This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/f96121-0335-402d-8491-4d88fce32399/1/YgTQ-JHcR16nA-be89bq0ej3wtY.mft
File: YgTQ-JHcR16nA-be89bq0ej3wtY.mft (raw, json)
Hash identifier: vVmcN4NoUBX8MVGpIG3WkgqSTWMU8DUDU4kp/0DZeVA=
Subject key identifier: 5C:C4:1F:20:D5:D3:30:4F:AA:2D:A9:2B:58:1D:65:65:B6:0F:C8:3F
Authority key identifier: 62:04:D0:F8:91:DC:47:5E:A7:03:E6:DE:F3:D6:EA:D1:E8:F7:C2:D6
Certificate issuer: /CN=6204d0f891dc475ea703e6def3d6ead1e8f7c2d6
Certificate serial: 019C420FEA2376D83058B793D53C04C9757E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YgTQ-JHcR16nA-be89bq0ej3wtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/f96121-0335-402d-8491-4d88fce32399/1/YgTQ-JHcR16nA-be89bq0ej3wtY.mft
Manifest number: 180E
Signing time: Mon 09 Feb 2026 11:01:04 +0000
Manifest this update: Mon 09 Feb 2026 11:01:04 +0000
Manifest next update: Tue 10 Feb 2026 11:01:04 +0000
Files and hashes: 1: YgTQ-JHcR16nA-be89bq0ej3wtY.crl (hash: ya+P9QG63ml5uGWbUB7u76dJWSdxdR9dAZuV1VXa7o4=)
2: pYLH_zSZV0273TNEBYT79f1lmcg.roa (hash: k3iAoFqBBNaSN0iQRFo4OKQZqr7mC8NP7hdAPA1B80I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/f96121-0335-402d-8491-4d88fce32399/1/YgTQ-JHcR16nA-be89bq0ej3wtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/f96121-0335-402d-8491-4d88fce32399/1/YgTQ-JHcR16nA-be89bq0ej3wtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YgTQ-JHcR16nA-be89bq0ej3wtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:0f:ea:23:76:d8:30:58:b7:93:d5:3c:04:c9:75:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6204d0f891dc475ea703e6def3d6ead1e8f7c2d6
Validity
Not Before: Feb 9 11:01:04 2026 GMT
Not After : Feb 10 11:01:04 2026 GMT
Subject: CN=5cc41f20d5d3304faa2da92b581d6565b60fc83f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9f:57:ae:e6:a6:4c:9f:1f:c2:c2:c2:7b:73:
b6:eb:ae:2b:7a:38:c9:36:08:94:ce:31:65:4b:c9:
41:54:f9:2b:68:b6:78:3e:a6:20:7f:8c:f3:db:44:
61:0c:a4:2f:c0:2d:5f:ca:63:07:bf:27:5f:a3:3f:
85:fe:49:07:61:43:75:91:36:35:1d:5c:91:1e:ab:
f4:e0:48:fd:db:28:98:55:cf:ac:c4:d3:57:b2:9b:
61:c2:be:d9:14:e4:b9:f7:de:09:c1:c7:00:7f:49:
47:26:e4:df:f8:00:a4:d2:e1:ed:3c:d0:58:16:de:
14:dc:cd:80:a9:88:e1:f5:61:0c:3c:fe:2f:8f:04:
92:27:44:c5:35:04:ee:0d:c9:d2:c5:4c:21:cd:bd:
29:e5:34:fe:9a:3a:1e:bd:82:b3:d8:4a:05:70:55:
41:5b:54:30:22:5f:94:5e:98:2a:8a:91:43:3c:73:
fb:4a:4b:3e:71:b0:f6:39:d8:45:d3:d5:2e:ce:cc:
23:15:af:a7:80:23:10:6f:d0:f6:45:28:1d:57:76:
f0:7c:cf:bc:52:4c:11:d3:ed:85:52:ec:1d:51:fd:
e2:c6:a0:b4:cd:28:75:5f:a4:77:80:d6:c4:b6:96:
40:ea:64:ea:19:a3:4a:bd:ef:f4:cb:97:0d:5a:aa:
12:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:C4:1F:20:D5:D3:30:4F:AA:2D:A9:2B:58:1D:65:65:B6:0F:C8:3F
X509v3 Authority Key Identifier:
keyid:62:04:D0:F8:91:DC:47:5E:A7:03:E6:DE:F3:D6:EA:D1:E8:F7:C2:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YgTQ-JHcR16nA-be89bq0ej3wtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/f96121-0335-402d-8491-4d88fce32399/1/YgTQ-JHcR16nA-be89bq0ej3wtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/f96121-0335-402d-8491-4d88fce32399/1/YgTQ-JHcR16nA-be89bq0ej3wtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:f3:70:9b:31:42:02:85:23:6d:77:c0:16:93:2e:20:36:c8:
6d:26:76:62:f3:ee:36:48:ed:77:9b:a4:da:45:5b:85:97:44:
ee:34:97:97:df:56:71:3d:65:b0:da:b3:0d:28:75:33:7b:b8:
80:19:23:7b:f7:10:30:1e:13:95:fc:31:d7:a3:03:b9:6e:38:
28:58:37:a1:30:f1:7f:88:85:1f:47:12:24:b1:0b:5e:89:17:
0d:e4:e6:ee:04:5b:9e:4e:66:e0:54:cb:dc:cb:be:b1:79:ce:
f5:39:84:ef:4c:5c:b0:4c:9f:3a:a1:35:1b:11:07:4e:b9:6a:
c3:16:dd:ab:1b:eb:89:8d:46:3e:4a:bf:3d:6c:1a:09:1c:c2:
69:5a:bd:fa:65:d2:23:d3:8c:9b:61:c5:e9:3d:58:5a:fb:4a:
83:e8:d8:03:f8:bc:88:7c:cd:0a:ae:06:14:98:a4:a4:5d:29:
09:96:6e:37:d5:62:f7:b6:a4:93:01:fc:e7:90:1a:70:1f:d3:
71:d1:f1:8e:77:a1:30:ca:fe:26:d5:39:3e:0e:00:32:cf:d6:
af:75:6f:85:3c:f8:00:a1:fc:25:cb:a1:b0:48:c5:36:e8:cd:
ba:32:2c:98:5e:08:82:bc:5b:48:16:da:b7:ff:a6:77:7f:e5:
3c:3f:e2:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:58:25 2026 by rpki-client