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/d25015-7d24-4ad5-a2c1-ac4e28c2c5b6/1/yoFg7-OfGjB3_dL68ipkgEtUE4I.mft
Manifest number: 14B1
Signing time: Mon 09 Feb 2026 20:00:32 +0000
Manifest this update: Mon 09 Feb 2026 20:00:32 +0000
Manifest next update: Tue 10 Feb 2026 20:00:32 +0000
Files and hashes: 1: c09YJVIz1gAeeersG-N_XV14zPo.roa (hash: A4WIJzWdDctFX+Ynr5FMyCdWVozIwFvvlX52iKZ/Phw=)
2: yoFg7-OfGjB3_dL68ipkgEtUE4I.crl (hash: ccfG5BrVKJrEcbgTTar59uLl/23tc2uzEt3cxZrhpGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/d25015-7d24-4ad5-a2c1-ac4e28c2c5b6/1/yoFg7-OfGjB3_dL68ipkgEtUE4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/d25015-7d24-4ad5-a2c1-ac4e28c2c5b6/1/yoFg7-OfGjB3_dL68ipkgEtUE4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/yoFg7-OfGjB3_dL68ipkgEtUE4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:fd:cc:04:46:a1:22:ee:43:bc:b3:e0:40:36:aa:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca8160efe39f1a3077fdd2faf22a64804b541382
Validity
Not Before: Feb 9 20:00:32 2026 GMT
Not After : Feb 10 20:00:32 2026 GMT
Subject: CN=6fad16f9602a82e3ccc2e134348abc48cea8e014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:85:b4:25:05:96:cf:49:50:74:62:89:c9:65:
f7:02:6f:29:4b:1a:be:8e:d1:c3:c9:7c:65:44:bc:
52:c5:64:0d:fb:3c:3a:3d:1c:0d:7d:07:1f:02:85:
02:21:11:da:ad:c2:d6:8f:31:17:80:48:41:ec:c9:
44:ce:1b:16:f1:6a:5c:b2:ff:1a:e5:41:13:fd:8b:
61:79:e8:4b:14:e7:53:8b:db:43:63:4a:98:d4:6c:
4e:27:14:dd:34:13:b2:90:e8:26:4a:e7:2b:b6:f1:
c5:d6:66:3f:e8:27:fb:ba:80:d3:5a:37:58:ae:26:
b9:93:a4:20:32:d9:c8:51:39:bc:b0:af:1e:5d:ed:
17:db:1b:84:c1:74:48:bb:b2:1e:30:cc:c8:e5:e4:
e8:73:88:da:8b:ed:d4:4c:07:67:01:62:fe:0f:42:
cc:58:ea:69:6b:1c:5c:92:c0:ed:56:6f:11:53:0f:
d4:fc:24:9c:2a:d8:e0:6d:eb:8c:0b:d0:c3:93:98:
2d:62:84:a8:7a:08:6e:90:58:b6:43:d7:22:51:5a:
b2:80:a0:6d:4f:c9:d0:a7:cf:77:cb:f6:7d:09:cd:
8a:5a:1f:c9:ad:c2:87:a3:b0:da:bf:00:27:90:31:
5c:4e:61:e4:6c:81:f1:10:07:a8:7c:55:34:56:a0:
c8:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:AD:16:F9:60:2A:82:E3:CC:C2:E1:34:34:8A:BC:48:CE:A8:E0:14
X509v3 Authority Key Identifier:
keyid:CA:81:60:EF:E3:9F:1A:30:77:FD:D2:FA:F2:2A:64:80:4B:54:13:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yoFg7-OfGjB3_dL68ipkgEtUE4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d25015-7d24-4ad5-a2c1-ac4e28c2c5b6/1/yoFg7-OfGjB3_dL68ipkgEtUE4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d25015-7d24-4ad5-a2c1-ac4e28c2c5b6/1/yoFg7-OfGjB3_dL68ipkgEtUE4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:fd:ac:62:5b:3d:eb:d2:70:53:ab:2f:49:3e:1a:5f:d2:d7:
37:47:6a:10:73:a8:de:87:5d:a5:8a:99:79:2f:ca:de:4c:d0:
78:50:61:61:df:9c:ea:7c:6e:c6:59:3c:fe:8e:99:09:6f:95:
6e:03:ec:67:01:1d:79:27:7e:39:5e:95:1e:c4:87:eb:34:75:
86:30:e0:4e:5d:65:4c:75:72:1c:82:81:7d:a5:ac:0f:6c:de:
08:91:23:38:da:2f:39:77:0e:f0:9d:70:7b:6e:25:07:67:f8:
54:33:03:e2:57:af:6f:92:98:4e:76:f3:4c:4c:5a:f9:35:43:
66:af:60:66:d8:be:e1:69:16:8b:ce:d4:a0:55:82:ff:d6:cb:
84:55:94:33:99:fc:67:a7:cd:ff:9b:72:5b:c6:3f:a1:f0:b2:
55:78:66:d4:de:18:32:63:3e:35:a7:09:0f:36:15:9d:37:80:
ac:25:7e:59:1c:56:7c:12:c1:ac:6c:55:01:ad:b8:13:24:d1:
79:64:b7:eb:f2:d0:02:b6:0f:a8:ad:8b:81:19:83:bc:6c:2d:
77:2c:05:20:17:b2:58:77:a3:a2:6d:cf:84:65:c0:2e:8d:06:
47:60:8f:f1:64:91:17:04:b2:90:f6:f7:5f:a9:73:fc:a7:fc:
89:32:b1:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxD/cwERqEi7kO8s+BANqpaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhODE2MGVmZTM5ZjFhMzA3N2ZkZDJmYWYyMmE2NDgwNGI1
NDEzODIwHhcNMjYwMjA5MjAwMDMyWhcNMjYwMjEwMjAwMDMyWjAzMTEwLwYDVQQD
Eyg2ZmFkMTZmOTYwMmE4MmUzY2NjMmUxMzQzNDhhYmM0OGNlYThlMDE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4W0JQWWz0lQdGKJyWX3Am8pSxq+
jtHDyXxlRLxSxWQN+zw6PRwNfQcfAoUCIRHarcLWjzEXgEhB7MlEzhsW8Wpcsv8a
5UET/YtheehLFOdTi9tDY0qY1GxOJxTdNBOykOgmSucrtvHF1mY/6Cf7uoDTWjdY
ria5k6QgMtnIUTm8sK8eXe0X2xuEwXRIu7IeMMzI5eToc4jai+3UTAdnAWL+D0LM
WOppaxxcksDtVm8RUw/U/CScKtjgbeuMC9DDk5gtYoSoeghukFi2Q9ciUVqygKBt
T8nQp893y/Z9Cc2KWh/JrcKHo7DavwAnkDFcTmHkbIHxEAeofFU0VqDIzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG+tFvlgKoLjzMLhNDSKvEjOqOAUMB8GA1UdIwQY
MBaAFMqBYO/jnxowd/3S+vIqZIBLVBOCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveW9GZzctT2ZHakIzX2RMNjhpcGtnRXRVRTRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9kMjUwMTUtN2QyNC00YWQ1LWEyYzEt
YWM0ZTI4YzJjNWI2LzEveW9GZzctT2ZHakIzX2RMNjhpcGtnRXRVRTRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9kMjUwMTUtN2QyNC00YWQ1LWEyYzEtYWM0ZTI4YzJjNWI2
LzEveW9GZzctT2ZHakIzX2RMNjhpcGtnRXRVRTRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI/2sYls9
69JwU6svST4aX9LXN0dqEHOo3oddpYqZeS/K3kzQeFBhYd+c6nxuxlk8/o6ZCW+V
bgPsZwEdeSd+OV6VHsSH6zR1hjDgTl1lTHVyHIKBfaWsD2zeCJEjONovOXcO8J1w
e24lB2f4VDMD4levb5KYTnbzTExa+TVDZq9gZti+4WkWi87UoFWC/9bLhFWUM5n8
Z6fN/5tyW8Y/ofCyVXhm1N4YMmM+NacJDzYVnTeArCV+WRxWfBLBrGxVAa24EyTR
eWS36/LQArYPqK2LgRmDvGwtdywFIBeyWHejom3PhGXALo0GR2CP8WSRFwSykPb3
X6lz/Kf8iTKxBA==
-----END CERTIFICATE-----
Generated at Mon Feb 9 22:41:37 2026 by rpki-client