This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/YhoTCpDLA344A_6gv0ZaoIL-NJg.mft
File: YhoTCpDLA344A_6gv0ZaoIL-NJg.mft (raw, json)
Hash identifier: xJzpaXrprKrUhDDlnzD90gWREP6U4sIAQCGRU23Pajw=
Subject key identifier: 4F:21:D1:D4:46:FD:8D:4F:0E:88:4D:21:8E:37:17:FF:C1:A2:64:29
Authority key identifier: 62:1A:13:0A:90:CB:03:7E:38:03:FE:A0:BF:46:5A:A0:82:FE:34:98
Certificate issuer: /CN=621a130a90cb037e3803fea0bf465aa082fe3498
Certificate serial: 019C42462F41DB76EC2AD695F07F781FE9AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YhoTCpDLA344A_6gv0ZaoIL-NJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/YhoTCpDLA344A_6gv0ZaoIL-NJg.mft
Manifest number: 0638
Signing time: Mon 09 Feb 2026 12:00:21 +0000
Manifest this update: Mon 09 Feb 2026 12:00:21 +0000
Manifest next update: Tue 10 Feb 2026 12:00:21 +0000
Files and hashes: 1: Rmbqki6sfeVONmSCUKVbSwnLV2w.roa (hash: m02OGs1ERDq2Tep5VBBDirUwK9M85zv/SGcl5/T9Gng=)
2: YhoTCpDLA344A_6gv0ZaoIL-NJg.crl (hash: N1cnIPrVq5OGvrnYSeiOUb8nUMK9uyqLFOMh3/xw8vs=)
3: YrjDjaI3_Q6KPQ90f8RoYBEvTqI.roa (hash: VmD17BnA3G7W1dMkZraFPy0h1sdRJ/jQerJj3HVgUI8=)
4: mEMBpqCiAZX-66IM2v28OLBYmaU.roa (hash: D0q/tQQJTMQWefAkqZBJ1Tlw8AdCPKqxL86ZtoZ1fgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/YhoTCpDLA344A_6gv0ZaoIL-NJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/YhoTCpDLA344A_6gv0ZaoIL-NJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YhoTCpDLA344A_6gv0ZaoIL-NJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 12:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:46:2f:41:db:76:ec:2a:d6:95:f0:7f:78:1f:e9:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=621a130a90cb037e3803fea0bf465aa082fe3498
Validity
Not Before: Feb 9 12:00:21 2026 GMT
Not After : Feb 10 12:00:21 2026 GMT
Subject: CN=4f21d1d446fd8d4f0e884d218e3717ffc1a26429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:12:4c:69:fc:52:43:12:81:a6:10:15:2e:0f:
ff:8d:b2:a9:01:00:75:a9:94:83:c7:ce:b3:51:b9:
69:7b:f8:db:ef:af:11:1f:10:05:7e:44:f7:0e:7d:
26:f1:06:a3:89:d3:43:b1:08:1d:42:03:ad:6a:9f:
e7:f0:38:f6:c3:91:7a:77:03:96:0c:13:ab:c8:2a:
6c:6c:e4:3c:b9:a7:ea:6d:a5:42:a7:2b:9a:6e:f8:
b7:bd:69:6d:43:36:d3:a1:f9:55:d3:ed:47:37:2e:
1a:fb:bf:b8:9d:69:15:a5:ea:1f:e7:7b:26:3c:7b:
7d:fd:3b:c6:8c:41:21:c3:96:ee:99:41:23:b2:2b:
14:8c:cd:75:18:43:86:fa:29:c5:d3:2f:9b:ad:ba:
c3:ad:6a:07:54:8d:53:f1:65:c8:6f:e2:ab:14:ba:
ba:09:75:45:08:2c:3d:ea:ab:d5:5a:51:97:dc:5d:
af:1d:5d:63:51:bf:58:25:7d:b8:be:b3:50:a2:fc:
49:55:6e:83:49:87:6d:26:7a:e9:5c:e9:cc:c0:44:
6b:ec:ca:83:99:96:06:5d:be:3c:f7:e2:b6:e8:be:
a1:69:f5:a9:e0:4c:76:a7:2b:ea:b9:03:f5:a8:6a:
a6:30:92:ae:11:35:c7:d2:20:63:ce:37:4f:f1:e1:
b8:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:21:D1:D4:46:FD:8D:4F:0E:88:4D:21:8E:37:17:FF:C1:A2:64:29
X509v3 Authority Key Identifier:
keyid:62:1A:13:0A:90:CB:03:7E:38:03:FE:A0:BF:46:5A:A0:82:FE:34:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhoTCpDLA344A_6gv0ZaoIL-NJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/YhoTCpDLA344A_6gv0ZaoIL-NJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/YhoTCpDLA344A_6gv0ZaoIL-NJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:69:28:6d:92:31:76:77:54:0f:7d:a7:e2:8e:52:69:54:62:
07:cd:1d:67:8b:60:d1:92:b2:9b:2e:98:83:e9:72:08:e0:47:
a8:c9:3b:f8:2c:72:8f:16:9e:18:61:ec:c8:25:c9:0d:03:6c:
a7:a6:7f:a6:c5:86:09:ce:45:df:5b:42:9a:2a:00:9a:15:10:
e6:61:9d:a0:5a:46:32:e6:13:be:cd:36:e0:f4:14:3a:7e:63:
09:1a:8e:65:49:75:76:cb:cb:9e:ab:76:4c:79:10:3b:64:b2:
09:f9:c1:fc:94:51:5e:5a:c9:33:10:fd:26:7b:64:ac:e6:01:
66:6d:8f:d4:3f:57:fa:ce:39:1b:e8:a6:b3:8a:2a:b5:a1:7e:
07:49:33:ac:fa:71:19:77:b2:40:74:8a:e9:00:22:9b:ae:b3:
40:a4:6b:94:6a:bf:fc:8b:7d:b9:46:a7:4f:74:9c:41:8c:44:
70:b9:37:9c:c0:e4:47:5c:75:4b:cb:63:1a:80:b0:24:9d:87:
06:07:db:70:6b:a0:fa:9b:57:b8:8d:f6:3d:50:7c:e1:c2:0e:
1e:b9:cb:62:f8:6c:47:a8:1b:67:a5:e5:6e:15:6a:f6:97:c9:
dc:09:8e:10:a6:89:dd:ba:37:8a:12:13:03:56:06:70:3c:4d:
24:5b:12:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:06:17 2026 by rpki-client