This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
File: CY97o0vGVnvTYW1XT3KF3XVW2_0.mft (raw, json)
Hash identifier: ClKtC89nxAXzsSPyFBuq0Ws9bXdCNxZ7Un4HPEkcJeA=
Subject key identifier: 82:D6:01:38:A9:C3:58:61:DC:14:36:3E:B5:25:72:E4:D6:4F:2A:7D
Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Certificate serial: 019C40C5B99051A271130DF1F2866B8D7BB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
Manifest number: 0C2F
Signing time: Mon 09 Feb 2026 05:00:25 +0000
Manifest this update: Mon 09 Feb 2026 05:00:25 +0000
Manifest next update: Tue 10 Feb 2026 05:00:25 +0000
Files and hashes: 1: CY97o0vGVnvTYW1XT3KF3XVW2_0.crl (hash: KpfjHuZJN3Q2xEYjCr6JwOdDSEIjyOxVmbXrfxp5SUU=)
2: IP0aVLnaY0te3-WRrsi7DFaXO_4.roa (hash: Xxny1qG2mRhaeS5oj19RU/vhLPgA+jSoozjn6tTTwWo=)
3: IcfiGiHhm-UnVbVbGBC_RtFqnfM.roa (hash: FGxn4dZpz1k+FXowXOdQoq7CmlfSlmu0geRbED6pnGQ=)
4: MWiV7graQLeuw4AYgJ4ZHIBAuZE.roa (hash: 5UScMx33ea6UI1n+yqJ+oTPgZkvCg216H08oUJCNoCY=)
5: d_rxJJRdc6lxglOZm6MPcxsRKVk.roa (hash: 09cxzd1TQUa9YcSDbUPMORsaaMIR6hUWI/wpDIjuvuY=)
6: earkCFjIv2or5fVmfCpyFBzbJ_0.roa (hash: dftgCu9tVXj4WgdmgDTiT0Fq8ps61PTLkvPOyslNpyo=)
7: h5YHyc0MmzGvq4YgXx8Mpbt82CY.roa (hash: hT18pU7cTeKJ68OyFrQNbEbvLKO/d8ePLsbG9hT8IJE=)
8: vv0I_9PClUpsKdM3Ws5mpj_Dbv0.roa (hash: Adx+Z7kMAGiZBllXqmWexxHoAMFVLGtlGl9lUzeKx9M=)
9: z5VJJncILn8SiX_0PBUpwSIBZR4.roa (hash: Ob/d4htJ7+Y8sve6AbDZ63e9bI8Fjky35VjD4Z3kSis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:40:c5:b9:90:51:a2:71:13:0d:f1:f2:86:6b:8d:7b:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Validity
Not Before: Feb 9 05:00:25 2026 GMT
Not After : Feb 10 05:00:25 2026 GMT
Subject: CN=82d60138a9c35861dc14363eb52572e4d64f2a7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:67:5f:cc:ec:0e:24:42:a6:e9:f2:6e:09:9b:
c1:11:e0:74:2c:75:ff:14:df:43:70:a1:07:f6:32:
55:28:f9:63:4b:a6:81:a0:b7:b2:29:fd:27:cd:7a:
c3:99:2e:0b:31:6c:ba:ec:8c:67:35:f7:a5:d6:0e:
c1:f0:1b:ba:d3:f6:40:20:d5:d6:39:34:48:f5:9d:
b7:b2:2d:cf:a6:87:a1:ee:fe:04:f6:a1:60:72:58:
8a:e6:ce:29:b1:9b:43:5d:de:a1:88:c4:4e:c0:23:
1a:90:2a:79:aa:2e:4d:86:07:a6:30:7b:35:3e:be:
7b:c5:b7:99:14:ad:7f:0e:b1:a8:6b:98:b7:b9:a8:
c3:30:89:34:92:ed:59:a6:d9:12:05:4d:3e:5e:f3:
16:31:39:64:00:0d:13:c2:2c:0c:f3:81:9c:2e:fe:
ea:ab:28:71:0b:e9:32:d4:98:93:14:e0:12:9f:ca:
b2:0c:7d:bc:78:46:e9:9e:b3:8d:76:7c:3c:a6:3c:
f7:8b:73:e3:92:0f:ea:e2:48:1b:ad:48:7e:91:44:
6d:61:38:13:28:45:cb:9e:56:8f:e5:ff:86:2a:dc:
e6:ba:c2:43:85:cc:3c:96:fd:de:39:c6:59:37:fd:
aa:8c:80:a0:7e:2c:62:63:72:ac:2a:a2:7e:e2:be:
6a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:D6:01:38:A9:C3:58:61:DC:14:36:3E:B5:25:72:E4:D6:4F:2A:7D
X509v3 Authority Key Identifier:
keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:03:45:a8:a6:58:d4:2f:32:68:0f:9c:ee:81:14:c4:64:2a:
e9:bb:8e:a3:e5:93:6f:17:f1:cc:ec:7e:b6:51:98:c9:67:ad:
a3:38:f3:20:90:f3:f0:ca:28:a0:4a:d4:09:87:08:27:ce:6b:
68:38:ef:53:71:02:64:c5:92:2a:2a:e9:72:51:a9:4a:37:34:
11:a4:cb:5a:85:49:f9:84:90:ab:29:0a:0a:51:f3:56:38:31:
75:cb:27:5f:08:de:b0:dd:de:32:05:09:f6:71:28:22:84:a7:
e4:9f:d6:19:10:b2:38:4e:5e:39:0a:38:d8:33:de:ff:cf:0f:
2e:a8:52:48:2f:79:5f:33:05:33:94:cf:67:c7:dc:e8:05:c6:
e8:65:44:93:81:92:69:29:8e:87:0c:e2:76:e3:e9:f8:ca:a7:
d0:f3:f2:a1:d0:9b:50:12:57:bc:9f:f4:26:f1:2a:9a:71:68:
a7:4e:93:14:84:6f:be:96:dd:d2:07:a2:28:47:91:bc:2b:c1:
ed:29:6b:54:33:1e:d7:35:f5:08:1a:e3:0b:f4:a0:86:23:5d:
6f:24:ad:f3:54:e7:61:d0:88:00:13:b3:3b:2f:98:9a:ce:0e:
d8:c0:33:09:be:5b:af:f3:1f:1d:08:6a:9f:20:de:ad:55:28:
99:2a:7b:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxAxbmQUaJxEw3x8oZrjXu1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5OGY3YmEzNGJjNjU2N2JkMzYxNmQ1NzRmNzI4NWRkNzU1
NmRiZmQwHhcNMjYwMjA5MDUwMDI1WhcNMjYwMjEwMDUwMDI1WjAzMTEwLwYDVQQD
Eyg4MmQ2MDEzOGE5YzM1ODYxZGMxNDM2M2ViNTI1NzJlNGQ2NGYyYTdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGdfzOwOJEKm6fJuCZvBEeB0LHX/
FN9DcKEH9jJVKPljS6aBoLeyKf0nzXrDmS4LMWy67IxnNfel1g7B8Bu60/ZAINXW
OTRI9Z23si3Ppoeh7v4E9qFgcliK5s4psZtDXd6hiMROwCMakCp5qi5NhgemMHs1
Pr57xbeZFK1/DrGoa5i3uajDMIk0ku1ZptkSBU0+XvMWMTlkAA0TwiwM84GcLv7q
qyhxC+ky1JiTFOASn8qyDH28eEbpnrONdnw8pjz3i3Pjkg/q4kgbrUh+kURtYTgT
KEXLnlaP5f+GKtzmusJDhcw8lv3eOcZZN/2qjICgfixiY3KsKqJ+4r5qWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFILWATipw1hh3BQ2PrUlcuTWTyp9MB8GA1UdIwQY
MBaAFAmPe6NLxlZ702FtV09yhd11Vtv9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8zOGM1YWMtYjdlNy00MGRkLTk4ZDMt
ZTIxNjZhZDc0ZTNmLzEvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC8zOGM1YWMtYjdlNy00MGRkLTk4ZDMtZTIxNjZhZDc0ZTNm
LzEvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEwNFqKZY
1C8yaA+c7oEUxGQq6buOo+WTbxfxzOx+tlGYyWetozjzIJDz8MoooErUCYcIJ85r
aDjvU3ECZMWSKirpclGpSjc0EaTLWoVJ+YSQqykKClHzVjgxdcsnXwjesN3eMgUJ
9nEoIoSn5J/WGRCyOE5eOQo42DPe/88PLqhSSC95XzMFM5TPZ8fc6AXG6GVEk4GS
aSmOhwziduPp+Mqn0PPyodCbUBJXvJ/0JvEqmnFop06TFIRvvpbd0geiKEeRvCvB
7SlrVDMe1zX1CBrjC/SghiNdbySt81TnYdCIABOzOy+Yms4O2MAzCb5br/MfHQhq
nyDerVUomSp7MQ==
-----END CERTIFICATE-----
Generated at Mon Feb 9 12:57:53 2026 by rpki-client