This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/876203-e8fd-472f-afc2-990385559d1c/1/Yc4uV_b4YsowVuX9Wz5urDVUBAE.mft
File: Yc4uV_b4YsowVuX9Wz5urDVUBAE.mft (raw, json)
Hash identifier: ezEJ4/7IBcorzy31f9G1hQfH3IhdqoWOXpl3LViEbY8=
Subject key identifier: B0:0E:BB:1D:F5:5D:AF:04:89:D5:0F:40:9B:21:E5:34:2B:D1:4D:DB
Authority key identifier: 61:CE:2E:57:F6:F8:62:CA:30:56:E5:FD:5B:3E:6E:AC:35:54:04:01
Certificate issuer: /CN=61ce2e57f6f862ca3056e5fd5b3e6eac35540401
Certificate serial: 019C439074AB6911DB6469DA51C54477AF6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yc4uV_b4YsowVuX9Wz5urDVUBAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/876203-e8fd-472f-afc2-990385559d1c/1/Yc4uV_b4YsowVuX9Wz5urDVUBAE.mft
Manifest number: 10D4
Signing time: Mon 09 Feb 2026 18:01:06 +0000
Manifest this update: Mon 09 Feb 2026 18:01:06 +0000
Manifest next update: Tue 10 Feb 2026 18:01:06 +0000
Files and hashes: 1: 4HGdwJ9XKTMjvxsJJx3zyDLYa54.roa (hash: jYE4b7p6t7BDzuGZyvDqlMeK+svfhmC8m+qt2BWH3iM=)
2: Yc4uV_b4YsowVuX9Wz5urDVUBAE.crl (hash: e1k5e1yj5Xr+xRkIXAsUO+gtI72+Bta0Eg9jGlp8EAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/876203-e8fd-472f-afc2-990385559d1c/1/Yc4uV_b4YsowVuX9Wz5urDVUBAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/876203-e8fd-472f-afc2-990385559d1c/1/Yc4uV_b4YsowVuX9Wz5urDVUBAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yc4uV_b4YsowVuX9Wz5urDVUBAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:90:74:ab:69:11:db:64:69:da:51:c5:44:77:af:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61ce2e57f6f862ca3056e5fd5b3e6eac35540401
Validity
Not Before: Feb 9 18:01:06 2026 GMT
Not After : Feb 10 18:01:06 2026 GMT
Subject: CN=b00ebb1df55daf0489d50f409b21e5342bd14ddb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:16:2a:31:55:a1:ea:d5:e3:57:79:6a:af:7a:
0d:f4:93:ab:21:8d:c4:1c:9b:02:23:cb:5c:08:52:
a2:8d:4c:8e:53:92:e9:92:04:78:ff:88:c0:d9:bd:
9b:9c:a1:5c:47:12:0e:d1:ee:0e:17:11:16:57:1d:
8e:17:fa:6a:05:88:ce:3c:6d:c1:95:18:25:00:77:
b5:39:7b:e7:2f:c5:0e:37:0e:b1:36:c6:d3:39:20:
ce:83:f1:01:98:88:72:52:cf:b8:59:c6:ac:a5:d7:
51:d2:66:d3:e7:83:61:1f:39:96:4e:e1:dd:24:89:
30:4c:8a:53:e0:2c:43:36:75:f5:5e:2f:56:e5:44:
4b:89:51:f1:5c:d1:e3:41:6b:a5:d5:59:12:0f:6a:
90:17:42:7d:81:2f:ae:f6:75:e2:5a:da:ee:77:3c:
ef:71:ce:75:af:49:24:2c:0b:ab:e5:1d:c3:c2:5a:
e0:a1:b1:fb:95:83:62:6b:54:74:eb:97:7d:82:76:
8d:d7:f9:1b:48:b2:0c:91:60:3a:0e:d5:2f:ef:ba:
91:55:ef:41:86:c8:e4:c8:55:02:f5:fd:93:3e:10:
64:25:27:22:3c:38:4c:24:b9:67:a3:46:e9:7f:29:
bf:53:4c:a8:c9:c2:af:79:1a:3a:d7:48:7a:66:a7:
fe:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:0E:BB:1D:F5:5D:AF:04:89:D5:0F:40:9B:21:E5:34:2B:D1:4D:DB
X509v3 Authority Key Identifier:
keyid:61:CE:2E:57:F6:F8:62:CA:30:56:E5:FD:5B:3E:6E:AC:35:54:04:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yc4uV_b4YsowVuX9Wz5urDVUBAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/876203-e8fd-472f-afc2-990385559d1c/1/Yc4uV_b4YsowVuX9Wz5urDVUBAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/876203-e8fd-472f-afc2-990385559d1c/1/Yc4uV_b4YsowVuX9Wz5urDVUBAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:0d:da:cc:77:f7:3c:71:a2:dd:25:83:49:97:bb:8e:7c:28:
3b:a2:46:2f:1b:e3:b6:1d:53:55:83:0f:bf:ff:05:78:4b:6b:
68:f7:13:82:0e:e4:69:a8:5b:b8:33:4b:7f:42:06:ad:a7:9d:
c5:f2:9d:6a:07:18:fb:7f:65:86:b3:18:02:74:9f:2a:26:91:
40:44:4a:dd:06:8b:b3:09:69:5f:19:5d:a2:17:5d:e1:2c:19:
ca:55:d7:b4:4c:aa:5a:67:86:1b:4e:5c:0b:0d:95:4f:f2:bd:
07:14:da:0c:67:2b:85:3b:4b:5b:00:c9:cb:2b:e6:96:f1:b7:
3f:31:ff:70:d0:83:1c:c5:6d:f0:d9:65:f1:7f:f6:c5:b2:e6:
de:5e:9b:d5:24:93:42:8f:1d:0b:6e:87:c5:df:6f:ae:39:c6:
22:74:9a:2f:c6:15:5e:33:46:bd:9f:f0:f0:ee:e3:30:5b:d9:
f7:fe:34:57:c4:2e:10:0a:a8:a4:73:81:d2:60:d6:af:32:12:
e1:6d:88:61:be:87:ea:2d:71:90:12:bc:ed:ba:16:d2:bf:b6:
15:a2:25:f5:2c:b2:50:d4:e7:8d:68:c5:82:9c:7f:44:94:bf:
fa:07:e5:b8:eb:0e:b7:6a:46:f6:6d:20:ab:9c:a0:47:dc:d0:
7a:11:08:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:06:45 2026 by rpki-client