This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft
File: yE1hzRftkuVLszl_HlprOQSsbwU.mft (raw, json)
Hash identifier: fPCCkaic+Cpf9J8Nkg3FftTPyINKxItC4x0ONF8/oX4=
Subject key identifier: C9:21:E2:45:65:79:68:3A:CE:9F:CA:75:E1:E7:1B:5C:39:6B:BA:C9
Authority key identifier: C8:4D:61:CD:17:ED:92:E5:4B:B3:39:7F:1E:5A:6B:39:04:AC:6F:05
Certificate issuer: /CN=c84d61cd17ed92e54bb3397f1e5a6b3904ac6f05
Certificate serial: 019BF6BEACA337EAC5F04E4ACF21E1D31A26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft
Manifest number: 17F4
Signing time: Sun 25 Jan 2026 20:00:49 +0000
Manifest this update: Sun 25 Jan 2026 20:00:49 +0000
Manifest next update: Mon 26 Jan 2026 20:00:49 +0000
Files and hashes: 1: 5L2g6nDW06irIUq83phIZ53C1IA.roa (hash: JbdTWcKtL0GeFigj6GMvD4sLu582tKI8ZbvVxkhlvCI=)
2: AeVrZINs9Mwgw--CeQuhBL48V9o.roa (hash: tOULrw1qQEUkRt4Egsmhx0JNl0n1ptX0coLHQFBvARg=)
3: AzSbSNEJjHOAmPD-lEIirqfh5dg.roa (hash: ZHEBSxcyGtvAyqmQJ49m4K5zjUBmt85+2wE9Fs3EpwQ=)
4: UcKG60X0bY06GvhRzuyCZXPPpEs.roa (hash: CiNS7tumSY9kA1IK1COc42ZCVYSO1Vjftuq3lKqZ0Tg=)
5: VB7XO0ymTrFmXwqFwsQgqVfLeRw.roa (hash: 7CJ7QikKkqwN0XgN8t0cIqxMckNcSYUmDfhH8CM9bnM=)
6: c0IiT_bhf4sAeq2ZJ69mDEiSeKE.roa (hash: WC6msRGLImOXKWuJcuzV4dtFJSxBDOZv82faENvIVf0=)
7: f-sruYLmLAQF45fvBkTZ4sUoHrs.roa (hash: 8P04B1C9VS8sjuPoAqAxmLe2sS/eh9nL22FO4SV0ZsQ=)
8: rGoiQCmdvS4XmAkVedOPWx6pvfc.roa (hash: NENGKfJhaegTvTeAkQES6pzY2mWvrE4Gty5ShbLzPEM=)
9: yE1hzRftkuVLszl_HlprOQSsbwU.crl (hash: tFDiTmkfbLCoQUGleHTB4x/CJBmuq38sPNjC4fkQWS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f6:be:ac:a3:37:ea:c5:f0:4e:4a:cf:21:e1:d3:1a:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c84d61cd17ed92e54bb3397f1e5a6b3904ac6f05
Validity
Not Before: Jan 25 20:00:49 2026 GMT
Not After : Jan 26 20:00:49 2026 GMT
Subject: CN=c921e2456579683ace9fca75e1e71b5c396bbac9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e5:40:26:3d:47:d3:a9:41:d9:71:1b:aa:2b:
ab:b4:22:3f:17:a4:b3:a2:54:fb:2f:84:df:9b:e8:
d4:47:d0:4a:c7:91:28:92:a9:d2:76:e2:9e:1e:13:
21:63:90:0f:69:25:91:f1:de:2f:ea:e3:3c:bf:4f:
28:6d:df:e4:bb:7c:cb:e5:9c:d0:a4:3a:b5:0d:08:
0f:66:af:0f:5d:1b:92:6e:b3:e4:78:65:cc:dd:1b:
df:fc:d8:02:00:e9:15:1c:7a:4b:38:f5:13:84:b5:
40:7d:98:42:b7:02:a6:45:be:02:c0:20:ad:b5:b3:
2c:41:97:13:e7:34:75:3a:d8:16:05:4a:86:df:c4:
78:01:4a:cd:6b:da:8d:e4:55:68:9c:e5:92:5d:6c:
a7:3b:1a:78:e8:11:dd:13:6b:bc:ca:51:fb:b6:8e:
9a:d1:b0:f6:19:33:c1:fa:97:cd:8a:49:d1:a7:17:
a2:08:3e:ae:b3:90:48:dd:e9:0e:77:7c:11:91:6b:
49:26:50:eb:0e:54:3a:36:5b:42:b7:b2:77:b3:39:
fb:af:9d:7e:aa:76:f2:43:23:95:3b:37:27:0a:f7:
29:ff:22:f6:e3:d2:44:21:15:a1:3e:2f:0f:ae:3e:
3c:7c:5b:53:6f:6d:c1:6b:39:aa:3e:c3:9b:9e:de:
40:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:21:E2:45:65:79:68:3A:CE:9F:CA:75:E1:E7:1B:5C:39:6B:BA:C9
X509v3 Authority Key Identifier:
keyid:C8:4D:61:CD:17:ED:92:E5:4B:B3:39:7F:1E:5A:6B:39:04:AC:6F:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:33:0d:d5:af:44:85:6d:9a:c6:bd:41:04:cc:01:13:f3:42:
e8:c9:f6:62:c6:55:3c:77:ad:cd:07:36:08:40:a8:fc:91:c9:
e4:4a:dc:35:76:96:c7:5c:13:63:36:4b:1e:78:6f:3f:b9:d7:
3f:66:7c:bf:39:e9:ad:9f:91:c1:b6:9c:2a:ca:8b:f9:a8:b2:
4d:a3:c5:58:15:22:58:af:34:e0:dc:b4:f8:1c:aa:8f:a2:5e:
d4:67:a3:5a:7f:ce:76:9c:2c:83:4c:d5:44:1f:c3:b5:2e:ce:
2d:c6:d5:cc:a6:59:76:a7:17:f0:30:b9:e8:26:db:2e:85:5a:
79:00:55:15:f5:a0:f4:10:d8:d9:9e:7c:2d:28:05:aa:5e:94:
2b:eb:d8:dd:93:f2:82:90:36:6f:d3:aa:aa:cf:4e:df:69:24:
f0:e3:8d:f6:5f:d3:8d:c6:f3:ef:54:27:b8:e4:c2:ad:10:64:
93:a3:97:fb:a6:ea:e5:5b:f4:3c:f2:6f:fb:80:47:da:c9:25:
3a:25:d4:da:3d:e4:b7:cf:23:e2:34:cb:e9:eb:c1:d2:f6:08:
8b:c8:9d:39:ad:60:22:58:5d:d0:53:0d:03:a5:ab:60:fa:fe:
df:bb:a0:ef:ca:b8:a3:17:34:57:c0:68:50:33:8a:33:bb:fc:
b2:27:cf:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:36:46 2026 by rpki-client