This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/ab2b25-2a13-41f0-b9c5-fba49b0cdded/1/YB3AD5pIG0FQhrFDp91M2h_7JHA.mft
File: YB3AD5pIG0FQhrFDp91M2h_7JHA.mft (raw, json)
Hash identifier: oXijT7OF9K1eQhaB3onvk8jrLBpkh3fgJAUOAw/o6ZY=
Subject key identifier: 63:E5:C5:28:A2:80:B0:2F:BF:0C:DE:D8:82:05:ED:F6:BE:22:25:66
Authority key identifier: 60:1D:C0:0F:9A:48:1B:41:50:86:B1:43:A7:DD:4C:DA:1F:FB:24:70
Certificate issuer: /CN=601dc00f9a481b415086b143a7dd4cda1ffb2470
Certificate serial: 019C44DA15DC2EFDA2AFD99197B3FBE90DE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YB3AD5pIG0FQhrFDp91M2h_7JHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/ab2b25-2a13-41f0-b9c5-fba49b0cdded/1/YB3AD5pIG0FQhrFDp91M2h_7JHA.mft
Manifest number: 180F
Signing time: Tue 10 Feb 2026 00:01:08 +0000
Manifest this update: Tue 10 Feb 2026 00:01:08 +0000
Manifest next update: Wed 11 Feb 2026 00:01:08 +0000
Files and hashes: 1: YB3AD5pIG0FQhrFDp91M2h_7JHA.crl (hash: RqnS6bmUuqz1/4TEQpcLeQji3bJQpIBnhKuRFd5V1os=)
2: lGw_YgGDQ_SDhIlzZs4EtJHH-ik.roa (hash: Chowr6YW7ZD6NeZH4t2rIlYB6mz3gu7Q1zTWhZm5/rs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/ab2b25-2a13-41f0-b9c5-fba49b0cdded/1/YB3AD5pIG0FQhrFDp91M2h_7JHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/ab2b25-2a13-41f0-b9c5-fba49b0cdded/1/YB3AD5pIG0FQhrFDp91M2h_7JHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/YB3AD5pIG0FQhrFDp91M2h_7JHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:44:da:15:dc:2e:fd:a2:af:d9:91:97:b3:fb:e9:0d:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=601dc00f9a481b415086b143a7dd4cda1ffb2470
Validity
Not Before: Feb 10 00:01:08 2026 GMT
Not After : Feb 11 00:01:08 2026 GMT
Subject: CN=63e5c528a280b02fbf0cded88205edf6be222566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ea:aa:a1:82:be:0e:29:e0:49:c3:2c:82:8d:
30:b7:58:43:28:bc:de:a1:94:ce:b3:3f:01:2e:4b:
18:60:a5:e0:b2:41:7e:49:75:23:bb:90:e9:1a:2e:
c6:1d:34:d8:86:86:8d:21:58:29:cf:2f:56:af:f3:
7c:19:73:ad:dc:f7:05:2c:ca:c6:0c:90:dd:c5:cd:
cd:7a:36:85:b6:c7:9e:2c:b9:76:da:78:a2:64:86:
04:32:45:36:da:74:d3:8f:dd:59:05:ec:24:6d:4a:
ad:f7:be:99:db:32:00:1a:3b:9a:55:e4:d0:be:67:
c3:ad:ae:83:99:77:64:9a:69:b7:01:11:42:13:e2:
71:8b:cd:f5:be:57:44:9c:6d:22:b8:49:26:27:3b:
06:01:78:a5:f0:7b:b3:1b:28:8c:ab:9b:d0:e2:ea:
5b:9e:b1:0e:c2:9e:48:65:46:99:ff:50:6e:78:d3:
8f:ed:1b:9e:ff:f7:f1:e3:83:67:11:f5:85:75:a5:
56:c5:45:da:07:df:d0:56:0a:dc:8f:e8:ed:7a:27:
3b:71:17:59:c7:47:6c:1a:a4:c4:ba:c9:e7:7d:bf:
9b:e6:ca:06:fa:24:ec:f4:f6:3c:0a:11:75:c6:50:
88:ae:84:44:ae:cb:fc:81:22:ea:8c:44:fe:da:5f:
f0:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:E5:C5:28:A2:80:B0:2F:BF:0C:DE:D8:82:05:ED:F6:BE:22:25:66
X509v3 Authority Key Identifier:
keyid:60:1D:C0:0F:9A:48:1B:41:50:86:B1:43:A7:DD:4C:DA:1F:FB:24:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YB3AD5pIG0FQhrFDp91M2h_7JHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ab2b25-2a13-41f0-b9c5-fba49b0cdded/1/YB3AD5pIG0FQhrFDp91M2h_7JHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ab2b25-2a13-41f0-b9c5-fba49b0cdded/1/YB3AD5pIG0FQhrFDp91M2h_7JHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:9c:6e:6a:86:5c:eb:72:b6:48:d7:90:29:ba:73:98:9e:e6:
d0:91:b9:5e:8a:6b:86:51:d0:3e:81:ca:2c:82:2b:72:91:9a:
68:cc:ab:d1:6c:8b:ec:14:52:84:e9:5e:4a:de:74:6c:fe:71:
91:32:91:12:ff:bf:1c:ec:d7:d1:dc:d5:eb:40:06:6d:2b:62:
33:d7:14:00:2b:d1:14:ad:53:d4:aa:7c:80:ab:9c:16:9a:4a:
54:6a:f4:be:8a:5d:71:5d:2b:16:29:56:ce:9b:42:e9:f2:f2:
1a:b0:7a:d3:a0:e1:65:f6:64:e5:84:ff:aa:d3:c5:ea:1c:7d:
21:15:a4:78:28:17:f7:00:51:68:13:03:53:a2:32:b1:17:f6:
60:a7:d9:28:eb:b4:23:8f:00:6b:5b:b7:ea:0f:42:ab:b8:01:
5f:f0:5d:eb:ef:4e:d9:52:5a:d3:98:10:38:54:1b:af:83:6e:
bb:04:27:ee:ed:a8:da:e6:b2:0f:2a:91:a2:be:d9:b3:ad:b6:
40:f3:79:62:89:e9:6b:47:d6:89:f8:d1:5f:a9:ef:19:dc:58:
70:4a:4e:74:55:9e:8d:70:b3:89:54:91:fe:ab:9f:60:33:b5:
3b:23:89:ca:30:1e:fc:41:6a:40:43:72:92:93:ce:c0:6e:95:
8b:23:24:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:36:03 2026 by rpki-client