This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/dd59d9-eadf-4713-8977-42fa3cfbb503/1/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.mft
File: yCvtvPe1Ng_uJFt6JV9mQLcnaWg.mft (raw, json)
Hash identifier: tdwF7PhB4wOUkpwjwUO3vXECJx976zLTcJwHCGE5bSc=
Subject key identifier: 06:E9:CB:9B:4D:A0:B4:FE:A3:6B:7A:2C:7D:A9:BA:18:64:14:88:87
Authority key identifier: C8:2B:ED:BC:F7:B5:36:0F:EE:24:5B:7A:25:5F:66:40:B7:27:69:68
Certificate issuer: /CN=c82bedbcf7b5360fee245b7a255f6640b7276968
Certificate serial: 019C42EBB755F418F705BE1658A6421F0DE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/dd59d9-eadf-4713-8977-42fa3cfbb503/1/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.mft
Manifest number: 08E7
Signing time: Mon 09 Feb 2026 15:01:10 +0000
Manifest this update: Mon 09 Feb 2026 15:01:10 +0000
Manifest next update: Tue 10 Feb 2026 15:01:10 +0000
Files and hashes: 1: DORV4pmNtMNbt7N-1Ic0VMu4Bf0.roa (hash: gYw5oMexnS1c9Oco6dCQvq1ElaASC3rv7wtCZQiWRBY=)
2: yCvtvPe1Ng_uJFt6JV9mQLcnaWg.crl (hash: 4ZhXEyR1QHcqBQCZvpl4V0RmCwiI9laEv8pEjbzD8Dw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/dd59d9-eadf-4713-8977-42fa3cfbb503/1/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/dd59d9-eadf-4713-8977-42fa3cfbb503/1/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:eb:b7:55:f4:18:f7:05:be:16:58:a6:42:1f:0d:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c82bedbcf7b5360fee245b7a255f6640b7276968
Validity
Not Before: Feb 9 15:01:10 2026 GMT
Not After : Feb 10 15:01:10 2026 GMT
Subject: CN=06e9cb9b4da0b4fea36b7a2c7da9ba1864148887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:69:54:52:28:58:c9:68:8d:fa:34:33:28:33:
be:73:1a:92:bb:22:05:95:57:b5:67:b5:6c:18:34:
ba:0f:4e:9e:14:99:34:5d:9c:e8:84:5f:fc:28:1b:
28:b9:2b:d1:7b:61:47:13:8b:a5:a9:a2:a8:b8:5a:
b4:9c:10:a5:4f:90:da:0b:ca:01:3a:0c:f5:9a:9c:
3c:8a:fe:36:93:fe:d9:06:75:41:48:97:01:37:2c:
fd:7c:06:65:cb:ca:91:05:58:9b:c3:6f:2b:ef:e0:
da:84:96:86:3b:7f:8b:0c:8b:7c:95:49:65:d6:15:
c6:12:82:30:d0:83:39:41:b9:bd:25:b7:b1:19:c5:
ee:18:bc:07:41:f4:3b:1a:a0:e5:72:fb:a7:0a:8e:
72:64:81:94:9f:35:93:b7:f7:a1:af:50:0f:5b:42:
b1:54:0f:e3:37:3c:f1:b3:49:a2:70:65:d1:17:28:
b5:1b:5b:12:a2:15:8a:9a:12:dd:26:97:fa:9f:fb:
71:b8:0d:47:0a:00:ae:a1:1a:5e:86:e9:a8:a4:ae:
74:d9:1d:c2:43:9b:b2:2f:10:d4:88:29:fb:d1:c4:
95:16:d1:c7:bb:5a:36:12:73:ef:2b:db:3d:f4:20:
be:12:ed:e5:3e:39:c4:fb:8e:a5:43:e8:cf:fd:17:
10:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:E9:CB:9B:4D:A0:B4:FE:A3:6B:7A:2C:7D:A9:BA:18:64:14:88:87
X509v3 Authority Key Identifier:
keyid:C8:2B:ED:BC:F7:B5:36:0F:EE:24:5B:7A:25:5F:66:40:B7:27:69:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/dd59d9-eadf-4713-8977-42fa3cfbb503/1/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/dd59d9-eadf-4713-8977-42fa3cfbb503/1/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:af:68:33:56:7b:59:61:4f:21:40:a8:f7:fc:b2:7f:de:02:
3a:4d:75:bf:71:e8:8f:3b:05:3d:08:05:f7:11:2b:84:22:10:
28:fe:6d:77:ae:52:2a:48:22:fa:50:7f:3a:ec:37:51:d8:58:
c8:01:e1:3d:9d:04:63:45:39:45:f2:99:33:c5:c7:b4:24:ae:
16:b8:d6:c8:47:4b:1b:b8:e3:a1:8d:80:2a:99:1f:5e:d5:64:
a0:06:67:fd:4a:06:e9:c4:9f:44:80:32:6b:80:98:7e:b4:06:
1d:51:09:e4:65:35:c5:f0:fa:e6:91:e0:5c:9f:9a:c7:b0:43:
cb:cd:43:3c:f1:95:61:bc:67:a9:44:0e:f5:a2:88:de:3b:ac:
c7:4a:82:45:1e:1b:6f:28:1c:5a:88:98:31:7b:20:3a:c5:07:
2c:6a:02:12:33:f4:0d:e7:2c:69:d4:8c:b8:4d:e9:7b:99:f6:
c2:5d:bf:28:46:1b:d0:b3:3e:19:f1:cf:b2:5d:43:d4:35:ce:
aa:06:98:53:c4:5c:66:26:ea:03:ed:fa:d2:0b:61:00:bb:1e:
26:13:09:17:0e:48:71:1e:78:74:91:ea:a8:19:f1:25:a7:30:
c1:e3:c4:41:17:de:38:e1:48:44:1e:31:dc:c9:c7:16:75:e5:
06:38:ab:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:47:57 2026 by rpki-client