This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/yudPzOQZM_QnxTfTZdXnYdJlXrY.mft
File: yudPzOQZM_QnxTfTZdXnYdJlXrY.mft (raw, json)
Hash identifier: 4NuKS6fk4fmVn4MfcMDMm3W6tRZ4WdZ59ZneXbkSJSA=
Subject key identifier: BB:3E:89:DC:57:35:17:51:3F:7F:92:12:DD:B0:BB:C6:16:64:E0:DE
Authority key identifier: CA:E7:4F:CC:E4:19:33:F4:27:C5:37:D3:65:D5:E7:61:D2:65:5E:B6
Certificate issuer: /CN=cae74fcce41933f427c537d365d5e761d2655eb6
Certificate serial: 019C424624B3DE09D3694B62AABBB25C6382
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yudPzOQZM_QnxTfTZdXnYdJlXrY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/yudPzOQZM_QnxTfTZdXnYdJlXrY.mft
Manifest number: 0F49
Signing time: Mon 09 Feb 2026 12:00:18 +0000
Manifest this update: Mon 09 Feb 2026 12:00:18 +0000
Manifest next update: Tue 10 Feb 2026 12:00:18 +0000
Files and hashes: 1: QSn62LM0lzdVFTae3oXlcnSJBrM.roa (hash: 1Kyh630uZcpfXJcHCHBYOXiuPYvcumJJUvLTjPHNEfg=)
2: yudPzOQZM_QnxTfTZdXnYdJlXrY.crl (hash: EjojBQouXrEikCJamipYjyLnJu3Poyrv+Pp3BIrqSeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/yudPzOQZM_QnxTfTZdXnYdJlXrY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/yudPzOQZM_QnxTfTZdXnYdJlXrY.mft
rsync://rpki.ripe.net/repository/DEFAULT/yudPzOQZM_QnxTfTZdXnYdJlXrY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 12:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:46:24:b3:de:09:d3:69:4b:62:aa:bb:b2:5c:63:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cae74fcce41933f427c537d365d5e761d2655eb6
Validity
Not Before: Feb 9 12:00:18 2026 GMT
Not After : Feb 10 12:00:18 2026 GMT
Subject: CN=bb3e89dc573517513f7f9212ddb0bbc61664e0de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:73:84:e0:b4:34:ea:54:48:5d:16:cc:c4:af:
5c:86:64:80:d6:3f:5d:ab:08:cc:b7:59:b6:60:c8:
03:62:cc:25:ed:98:ff:b7:10:8c:f2:92:2f:f4:ba:
f0:f9:68:ec:05:27:3f:d7:fe:f3:31:98:f4:2f:b8:
dd:37:72:0f:b2:e5:e7:6a:8d:bb:12:5d:65:33:50:
1e:ad:05:6e:fc:c3:08:e9:c7:5b:b5:80:fc:fb:bf:
56:b4:9b:af:b8:13:32:74:1d:8d:eb:c1:67:90:7d:
8c:45:d0:37:a2:c8:51:fa:01:8c:4e:fc:df:09:50:
cd:d4:26:a6:e6:a9:15:90:92:17:90:18:91:06:06:
6f:d6:c3:4f:cf:53:4e:1e:ca:06:cb:ec:6e:08:13:
09:ee:35:41:89:c6:f4:b6:3b:4f:e2:c8:cd:10:ba:
ac:75:aa:3c:78:1e:71:49:ae:74:ea:bb:0e:ad:d2:
41:da:f0:47:24:78:48:d5:2a:0e:b7:e0:e3:c2:a1:
33:0d:19:62:a4:c4:ab:89:4e:1c:3b:d0:66:90:89:
a7:3c:17:5c:19:56:dd:af:1e:c8:2b:75:7a:40:d8:
b1:35:e4:f9:c4:9f:09:f6:5c:ba:b6:b9:bf:25:5a:
77:31:da:f2:be:5a:49:50:17:fd:22:2f:d3:d6:a6:
aa:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:3E:89:DC:57:35:17:51:3F:7F:92:12:DD:B0:BB:C6:16:64:E0:DE
X509v3 Authority Key Identifier:
keyid:CA:E7:4F:CC:E4:19:33:F4:27:C5:37:D3:65:D5:E7:61:D2:65:5E:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yudPzOQZM_QnxTfTZdXnYdJlXrY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/yudPzOQZM_QnxTfTZdXnYdJlXrY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/yudPzOQZM_QnxTfTZdXnYdJlXrY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:1d:d9:87:3d:cd:16:a1:7e:e5:9e:24:68:89:3e:e8:7b:21:
00:6a:00:da:c3:c0:0e:1b:b5:7d:9a:e4:02:16:da:e0:b7:75:
dc:58:12:af:78:dc:5b:ea:df:ea:c3:39:d1:07:ec:c7:86:17:
99:1d:43:63:63:6a:2f:83:ea:e2:7f:9d:01:73:50:dc:c0:1c:
80:41:6b:0c:c9:d4:f7:61:4f:a9:59:a5:ed:46:49:63:24:e9:
32:bb:01:c9:24:00:c1:ed:f4:25:4b:a0:90:a1:aa:5a:e5:e5:
ed:fd:29:25:db:5b:f4:94:b0:ac:8d:2b:7d:97:8e:17:eb:fb:
0e:74:ae:9b:e9:f3:c4:9c:06:47:d9:06:dd:89:c6:37:52:1d:
4f:f3:0d:b5:ed:b9:2a:8a:cf:da:c9:2e:dd:1e:35:0c:18:a3:
74:57:fb:0d:1d:5c:89:3f:03:81:61:89:ee:00:59:d0:b6:58:
d9:b0:39:02:58:eb:39:98:02:05:15:db:91:46:87:76:57:fc:
29:52:9f:57:aa:15:17:3e:87:ce:1a:f4:f9:ee:2b:58:b8:62:
38:bc:c0:5e:a6:09:88:c9:fe:16:cb:37:7b:67:99:01:be:4f:
dc:f5:64:32:db:ba:cb:d1:82:80:05:96:b3:3c:62:19:91:15:
08:ff:18:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:44:08 2026 by rpki-client