This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/255576-248b-4b01-a0ea-e928ef640df8/1/Ya6c-i1ltBVC037v8dHGw4eqobU.mft
File: Ya6c-i1ltBVC037v8dHGw4eqobU.mft (raw, json)
Hash identifier: iat5xzTh/9BdUaO2OckhKNjzPulhnCR+St6nOBESAxI=
Subject key identifier: 0C:AF:B7:43:3C:E0:A4:33:C4:C3:13:D9:AA:EA:3B:6B:50:F4:25:E6
Authority key identifier: 61:AE:9C:FA:2D:65:B4:15:42:D3:7E:EF:F1:D1:C6:C3:87:AA:A1:B5
Certificate issuer: /CN=61ae9cfa2d65b41542d37eeff1d1c6c387aaa1b5
Certificate serial: 019C43C6E481B06B522CC5A3FACF7789A0AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ya6c-i1ltBVC037v8dHGw4eqobU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/255576-248b-4b01-a0ea-e928ef640df8/1/Ya6c-i1ltBVC037v8dHGw4eqobU.mft
Manifest number: 02AE
Signing time: Mon 09 Feb 2026 19:00:33 +0000
Manifest this update: Mon 09 Feb 2026 19:00:33 +0000
Manifest next update: Tue 10 Feb 2026 19:00:33 +0000
Files and hashes: 1: Ya6c-i1ltBVC037v8dHGw4eqobU.crl (hash: A/RAqGdJNsdclx/+FB129La96AZZ4DncfQ55uLu2pqc=)
2: sfmJbUZjOF9ZmOGBjeFTlVAjkiM.roa (hash: SJvy+b4frEQGMy5gxf3VawAH0CiFxMKXegFK+YmGabE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/255576-248b-4b01-a0ea-e928ef640df8/1/Ya6c-i1ltBVC037v8dHGw4eqobU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/255576-248b-4b01-a0ea-e928ef640df8/1/Ya6c-i1ltBVC037v8dHGw4eqobU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ya6c-i1ltBVC037v8dHGw4eqobU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:c6:e4:81:b0:6b:52:2c:c5:a3:fa:cf:77:89:a0:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61ae9cfa2d65b41542d37eeff1d1c6c387aaa1b5
Validity
Not Before: Feb 9 19:00:33 2026 GMT
Not After : Feb 10 19:00:33 2026 GMT
Subject: CN=0cafb7433ce0a433c4c313d9aaea3b6b50f425e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8e:73:91:d4:05:a0:0d:dc:dc:fd:49:d6:a6:
2d:19:0d:03:43:80:e5:2c:36:f1:70:c3:57:88:4b:
a5:8a:66:46:fc:99:23:c2:1f:ff:18:cd:a5:5e:81:
bc:de:10:a3:a3:f3:7d:92:f2:ce:61:6e:7d:88:23:
1d:7f:23:fe:c0:43:84:e7:f7:61:ed:11:66:6d:9b:
02:11:1f:05:26:d8:1b:03:1c:65:c9:77:06:8c:b2:
de:95:23:da:2e:31:f9:20:d5:58:0e:58:85:b4:ca:
0b:f1:b2:c1:e6:3c:03:bf:dc:33:07:3f:7a:d4:de:
5f:5b:b7:d4:e3:f5:f9:8a:64:64:95:41:d1:6b:3c:
59:7f:ec:da:99:31:00:07:42:65:0c:a5:f9:ac:63:
ef:6e:5b:d8:82:d6:09:85:b8:bc:50:f6:64:c7:ca:
c4:6f:2f:cc:68:52:c3:9c:e2:8a:0c:5b:2a:84:31:
c7:b9:33:c8:ee:56:6a:d7:61:ce:2b:73:e3:37:22:
ca:5c:92:af:29:7c:7c:0b:b1:16:fe:df:81:85:ba:
f8:c0:44:4c:d9:43:e4:ed:32:e4:84:36:91:9a:e3:
f3:d9:dc:63:13:94:49:6f:ce:07:20:fc:25:3c:68:
32:9d:8e:32:7c:75:58:1a:80:94:f1:b5:9a:37:21:
37:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:AF:B7:43:3C:E0:A4:33:C4:C3:13:D9:AA:EA:3B:6B:50:F4:25:E6
X509v3 Authority Key Identifier:
keyid:61:AE:9C:FA:2D:65:B4:15:42:D3:7E:EF:F1:D1:C6:C3:87:AA:A1:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ya6c-i1ltBVC037v8dHGw4eqobU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/255576-248b-4b01-a0ea-e928ef640df8/1/Ya6c-i1ltBVC037v8dHGw4eqobU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/255576-248b-4b01-a0ea-e928ef640df8/1/Ya6c-i1ltBVC037v8dHGw4eqobU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:cd:ff:3b:2d:6e:1e:47:88:31:0b:ce:53:71:7d:1d:1c:2a:
ee:af:0a:70:0d:33:61:a1:76:50:97:a9:fa:da:e9:9b:84:77:
71:7e:68:5a:0d:ee:ff:5a:14:9b:6b:f6:5b:38:9f:77:ff:e5:
49:36:78:e4:10:63:34:4b:50:c1:c7:91:94:04:29:05:bd:aa:
be:1d:bb:1d:d4:0e:b7:20:72:47:b9:47:85:9f:ef:72:7b:fa:
28:94:c6:fc:9f:34:ab:6b:43:21:4b:1e:b2:ab:a3:b3:91:00:
5d:fd:55:fa:76:96:1d:ed:df:44:c2:a4:ae:7a:78:25:85:1b:
4a:de:a3:ab:eb:1e:63:31:b3:9d:b9:87:99:92:9b:85:ba:8b:
ce:bb:7a:09:6e:37:3e:9f:a0:d1:18:cb:c2:98:07:69:73:7c:
de:ae:70:61:19:47:74:ca:a3:47:db:73:11:8e:eb:b5:f3:4a:
34:b6:d9:a4:dc:52:c1:ee:8f:ff:6b:fd:ce:a6:e6:5a:38:e7:
49:f8:4e:c0:84:78:aa:4d:be:51:2e:1f:fa:95:2c:3b:84:20:
a2:3e:14:a4:5e:cc:33:93:d9:1f:7c:8d:53:18:20:2f:d8:f4:
60:9c:a8:47:e5:b2:79:3e:d6:9f:c5:35:f5:86:21:e1:9f:78:
e6:d6:99:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:39:34 2026 by rpki-client