This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/f08d9c-5ca9-4e53-97e3-9af2cb5dccf3/1/yEdYBToMTG1eAD88hpqJ5PKp4Xc.mft
File: yEdYBToMTG1eAD88hpqJ5PKp4Xc.mft (raw, json)
Hash identifier: SwypfJVe4/OiEEk0y2+WfIOv3liRSN7CY9vgWusoHYg=
Subject key identifier: 2A:AF:3B:EF:4E:4B:25:D8:A4:91:B5:AA:B7:34:16:BE:4F:60:C5:29
Authority key identifier: C8:47:58:05:3A:0C:4C:6D:5E:00:3F:3C:86:9A:89:E4:F2:A9:E1:77
Certificate issuer: /CN=c84758053a0c4c6d5e003f3c869a89e4f2a9e177
Certificate serial: 019C427D8CE0E98DA7EA5AE80DDE673611E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yEdYBToMTG1eAD88hpqJ5PKp4Xc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/f08d9c-5ca9-4e53-97e3-9af2cb5dccf3/1/yEdYBToMTG1eAD88hpqJ5PKp4Xc.mft
Manifest number: 0E9C
Signing time: Mon 09 Feb 2026 13:00:50 +0000
Manifest this update: Mon 09 Feb 2026 13:00:50 +0000
Manifest next update: Tue 10 Feb 2026 13:00:50 +0000
Files and hashes: 1: GGy-Y3qtJHTwmgKMMlrWordSkkw.roa (hash: IwMlZlSqIGS4j52rpaebXeLkd+a+qtlCjUwJrvEvqzo=)
2: yEdYBToMTG1eAD88hpqJ5PKp4Xc.crl (hash: ne7XPKNgdLIm1cLJ6J+3reGXqiaYacJDUalua+4Ar4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/f08d9c-5ca9-4e53-97e3-9af2cb5dccf3/1/yEdYBToMTG1eAD88hpqJ5PKp4Xc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/f08d9c-5ca9-4e53-97e3-9af2cb5dccf3/1/yEdYBToMTG1eAD88hpqJ5PKp4Xc.mft
rsync://rpki.ripe.net/repository/DEFAULT/yEdYBToMTG1eAD88hpqJ5PKp4Xc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7d:8c:e0:e9:8d:a7:ea:5a:e8:0d:de:67:36:11:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c84758053a0c4c6d5e003f3c869a89e4f2a9e177
Validity
Not Before: Feb 9 13:00:50 2026 GMT
Not After : Feb 10 13:00:50 2026 GMT
Subject: CN=2aaf3bef4e4b25d8a491b5aab73416be4f60c529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:08:17:e1:4e:36:1c:bd:1d:ac:f3:4f:c0:a6:
60:39:1d:27:83:74:a5:2d:0e:1f:48:a5:2d:a3:4f:
e8:2e:1f:82:81:7b:02:d5:fd:c5:bd:d0:cc:d5:ba:
1d:ba:7e:f5:1c:d6:84:9c:64:b9:44:92:56:8a:2d:
2a:5a:28:ff:9f:aa:3b:0d:e0:4b:dd:71:59:5f:0f:
73:10:8b:00:b2:18:47:b9:7c:cf:53:94:1c:cd:68:
d3:76:93:94:7a:58:e0:ec:7f:50:02:dc:36:cf:93:
00:4d:de:15:a3:b5:55:80:89:07:62:de:86:56:c1:
c7:76:bc:3a:76:13:5b:79:9e:59:0f:f3:13:ad:63:
21:c9:2d:5c:21:de:8b:b7:b9:db:2a:5b:3d:11:df:
87:b2:b8:42:bb:62:35:65:18:05:1a:bf:58:22:3b:
c9:4d:10:ab:77:37:ca:b2:cc:88:68:cb:75:fb:70:
32:f1:12:1c:99:eb:49:95:bc:53:79:66:e2:8a:77:
8b:d1:36:db:fb:e8:bc:60:a7:65:73:ed:0b:49:7a:
52:b0:b2:e3:37:7c:29:4e:a1:b8:21:c4:f7:22:53:
de:12:76:88:21:84:05:69:93:0e:6b:dc:18:c8:d2:
b9:cd:57:bf:ce:b7:e5:09:56:c4:0c:6f:89:c5:36:
d9:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:AF:3B:EF:4E:4B:25:D8:A4:91:B5:AA:B7:34:16:BE:4F:60:C5:29
X509v3 Authority Key Identifier:
keyid:C8:47:58:05:3A:0C:4C:6D:5E:00:3F:3C:86:9A:89:E4:F2:A9:E1:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yEdYBToMTG1eAD88hpqJ5PKp4Xc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f08d9c-5ca9-4e53-97e3-9af2cb5dccf3/1/yEdYBToMTG1eAD88hpqJ5PKp4Xc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f08d9c-5ca9-4e53-97e3-9af2cb5dccf3/1/yEdYBToMTG1eAD88hpqJ5PKp4Xc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:34:b6:a5:4c:a4:2a:88:ba:6c:d1:54:74:91:d8:b3:ef:81:
f9:b5:2c:fd:d9:1e:f1:b8:18:83:b6:2b:84:9e:95:60:57:8b:
1b:fd:07:eb:62:14:b7:da:c6:11:5d:c6:b4:6b:ad:e4:d0:8a:
f9:91:b8:65:e7:33:8f:d5:25:15:e2:f0:9e:d6:d5:29:a2:58:
9b:41:d4:5a:d1:28:2d:1e:e0:50:66:a2:29:81:ea:a3:0a:79:
a4:35:69:c1:50:32:5c:d5:79:52:34:5d:93:39:72:1d:87:39:
98:24:f8:5f:9a:45:b2:b0:6c:33:8a:d6:6f:60:9b:e0:85:c0:
bc:ac:40:9b:61:e9:cc:c4:87:02:00:67:7e:06:7a:6d:2f:ad:
36:8a:4a:87:28:4d:95:cd:9b:10:69:17:39:56:5b:39:34:f1:
de:d9:e0:8b:1d:09:92:1e:64:7e:30:de:d7:2d:4e:26:94:02:
e9:1d:d1:16:ec:05:7a:ff:e7:1c:54:7d:e8:01:10:0e:08:c0:
32:12:0c:8a:d9:ec:c2:d7:7d:9f:67:61:42:4f:b1:17:ff:45:
b4:e6:48:46:54:01:a0:2e:ea:3f:3f:c4:43:08:1b:fb:49:b1:
51:7e:3d:70:06:3c:cd:dc:01:68:50:83:fe:24:7d:0e:7d:d5:
d0:d5:c4:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:39:35 2026 by rpki-client