This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/b9b3b4-cc9e-4003-972d-f15048ee0f22/1/ySyVKWqMqBGSh-IWpGlTwjowm-s.mft
File: ySyVKWqMqBGSh-IWpGlTwjowm-s.mft (raw, json)
Hash identifier: /MSGrQ8eF4KnkV4mg1BblPd1nGzRESyu5cs6YqeiTqQ=
Subject key identifier: 15:71:43:40:98:7A:78:3C:E4:17:47:1B:7F:FC:83:AD:C1:7C:B8:C7
Authority key identifier: C9:2C:95:29:6A:8C:A8:11:92:87:E2:16:A4:69:53:C2:3A:30:9B:EB
Certificate issuer: /CN=c92c95296a8ca8119287e216a46953c23a309beb
Certificate serial: 019C41344E30CEA7A57AB4AFFBE707E2C2F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ySyVKWqMqBGSh-IWpGlTwjowm-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/b9b3b4-cc9e-4003-972d-f15048ee0f22/1/ySyVKWqMqBGSh-IWpGlTwjowm-s.mft
Manifest number: 02C3
Signing time: Mon 09 Feb 2026 07:01:12 +0000
Manifest this update: Mon 09 Feb 2026 07:01:12 +0000
Manifest next update: Tue 10 Feb 2026 07:01:12 +0000
Files and hashes: 1: ySyVKWqMqBGSh-IWpGlTwjowm-s.crl (hash: LuH/EpoeUnNUA+1IbX1V5y+5yGgNwK9ga1OixpeFABE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/b9b3b4-cc9e-4003-972d-f15048ee0f22/1/ySyVKWqMqBGSh-IWpGlTwjowm-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/b9b3b4-cc9e-4003-972d-f15048ee0f22/1/ySyVKWqMqBGSh-IWpGlTwjowm-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/ySyVKWqMqBGSh-IWpGlTwjowm-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 07:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:34:4e:30:ce:a7:a5:7a:b4:af:fb:e7:07:e2:c2:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c92c95296a8ca8119287e216a46953c23a309beb
Validity
Not Before: Feb 9 07:01:12 2026 GMT
Not After : Feb 10 07:01:12 2026 GMT
Subject: CN=15714340987a783ce417471b7ffc83adc17cb8c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:47:86:5a:14:98:e1:99:43:58:5e:9c:c4:7d:
1e:51:d7:d0:57:a3:ae:dc:81:d6:10:30:4a:cd:0f:
23:9f:e7:ec:ad:c0:46:bc:b0:3c:4e:1a:68:72:ba:
29:02:37:be:dc:8a:15:e2:4e:a7:fb:02:47:70:30:
ac:6d:57:5c:dc:74:4c:2c:ea:d4:b0:4c:0e:b5:94:
08:5c:59:20:9c:f1:cc:fa:6f:7b:16:54:27:a1:5c:
a2:82:c6:52:01:1e:53:76:fd:d1:a8:d8:49:bf:65:
38:04:09:c8:9c:21:8c:fb:b9:d2:45:ef:a6:ae:2a:
63:2d:58:a1:ac:e8:e0:7f:34:75:7f:33:bf:a2:94:
92:4b:1d:80:19:c9:d8:05:79:00:b1:3e:d8:05:ca:
fb:01:56:c2:fb:00:c2:33:e4:c6:9b:08:7d:33:ed:
08:09:5b:ea:75:b7:14:ec:3c:6e:8c:73:f3:77:36:
36:5a:78:75:3b:07:b3:13:5c:b1:0f:52:f0:ee:64:
89:9c:fc:b6:a5:31:bc:01:92:5d:4a:9c:3e:0a:27:
c1:6e:08:1a:49:4c:71:19:3e:3c:95:f6:d6:97:24:
9b:36:40:f2:ee:4a:41:d6:c2:95:55:3c:cc:3e:1a:
42:c3:7e:b9:84:dc:1b:b8:2a:62:49:3b:de:9f:54:
1b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:71:43:40:98:7A:78:3C:E4:17:47:1B:7F:FC:83:AD:C1:7C:B8:C7
X509v3 Authority Key Identifier:
keyid:C9:2C:95:29:6A:8C:A8:11:92:87:E2:16:A4:69:53:C2:3A:30:9B:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ySyVKWqMqBGSh-IWpGlTwjowm-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/b9b3b4-cc9e-4003-972d-f15048ee0f22/1/ySyVKWqMqBGSh-IWpGlTwjowm-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/b9b3b4-cc9e-4003-972d-f15048ee0f22/1/ySyVKWqMqBGSh-IWpGlTwjowm-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:d9:e7:9b:dc:5a:1c:f1:2b:e5:f9:47:bb:7b:1d:9e:8f:d6:
bd:92:98:3b:91:0b:73:c2:1c:53:8b:a0:f4:f9:4b:f9:17:02:
8a:6d:46:35:f9:f5:94:6b:e2:71:7a:16:21:87:2e:0f:99:6f:
71:a2:7c:73:fb:02:a2:a2:b0:f0:d4:a9:af:d7:bf:6d:0e:8b:
e2:8e:22:93:47:2d:dc:b7:15:9d:06:6e:3d:4a:ae:22:4b:9b:
1a:3e:c6:b8:a7:2d:ba:5c:f9:60:69:8a:8b:b5:49:98:31:86:
a3:a7:b8:55:f8:e2:97:78:17:5e:a8:4b:0b:d7:6a:06:87:b2:
5b:2f:e6:4e:67:6c:c7:2d:b0:ac:b9:68:6c:bc:88:61:1c:e7:
82:8d:0f:9a:dc:62:85:7f:ef:ef:cb:aa:5d:69:55:46:95:78:
49:de:46:03:c6:48:db:60:b0:d9:db:04:b0:6d:30:1b:55:62:
e0:ff:c8:04:bc:01:2a:66:f8:6b:0c:ac:f1:0d:ad:2c:7e:6b:
05:11:05:da:fe:59:87:53:60:e4:b9:02:98:22:9f:d1:93:13:
99:e8:5d:21:4e:14:ac:05:0a:4e:dd:cd:9d:42:a9:d7:ba:7c:
5d:fc:77:30:12:3e:10:df:d9:b5:f1:b8:d0:bb:e3:aa:77:69:
2d:de:32:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:56:34 2026 by rpki-client