This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f841d9-5505-4e3d-a2ff-f7c1899cd7fa/1/y0W24SUWoP1eur56eBEILzp0Y5c.mft
File: y0W24SUWoP1eur56eBEILzp0Y5c.mft (raw, json)
Hash identifier: 92Zgz6Q0xo5ZTFmG1em8lMAzBrYv+s878Rj6M/x4W4s=
Subject key identifier: D9:4E:A8:2C:5B:5F:0A:06:79:F2:CD:80:4F:D1:C7:D9:66:4A:49:AA
Authority key identifier: CB:45:B6:E1:25:16:A0:FD:5E:BA:BE:7A:78:11:08:2F:3A:74:63:97
Certificate issuer: /CN=cb45b6e12516a0fd5ebabe7a7811082f3a746397
Certificate serial: 019C439001DD09C8166DF8C5B0A0B8682863
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y0W24SUWoP1eur56eBEILzp0Y5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/f841d9-5505-4e3d-a2ff-f7c1899cd7fa/1/y0W24SUWoP1eur56eBEILzp0Y5c.mft
Manifest number: 0D3A
Signing time: Mon 09 Feb 2026 18:00:36 +0000
Manifest this update: Mon 09 Feb 2026 18:00:36 +0000
Manifest next update: Tue 10 Feb 2026 18:00:36 +0000
Files and hashes: 1: roqAbM7IFMtztGev_KtwvL7oqjk.roa (hash: ydWNX4Xyz0BhXsi9KhsO32ou0TfatpBXfKo/DL2J1qw=)
2: y0W24SUWoP1eur56eBEILzp0Y5c.crl (hash: BnIEJrVFatkqqeGzs/Dqw47Rpph104ROKAVF2P+IMGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/f841d9-5505-4e3d-a2ff-f7c1899cd7fa/1/y0W24SUWoP1eur56eBEILzp0Y5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/f841d9-5505-4e3d-a2ff-f7c1899cd7fa/1/y0W24SUWoP1eur56eBEILzp0Y5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/y0W24SUWoP1eur56eBEILzp0Y5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:90:01:dd:09:c8:16:6d:f8:c5:b0:a0:b8:68:28:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb45b6e12516a0fd5ebabe7a7811082f3a746397
Validity
Not Before: Feb 9 18:00:36 2026 GMT
Not After : Feb 10 18:00:36 2026 GMT
Subject: CN=d94ea82c5b5f0a0679f2cd804fd1c7d9664a49aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1d:f6:74:b7:bb:83:19:fb:3d:26:06:c2:63:
0f:80:0b:d1:28:c8:08:f1:9b:24:b9:79:49:b3:41:
b6:0f:8a:37:94:75:0c:bb:36:eb:46:1c:30:f6:ba:
d8:c2:8a:68:62:b4:d9:31:49:cf:97:ff:13:09:b1:
ae:01:e9:20:e7:b2:ac:58:ae:89:15:80:fa:8c:a5:
71:8f:3b:8a:fe:f3:ae:ad:85:1d:35:99:48:63:c6:
bb:30:3c:ab:b7:b3:bf:b7:d1:d6:76:12:45:81:01:
b3:2a:7f:bc:ec:f5:93:8a:a9:74:8d:b5:c3:2a:28:
af:52:c8:3f:46:78:8f:9b:05:28:e0:22:31:93:b6:
cf:bd:33:d8:1e:1a:5e:c3:34:a8:80:6d:80:95:fa:
29:63:21:df:2c:de:55:e6:63:9b:16:1b:3f:1a:c6:
e7:bf:8f:dc:15:51:32:3c:f6:76:0e:f5:9d:0b:01:
eb:03:71:38:da:22:43:17:28:c6:ad:c2:fd:18:30:
d0:78:56:09:c3:6a:e5:7e:bb:75:1c:f6:e9:60:66:
3b:15:a9:f8:28:c6:87:c7:cb:04:c1:12:6b:ac:f2:
86:c4:56:5d:0d:7b:9b:a5:00:33:ef:99:7b:1e:c5:
02:a9:97:03:ed:3d:c4:89:cb:a3:85:82:79:d8:18:
07:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:4E:A8:2C:5B:5F:0A:06:79:F2:CD:80:4F:D1:C7:D9:66:4A:49:AA
X509v3 Authority Key Identifier:
keyid:CB:45:B6:E1:25:16:A0:FD:5E:BA:BE:7A:78:11:08:2F:3A:74:63:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y0W24SUWoP1eur56eBEILzp0Y5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f841d9-5505-4e3d-a2ff-f7c1899cd7fa/1/y0W24SUWoP1eur56eBEILzp0Y5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f841d9-5505-4e3d-a2ff-f7c1899cd7fa/1/y0W24SUWoP1eur56eBEILzp0Y5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:74:a0:93:b0:b0:7f:4d:b2:c7:e6:ea:27:40:f7:a6:06:26:
b2:9b:91:d4:a1:a5:46:45:f5:49:b7:bc:ec:6c:83:9b:58:c7:
4e:fb:60:f6:73:27:3d:9e:cb:08:aa:b3:fe:71:df:6c:b1:b8:
21:06:6e:23:4c:4f:41:0a:b9:c9:0b:4b:6d:e7:28:41:fe:00:
b7:f1:b6:05:3b:05:8c:21:11:4c:88:b7:46:20:fd:35:84:df:
61:19:74:c5:bf:4f:b5:6c:37:0b:35:3c:b3:99:4f:01:1d:24:
db:a9:fe:d8:3c:3d:1b:75:ef:0f:86:58:96:51:4f:d6:b1:44:
30:e3:d7:54:0a:6a:1a:06:f0:d9:c6:47:1a:f4:5b:67:a0:88:
fb:80:94:b7:66:0a:fe:69:60:07:52:67:33:a0:8c:f9:e8:c4:
9c:8f:59:0c:c5:8b:b2:2b:6a:b7:99:00:62:7b:4d:66:cc:f6:
0d:41:1e:2f:0a:58:2f:de:73:8c:8d:f6:9e:8b:a4:ac:bd:35:
19:e4:08:b5:32:46:0c:2f:41:b8:4f:69:b5:a2:44:bc:f7:67:
cc:a3:f6:6c:48:92:d6:4d:45:ea:6e:fa:00:a1:66:ba:70:18:
67:37:d4:58:c5:08:66:42:fc:ea:c6:73:8b:55:27:7a:b0:b0:
4c:3a:6b:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:58:34 2026 by rpki-client