This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/7da34c-3984-4442-b646-e3138ff1e899/1/yniqfjFrIfhDz7lYEMaAzdv6bm8.mft
File: yniqfjFrIfhDz7lYEMaAzdv6bm8.mft (raw, json)
Hash identifier: Lma4cWxrO8aaSLsMY6+7HxSswLfN2Q6vIC3+FYRXHSE=
Subject key identifier: 5B:C5:A4:AA:C0:00:4A:9A:D4:5A:18:35:D1:18:C9:D2:8D:80:BB:F4
Authority key identifier: CA:78:AA:7E:31:6B:21:F8:43:CF:B9:58:10:C6:80:CD:DB:FA:6E:6F
Certificate issuer: /CN=ca78aa7e316b21f843cfb95810c680cddbfa6e6f
Certificate serial: 019C42EB776CA217D4C219CBF478E11F51B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yniqfjFrIfhDz7lYEMaAzdv6bm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/7da34c-3984-4442-b646-e3138ff1e899/1/yniqfjFrIfhDz7lYEMaAzdv6bm8.mft
Manifest number: 0561
Signing time: Mon 09 Feb 2026 15:00:53 +0000
Manifest this update: Mon 09 Feb 2026 15:00:53 +0000
Manifest next update: Tue 10 Feb 2026 15:00:53 +0000
Files and hashes: 1: NmILLaZO13ylxBiJtXCUuUjLxwc.roa (hash: ouwe61Qw3KErUT8wYroof+WiBVltIWBJpKDg8a/XyWg=)
2: yniqfjFrIfhDz7lYEMaAzdv6bm8.crl (hash: euVEhsU5/vcZLb25rgmVWJObhPR/rQVmqNAb00BfvEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/7da34c-3984-4442-b646-e3138ff1e899/1/yniqfjFrIfhDz7lYEMaAzdv6bm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/7da34c-3984-4442-b646-e3138ff1e899/1/yniqfjFrIfhDz7lYEMaAzdv6bm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/yniqfjFrIfhDz7lYEMaAzdv6bm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:eb:77:6c:a2:17:d4:c2:19:cb:f4:78:e1:1f:51:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca78aa7e316b21f843cfb95810c680cddbfa6e6f
Validity
Not Before: Feb 9 15:00:53 2026 GMT
Not After : Feb 10 15:00:53 2026 GMT
Subject: CN=5bc5a4aac0004a9ad45a1835d118c9d28d80bbf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:14:07:f7:e2:a3:04:9d:21:48:a4:38:79:6a:
bb:7d:aa:19:82:eb:aa:13:96:38:7a:7b:b0:14:3b:
ce:92:4e:c2:2a:04:bb:06:69:7a:5c:7c:16:32:48:
e1:e3:17:39:73:6c:f0:42:7b:7f:7d:10:37:00:7c:
6d:a0:ac:ce:9d:bb:d3:8b:24:f8:0e:12:fe:39:17:
a4:69:df:7f:8a:98:e6:d0:f7:07:5a:48:18:5e:29:
c3:fa:a5:bc:5c:d1:85:eb:e5:13:c8:37:60:d9:70:
45:9b:e7:62:b5:1f:11:63:c1:92:db:6d:82:02:99:
05:cb:52:fc:25:a8:3f:05:5e:2e:e5:6c:bc:e4:3e:
34:8b:52:f9:9a:43:7d:d0:9e:b5:4b:a2:6b:8f:db:
75:d1:9e:d9:8c:80:a6:56:55:08:b7:fb:f8:44:25:
f7:34:ca:17:20:ef:07:e8:cd:eb:29:01:1f:7b:48:
50:63:7d:84:43:70:9a:e1:6a:61:d0:64:dc:c1:f1:
2a:1c:c9:3c:53:fd:5d:9a:34:53:21:a8:0a:d4:48:
43:f4:82:71:5b:bc:87:be:eb:39:71:d4:88:1b:2e:
1f:1e:ff:dc:e4:03:a6:ac:02:91:38:67:d9:a3:9e:
26:f3:14:3f:b5:4a:43:56:52:dc:e8:8e:a8:27:dc:
45:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:C5:A4:AA:C0:00:4A:9A:D4:5A:18:35:D1:18:C9:D2:8D:80:BB:F4
X509v3 Authority Key Identifier:
keyid:CA:78:AA:7E:31:6B:21:F8:43:CF:B9:58:10:C6:80:CD:DB:FA:6E:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yniqfjFrIfhDz7lYEMaAzdv6bm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/7da34c-3984-4442-b646-e3138ff1e899/1/yniqfjFrIfhDz7lYEMaAzdv6bm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/7da34c-3984-4442-b646-e3138ff1e899/1/yniqfjFrIfhDz7lYEMaAzdv6bm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:8c:45:7a:30:1a:a2:3d:21:e7:9e:81:8a:f7:36:2f:79:00:
df:64:f9:b5:3b:d2:29:5f:3a:59:ae:d7:d9:ee:d2:cb:c6:5e:
ae:c8:74:91:a0:c8:f3:e3:1f:3d:80:fd:84:a1:0e:9f:35:ba:
36:32:39:37:63:00:c0:ac:cc:03:fb:bb:cc:86:95:b0:ca:78:
ca:c5:ab:0a:62:02:ad:8e:4f:96:de:34:fd:66:08:3f:4b:73:
d0:70:de:49:6b:0a:df:f9:4e:77:b1:6e:f8:11:39:d1:4e:ac:
82:1a:61:04:5b:bc:af:09:62:5f:94:b1:01:c6:6e:0e:5c:42:
da:6a:6b:f1:73:16:a5:fe:bc:d7:f6:90:43:cd:89:e2:74:50:
db:c9:4c:70:3a:86:95:73:b1:2e:9a:d1:25:5d:e0:92:46:f8:
78:19:80:23:bf:bb:a6:72:86:2d:d0:02:63:a1:77:e5:3e:b4:
34:69:01:4d:30:92:ba:c6:ef:3d:ae:49:77:91:71:bd:4c:15:
6f:b8:8a:63:55:2b:44:e1:11:17:44:88:cd:3d:07:9d:7f:11:
4d:1b:2c:35:50:af:22:1e:99:55:a6:a6:2e:58:61:19:1e:dd:
e5:e4:5a:c5:2d:d0:a0:cf:1a:7f:24:84:e8:67:62:d3:7c:db:
40:78:04:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 23:52:22 2026 by rpki-client