This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.mft
File: ybBR6OaBSbZgROfeSuWdc25Teqo.mft (raw, json)
Hash identifier: fCFYlx23Xtucsle6RX8fbaFm4GD0FrtSGWXqhh8UJmg=
Subject key identifier: 8A:4D:69:72:4D:4A:AF:CC:FC:60:77:0B:73:A5:92:B2:C3:53:AC:37
Authority key identifier: C9:B0:51:E8:E6:81:49:B6:60:44:E7:DE:4A:E5:9D:73:6E:53:7A:AA
Certificate issuer: /CN=c9b051e8e68149b66044e7de4ae59d736e537aaa
Certificate serial: 019C070D72C2E242FD8D49AD6D15C550AF2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ybBR6OaBSbZgROfeSuWdc25Teqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.mft
Manifest number: 07DA
Signing time: Thu 29 Jan 2026 00:00:47 +0000
Manifest this update: Thu 29 Jan 2026 00:00:47 +0000
Manifest next update: Fri 30 Jan 2026 00:00:47 +0000
Files and hashes: 1: ElQ5chtEAtBtP2GIXdac_TddA80.roa (hash: HOH5oCt/YkRKpTxo1H1ugWQGWMm04Hcv5fnFxFjdw8s=)
2: mDTOHKx9pFPb6EOP9UxQxm-ClKw.roa (hash: 38/vqHt1v0uvrIdlEvEwCRci+eMQynBKytD9wiXBCtc=)
3: nu9XCXuPflVxiBkepDLOxds4g2s.roa (hash: W/feVk1DUwfkmSjB+I5O4CPhUu5C032era/IbMRpza0=)
4: ybBR6OaBSbZgROfeSuWdc25Teqo.crl (hash: CfDVCZoWtytJDKfAhKKzz6Jufc/ESnPHjinp040TMbw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ybBR6OaBSbZgROfeSuWdc25Teqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Jan 2026 00:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:07:0d:72:c2:e2:42:fd:8d:49:ad:6d:15:c5:50:af:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9b051e8e68149b66044e7de4ae59d736e537aaa
Validity
Not Before: Jan 29 00:00:47 2026 GMT
Not After : Jan 30 00:00:47 2026 GMT
Subject: CN=8a4d69724d4aafccfc60770b73a592b2c353ac37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9c:ce:2b:f0:56:88:7a:e7:b0:97:b1:4d:45:
7b:56:99:bc:07:af:87:e4:88:f5:55:7e:06:2a:4c:
f3:c7:df:21:52:eb:6e:ac:a5:d8:c6:e8:c5:06:29:
d7:be:1d:98:60:24:3b:58:a2:06:4f:42:16:21:7e:
16:1b:bd:e9:8e:48:20:52:80:a9:77:e4:bc:54:f9:
aa:74:7a:ff:46:9e:72:93:da:0d:49:9a:76:4c:a9:
19:ca:7c:6a:c5:e6:f5:41:c1:df:ff:b3:04:4f:f2:
13:a1:22:f4:a2:77:13:ad:55:61:10:39:4e:a7:6a:
58:87:72:eb:35:32:ef:8b:fe:5c:63:4a:0b:8c:56:
f2:6b:e7:8e:bd:cd:7f:ca:7b:cd:55:99:e9:d7:47:
01:74:9f:26:47:6d:61:ab:15:37:8a:4d:56:a1:48:
ec:98:d4:44:c7:ed:1d:0e:2c:54:5e:dd:34:dd:fa:
c5:a1:0c:20:e4:51:74:7c:35:b8:ce:ef:0f:2b:82:
a5:8d:d5:de:f8:be:52:ca:42:a4:e5:03:b8:16:2c:
52:98:3d:19:bb:28:90:cf:2b:2a:cc:82:e7:6d:ec:
e7:7f:5c:9b:ed:59:eb:34:e5:56:a9:94:6e:3c:43:
36:16:91:7e:1e:a9:b7:81:d1:9c:68:96:a8:2b:d3:
43:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:4D:69:72:4D:4A:AF:CC:FC:60:77:0B:73:A5:92:B2:C3:53:AC:37
X509v3 Authority Key Identifier:
keyid:C9:B0:51:E8:E6:81:49:B6:60:44:E7:DE:4A:E5:9D:73:6E:53:7A:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ybBR6OaBSbZgROfeSuWdc25Teqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:e4:2f:bf:d2:be:00:43:18:74:55:de:18:fe:33:a6:51:0b:
68:08:92:ae:53:0e:77:7d:23:d4:06:e7:7a:19:3f:d8:1f:71:
7e:a4:75:a6:4f:61:88:7d:9c:42:82:a1:96:5f:0f:ea:72:7e:
d8:e2:ba:60:ca:eb:9d:f1:0c:69:a8:6d:63:9c:d8:cd:09:58:
4e:a1:f0:6c:ae:78:70:69:d9:be:46:d2:11:d7:be:1b:6f:cf:
a9:ed:5b:e3:8d:99:bd:97:fe:97:4e:3f:58:be:31:2a:f4:1e:
24:e5:54:47:6d:b7:28:6e:f4:24:c8:d3:23:af:2f:ca:94:a4:
04:7e:58:4a:28:89:f8:4e:c0:ba:81:e8:e3:10:2f:70:55:28:
c4:fa:5e:fb:a3:3f:95:a1:e1:ff:b2:15:e3:ca:d3:1c:e4:1b:
54:ba:b6:4e:30:15:30:a5:09:3c:ae:fc:75:c0:d2:9d:a7:26:
df:f5:d8:5c:d9:c4:48:c8:eb:d8:20:c8:4f:b7:e5:02:c0:0b:
bf:ed:bc:4e:93:9d:89:36:0f:e5:63:ad:45:37:a0:03:31:59:
a2:94:93:9e:98:b5:d9:3b:5f:d0:d8:76:e2:45:b0:c1:a4:6a:
84:4e:b7:02:bb:ab:01:09:ba:55:7b:cd:60:b0:8a:3b:03:2a:
8b:ea:82:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 07:39:51 2026 by rpki-client