This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/af1d49-d0e4-4d68-8dee-dd69a4ee1350/1/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.mft
File: y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.mft (raw, json)
Hash identifier: 4b+fLIoQnS4+atKSWx0OIHgnag9Af8bzcAF1e4w2q8Q=
Subject key identifier: 6F:C1:27:2B:AC:5B:4F:90:AA:95:22:C8:E0:40:25:30:90:7C:6B:3E
Authority key identifier: CB:9F:19:CC:1A:D7:87:45:A5:DA:B3:1D:63:40:57:E2:9A:BF:ED:8C
Certificate issuer: /CN=cb9f19cc1ad78745a5dab31d634057e29abfed8c
Certificate serial: 019C42EB0722165343CA74ABBCC6B3DD3262
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/af1d49-d0e4-4d68-8dee-dd69a4ee1350/1/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.mft
Manifest number: 08D5
Signing time: Mon 09 Feb 2026 15:00:24 +0000
Manifest this update: Mon 09 Feb 2026 15:00:24 +0000
Manifest next update: Tue 10 Feb 2026 15:00:24 +0000
Files and hashes: 1: PR91ry3J0euYdorH5rO0N-Bkpvk.roa (hash: DbSkzL37Cl5yQPPXgAD1SKpuqfRlWV4g2sxvgZ9ZsC8=)
2: y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.crl (hash: rjtjjo8WFGElfPcg9HGInKHaDZfTrHrcx0wiLyteG3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/af1d49-d0e4-4d68-8dee-dd69a4ee1350/1/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/af1d49-d0e4-4d68-8dee-dd69a4ee1350/1/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.mft
rsync://rpki.ripe.net/repository/DEFAULT/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:eb:07:22:16:53:43:ca:74:ab:bc:c6:b3:dd:32:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb9f19cc1ad78745a5dab31d634057e29abfed8c
Validity
Not Before: Feb 9 15:00:24 2026 GMT
Not After : Feb 10 15:00:24 2026 GMT
Subject: CN=6fc1272bac5b4f90aa9522c8e0402530907c6b3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:98:48:b1:75:a6:bc:ea:ad:65:c6:02:4a:62:
14:de:c7:b9:43:46:64:ce:23:1f:65:6c:a6:c6:f1:
16:23:dc:f4:ef:a1:10:d6:1b:ac:6e:5e:88:e2:11:
2d:6e:c7:78:4f:d6:c9:45:f1:75:36:85:ca:76:72:
ce:3c:45:43:97:35:1f:95:1d:9b:39:bc:1c:97:64:
a0:09:18:6f:ac:ae:4b:8a:f7:46:b6:c7:b8:44:bc:
93:bd:64:01:26:90:47:64:49:46:8b:39:37:47:d6:
3e:9d:07:25:ff:95:c0:1a:ab:5c:b0:bf:b5:1a:3c:
b6:54:c7:bc:22:37:d8:27:84:bb:59:37:cd:6b:eb:
05:0b:4f:ae:ce:3c:00:e0:51:cf:9a:7e:71:e7:fa:
7f:4d:cf:f6:2a:68:d4:0a:c5:16:6b:fc:6b:3f:b8:
58:3d:9f:25:3b:21:66:32:60:22:10:9c:f7:ec:21:
c5:85:ea:1d:97:84:77:61:a1:cb:2b:fc:9d:4d:f3:
4f:52:de:c9:02:38:3c:53:4b:4f:92:c0:94:5b:83:
8d:f1:3c:65:52:f7:de:fa:35:05:34:1d:12:6f:65:
50:61:95:bb:52:0b:c9:f9:db:0a:1c:7a:68:42:65:
ca:e9:46:c9:59:e9:34:ea:9c:67:56:ce:75:b4:9c:
f7:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:C1:27:2B:AC:5B:4F:90:AA:95:22:C8:E0:40:25:30:90:7C:6B:3E
X509v3 Authority Key Identifier:
keyid:CB:9F:19:CC:1A:D7:87:45:A5:DA:B3:1D:63:40:57:E2:9A:BF:ED:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/af1d49-d0e4-4d68-8dee-dd69a4ee1350/1/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/af1d49-d0e4-4d68-8dee-dd69a4ee1350/1/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:bc:46:93:2e:ae:dc:8f:23:40:de:23:8a:af:2d:8b:92:ee:
02:95:bb:9b:52:f8:6b:88:43:d1:86:9a:f6:e1:49:69:b2:61:
33:2a:b0:89:de:c2:cd:75:aa:ed:46:1a:9c:59:90:9d:70:2b:
3d:a1:a7:ed:ae:60:0b:da:ce:31:2b:e6:7b:f0:e1:74:29:2c:
df:04:21:2f:b3:c0:5e:5e:79:cf:55:e9:dd:e1:9e:53:23:41:
97:c2:f8:d4:02:a0:52:ed:05:85:af:da:18:47:70:41:f0:dd:
fe:fb:4c:b5:72:d5:05:5f:87:1c:39:46:da:ca:21:96:e5:a1:
da:e1:47:4e:db:96:8a:56:c7:28:42:d7:34:91:31:56:c7:41:
a1:78:b9:a3:8e:ad:ca:56:0d:a7:b0:03:e8:51:ff:ce:48:ce:
76:10:20:bb:ed:9a:52:b2:b8:b5:84:16:71:da:7c:d6:ac:14:
74:11:86:c5:4d:c6:70:70:19:ea:f5:9c:de:12:f2:40:e2:1e:
98:19:81:55:8f:71:46:7c:58:16:0b:3d:da:10:b3:84:50:f4:
10:1b:04:db:40:05:7e:23:f1:f9:e0:38:b0:40:2e:5a:53:eb:
a2:25:e0:ca:b2:3b:df:f3:93:65:30:20:bb:a0:22:fb:6e:d1:
ae:01:f3:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:42:00 2026 by rpki-client