This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/0eecef-ae8f-4bf9-ab5e-524764a40e22/1/yBXVwM0hRrqv6Kpri5qnzrbkF1o.mft
File: yBXVwM0hRrqv6Kpri5qnzrbkF1o.mft (raw, json)
Hash identifier: ZI6nnBLp4xLHRlJwG5EgbMFSB2P2RQXHIZclUhOVkO0=
Subject key identifier: 8C:E1:74:5E:C8:A5:CF:02:43:60:34:CB:C5:24:25:BC:90:50:8E:05
Authority key identifier: C8:15:D5:C0:CD:21:46:BA:AF:E8:AA:6B:8B:9A:A7:CE:B6:E4:17:5A
Certificate issuer: /CN=c815d5c0cd2146baafe8aa6b8b9aa7ceb6e4175a
Certificate serial: 019C413420EDCA62359496745FE1CE05B681
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yBXVwM0hRrqv6Kpri5qnzrbkF1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/0eecef-ae8f-4bf9-ab5e-524764a40e22/1/yBXVwM0hRrqv6Kpri5qnzrbkF1o.mft
Manifest number: 0FBC
Signing time: Mon 09 Feb 2026 07:01:01 +0000
Manifest this update: Mon 09 Feb 2026 07:01:01 +0000
Manifest next update: Tue 10 Feb 2026 07:01:01 +0000
Files and hashes: 1: JY81usnotweZyZdSahI8RyYPcPQ.roa (hash: a+Ax7M2k213Mauckfl1KLZA2jvBbE/xfAhO6740Uqk8=)
2: yBXVwM0hRrqv6Kpri5qnzrbkF1o.crl (hash: 7YP2LjsDHvYzM9f2IzaZiUjnZN3gVE4ahLFHQ2TIzcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/0eecef-ae8f-4bf9-ab5e-524764a40e22/1/yBXVwM0hRrqv6Kpri5qnzrbkF1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/0eecef-ae8f-4bf9-ab5e-524764a40e22/1/yBXVwM0hRrqv6Kpri5qnzrbkF1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/yBXVwM0hRrqv6Kpri5qnzrbkF1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 07:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:34:20:ed:ca:62:35:94:96:74:5f:e1:ce:05:b6:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c815d5c0cd2146baafe8aa6b8b9aa7ceb6e4175a
Validity
Not Before: Feb 9 07:01:01 2026 GMT
Not After : Feb 10 07:01:01 2026 GMT
Subject: CN=8ce1745ec8a5cf02436034cbc52425bc90508e05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ea:80:c3:85:d1:21:eb:0e:59:cd:73:e7:d2:
c6:f4:4a:1a:76:44:6e:28:f6:ed:c3:bf:e0:e9:3e:
bf:38:a8:01:31:08:3b:61:cb:02:e3:91:78:aa:ba:
bc:52:bf:ad:b0:e1:f2:20:11:81:7c:33:3c:c7:c1:
99:53:11:69:12:54:bc:96:d1:c9:ad:47:62:e7:55:
d0:5d:09:80:b7:7c:fb:34:53:05:9e:fa:05:0b:f0:
72:61:7a:00:7e:75:2c:1b:fe:00:bc:f4:0e:79:b6:
fe:a6:a6:53:ea:bd:4d:bb:13:85:08:e2:de:24:a6:
a9:fc:2e:fe:29:cb:65:8c:44:42:0d:86:fe:6e:ce:
bb:0e:a2:e8:c6:f4:6a:93:76:23:ee:a2:eb:0e:4e:
77:68:f7:e3:28:a9:61:b0:4c:a5:3a:58:dd:2b:e4:
a5:95:df:a7:0b:eb:23:f9:b9:16:df:45:ea:e0:10:
17:e0:5e:11:4e:d2:3d:da:f0:02:0e:39:8a:4e:b7:
fa:33:1e:92:78:ef:c2:fa:f2:78:3b:dc:9c:a3:c1:
a3:0d:5c:e7:66:5f:12:da:33:86:58:22:ff:3a:e5:
2f:6c:8c:84:9e:04:c1:e6:2b:e8:20:2c:32:c8:e1:
50:81:70:e0:17:fc:cb:55:bc:1c:ad:27:69:cc:a0:
9c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:E1:74:5E:C8:A5:CF:02:43:60:34:CB:C5:24:25:BC:90:50:8E:05
X509v3 Authority Key Identifier:
keyid:C8:15:D5:C0:CD:21:46:BA:AF:E8:AA:6B:8B:9A:A7:CE:B6:E4:17:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yBXVwM0hRrqv6Kpri5qnzrbkF1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0eecef-ae8f-4bf9-ab5e-524764a40e22/1/yBXVwM0hRrqv6Kpri5qnzrbkF1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0eecef-ae8f-4bf9-ab5e-524764a40e22/1/yBXVwM0hRrqv6Kpri5qnzrbkF1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:31:28:37:6a:a8:cc:b6:a4:38:0c:10:3c:f7:e7:e1:96:fe:
57:69:e6:b0:e6:48:e0:6f:a7:80:5d:59:da:84:a1:25:92:78:
38:01:a3:3c:da:76:04:ef:f4:f6:fb:f8:80:34:a0:39:87:78:
bc:46:66:a2:cb:b1:b7:eb:ba:c8:44:ee:67:24:7f:53:d2:b5:
6a:a3:44:6d:92:7a:9a:be:ae:a2:2d:f5:2a:64:2d:40:0d:32:
2c:df:8a:a2:b4:f4:4c:d2:0e:f7:b6:02:cf:af:d9:e8:ad:66:
3c:2d:57:e8:ea:a4:0a:76:5b:93:25:4c:78:65:9e:32:90:fa:
bb:9c:e1:19:e3:5c:02:27:bd:33:55:60:41:61:f2:c0:23:ba:
ae:f3:9d:62:45:e5:8e:4d:20:b9:84:26:98:54:8d:68:2a:98:
07:91:9c:83:50:32:8e:fa:db:e4:dc:fc:56:05:a4:6d:06:82:
d6:5c:f6:81:74:64:84:7f:a2:bc:d5:eb:29:33:ae:ab:c4:f7:
89:ce:10:01:25:40:4e:f9:ad:c0:18:bd:b1:62:a3:1a:de:f4:
7c:22:fc:6a:9c:36:1f:76:19:3b:da:e6:ae:27:42:bc:34:97:
87:84:bb:c1:7a:93:b1:d1:63:6d:09:dd:f1:e9:01:45:a5:9b:
9e:78:85:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:00:27 2026 by rpki-client