This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
File: CY97o0vGVnvTYW1XT3KF3XVW2_0.mft (raw, json)
Hash identifier: d9GSbkzgiTS3Kcz3N54MFzeWDyK9RcRU5p7RqQOz2Yk=
Subject key identifier: 98:34:B5:CD:61:30:77:C7:9A:89:AF:43:40:7B:A5:C9:B3:AE:43:C8
Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Certificate serial: 019C315291E615446DADED47B4D3BE1E1D6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
Manifest number: 0C27
Signing time: Fri 06 Feb 2026 05:00:20 +0000
Manifest this update: Fri 06 Feb 2026 05:00:20 +0000
Manifest next update: Sat 07 Feb 2026 05:00:20 +0000
Files and hashes: 1: CY97o0vGVnvTYW1XT3KF3XVW2_0.crl (hash: bYrqEEyWbw7ZEXiEcyfFzKMNdTglAvb40fmSl/8ADDc=)
2: IP0aVLnaY0te3-WRrsi7DFaXO_4.roa (hash: Xxny1qG2mRhaeS5oj19RU/vhLPgA+jSoozjn6tTTwWo=)
3: IcfiGiHhm-UnVbVbGBC_RtFqnfM.roa (hash: FGxn4dZpz1k+FXowXOdQoq7CmlfSlmu0geRbED6pnGQ=)
4: MWiV7graQLeuw4AYgJ4ZHIBAuZE.roa (hash: 5UScMx33ea6UI1n+yqJ+oTPgZkvCg216H08oUJCNoCY=)
5: d_rxJJRdc6lxglOZm6MPcxsRKVk.roa (hash: 09cxzd1TQUa9YcSDbUPMORsaaMIR6hUWI/wpDIjuvuY=)
6: earkCFjIv2or5fVmfCpyFBzbJ_0.roa (hash: dftgCu9tVXj4WgdmgDTiT0Fq8ps61PTLkvPOyslNpyo=)
7: h5YHyc0MmzGvq4YgXx8Mpbt82CY.roa (hash: hT18pU7cTeKJ68OyFrQNbEbvLKO/d8ePLsbG9hT8IJE=)
8: vv0I_9PClUpsKdM3Ws5mpj_Dbv0.roa (hash: Adx+Z7kMAGiZBllXqmWexxHoAMFVLGtlGl9lUzeKx9M=)
9: z5VJJncILn8SiX_0PBUpwSIBZR4.roa (hash: Ob/d4htJ7+Y8sve6AbDZ63e9bI8Fjky35VjD4Z3kSis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Feb 2026 05:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:31:52:91:e6:15:44:6d:ad:ed:47:b4:d3:be:1e:1d:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Validity
Not Before: Feb 6 05:00:20 2026 GMT
Not After : Feb 7 05:00:20 2026 GMT
Subject: CN=9834b5cd613077c79a89af43407ba5c9b3ae43c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:28:e6:01:a1:e7:bf:41:b8:40:56:35:53:1a:
6e:65:e0:64:5b:78:86:32:6b:c9:b6:22:c1:c7:d9:
5a:d0:92:07:39:bb:cc:93:f0:2d:26:43:00:e9:a4:
d0:b0:f9:d1:40:da:bc:cb:d1:30:3b:a2:5d:48:2f:
78:b6:ee:11:ee:a3:36:6c:cc:48:91:c2:1e:16:07:
1a:a9:43:53:c8:aa:6b:a3:8c:2e:a4:be:fc:e7:fb:
21:b0:58:b4:3d:ff:1b:96:f1:af:35:96:4e:84:7d:
a0:11:93:98:ce:39:22:2b:db:f9:9f:69:54:81:79:
1d:11:e2:dd:bc:7f:b0:ee:e3:d8:1b:6d:34:df:e9:
6a:fc:de:40:3f:91:71:d3:a5:e9:36:db:dd:44:ad:
de:36:e1:d4:7f:25:37:2e:c6:5e:50:e3:c2:8a:ab:
c2:ff:f6:d7:18:f0:8a:e3:e1:70:08:c1:45:ad:ca:
84:e8:f8:16:4f:e1:ea:c5:e7:68:d4:4d:4f:64:86:
63:1c:7d:05:82:19:fe:7d:84:74:c4:7f:ea:dd:a2:
fd:da:06:29:fc:1f:90:fd:22:43:1b:85:d1:43:f2:
59:e8:07:5e:73:a1:83:65:b5:60:65:90:41:95:2b:
2e:e0:21:56:f5:f7:93:98:61:7b:88:46:06:a1:ef:
f6:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:34:B5:CD:61:30:77:C7:9A:89:AF:43:40:7B:A5:C9:B3:AE:43:C8
X509v3 Authority Key Identifier:
keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:b7:25:0a:95:8d:bf:0d:b2:ba:22:27:ff:a8:44:92:d1:89:
b8:8c:12:5b:ca:a7:47:78:d2:6b:d0:fa:54:42:c7:a5:d1:50:
66:02:03:ba:0b:04:c1:c6:44:1d:2f:43:b2:1a:20:6e:e8:8a:
f6:a5:d8:06:68:28:39:20:b8:92:95:a1:fa:dd:e2:55:5e:5e:
30:80:30:29:a0:64:39:67:2c:c9:78:77:73:4e:5f:f9:0f:29:
86:22:f6:7f:05:13:d5:79:d3:fd:51:68:29:1c:62:ba:8a:f9:
25:31:59:7f:a8:46:11:7d:7d:01:37:7b:37:45:28:76:6d:22:
71:4f:fe:d6:d3:40:21:17:aa:80:e5:fc:36:a9:e3:42:bd:a6:
2f:6f:93:41:b5:26:fd:61:c8:eb:6e:9a:d5:73:d2:c0:0c:69:
8f:94:f8:ab:31:85:ca:1f:89:03:2a:5a:7d:c8:bb:c6:bf:b8:
de:ac:9d:03:67:97:b0:11:30:ae:7b:f0:ca:93:89:ba:d9:ac:
e5:e7:e9:53:e5:bc:02:62:64:85:46:b2:a0:82:84:36:3b:7a:
8a:54:a7:9f:ca:ab:0d:f8:ba:61:0a:0e:eb:a0:4a:91:7f:07:
62:ef:98:ab:4c:b2:f9:f9:22:8b:6b:a1:22:b9:17:b8:e0:83:
81:13:84:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 6 11:55:11 2026 by rpki-client