This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.mft
File: YhGQEidXeAf0toyLjyX76pxyB2I.mft (raw, json)
Hash identifier: 9TxG2Iil4ROBw8Cs94jQUBZd3rRw2/G+TMJO6LuhIlQ=
Subject key identifier: 8D:89:4A:1B:BC:A3:44:13:2C:63:59:0E:DA:00:A8:8F:36:83:55:0B
Authority key identifier: 62:11:90:12:27:57:78:07:F4:B6:8C:8B:8F:25:FB:EA:9C:72:07:62
Certificate issuer: /CN=6211901227577807f4b68c8b8f25fbea9c720762
Certificate serial: 019C42EB3A7E0B3D54FB528CAA19B2C9E8D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YhGQEidXeAf0toyLjyX76pxyB2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.mft
Manifest number: 12D4
Signing time: Mon 09 Feb 2026 15:00:38 +0000
Manifest this update: Mon 09 Feb 2026 15:00:38 +0000
Manifest next update: Tue 10 Feb 2026 15:00:38 +0000
Files and hashes: 1: OVXT6gUHNs92I_TpJokrvNCUI_k.roa (hash: GunbA4sCmSgthfWeCRgymGCKQHjNQ++TdcqNZ9NqpfA=)
2: YhGQEidXeAf0toyLjyX76pxyB2I.crl (hash: T4AB54eTjKA9HxbShr8G/qDI4/FVQoIJ86i90LdJp48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/YhGQEidXeAf0toyLjyX76pxyB2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:eb:3a:7e:0b:3d:54:fb:52:8c:aa:19:b2:c9:e8:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6211901227577807f4b68c8b8f25fbea9c720762
Validity
Not Before: Feb 9 15:00:38 2026 GMT
Not After : Feb 10 15:00:38 2026 GMT
Subject: CN=8d894a1bbca344132c63590eda00a88f3683550b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b3:af:80:5c:c1:00:d4:2b:87:30:1a:e1:2f:
08:50:d2:fb:a1:87:7f:3a:0d:63:94:76:77:d3:0e:
fe:cf:bb:09:98:84:0f:66:f5:52:cb:3b:71:b8:a4:
25:d6:fd:8a:85:92:81:ac:ae:58:4d:76:0d:c0:4b:
ae:53:42:1f:af:b6:50:b7:2f:0b:10:a2:0c:4f:d8:
57:96:58:f2:86:de:56:bc:4d:af:c8:91:ef:fc:a2:
c6:db:93:0d:65:e7:76:a8:22:a1:cb:d0:4b:74:5c:
05:b6:6a:ce:cc:1a:f8:f1:21:74:a5:82:47:a0:3c:
81:05:3b:33:50:df:3e:59:aa:c1:7a:e3:f6:42:25:
f9:a7:22:7e:57:56:83:f3:81:77:12:88:b3:f3:e7:
14:1f:cc:66:af:05:89:3d:7a:da:ef:26:47:67:4b:
ba:39:cc:8f:f2:52:62:b2:79:1e:ac:1f:6b:a2:ee:
ac:f9:fb:ff:58:cc:8c:63:fc:a2:d7:da:a5:78:d8:
b5:21:02:a9:df:3c:fb:a6:a2:18:73:a8:3a:d4:f3:
13:4a:9f:c6:2b:6e:b6:d6:79:a8:9a:ac:da:73:03:
16:c1:a1:91:92:ab:bc:a4:6f:aa:27:1d:a0:fc:24:
e5:28:22:ed:6d:3c:97:57:83:59:b6:6b:60:c7:d9:
d2:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:89:4A:1B:BC:A3:44:13:2C:63:59:0E:DA:00:A8:8F:36:83:55:0B
X509v3 Authority Key Identifier:
keyid:62:11:90:12:27:57:78:07:F4:B6:8C:8B:8F:25:FB:EA:9C:72:07:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhGQEidXeAf0toyLjyX76pxyB2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:69:c7:68:dc:eb:a6:ff:ed:69:7a:48:d8:e2:d9:3d:04:f8:
1d:d0:d9:26:2c:54:08:61:42:77:07:3c:26:56:ec:14:9d:7f:
da:eb:57:7f:77:10:6f:d1:95:47:19:d0:29:40:e6:25:fe:31:
9b:e0:0b:97:a3:54:de:83:9e:a3:0b:5b:de:2d:d0:fa:c9:22:
ca:ab:af:c3:5d:42:00:db:6a:c4:ca:6b:82:cf:0f:b4:24:52:
0e:43:3b:6a:48:77:df:f5:70:4a:d3:7c:94:a9:26:6a:c1:d7:
81:cd:e7:18:29:ce:e9:62:62:c2:2d:2a:0f:68:a9:c1:5c:f0:
d2:01:dd:8b:b8:ec:54:68:76:91:2b:ef:07:ce:93:e9:ba:d1:
a5:e4:f0:1e:d5:c9:01:99:4c:72:84:45:50:b0:4c:24:fd:53:
bc:5f:73:28:26:ed:6d:86:1d:ab:7c:a7:28:56:42:28:a0:42:
9f:19:18:65:f3:da:58:41:78:30:ca:e4:fd:fd:60:1d:97:db:
6f:7c:19:be:75:53:6f:6a:34:db:35:dd:34:71:29:5e:47:1d:
e0:a0:81:2a:c4:b3:09:50:89:ec:28:ea:d3:4f:45:b1:2b:47:
13:fe:c3:42:90:ba:03:da:7b:14:1e:4f:5e:a9:b7:31:3d:fc:
ca:ef:10:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:07:38 2026 by rpki-client