This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.mft
File: yRdwDdwOcosHKtQaPR6LaoCqdRA.mft (raw, json)
Hash identifier: eMjJxLZ6y0I7BZb57tgWVNRplan1059lv+/sAcUv9Tk=
Subject key identifier: AA:10:E1:F5:85:1F:91:D3:C4:B8:50:F5:0A:BD:20:99:CC:79:CC:86
Authority key identifier: C9:17:70:0D:DC:0E:72:8B:07:2A:D4:1A:3D:1E:8B:6A:80:AA:75:10
Certificate issuer: /CN=c917700ddc0e728b072ad41a3d1e8b6a80aa7510
Certificate serial: 019C44351772082F50823D6AF08585D41456
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yRdwDdwOcosHKtQaPR6LaoCqdRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.mft
Manifest number: 17A3
Signing time: Mon 09 Feb 2026 21:00:55 +0000
Manifest this update: Mon 09 Feb 2026 21:00:55 +0000
Manifest next update: Tue 10 Feb 2026 21:00:55 +0000
Files and hashes: 1: wbZC2ywn3MopqOZcK5wfTzngXuU.roa (hash: BKsSPZZN6H035QOhv5kmcLN6+1r7D6TcSZ6TgnVBHpE=)
2: yRdwDdwOcosHKtQaPR6LaoCqdRA.crl (hash: vzIYSUhAP54tF7S3GP5QQk0plPqrO5oOvWe0NaycsVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/yRdwDdwOcosHKtQaPR6LaoCqdRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:44:35:17:72:08:2f:50:82:3d:6a:f0:85:85:d4:14:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c917700ddc0e728b072ad41a3d1e8b6a80aa7510
Validity
Not Before: Feb 9 21:00:55 2026 GMT
Not After : Feb 10 21:00:55 2026 GMT
Subject: CN=aa10e1f5851f91d3c4b850f50abd2099cc79cc86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:50:51:ae:46:9c:a8:1b:20:91:f1:a7:b2:39:
9b:a0:dd:bd:91:2c:29:87:99:c8:43:59:13:2c:23:
63:6f:b3:65:09:d0:98:f9:f2:dd:bc:a9:b7:ea:1e:
89:d4:4a:96:b7:55:d6:fd:83:19:14:0e:77:9d:16:
0a:f2:bf:ef:73:8d:b3:65:11:5f:1a:e2:2a:27:2e:
c1:bd:7a:17:55:22:e5:0f:9b:58:f8:c1:66:6f:b2:
8b:18:00:a2:9c:20:db:14:ef:a4:8e:05:68:60:96:
29:55:ea:8f:24:64:3f:b4:51:d4:d5:92:ca:7d:b9:
69:9b:b8:e2:d7:02:37:b3:8a:1e:59:54:ea:1c:c9:
11:81:fe:ff:96:8f:8d:9d:1a:c4:8d:49:64:f1:1c:
db:4c:94:43:ea:4c:c1:8d:ce:c8:6f:20:a8:a2:49:
aa:aa:9f:a2:86:4b:6a:d8:6d:92:8f:a0:45:02:e4:
7c:8a:d3:e0:bc:84:b8:0d:9e:75:32:57:b4:00:f6:
ac:41:58:ff:8e:53:d1:90:e8:7e:cb:69:8f:7c:6d:
43:6c:b8:66:f7:9b:47:73:dd:c7:b0:27:fb:8e:ab:
d0:30:f1:5b:e9:41:ac:c0:d7:b1:1b:af:61:7f:04:
18:82:6a:03:fa:f3:89:1c:ad:1a:b7:81:3b:fb:4d:
77:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:10:E1:F5:85:1F:91:D3:C4:B8:50:F5:0A:BD:20:99:CC:79:CC:86
X509v3 Authority Key Identifier:
keyid:C9:17:70:0D:DC:0E:72:8B:07:2A:D4:1A:3D:1E:8B:6A:80:AA:75:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yRdwDdwOcosHKtQaPR6LaoCqdRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:76:f0:54:36:95:c3:64:86:fb:31:e3:3f:26:11:b5:ba:3e:
6b:92:04:aa:a9:b9:9d:eb:e3:b6:60:72:4c:37:1c:c6:e4:a6:
7c:5f:3d:72:cc:e7:f4:b1:45:c7:99:d2:1c:57:a4:c5:9c:d3:
ea:1e:ed:1a:41:e5:51:41:d8:e9:24:a1:54:de:4b:b5:be:b7:
9f:14:5f:f9:0a:03:32:3f:38:e7:65:de:c5:fd:a6:c1:54:27:
ae:12:2d:32:cd:eb:6f:4d:be:39:28:0d:1a:78:f5:5c:51:d1:
d1:88:b5:9f:e1:6c:e2:28:b3:25:54:ce:a1:56:7f:f9:a9:a7:
90:54:60:a0:2e:ff:12:d3:90:f8:b1:c0:ba:87:7f:c2:1d:eb:
1c:35:01:14:67:f7:e3:b2:3c:7e:04:e3:e7:8f:a6:13:67:01:
2c:ee:ad:d4:ce:ef:c7:cd:02:ac:67:e2:fa:f0:4c:c9:82:f3:
d5:4b:8d:5e:3c:c3:c0:6c:5c:17:5b:a3:98:9b:b3:86:28:69:
8e:aa:ba:49:ab:f5:93:17:bc:10:8b:1b:80:9c:b3:04:a8:04:
f3:1b:02:3b:a9:49:d7:d6:01:94:66:55:aa:b7:87:0f:bc:6c:
29:ce:9c:db:af:06:f6:82:c0:e5:1b:5d:b1:9d:31:a5:ed:29:
91:83:e2:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxENRdyCC9Qgj1q8IWF1BRWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5MTc3MDBkZGMwZTcyOGIwNzJhZDQxYTNkMWU4YjZhODBh
YTc1MTAwHhcNMjYwMjA5MjEwMDU1WhcNMjYwMjEwMjEwMDU1WjAzMTEwLwYDVQQD
EyhhYTEwZTFmNTg1MWY5MWQzYzRiODUwZjUwYWJkMjA5OWNjNzljYzg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2lBRrkacqBsgkfGnsjmboN29kSwp
h5nIQ1kTLCNjb7NlCdCY+fLdvKm36h6J1EqWt1XW/YMZFA53nRYK8r/vc42zZRFf
GuIqJy7BvXoXVSLlD5tY+MFmb7KLGACinCDbFO+kjgVoYJYpVeqPJGQ/tFHU1ZLK
fblpm7ji1wI3s4oeWVTqHMkRgf7/lo+NnRrEjUlk8RzbTJRD6kzBjc7IbyCookmq
qp+ihktq2G2Sj6BFAuR8itPgvIS4DZ51Mle0APasQVj/jlPRkOh+y2mPfG1DbLhm
95tHc93HsCf7jqvQMPFb6UGswNexG69hfwQYgmoD+vOJHK0at4E7+013+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKoQ4fWFH5HTxLhQ9Qq9IJnMecyGMB8GA1UdIwQY
MBaAFMkXcA3cDnKLByrUGj0ei2qAqnUQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVJkd0Rkd09jb3NIS3RRYVBSNkxhb0NxZFJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9lZmU2ZTYtMDMwNi00NzY5LTgwYWIt
N2ViZWMwZTI3YjI4LzEveVJkd0Rkd09jb3NIS3RRYVBSNkxhb0NxZFJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy9lZmU2ZTYtMDMwNi00NzY5LTgwYWItN2ViZWMwZTI3YjI4
LzEveVJkd0Rkd09jb3NIS3RRYVBSNkxhb0NxZFJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADHbwVDaV
w2SG+zHjPyYRtbo+a5IEqqm5nevjtmByTDccxuSmfF89cszn9LFFx5nSHFekxZzT
6h7tGkHlUUHY6SShVN5Ltb63nxRf+QoDMj8452Xexf2mwVQnrhItMs3rb02+OSgN
Gnj1XFHR0Yi1n+Fs4iizJVTOoVZ/+amnkFRgoC7/EtOQ+LHAuod/wh3rHDUBFGf3
47I8fgTj54+mE2cBLO6t1M7vx80CrGfi+vBMyYLz1UuNXjzDwGxcF1ujmJuzhihp
jqq6Sav1kxe8EIsbgJyzBKgE8xsCO6lJ19YBlGZVqreHD7xsKc6c268G9oLA5Rtd
sZ0xpe0pkYPi+A==
-----END CERTIFICATE-----
Generated at Tue Feb 10 00:17:29 2026 by rpki-client