This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/63b6ae-d4f5-4946-bbf5-b133e6e6fa85/1/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.mft
File: Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.mft (raw, json)
Hash identifier: Ol0aKtAkkXWMgMLuTPQL7h8neJW3vFmwNdrA9SFEJjA=
Subject key identifier: D1:E8:B6:A5:F1:30:2B:EE:9D:E3:D1:7A:B1:A3:B5:09:97:43:48:40
Authority key identifier: 62:5A:9F:69:FE:07:97:E0:83:B5:16:28:1C:AB:3F:0B:A6:5E:2E:A8
Certificate issuer: /CN=625a9f69fe0797e083b516281cab3f0ba65e2ea8
Certificate serial: 019C42464C94851D9240DAF2ACB3B31DB9F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/63b6ae-d4f5-4946-bbf5-b133e6e6fa85/1/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.mft
Manifest number: 177A
Signing time: Mon 09 Feb 2026 12:00:29 +0000
Manifest this update: Mon 09 Feb 2026 12:00:29 +0000
Manifest next update: Tue 10 Feb 2026 12:00:29 +0000
Files and hashes: 1: Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.crl (hash: kiMesOSjxlePfdlQeq6Tlic02dhg8LqnEjs9lysRbVM=)
2: sw8tmXWb62c9gz1qsBrZbffyXTY.roa (hash: b0ehz9drkVBnOmXweW7dtXPuDg7z70w2Le8bMJVLAGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/63b6ae-d4f5-4946-bbf5-b133e6e6fa85/1/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/63b6ae-d4f5-4946-bbf5-b133e6e6fa85/1/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:46:4c:94:85:1d:92:40:da:f2:ac:b3:b3:1d:b9:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=625a9f69fe0797e083b516281cab3f0ba65e2ea8
Validity
Not Before: Feb 9 12:00:29 2026 GMT
Not After : Feb 10 12:00:29 2026 GMT
Subject: CN=d1e8b6a5f1302bee9de3d17ab1a3b50997434840
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:22:ad:65:dd:5b:82:b5:79:79:5b:44:aa:ec:
38:fb:91:45:46:d1:5a:1f:3f:1c:f6:77:40:6c:0f:
d3:a2:c8:95:b0:d3:75:99:69:0f:79:48:9d:66:15:
86:51:fd:31:3e:21:af:89:ba:fd:35:01:24:09:45:
11:ad:1b:27:fd:0a:d4:4f:8b:80:ff:6c:92:d7:62:
8b:80:d1:30:01:d2:09:28:69:0d:ae:25:50:66:20:
f3:61:48:8d:6d:bd:4b:67:3c:7a:90:78:17:e7:99:
5c:be:47:10:09:14:ad:0c:5d:54:2c:54:7b:39:03:
cc:7f:6e:b9:43:34:51:6a:84:cc:74:b1:09:0a:df:
91:13:e0:ad:ef:45:3e:f8:01:0e:96:0f:51:d4:0f:
1d:04:5f:77:5c:05:ec:95:94:27:80:43:b1:24:c3:
65:08:e9:a1:12:af:2c:81:24:04:f8:1a:87:35:eb:
b8:5f:e1:55:60:85:74:f0:8f:0d:f0:94:3b:e5:5a:
41:9c:c8:08:ea:e1:3f:d6:c8:55:de:b6:11:e1:7b:
62:73:2b:eb:c4:63:8b:6a:45:a2:ac:df:fa:c4:d8:
f3:42:3d:d4:3c:b6:d9:9a:b2:d1:1d:1e:87:56:9a:
6e:e8:71:19:0a:ef:69:4f:83:2e:4a:d8:84:bd:d2:
d2:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:E8:B6:A5:F1:30:2B:EE:9D:E3:D1:7A:B1:A3:B5:09:97:43:48:40
X509v3 Authority Key Identifier:
keyid:62:5A:9F:69:FE:07:97:E0:83:B5:16:28:1C:AB:3F:0B:A6:5E:2E:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/63b6ae-d4f5-4946-bbf5-b133e6e6fa85/1/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/63b6ae-d4f5-4946-bbf5-b133e6e6fa85/1/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:44:3f:cc:c6:e8:d5:5e:80:25:e1:1f:5c:80:0d:73:6a:30:
3a:0c:f1:1f:f9:15:7f:64:34:1f:7d:2e:02:84:6d:b1:6d:08:
fe:fe:0d:82:ef:ee:83:7b:d5:93:65:46:e8:f8:3a:ec:34:a5:
71:fd:5d:b1:04:30:c3:d7:72:50:58:b9:8b:78:cb:5f:26:e2:
cc:22:15:9b:96:38:4d:70:32:9a:c2:83:3a:52:40:82:d2:81:
02:05:96:16:75:d3:70:12:79:6e:75:73:de:2c:ec:d2:da:ff:
4d:16:cf:af:46:32:1a:73:dd:0e:20:e7:0f:57:33:e9:85:3a:
18:75:fb:40:40:ef:6e:c2:91:57:a9:81:e8:42:c2:4f:80:5e:
66:b9:7f:1e:27:28:72:e2:5e:ef:25:57:f7:ec:16:e0:6e:71:
a6:5e:c8:51:92:86:38:54:41:b0:f7:3c:f9:2b:13:0b:95:5c:
41:23:e2:c0:89:a3:77:a3:d6:a6:97:bb:7d:f4:de:e3:76:0c:
d0:26:fa:78:e3:7b:49:5a:4e:a1:2d:02:6a:18:52:5d:ce:97:
9f:4a:45:53:a0:66:81:73:50:db:a6:4e:6d:57:79:a9:09:b5:
a6:c8:23:ae:0b:da:f0:03:95:57:f7:45:bc:e6:e3:62:d4:5c:
05:77:c7:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCRkyUhR2SQNryrLOzHbn5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyNWE5ZjY5ZmUwNzk3ZTA4M2I1MTYyODFjYWIzZjBiYTY1
ZTJlYTgwHhcNMjYwMjA5MTIwMDI5WhcNMjYwMjEwMTIwMDI5WjAzMTEwLwYDVQQD
EyhkMWU4YjZhNWYxMzAyYmVlOWRlM2QxN2FiMWEzYjUwOTk3NDM0ODQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6SKtZd1bgrV5eVtEquw4+5FFRtFa
Hz8c9ndAbA/TosiVsNN1mWkPeUidZhWGUf0xPiGvibr9NQEkCUURrRsn/QrUT4uA
/2yS12KLgNEwAdIJKGkNriVQZiDzYUiNbb1LZzx6kHgX55lcvkcQCRStDF1ULFR7
OQPMf265QzRRaoTMdLEJCt+RE+Ct70U++AEOlg9R1A8dBF93XAXslZQngEOxJMNl
COmhEq8sgSQE+BqHNeu4X+FVYIV08I8N8JQ75VpBnMgI6uE/1shV3rYR4Xticyvr
xGOLakWirN/6xNjzQj3UPLbZmrLRHR6HVppu6HEZCu9pT4MuStiEvdLSeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNHotqXxMCvunePRerGjtQmXQ0hAMB8GA1UdIwQY
MBaAFGJan2n+B5fgg7UWKByrPwumXi6oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWxxZmFmNEhsLUNEdFJZb0hLc19DNlplTHFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC82M2I2YWUtZDRmNS00OTQ2LWJiZjUt
YjEzM2U2ZTZmYTg1LzEvWWxxZmFmNEhsLUNEdFJZb0hLc19DNlplTHFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC82M2I2YWUtZDRmNS00OTQ2LWJiZjUtYjEzM2U2ZTZmYTg1
LzEvWWxxZmFmNEhsLUNEdFJZb0hLc19DNlplTHFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2EQ/zMbo
1V6AJeEfXIANc2owOgzxH/kVf2Q0H30uAoRtsW0I/v4Ngu/ug3vVk2VG6Pg67DSl
cf1dsQQww9dyUFi5i3jLXybizCIVm5Y4TXAymsKDOlJAgtKBAgWWFnXTcBJ5bnVz
3izs0tr/TRbPr0YyGnPdDiDnD1cz6YU6GHX7QEDvbsKRV6mB6ELCT4BeZrl/Hico
cuJe7yVX9+wW4G5xpl7IUZKGOFRBsPc8+SsTC5VcQSPiwImjd6PWppe7ffTe43YM
0Cb6eON7SVpOoS0CahhSXc6Xn0pFU6BmgXNQ26ZObVd5qQm1psgjrgva8AOVV/dF
vObjYtRcBXfHhw==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:40:36 2026 by rpki-client