This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/b4aaf6-10f4-4171-ac5a-ab0c1c442f5d/1/yvlojhds84ZDbXu4jTpAW0bQ4rk.mft
File: yvlojhds84ZDbXu4jTpAW0bQ4rk.mft (raw, json)
Hash identifier: 3mwZHprKNP3BAVj4FF5T4KSGD65awND3F/1YtrCsExQ=
Subject key identifier: 51:8E:50:D3:34:FF:69:27:C9:34:BA:EB:34:64:5E:71:E0:83:6F:60
Authority key identifier: CA:F9:68:8E:17:6C:F3:86:43:6D:7B:B8:8D:3A:40:5B:46:D0:E2:B9
Certificate issuer: /CN=caf9688e176cf386436d7bb88d3a405b46d0e2b9
Certificate serial: 019C43220466ECF913D03C30D49428D8FD10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yvlojhds84ZDbXu4jTpAW0bQ4rk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/b4aaf6-10f4-4171-ac5a-ab0c1c442f5d/1/yvlojhds84ZDbXu4jTpAW0bQ4rk.mft
Manifest number: 0611
Signing time: Mon 09 Feb 2026 16:00:28 +0000
Manifest this update: Mon 09 Feb 2026 16:00:28 +0000
Manifest next update: Tue 10 Feb 2026 16:00:28 +0000
Files and hashes: 1: 12r5iDgWvwsfOuY62IZTikj8QKg.roa (hash: y5zUQQDYJqybKXwbKXQWR71NYli16e7rtRVTqKRI2pI=)
2: yvlojhds84ZDbXu4jTpAW0bQ4rk.crl (hash: 8KspxgnACF7Am9kQMK/DLH7Mcp0loMrda16KzGM5yNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/b4aaf6-10f4-4171-ac5a-ab0c1c442f5d/1/yvlojhds84ZDbXu4jTpAW0bQ4rk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/b4aaf6-10f4-4171-ac5a-ab0c1c442f5d/1/yvlojhds84ZDbXu4jTpAW0bQ4rk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yvlojhds84ZDbXu4jTpAW0bQ4rk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:22:04:66:ec:f9:13:d0:3c:30:d4:94:28:d8:fd:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caf9688e176cf386436d7bb88d3a405b46d0e2b9
Validity
Not Before: Feb 9 16:00:28 2026 GMT
Not After : Feb 10 16:00:28 2026 GMT
Subject: CN=518e50d334ff6927c934baeb34645e71e0836f60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:be:f8:13:7d:0d:f0:c5:91:f9:57:ac:71:6e:
d8:96:04:72:d1:c2:17:01:60:2d:79:8e:b7:87:7e:
87:f9:75:ad:a6:b2:96:b2:bd:91:69:8f:b8:5f:2a:
a5:3e:79:de:f9:d8:1b:f9:43:76:0c:e7:d2:42:da:
d1:45:a1:42:fd:7c:90:cd:98:57:7d:d7:9a:a5:62:
58:9a:cf:8c:61:47:a7:d0:8d:fa:f2:ca:19:c3:e0:
35:8f:68:56:a9:3a:f2:28:4d:ef:66:84:9c:e1:14:
75:4a:62:a3:40:61:fd:9f:fd:5f:bd:2c:f1:1f:c7:
8e:87:1e:2c:03:89:87:21:4d:f9:4c:8a:1a:3d:61:
13:db:81:9b:3e:b6:de:a4:6d:6c:f8:26:1b:34:61:
66:45:60:b9:8f:c6:7e:0d:91:0a:6f:17:8a:66:bc:
33:ed:f9:f5:ed:3b:40:0f:24:a5:0d:08:d4:15:f5:
84:c2:c7:3b:60:c2:64:1b:74:b9:2b:73:71:dd:82:
5c:ea:83:a3:67:14:3a:ff:13:ca:93:f3:c2:68:1d:
b4:a2:c3:7c:d3:9b:ea:39:17:bc:ea:f9:59:3c:fe:
08:27:e9:36:9f:bf:30:1f:9e:d0:6e:0c:c8:16:a2:
4f:99:de:52:93:29:af:94:3a:35:64:56:2c:4e:95:
cc:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:8E:50:D3:34:FF:69:27:C9:34:BA:EB:34:64:5E:71:E0:83:6F:60
X509v3 Authority Key Identifier:
keyid:CA:F9:68:8E:17:6C:F3:86:43:6D:7B:B8:8D:3A:40:5B:46:D0:E2:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yvlojhds84ZDbXu4jTpAW0bQ4rk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b4aaf6-10f4-4171-ac5a-ab0c1c442f5d/1/yvlojhds84ZDbXu4jTpAW0bQ4rk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b4aaf6-10f4-4171-ac5a-ab0c1c442f5d/1/yvlojhds84ZDbXu4jTpAW0bQ4rk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:7d:5e:e1:7b:88:d1:79:f8:d8:51:c3:68:99:20:c7:83:c3:
4f:cc:c0:bc:05:2c:ad:7c:36:e8:e7:0d:eb:24:64:3f:d2:e6:
af:9a:75:39:c2:cd:95:71:4b:4e:b0:48:11:70:ce:d5:bd:3a:
d8:73:d2:21:d8:4a:9b:78:c5:c4:69:4e:14:33:b2:c1:fa:4e:
24:15:a4:d5:db:7f:51:93:01:53:47:13:5b:2a:ca:23:8c:ed:
00:fe:c3:98:92:3b:45:cf:d0:27:cf:2a:f6:93:0c:f1:55:d1:
58:cc:b1:ba:8e:1b:4b:e2:1a:8b:fa:95:6b:68:83:ed:24:e5:
e3:ce:1d:f0:c9:78:9d:e0:f0:a2:97:33:21:54:cc:cc:98:e4:
22:b4:ae:99:df:d0:47:4d:88:73:4b:6a:b9:a7:fc:55:89:8c:
3f:2c:3a:f0:b9:05:c8:5d:10:48:a0:c3:50:2e:3f:fb:46:58:
80:34:6b:af:af:49:16:6c:d2:28:f5:3c:2c:7e:e7:47:10:50:
d2:0e:e8:93:7f:24:72:a6:35:ca:ff:21:25:6a:55:ad:1b:97:
c7:b4:1d:89:90:24:bd:71:b8:00:e4:3a:a8:19:fa:f1:4f:77:
7a:c6:c5:97:fc:44:98:ee:12:07:7b:c6:47:4c:ca:f0:5a:76:
19:bb:0a:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:44:44 2026 by rpki-client