This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/c83dce-2955-48e6-bd7c-5beafc86651b/1/yq46VN0DiVaD7tvDedHg27Brm9s.mft
File: yq46VN0DiVaD7tvDedHg27Brm9s.mft (raw, json)
Hash identifier: 0OR3GRGM1BS+RjFcq4bIv1Cf+30oE/fYDgyfeIpBktw=
Subject key identifier: C7:16:5B:E3:C6:27:5C:27:13:2B:65:52:E5:E7:47:F4:18:7D:8E:38
Authority key identifier: CA:AE:3A:54:DD:03:89:56:83:EE:DB:C3:79:D1:E0:DB:B0:6B:9B:DB
Certificate issuer: /CN=caae3a54dd03895683eedbc379d1e0dbb06b9bdb
Certificate serial: 019C43226C804CF36F8B273B1A5FF50AD73E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yq46VN0DiVaD7tvDedHg27Brm9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/c83dce-2955-48e6-bd7c-5beafc86651b/1/yq46VN0DiVaD7tvDedHg27Brm9s.mft
Manifest number: 029D
Signing time: Mon 09 Feb 2026 16:00:55 +0000
Manifest this update: Mon 09 Feb 2026 16:00:55 +0000
Manifest next update: Tue 10 Feb 2026 16:00:55 +0000
Files and hashes: 1: DOL6_bM0cayFn6lDHZcPsYXxrCI.roa (hash: SL51iqqDzym7zDZje/TntRQN14HmuoWDKSbYF6rNrYk=)
2: yq46VN0DiVaD7tvDedHg27Brm9s.crl (hash: omMnb+Dr+AemgMu7nwqSCTF2EEUy9W6RMq7krzdbH9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/c83dce-2955-48e6-bd7c-5beafc86651b/1/yq46VN0DiVaD7tvDedHg27Brm9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/c83dce-2955-48e6-bd7c-5beafc86651b/1/yq46VN0DiVaD7tvDedHg27Brm9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/yq46VN0DiVaD7tvDedHg27Brm9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:22:6c:80:4c:f3:6f:8b:27:3b:1a:5f:f5:0a:d7:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caae3a54dd03895683eedbc379d1e0dbb06b9bdb
Validity
Not Before: Feb 9 16:00:55 2026 GMT
Not After : Feb 10 16:00:55 2026 GMT
Subject: CN=c7165be3c6275c27132b6552e5e747f4187d8e38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:50:ce:6c:80:b7:9f:05:dd:cd:09:6d:f3:9b:
e0:f0:cb:5a:ea:e8:2c:6e:05:26:34:8a:5d:28:e7:
ee:06:f8:d7:24:54:bc:65:ae:d1:f5:9b:82:48:cb:
74:24:a6:bc:31:02:4f:42:cc:7b:7f:91:ca:0c:3e:
3c:d2:db:de:92:19:d3:7f:33:53:58:1f:9e:2c:75:
e8:d0:3f:f5:c3:18:34:6c:01:c3:18:0b:61:a8:02:
65:09:02:1f:6c:43:a6:83:b5:9a:66:94:85:71:1d:
1f:0a:d8:db:17:68:e6:23:77:d9:e9:2d:83:2f:ed:
f8:7d:df:09:7f:45:f1:dc:33:80:f4:23:db:4c:d6:
2d:c2:1d:d7:8e:be:1c:90:a0:8c:55:6a:6c:bd:de:
d1:92:35:20:ba:df:f2:9b:a0:4e:ec:e6:c9:b2:3f:
e2:a2:48:2c:d3:7b:da:82:fb:05:46:d4:55:b0:5a:
de:2b:23:02:1b:b5:fb:16:20:54:54:b5:f4:33:ee:
03:04:04:8b:8b:ce:45:ab:c6:78:e2:d0:f2:40:d7:
9a:e8:1c:62:f1:51:2f:e2:a8:66:38:21:54:ba:d4:
45:31:2f:9d:67:da:49:50:1c:54:01:99:6e:13:f1:
f5:8f:8f:29:a6:f3:20:3c:e3:e5:60:ef:ca:6f:0b:
b8:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:16:5B:E3:C6:27:5C:27:13:2B:65:52:E5:E7:47:F4:18:7D:8E:38
X509v3 Authority Key Identifier:
keyid:CA:AE:3A:54:DD:03:89:56:83:EE:DB:C3:79:D1:E0:DB:B0:6B:9B:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yq46VN0DiVaD7tvDedHg27Brm9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c83dce-2955-48e6-bd7c-5beafc86651b/1/yq46VN0DiVaD7tvDedHg27Brm9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c83dce-2955-48e6-bd7c-5beafc86651b/1/yq46VN0DiVaD7tvDedHg27Brm9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:b7:7f:13:61:30:4d:c8:5b:88:99:28:14:bf:35:d5:c5:02:
43:12:6a:09:1c:3a:1a:49:a5:9c:65:40:5c:6d:ae:0e:2e:da:
3a:f3:a8:7f:cb:48:4c:70:bf:bf:e7:ce:89:4c:f5:d4:04:84:
91:16:f5:89:0b:b3:91:06:f6:f2:74:d0:c4:35:51:11:ee:62:
57:22:e1:92:28:b8:77:19:75:81:4f:f0:6c:58:c0:de:98:37:
d7:ed:63:c0:0e:73:c6:55:90:5c:1b:36:10:64:15:3a:bf:20:
27:ec:07:0d:67:77:d1:09:95:c0:81:0f:44:10:97:6f:60:d8:
3a:89:95:0b:99:d4:8a:8d:51:b2:22:08:e7:09:35:80:68:eb:
29:21:d2:6f:c2:ad:3f:f2:2c:b8:d2:cf:9c:67:29:b0:19:65:
06:d7:59:e7:00:30:af:58:f6:f0:c6:68:79:6a:43:0d:c7:09:
60:65:87:58:6b:5a:6a:01:23:d9:da:f9:e9:07:31:b4:e0:be:
cf:9f:30:e2:44:85:17:34:a3:cd:81:fa:34:08:e8:d3:23:29:
d7:43:f5:c1:f0:8d:a0:bc:30:8c:38:c6:17:a5:82:ea:ac:a5:
d3:55:61:8e:97:f6:b7:99:5c:d9:ec:ed:7f:01:a2:4a:f6:25:
ad:c5:53:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:46:04 2026 by rpki-client