This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/07ad3c-ecad-4f6d-bc51-a591eaacce4f/1/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.mft
File: yi3tJ3UfKRwLVbeUVyB8s6JVGXw.mft (raw, json)
Hash identifier: IwmT2jcVgVOXEhiVL3609UIzFUk+unL5OJGHKA9iPwk=
Subject key identifier: 88:4F:AE:C6:B8:C6:50:28:F5:FA:D1:6B:A2:2F:68:73:08:40:6F:06
Authority key identifier: CA:2D:ED:27:75:1F:29:1C:0B:55:B7:94:57:20:7C:B3:A2:55:19:7C
Certificate issuer: /CN=ca2ded27751f291c0b55b79457207cb3a255197c
Certificate serial: 019C4133E16CCB5B97B41D909EB79C713968
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/07ad3c-ecad-4f6d-bc51-a591eaacce4f/1/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.mft
Manifest number: 179D
Signing time: Mon 09 Feb 2026 07:00:44 +0000
Manifest this update: Mon 09 Feb 2026 07:00:44 +0000
Manifest next update: Tue 10 Feb 2026 07:00:44 +0000
Files and hashes: 1: yi3tJ3UfKRwLVbeUVyB8s6JVGXw.crl (hash: 3hIe8/rHFhG4YEhIa3p9AOXTUudXXQWbikcNdQS4ucY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/07ad3c-ecad-4f6d-bc51-a591eaacce4f/1/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/07ad3c-ecad-4f6d-bc51-a591eaacce4f/1/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 07:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:33:e1:6c:cb:5b:97:b4:1d:90:9e:b7:9c:71:39:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca2ded27751f291c0b55b79457207cb3a255197c
Validity
Not Before: Feb 9 07:00:44 2026 GMT
Not After : Feb 10 07:00:44 2026 GMT
Subject: CN=884faec6b8c65028f5fad16ba22f687308406f06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c2:7c:8d:0b:50:cb:79:50:c0:f9:a6:d5:fc:
f8:0b:ae:12:fc:60:42:ef:cb:8d:c9:23:26:20:6c:
ef:4f:65:3b:97:3e:c5:26:fa:44:0f:52:31:0e:49:
5a:27:3e:c0:a2:6b:ed:ca:5b:24:c2:ca:6a:91:fd:
22:6f:f7:87:9b:73:a6:d8:af:7f:a4:08:16:68:81:
b1:49:e1:5a:73:5f:a2:23:a8:bc:51:5b:34:f5:d5:
ed:98:25:4c:2a:ec:12:e3:f7:d3:f8:95:dc:16:fc:
8b:f4:98:be:89:74:61:3f:82:04:cc:78:33:72:c2:
e8:59:2e:39:d6:87:41:75:cf:a4:67:4f:6e:7d:21:
d7:7d:9f:95:7d:28:a8:ca:f4:8f:a3:51:63:af:89:
9b:46:8d:86:e5:35:90:9e:bc:05:8d:62:13:a5:be:
fb:ce:23:79:8b:be:ce:7b:c4:a8:d6:68:4f:7f:62:
31:46:07:e5:39:9e:9f:73:0c:1e:05:b0:4f:6a:22:
ee:85:58:0e:25:6d:e8:5e:45:7a:3c:fc:75:56:98:
1c:d5:67:a7:c5:6f:53:64:94:2a:c7:a3:0b:2d:2a:
47:22:d8:74:2a:3f:9a:a9:c8:b3:25:af:bf:0e:90:
f9:7c:60:13:33:fb:69:eb:28:06:60:80:62:8d:ec:
9c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:4F:AE:C6:B8:C6:50:28:F5:FA:D1:6B:A2:2F:68:73:08:40:6F:06
X509v3 Authority Key Identifier:
keyid:CA:2D:ED:27:75:1F:29:1C:0B:55:B7:94:57:20:7C:B3:A2:55:19:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/07ad3c-ecad-4f6d-bc51-a591eaacce4f/1/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/07ad3c-ecad-4f6d-bc51-a591eaacce4f/1/yi3tJ3UfKRwLVbeUVyB8s6JVGXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:7b:8a:1d:2b:c5:e9:9b:37:eb:a1:e9:4c:2a:50:a8:47:78:
93:3f:7f:3c:7e:8e:92:c9:07:3a:06:8a:e3:4c:07:63:a4:80:
32:e1:21:ee:7f:fe:3d:79:9e:eb:6a:8c:ba:a7:91:98:9a:09:
de:31:bb:5e:a2:92:09:80:91:8a:54:e0:87:82:60:27:61:45:
bd:b0:62:94:51:f2:f4:8a:4c:29:8e:f2:b0:fe:98:4f:21:fa:
4b:10:c6:ed:3b:63:c3:6c:54:5a:e7:d8:33:8f:a0:ae:67:dd:
40:02:07:64:85:4b:dc:06:30:a3:a0:1d:d7:79:0e:86:b6:be:
b4:ad:10:03:a7:cc:72:8d:12:9d:c3:d7:2d:cb:5c:5e:2d:85:
20:90:fe:e5:0e:c9:8a:66:d6:39:1e:d4:0e:bb:7f:99:6a:91:
a9:18:e2:62:3c:40:6f:12:f9:6c:60:3d:1a:ed:95:88:4b:cd:
c6:05:33:ab:b7:a6:55:c0:26:bc:cd:ed:50:03:9b:0c:1f:e7:
dd:e1:8a:2c:ae:c1:a0:d8:4e:79:91:36:70:ed:bc:b2:67:47:
e3:14:fc:a2:d9:95:17:c5:3c:b1:0f:57:57:6c:7a:81:30:5f:
9c:17:64:fa:9a:11:c0:bc:80:5a:8b:f5:5a:4f:b1:81:ae:a0:
15:0b:ce:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:59:23 2026 by rpki-client