This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft
File: YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft (raw, json)
Hash identifier: uATaXzujDo4Ij3m0XL1Ud573zf9q6UAe0eszQC0dJAE=
Subject key identifier: 26:E3:35:25:59:91:36:ED:85:6D:21:06:09:40:C4:1A:45:DD:20:87
Authority key identifier: 62:11:7A:1E:6F:69:9C:32:2B:6B:98:34:94:F4:2C:22:09:12:75:53
Certificate issuer: /CN=62117a1e6f699c322b6b983494f42c2209127553
Certificate serial: 019BF574E1960954E4B6758B405CFACC0BF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YhF6Hm9pnDIra5g0lPQsIgkSdVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft
Manifest number: 17E8
Signing time: Sun 25 Jan 2026 14:00:36 +0000
Manifest this update: Sun 25 Jan 2026 14:00:36 +0000
Manifest next update: Mon 26 Jan 2026 14:00:36 +0000
Files and hashes: 1: OiKiahRWncUV4qUQ1KFRIt-TD2M.roa (hash: QSXXdHxW9bYZOF6nU+F/yAhMAgMNv+ORI1KQvma2glI=)
2: YhF6Hm9pnDIra5g0lPQsIgkSdVM.crl (hash: lAvbKcUXiJO1skDnMTLNuODnMc66/5yDk9YqdSOaGFM=)
3: ijX1HmjARZz9tG3rzkcFqhcprs4.roa (hash: d9IhBeRKiXtePacBcQYhWw784ZjdmncJc5xGdrlI4lM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft
rsync://rpki.ripe.net/repository/DEFAULT/YhF6Hm9pnDIra5g0lPQsIgkSdVM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f5:74:e1:96:09:54:e4:b6:75:8b:40:5c:fa:cc:0b:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62117a1e6f699c322b6b983494f42c2209127553
Validity
Not Before: Jan 25 14:00:36 2026 GMT
Not After : Jan 26 14:00:36 2026 GMT
Subject: CN=26e33525599136ed856d21060940c41a45dd2087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3c:05:43:da:e0:1c:fd:61:ac:1f:ad:50:99:
50:1e:2c:3c:b5:97:96:c8:f0:dc:42:c1:5e:38:cb:
56:ec:3a:4c:05:b3:3a:d6:d0:ac:c0:c2:d6:20:a0:
f6:c9:78:d7:d0:0e:44:00:52:c8:73:a7:c3:44:24:
62:bb:c8:93:1f:44:04:a3:a2:40:56:f8:5b:56:0f:
11:b8:4c:46:cd:13:c9:e5:51:c3:9c:eb:dc:ad:ef:
6d:06:b1:92:fe:30:de:c0:0a:d3:0a:e7:fc:13:48:
8b:ab:3c:45:d8:2e:af:de:f3:17:b0:94:f9:61:6d:
93:6c:83:70:f0:6b:54:b3:aa:fc:a5:88:2a:d4:dc:
91:4b:a3:16:a1:55:9c:91:02:11:be:ec:25:a9:53:
85:27:aa:14:05:30:2c:48:2e:44:25:80:65:1f:e2:
35:26:fe:c2:e4:88:b2:49:06:10:6b:89:2e:50:53:
57:9f:53:ca:5b:9d:e6:56:bc:f6:03:9f:fb:be:f0:
b4:58:8c:73:4d:85:e7:5a:38:3d:31:41:58:33:79:
71:dd:a7:1e:1a:84:56:58:ff:23:6b:13:0b:38:40:
5d:ab:12:8f:ce:37:22:8b:e8:6d:75:52:ea:31:b1:
1f:17:eb:86:89:40:28:78:15:99:f1:e7:ec:1c:05:
59:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:E3:35:25:59:91:36:ED:85:6D:21:06:09:40:C4:1A:45:DD:20:87
X509v3 Authority Key Identifier:
keyid:62:11:7A:1E:6F:69:9C:32:2B:6B:98:34:94:F4:2C:22:09:12:75:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhF6Hm9pnDIra5g0lPQsIgkSdVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:fe:ef:25:1f:9e:ba:3a:8d:13:61:0c:6a:e4:20:a7:11:07:
46:5c:5b:ee:98:1d:9a:cc:f4:d3:c9:58:98:79:35:f4:8a:9b:
fc:cc:4b:05:db:25:95:b6:35:6e:5a:bb:7b:53:5a:1f:1a:d7:
20:6a:4e:e5:29:ca:fc:ce:c2:67:0b:69:3b:08:dd:bc:55:96:
a2:5c:e1:99:ef:85:d3:a2:5b:03:9f:a6:bf:12:50:8e:e9:b0:
e1:7f:ef:6c:a6:57:f9:df:52:32:1a:fe:e0:7f:9e:88:bc:e4:
e0:99:36:11:d7:df:86:af:60:d2:aa:d6:a8:4c:83:b3:68:47:
40:b0:84:7d:73:93:4f:f5:83:54:e0:e7:08:1f:28:bb:e1:6d:
0a:a6:b4:78:89:b8:d8:a3:a2:70:bc:9f:bc:4f:8e:fc:85:f4:
61:70:f7:55:83:72:38:2d:99:e7:6d:b8:28:92:57:10:6f:cf:
12:75:f3:54:80:99:52:07:f7:bb:c4:71:13:62:95:51:f5:6c:
3e:9f:d1:48:f1:38:79:86:35:b7:37:38:84:21:49:af:fb:c7:
09:5c:c1:55:49:da:74:60:00:00:8a:de:a1:b7:89:18:26:1d:
6d:a8:27:08:d0:97:db:e4:a8:5a:d1:ef:05:d5:9c:cd:a7:da:
9b:1d:ae:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv1dOGWCVTktnWLQFz6zAv4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyMTE3YTFlNmY2OTljMzIyYjZiOTgzNDk0ZjQyYzIyMDkx
Mjc1NTMwHhcNMjYwMTI1MTQwMDM2WhcNMjYwMTI2MTQwMDM2WjAzMTEwLwYDVQQD
EygyNmUzMzUyNTU5OTEzNmVkODU2ZDIxMDYwOTQwYzQxYTQ1ZGQyMDg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDwFQ9rgHP1hrB+tUJlQHiw8tZeW
yPDcQsFeOMtW7DpMBbM61tCswMLWIKD2yXjX0A5EAFLIc6fDRCRiu8iTH0QEo6JA
VvhbVg8RuExGzRPJ5VHDnOvcre9tBrGS/jDewArTCuf8E0iLqzxF2C6v3vMXsJT5
YW2TbINw8GtUs6r8pYgq1NyRS6MWoVWckQIRvuwlqVOFJ6oUBTAsSC5EJYBlH+I1
Jv7C5IiySQYQa4kuUFNXn1PKW53mVrz2A5/7vvC0WIxzTYXnWjg9MUFYM3lx3ace
GoRWWP8jaxMLOEBdqxKPzjcii+htdVLqMbEfF+uGiUAoeBWZ8efsHAVZvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCbjNSVZkTbthW0hBglAxBpF3SCHMB8GA1UdIwQY
MBaAFGIReh5vaZwyK2uYNJT0LCIJEnVTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWhGNkhtOXBuRElyYTVnMGxQUXNJZ2tTZFZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS83MGVlMjEtZDkzZi00YTcxLTg0NzQt
NWJjYzg0NThhYTJjLzEvWWhGNkhtOXBuRElyYTVnMGxQUXNJZ2tTZFZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS83MGVlMjEtZDkzZi00YTcxLTg0NzQtNWJjYzg0NThhYTJj
LzEvWWhGNkhtOXBuRElyYTVnMGxQUXNJZ2tTZFZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnf7vJR+e
ujqNE2EMauQgpxEHRlxb7pgdmsz008lYmHk19Iqb/MxLBdsllbY1blq7e1NaHxrX
IGpO5SnK/M7CZwtpOwjdvFWWolzhme+F06JbA5+mvxJQjumw4X/vbKZX+d9SMhr+
4H+eiLzk4Jk2Edffhq9g0qrWqEyDs2hHQLCEfXOTT/WDVODnCB8ou+FtCqa0eIm4
2KOicLyfvE+O/IX0YXD3VYNyOC2Z5224KJJXEG/PEnXzVICZUgf3u8RxE2KVUfVs
Pp/RSPE4eYY1tzc4hCFJr/vHCVzBVUnadGAAAIreobeJGCYdbagnCNCX2+SoWtHv
BdWczafamx2uAA==
-----END CERTIFICATE-----
Generated at Sun Jan 25 21:11:02 2026 by rpki-client