This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/0797d4-8b2c-40ac-9cab-667db1dc1b86/1/yzYYCrRULW7uZtn5kDDfcSNs4mQ.mft
File: yzYYCrRULW7uZtn5kDDfcSNs4mQ.mft (raw, json)
Hash identifier: 0LX8O33kk0aAhoKe+UiHsGjzANegu7sbCn1JcnHf8tY=
Subject key identifier: 8A:95:F0:EB:25:2D:A8:E9:6A:F2:0F:76:C9:78:5A:F6:F8:1B:C6:5D
Authority key identifier: CB:36:18:0A:B4:54:2D:6E:EE:66:D9:F9:90:30:DF:71:23:6C:E2:64
Certificate issuer: /CN=cb36180ab4542d6eee66d9f99030df71236ce264
Certificate serial: 019C41D8ADFF454FD34802549BFB96C138E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzYYCrRULW7uZtn5kDDfcSNs4mQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/0797d4-8b2c-40ac-9cab-667db1dc1b86/1/yzYYCrRULW7uZtn5kDDfcSNs4mQ.mft
Manifest number: 1656
Signing time: Mon 09 Feb 2026 10:00:45 +0000
Manifest this update: Mon 09 Feb 2026 10:00:45 +0000
Manifest next update: Tue 10 Feb 2026 10:00:45 +0000
Files and hashes: 1: YgLAaePPCvDZh9ZzJBrsmZywRkU.roa (hash: 10ewXw/vVeO2nVxiawAtU8/pk3cVQJEH1/dY2293hpE=)
2: yzYYCrRULW7uZtn5kDDfcSNs4mQ.crl (hash: 69XdXvnf6k5IC0GK6RPUyTn/qKCu8V/+dtk2yzqZN/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/0797d4-8b2c-40ac-9cab-667db1dc1b86/1/yzYYCrRULW7uZtn5kDDfcSNs4mQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/0797d4-8b2c-40ac-9cab-667db1dc1b86/1/yzYYCrRULW7uZtn5kDDfcSNs4mQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yzYYCrRULW7uZtn5kDDfcSNs4mQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 10:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:d8:ad:ff:45:4f:d3:48:02:54:9b:fb:96:c1:38:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb36180ab4542d6eee66d9f99030df71236ce264
Validity
Not Before: Feb 9 10:00:45 2026 GMT
Not After : Feb 10 10:00:45 2026 GMT
Subject: CN=8a95f0eb252da8e96af20f76c9785af6f81bc65d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1c:cb:fa:92:24:a4:49:7d:94:e0:eb:b0:52:
75:1d:cd:36:b0:62:61:e8:f9:a2:82:ea:6c:17:4b:
9f:85:77:14:c8:aa:9a:f8:63:6a:42:10:cc:7c:b0:
2e:c6:1f:f4:5a:c4:2a:30:23:5a:40:77:d1:f6:cc:
f1:5c:55:f9:18:11:04:2d:c3:97:e6:0d:32:e0:7c:
fe:0c:3b:7e:37:75:9a:2f:ac:7b:a0:6d:be:2d:9d:
a8:09:9d:5e:49:ea:58:cb:f0:07:87:06:f4:b3:ea:
17:23:d2:c7:de:ed:0d:f5:89:23:9a:ea:03:f6:19:
47:0f:73:1f:7b:27:e5:00:ba:bf:fc:ac:69:a5:51:
c1:3e:fb:82:7d:c4:62:5a:d8:27:03:a9:2b:48:41:
1f:aa:47:65:90:96:48:f3:d6:b7:c0:eb:4c:c9:f3:
9b:9b:5c:f8:e9:41:f5:f1:da:85:02:92:67:6e:89:
17:0c:e8:16:f4:51:81:73:07:06:75:b1:be:80:33:
59:89:78:83:60:a1:51:80:eb:9b:94:2b:86:9a:12:
a8:33:2d:79:03:c6:51:1a:d8:65:d5:65:14:64:c2:
a9:2c:30:9f:cf:00:0e:4e:ef:06:dd:a9:1f:46:fe:
07:fa:d8:d6:17:10:ef:4c:e1:5a:44:7f:37:8c:11:
2c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:95:F0:EB:25:2D:A8:E9:6A:F2:0F:76:C9:78:5A:F6:F8:1B:C6:5D
X509v3 Authority Key Identifier:
keyid:CB:36:18:0A:B4:54:2D:6E:EE:66:D9:F9:90:30:DF:71:23:6C:E2:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzYYCrRULW7uZtn5kDDfcSNs4mQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0797d4-8b2c-40ac-9cab-667db1dc1b86/1/yzYYCrRULW7uZtn5kDDfcSNs4mQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0797d4-8b2c-40ac-9cab-667db1dc1b86/1/yzYYCrRULW7uZtn5kDDfcSNs4mQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:ff:e9:46:12:d4:44:73:90:1d:e9:ad:9c:a4:b8:61:ec:93:
5a:91:6e:a0:68:3f:78:fb:43:59:ce:ee:8f:fe:37:07:48:fe:
60:9a:00:2f:fd:19:68:4e:69:2d:59:a7:d7:f6:25:37:53:cf:
6e:0e:fa:17:de:db:39:fb:c9:99:0e:88:e7:e6:81:61:34:ab:
a6:0a:57:ae:2b:4e:1f:c2:a5:ba:74:8e:5f:7d:16:37:22:e2:
c3:28:60:96:65:a9:1c:fe:bd:2f:9a:c6:54:29:36:0a:13:1a:
28:db:98:f7:4f:79:06:02:59:89:f0:e2:f9:4f:5c:a3:2b:7f:
d0:0d:d8:f3:a6:14:97:3a:29:ed:2f:24:8f:d9:4d:f1:87:23:
92:2e:4c:04:09:64:c7:4f:36:69:ee:b7:78:12:61:77:c6:d1:
82:c2:1a:28:c0:c7:43:9b:03:6d:13:a5:41:1b:cf:ca:fe:da:
68:e4:f8:22:9a:cf:7a:7f:d8:3a:e1:a2:91:78:4d:62:ba:2a:
a0:ce:1f:2a:13:8a:f0:b7:3f:51:17:09:15:36:6c:92:7d:fd:
ad:87:0e:07:56:fa:10:ab:c1:f9:1e:d0:41:15:75:5f:50:3d:
9a:5b:0f:b4:86:4c:64:f4:9e:76:5a:85:55:75:ac:70:f8:24:
61:6f:97:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:40:42 2026 by rpki-client