This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.mft
File: YM7rJThFxtyhkNNhbboj832LY5c.mft (raw, json)
Hash identifier: u3rOWIfwUGLHq2MLN4BaKlbpOyfonY3DD2D3XWx3kik=
Subject key identifier: 9E:EF:02:39:1A:AB:E0:3F:BD:B0:BA:F2:8B:5E:0E:61:C5:46:0F:A4
Authority key identifier: 60:CE:EB:25:38:45:C6:DC:A1:90:D3:61:6D:BA:23:F3:7D:8B:63:97
Certificate issuer: /CN=60ceeb253845c6dca190d3616dba23f37d8b6397
Certificate serial: 019BFD661F4DD56229669C9B1019E7C463C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YM7rJThFxtyhkNNhbboj832LY5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.mft
Manifest number: 16B5
Signing time: Tue 27 Jan 2026 03:01:26 +0000
Manifest this update: Tue 27 Jan 2026 03:01:26 +0000
Manifest next update: Wed 28 Jan 2026 03:01:26 +0000
Files and hashes: 1: Cg11mEMdGGX2gyolcrSr748KIcU.roa (hash: 3V0vGiMqAxDPqLJrSN6i0B3NMieXTNHwKiI1k1AtqLg=)
2: YM7rJThFxtyhkNNhbboj832LY5c.crl (hash: FSDU0Ng5tdVvvRxdKnkBPvdSNbLCwAm32QxPey/xBMg=)
3: bHRNvhdXhQYwYXjggK5qteZPiXg.roa (hash: eWeSNYg8xUhdeJoMB+7hoxfw30F/eTyyARYRyVWJvJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/YM7rJThFxtyhkNNhbboj832LY5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 20:39:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:fd:66:1f:4d:d5:62:29:66:9c:9b:10:19:e7:c4:63:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60ceeb253845c6dca190d3616dba23f37d8b6397
Validity
Not Before: Jan 27 03:01:26 2026 GMT
Not After : Jan 28 03:01:26 2026 GMT
Subject: CN=9eef02391aabe03fbdb0baf28b5e0e61c5460fa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:16:0c:7e:88:54:10:dc:82:82:0e:8d:3a:02:
5f:5f:a3:75:90:a2:7a:7e:03:98:b5:7f:de:a4:64:
23:7b:8a:8b:1c:0b:e3:1f:6f:11:e5:cd:40:4f:3e:
23:cb:85:36:03:f3:80:1c:60:10:ee:25:2a:b4:21:
f9:38:06:7e:93:16:20:b2:2b:62:20:a7:8e:98:1e:
96:98:57:01:ed:e0:32:1b:99:f2:e2:48:d0:d4:6f:
aa:e7:84:17:78:d0:18:a1:a9:64:86:f4:22:1a:18:
86:73:bc:fd:94:d0:1a:bd:72:cb:99:08:1b:44:a7:
f7:df:19:2f:8e:4e:fc:de:9c:4d:f0:44:c0:69:8a:
56:e8:33:38:a0:ec:19:cc:be:e2:69:15:dc:fe:e6:
a8:89:71:25:88:31:02:b8:c6:88:fd:d1:a2:34:de:
95:d6:8a:32:05:d7:52:ef:f6:63:a9:22:3a:53:b1:
be:ac:0c:05:eb:25:b8:01:bd:30:e6:d6:b9:3e:a7:
3b:40:03:ed:bf:fd:fa:d0:23:3c:5e:bd:10:10:09:
41:98:3b:77:21:11:ef:5a:e2:10:e0:41:0c:13:ca:
fa:63:de:65:6a:c3:23:52:f4:20:83:7a:a2:32:b1:
34:e9:37:cf:d0:a3:8e:ee:b5:81:8b:7c:71:fa:18:
6e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:EF:02:39:1A:AB:E0:3F:BD:B0:BA:F2:8B:5E:0E:61:C5:46:0F:A4
X509v3 Authority Key Identifier:
keyid:60:CE:EB:25:38:45:C6:DC:A1:90:D3:61:6D:BA:23:F3:7D:8B:63:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YM7rJThFxtyhkNNhbboj832LY5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:b8:84:57:ab:b0:10:fa:cd:67:83:2f:d3:82:b1:25:37:c4:
77:fe:5c:2f:bb:f8:7e:e9:b8:f0:68:ee:2b:9f:ee:d2:fa:73:
ba:14:d5:77:b3:e7:65:34:51:12:c5:21:b2:be:01:68:2e:48:
84:ef:df:eb:03:c7:93:bb:82:86:d2:96:4e:02:bc:0d:63:93:
1c:e4:c4:81:ed:de:e3:61:d0:d3:32:12:7c:4a:e4:c3:05:0b:
cf:93:80:d0:df:f2:b2:47:1e:d8:04:1e:60:61:58:4e:40:12:
df:f9:57:e3:71:76:ef:dd:be:85:4f:4d:ae:76:66:71:80:bb:
9b:72:bd:9f:be:11:e4:04:c7:86:81:18:57:f0:f5:be:bb:e2:
a2:27:57:2d:7f:3b:f2:d0:9f:07:f0:16:86:92:8e:c5:11:da:
cf:9b:41:2a:0e:e9:8c:cd:3d:89:5d:90:e5:93:09:15:fa:25:
c0:19:7b:32:a3:bc:7f:08:4d:c7:f7:63:fa:14:80:e5:6d:bd:
f4:b6:84:37:96:16:99:05:22:4c:1c:72:2c:f0:e2:e3:01:55:
40:5d:55:b5:69:66:81:05:b5:70:03:fb:66:da:31:a2:cd:47:
30:05:f3:8d:df:aa:21:c5:9a:bc:b6:83:58:cc:03:66:3b:78:
72:bb:c7:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 05:37:27 2026 by rpki-client