This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.mft
File: y9_OOlNV-GH9xIwyASx4ydr5paQ.mft (raw, json)
Hash identifier: xlDuNht3aNtPF3nOyTOBFGcm+UsqM+kqskkdVQTkjjQ=
Subject key identifier: 60:68:89:99:6C:D7:B4:E9:F5:FF:DC:17:2E:44:2E:E7:AE:5F:D3:86
Authority key identifier: CB:DF:CE:3A:53:55:F8:61:FD:C4:8C:32:01:2C:78:C9:DA:F9:A5:A4
Certificate issuer: /CN=cbdfce3a5355f861fdc48c32012c78c9daf9a5a4
Certificate serial: 019C44D9DF3189F0CE61083ABAB8BCB1B3DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9_OOlNV-GH9xIwyASx4ydr5paQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.mft
Manifest number: 1809
Signing time: Tue 10 Feb 2026 00:00:54 +0000
Manifest this update: Tue 10 Feb 2026 00:00:54 +0000
Manifest next update: Wed 11 Feb 2026 00:00:54 +0000
Files and hashes: 1: 0hZDbxJrYBFNWkvmSImZbnA7DGo.roa (hash: 57YJGR/yDb+wDZGdceoc2Xq+t08LwYTEo56m7ozgeUc=)
2: CoOWsD_WMrov0INrtlO9ijHEvvk.roa (hash: Sr0i40WcN6Y0+OoNtGn/lvWuAn5kO+cpjLNdnf5+TGE=)
3: PTk-Qm4SRO2CGZKyMh3pPECOku4.roa (hash: iHUYxSng1eYpsnCjK8T+uznexsa7QiF4CgUQAgbQr4k=)
4: UmiyGlAKeVSGM9owvAHcbjgh7iE.roa (hash: 9qPTC4+fv8bleeF17R0jz4ih1d6GM3RKI4JmMBNNV6k=)
5: qaZbA-D1etRlTM-FU--ac0dB_ss.roa (hash: BN6YD3t+6V0VWjVd4lNO3C0Ljn5myDizRC13ZwN4dhY=)
6: wruoJGCkndyJjRWEP8IowcC6dp8.roa (hash: 7qigFPgc4Oa1kf4DmFoQRYwnWdqHGod1Ik5fQyi6ptA=)
7: y9_OOlNV-GH9xIwyASx4ydr5paQ.crl (hash: Qfp7MsmEleGaxo8ZtnPXZlTQsAbrA/6F6KcRxF+PBOE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9_OOlNV-GH9xIwyASx4ydr5paQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:44:d9:df:31:89:f0:ce:61:08:3a:ba:b8:bc:b1:b3:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbdfce3a5355f861fdc48c32012c78c9daf9a5a4
Validity
Not Before: Feb 10 00:00:54 2026 GMT
Not After : Feb 11 00:00:54 2026 GMT
Subject: CN=606889996cd7b4e9f5ffdc172e442ee7ae5fd386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ab:2a:31:85:ce:21:22:10:bd:8d:2b:ee:69:
39:6b:9c:f2:83:72:20:41:20:78:71:30:31:0b:17:
09:2d:d7:64:fe:b7:d1:d4:8d:e0:8f:fb:03:35:4f:
dd:ae:fc:c5:82:f6:14:65:f9:4a:8a:9e:c5:33:2a:
29:48:d4:21:d2:b0:b3:75:c3:d3:cd:77:ae:65:ae:
c9:ad:d1:ca:f0:5f:03:35:cc:c6:13:35:70:ad:a4:
9f:90:fc:ad:30:4a:ab:7f:45:bb:30:10:74:b0:64:
b6:35:7d:7e:d6:06:17:03:fe:59:b3:a5:d2:12:2c:
2a:53:33:2f:1b:0a:49:44:78:21:50:9c:b4:bc:ff:
63:4c:24:36:dc:4a:3d:c5:ca:44:be:b6:7b:39:69:
a7:19:fb:a3:41:24:cb:69:a7:35:aa:97:c0:6c:28:
ec:4c:f8:28:7f:fd:eb:ee:3c:1e:39:93:48:f4:58:
d4:d0:dc:d9:66:a5:c0:91:6f:47:01:ed:eb:16:66:
a8:09:45:7e:be:b8:4f:38:43:20:bc:da:bd:d2:3c:
9b:35:1e:0d:e9:b7:e7:96:e7:c5:3c:f2:bb:bd:e8:
b0:60:19:13:a6:f8:ea:fa:f1:ea:14:4d:9e:de:e6:
34:de:c3:e5:a7:bd:06:35:71:01:25:44:72:1b:58:
86:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:68:89:99:6C:D7:B4:E9:F5:FF:DC:17:2E:44:2E:E7:AE:5F:D3:86
X509v3 Authority Key Identifier:
keyid:CB:DF:CE:3A:53:55:F8:61:FD:C4:8C:32:01:2C:78:C9:DA:F9:A5:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9_OOlNV-GH9xIwyASx4ydr5paQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:f3:fa:98:87:82:b6:86:51:8d:95:82:46:c6:95:a1:e4:a7:
b5:4b:5d:39:1e:5f:7a:17:01:8c:45:78:8f:91:be:d1:13:35:
90:7e:d8:0a:23:f6:68:e1:89:6f:5e:e2:94:1f:dc:fa:f1:a7:
dc:54:0f:1d:95:df:8b:ba:32:29:06:b8:a5:4a:3c:7a:0b:8a:
d4:21:44:50:64:25:a6:bd:99:0b:14:95:e3:da:37:22:06:7a:
48:01:61:74:6c:52:51:ea:79:b0:9a:77:c2:69:16:2c:2f:62:
9c:77:80:5e:59:57:78:ff:46:0d:e6:f1:4f:0a:63:13:be:5a:
2d:2d:f4:65:9a:91:33:76:89:dc:ed:14:e5:95:be:cd:f4:2c:
93:6c:8c:20:9d:03:cb:a9:49:02:4d:39:a3:13:63:95:49:00:
5b:86:62:ec:e7:e5:6d:4b:12:82:8d:7b:69:66:8c:50:c7:5c:
5e:42:71:a7:88:ef:23:8c:af:11:8b:0b:0f:f2:54:57:47:4c:
05:2a:2b:61:31:e9:73:c5:69:06:f3:c6:3a:12:1a:8c:2f:5d:
29:b5:a9:2c:8a:7b:bb:3c:a9:6f:b3:99:47:1b:02:a5:64:23:
4b:25:3b:cd:e5:69:cc:06:4e:fa:81:c7:f2:ac:e9:7f:42:ec:
09:bf:84:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxE2d8xifDOYQg6uri8sbPfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiZGZjZTNhNTM1NWY4NjFmZGM0OGMzMjAxMmM3OGM5ZGFm
OWE1YTQwHhcNMjYwMjEwMDAwMDU0WhcNMjYwMjExMDAwMDU0WjAzMTEwLwYDVQQD
Eyg2MDY4ODk5OTZjZDdiNGU5ZjVmZmRjMTcyZTQ0MmVlN2FlNWZkMzg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6sqMYXOISIQvY0r7mk5a5zyg3Ig
QSB4cTAxCxcJLddk/rfR1I3gj/sDNU/drvzFgvYUZflKip7FMyopSNQh0rCzdcPT
zXeuZa7JrdHK8F8DNczGEzVwraSfkPytMEqrf0W7MBB0sGS2NX1+1gYXA/5Zs6XS
EiwqUzMvGwpJRHghUJy0vP9jTCQ23Eo9xcpEvrZ7OWmnGfujQSTLaac1qpfAbCjs
TPgof/3r7jweOZNI9FjU0NzZZqXAkW9HAe3rFmaoCUV+vrhPOEMgvNq90jybNR4N
6bfnlufFPPK7veiwYBkTpvjq+vHqFE2e3uY03sPlp70GNXEBJURyG1iGhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGBoiZls17Tp9f/cFy5ELueuX9OGMB8GA1UdIwQY
MBaAFMvfzjpTVfhh/cSMMgEseMna+aWkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTlfT09sTlYtR0g5eEl3eUFTeDR5ZHI1cGFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi83NGExYjUtM2MyZS00OGUyLTkwZmQt
YjQ5ZDg5ZTMwZGRkLzEveTlfT09sTlYtR0g5eEl3eUFTeDR5ZHI1cGFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi83NGExYjUtM2MyZS00OGUyLTkwZmQtYjQ5ZDg5ZTMwZGRk
LzEveTlfT09sTlYtR0g5eEl3eUFTeDR5ZHI1cGFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAifP6mIeC
toZRjZWCRsaVoeSntUtdOR5fehcBjEV4j5G+0RM1kH7YCiP2aOGJb17ilB/c+vGn
3FQPHZXfi7oyKQa4pUo8eguK1CFEUGQlpr2ZCxSV49o3IgZ6SAFhdGxSUep5sJp3
wmkWLC9inHeAXllXeP9GDebxTwpjE75aLS30ZZqRM3aJ3O0U5ZW+zfQsk2yMIJ0D
y6lJAk05oxNjlUkAW4Zi7OflbUsSgo17aWaMUMdcXkJxp4jvI4yvEYsLD/JUV0dM
BSorYTHpc8VpBvPGOhIajC9dKbWpLIp7uzypb7OZRxsCpWQjSyU7zeVpzAZO+oHH
8qzpf0LsCb+Ezg==
-----END CERTIFICATE-----
Generated at Tue Feb 10 04:30:24 2026 by rpki-client