This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.mft
File: ydSf722tJmGevuBl0fIxwaJ2198.mft (raw, json)
Hash identifier: bR08xM5Oe+VEsbzn7mrahM29knKXwl6JPQLIJ7jAzGA=
Subject key identifier: 5D:4B:C6:C5:2B:D5:CD:45:4F:D4:E4:00:1F:AF:77:B6:25:20:7B:E0
Authority key identifier: C9:D4:9F:EF:6D:AD:26:61:9E:BE:E0:65:D1:F2:31:C1:A2:76:D7:DF
Certificate issuer: /CN=c9d49fef6dad26619ebee065d1f231c1a276d7df
Certificate serial: 019B80BA8A5C8BCE0508B9402FBF0CBE8984
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydSf722tJmGevuBl0fIxwaJ2198.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.mft
Manifest number: 06CD
Signing time: Fri 02 Jan 2026 22:01:07 +0000
Manifest this update: Fri 02 Jan 2026 22:01:07 +0000
Manifest next update: Sat 03 Jan 2026 22:01:07 +0000
Files and hashes: 1: 7ddZ6AuTaKTVHMzwtcM1Koce3jI.roa (hash: xG5K9PIIy6VwRa0eYfMip6RI0P+1GY89uLI9ih9L+Uo=)
2: d3-5CKAZ7Mk-2t_tjSmFOfnjMzk.roa (hash: vwsp8oVhgfqNXWForlLjiHqAE45N0F3rkdkhErDxiHo=)
3: ydSf722tJmGevuBl0fIxwaJ2198.crl (hash: vquxHBqKxiTmLDvDmVSjWpURCTEfFcGGyQp7OTBqlco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydSf722tJmGevuBl0fIxwaJ2198.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Jan 2026 19:40:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:80:ba:8a:5c:8b:ce:05:08:b9:40:2f:bf:0c:be:89:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d49fef6dad26619ebee065d1f231c1a276d7df
Validity
Not Before: Jan 2 22:01:07 2026 GMT
Not After : Jan 3 22:01:07 2026 GMT
Subject: CN=5d4bc6c52bd5cd454fd4e4001faf77b625207be0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:a4:f4:66:a4:be:a1:02:f3:43:4d:47:1d:b9:
63:19:54:55:2d:a7:ef:d7:4b:47:80:94:3f:0a:ff:
e5:e6:82:94:ff:f4:ad:af:73:2b:e9:02:ff:03:eb:
66:fd:b6:72:40:35:e0:04:75:44:5e:e5:30:bd:63:
14:a1:4f:3d:98:4f:5c:17:cf:aa:fd:bb:92:0b:89:
a6:7f:6a:32:fd:2a:7b:4f:17:8d:3c:d8:aa:9b:a8:
39:a2:dc:ca:a2:d6:7e:f0:0c:dc:51:4a:8f:97:c6:
d4:18:0b:ac:03:e7:04:65:d6:fd:9b:a0:bc:63:6c:
42:8b:95:0d:14:79:41:87:63:ea:c4:a9:ab:ac:d1:
0a:0b:2a:50:0f:15:0e:95:42:d7:15:f1:2d:39:33:
f8:fe:19:53:47:ae:0a:20:60:ed:67:8a:34:39:bb:
a0:ea:24:13:d9:d9:5c:39:53:fa:f0:9c:de:8f:d4:
cf:20:7a:e8:03:fb:79:b0:4c:d5:dd:81:bd:e4:9c:
9d:88:5f:d8:b5:52:24:38:5f:ae:9e:06:51:6b:87:
6e:1e:e2:a9:64:98:e5:b3:8c:79:be:26:a0:45:d6:
fa:f6:90:bc:e1:72:27:34:03:eb:98:e0:a6:af:33:
82:5c:64:4c:f8:ae:d2:58:76:b3:73:30:72:12:5e:
b9:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:4B:C6:C5:2B:D5:CD:45:4F:D4:E4:00:1F:AF:77:B6:25:20:7B:E0
X509v3 Authority Key Identifier:
keyid:C9:D4:9F:EF:6D:AD:26:61:9E:BE:E0:65:D1:F2:31:C1:A2:76:D7:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydSf722tJmGevuBl0fIxwaJ2198.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:c9:2f:1c:56:c7:c9:81:ca:b5:a7:23:99:c1:17:1e:0e:27:
0f:59:5c:1d:99:7b:d7:bc:b3:07:ed:62:9c:5c:8e:d3:0e:3c:
4b:13:0a:ef:07:b0:0a:87:a9:3b:a1:db:6d:26:bd:3d:23:e8:
b7:19:09:cf:36:e5:20:7a:ce:a6:4d:8f:53:0f:d7:e9:15:88:
a4:71:5f:cb:1f:5b:a1:3d:1f:0f:5a:1f:bd:03:1a:ee:09:78:
1b:26:f8:0e:1f:86:d3:88:d8:ef:02:f4:31:46:9a:60:4e:87:
98:70:5c:a3:81:be:36:d5:59:fb:e0:9e:78:98:77:0e:d7:ff:
73:f6:96:5f:c3:c4:36:14:6c:d2:1e:bf:f6:0c:04:a8:66:8d:
9e:b0:da:a1:8a:e5:2c:b6:92:74:39:9b:2b:39:c5:4c:ce:58:
b5:f8:12:35:74:9f:f6:23:7d:aa:f3:4d:c7:8a:0d:2d:6d:51:
d7:22:87:42:53:75:38:55:40:60:71:72:c1:00:db:18:19:6e:
04:b7:20:c7:b0:3d:76:5e:52:30:a6:0a:f4:52:aa:c9:8d:b7:
ed:9d:5e:ab:47:85:e4:3e:c7:17:01:01:64:48:2d:7f:74:b3:
c8:85:d7:47:af:b7:0f:2d:21:4b:e3:42:1f:18:54:87:71:99:
2a:16:60:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 2 23:52:28 2026 by rpki-client