This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.mft
File: dYYhYjrGyrj2veVSbnopMdYm_ow.mft (raw, json)
Hash identifier: OXGg8NFHBihouIrLCxogGNbUCssQYKsWJvWRr80pgUY=
Subject key identifier: 76:B8:EF:D0:49:59:AC:45:22:9C:B3:56:35:F9:33:05:51:A9:5E:0C
Authority key identifier: 75:86:21:62:3A:C6:CA:B8:F6:BD:E5:52:6E:7A:29:31:D6:26:FE:8C
Certificate issuer: /CN=758621623ac6cab8f6bde5526e7a2931d626fe8c
Certificate serial: 019C43909FD05A7E305585A7516B6CDC713A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dYYhYjrGyrj2veVSbnopMdYm_ow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.mft
Manifest number: 17A4
Signing time: Mon 09 Feb 2026 18:01:17 +0000
Manifest this update: Mon 09 Feb 2026 18:01:17 +0000
Manifest next update: Tue 10 Feb 2026 18:01:17 +0000
Files and hashes: 1: EXopuR5ESiK7_JfMXbRvvwemOwM.roa (hash: /csuVRW3pPg52UWTPGC8VigLMZFh8XPz4sQJGV29ruU=)
2: dYYhYjrGyrj2veVSbnopMdYm_ow.crl (hash: 5gMvmXcIVs3MtCjf7auRx41KAqQb8kT2MrBTWUjmT6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.mft
rsync://rpki.ripe.net/repository/DEFAULT/dYYhYjrGyrj2veVSbnopMdYm_ow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:90:9f:d0:5a:7e:30:55:85:a7:51:6b:6c:dc:71:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=758621623ac6cab8f6bde5526e7a2931d626fe8c
Validity
Not Before: Feb 9 18:01:17 2026 GMT
Not After : Feb 10 18:01:17 2026 GMT
Subject: CN=76b8efd04959ac45229cb35635f9330551a95e0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:79:0d:e8:e4:0a:6a:d5:e0:ea:44:2e:7d:d5:
62:37:be:e6:5c:73:fa:cd:ac:19:37:18:de:85:e4:
64:1e:d7:70:5c:06:a0:45:9c:c6:ba:a3:10:a6:d7:
a3:6d:77:f7:d6:c0:29:ab:9c:e4:51:ca:74:db:e9:
fd:28:00:34:f9:eb:8d:b3:ed:55:5f:35:40:e2:40:
c9:04:6f:97:45:49:26:96:e1:72:72:5b:8a:a3:56:
27:b8:b8:d1:5c:eb:d8:60:c1:d9:78:a0:87:aa:e5:
a0:3e:5d:84:8d:76:fe:f7:35:81:a2:b0:fd:75:5c:
11:fe:76:40:0a:1c:06:4e:9f:ef:79:b6:b4:ee:89:
73:4f:d3:11:bb:2f:07:c7:9d:2b:fd:9b:d4:e9:30:
11:8f:0a:fd:1b:79:d4:c9:e8:41:5a:94:05:ad:86:
d7:2d:d5:e5:ae:5b:bc:15:48:ef:49:97:76:1e:5d:
09:8c:c4:d4:56:49:b7:6b:e9:d1:7c:34:94:07:19:
c5:66:f8:8c:66:ce:03:ef:93:bd:5a:fa:d9:34:f8:
04:51:dd:62:fb:bf:df:1a:95:20:a9:dd:cd:ac:86:
39:70:2e:be:e4:d7:19:31:94:8a:c9:5a:8e:33:73:
95:88:e8:dd:79:b7:b7:3d:cd:de:20:d4:16:43:e8:
6f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:B8:EF:D0:49:59:AC:45:22:9C:B3:56:35:F9:33:05:51:A9:5E:0C
X509v3 Authority Key Identifier:
keyid:75:86:21:62:3A:C6:CA:B8:F6:BD:E5:52:6E:7A:29:31:D6:26:FE:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dYYhYjrGyrj2veVSbnopMdYm_ow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:2b:9f:9d:db:5d:28:56:79:c9:6a:3b:de:e8:0d:b6:af:7b:
90:ff:c3:a6:ca:0a:fc:40:f4:1f:aa:b3:2d:e5:5a:e2:10:95:
ff:3e:fc:f2:4e:9e:9a:65:f2:54:ab:e7:56:0e:50:fb:a9:8a:
47:91:71:a3:fe:3b:35:d2:ba:82:9f:e5:ca:b2:31:31:85:cf:
e7:82:c8:93:58:85:0e:f2:be:7c:8c:b7:df:53:69:e7:7e:3e:
ce:21:ce:13:9d:ae:62:0a:ed:56:04:86:15:29:17:59:4d:6f:
03:4c:95:87:ff:c6:8d:56:8f:cb:f7:76:f8:54:92:fa:b9:53:
43:44:b1:b3:a0:2b:ed:dd:78:02:6f:92:76:83:f5:7c:48:fa:
e0:eb:99:59:73:42:d0:19:71:ac:da:16:6c:9c:e3:28:d0:1b:
55:6c:8f:99:74:3c:bf:e6:7e:5d:01:04:91:15:29:d6:aa:3a:
68:12:a2:69:c6:68:eb:3c:27:29:ca:c3:a7:ba:0f:60:6a:92:
1a:59:4d:15:07:05:1f:90:de:b4:a3:9a:5b:00:60:8d:9b:3c:
43:d9:7b:82:cd:97:80:e0:f9:0a:8a:a6:eb:45:a7:b7:44:87:
b3:75:ca:dd:1c:ec:11:2e:24:4b:1c:99:12:ca:4d:69:17:4c:
5e:f0:ce:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:00:22 2026 by rpki-client