This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/YUnLuj5mKb6uv7aWaGeK2lF0SJg.mft
File: YUnLuj5mKb6uv7aWaGeK2lF0SJg.mft (raw, json)
Hash identifier: TuOMUtlBp47pMKrTGdzaLFhtcaIaN3Tqa5B9iA26mbU=
Subject key identifier: 70:FB:10:7F:5C:EC:37:DC:F5:CF:05:3D:26:B0:41:0F:A5:E8:F1:C8
Authority key identifier: 61:49:CB:BA:3E:66:29:BE:AE:BF:B6:96:68:67:8A:DA:51:74:48:98
Certificate issuer: /CN=6149cbba3e6629beaebfb69668678ada51744898
Certificate serial: 019BF651276CDEA6412CC7D178629CDE40DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YUnLuj5mKb6uv7aWaGeK2lF0SJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/YUnLuj5mKb6uv7aWaGeK2lF0SJg.mft
Manifest number: 1511
Signing time: Sun 25 Jan 2026 18:01:12 +0000
Manifest this update: Sun 25 Jan 2026 18:01:12 +0000
Manifest next update: Mon 26 Jan 2026 18:01:12 +0000
Files and hashes: 1: YUnLuj5mKb6uv7aWaGeK2lF0SJg.crl (hash: Ukcfy+qhxe3e5Wy1yEBrr7WpNcvz82gqId3CN5llUuI=)
2: v872mIxxwSGV2ha6Yd9jq9CMUao.roa (hash: 1G9sBjvfPqj7U0dttH4sUsWBNP9ecKYoKzenyr22mAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/YUnLuj5mKb6uv7aWaGeK2lF0SJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/YUnLuj5mKb6uv7aWaGeK2lF0SJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YUnLuj5mKb6uv7aWaGeK2lF0SJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 18:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f6:51:27:6c:de:a6:41:2c:c7:d1:78:62:9c:de:40:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6149cbba3e6629beaebfb69668678ada51744898
Validity
Not Before: Jan 25 18:01:12 2026 GMT
Not After : Jan 26 18:01:12 2026 GMT
Subject: CN=70fb107f5cec37dcf5cf053d26b0410fa5e8f1c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:af:b4:44:0d:bb:46:cc:58:21:54:0a:d0:6c:
06:cd:96:c0:93:13:28:ab:ad:c6:4c:f2:77:62:81:
8d:e9:2b:68:f8:e1:7d:9a:3b:c4:18:1a:1d:d8:a3:
7a:7a:52:b2:45:d2:00:db:50:8a:12:7a:1f:1a:af:
97:6a:68:6d:bc:d8:c3:4a:64:1c:52:9e:d1:08:d9:
88:7a:10:34:d9:ef:d6:1b:b1:bf:0d:8e:16:c0:5e:
cc:9f:f6:c4:74:2a:59:ca:f3:ab:e0:be:ed:74:47:
2b:17:32:6a:9c:18:b2:19:a4:d8:23:a7:bc:a6:16:
d2:2f:7f:5b:1e:c2:e7:54:fc:48:4b:63:49:fa:5a:
07:80:bd:7b:96:58:78:30:03:1e:eb:29:3b:35:0a:
e7:85:b0:0d:fc:9d:d4:73:54:0f:d1:75:70:33:ee:
da:47:90:cf:e1:44:63:c1:9a:fa:9c:b0:7e:24:6f:
bb:14:26:31:ab:6b:bb:4e:7c:80:4f:6c:51:00:3b:
f4:fc:11:6a:d3:4f:95:00:9d:25:41:b3:8e:a1:43:
2c:f1:3a:cf:71:05:d9:ac:87:d8:ec:a0:fb:49:0f:
b2:13:cb:f5:6c:b6:69:00:a5:d3:38:68:be:97:19:
5f:95:78:b8:45:e4:6c:28:56:d3:8a:05:53:d0:b1:
3e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:FB:10:7F:5C:EC:37:DC:F5:CF:05:3D:26:B0:41:0F:A5:E8:F1:C8
X509v3 Authority Key Identifier:
keyid:61:49:CB:BA:3E:66:29:BE:AE:BF:B6:96:68:67:8A:DA:51:74:48:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUnLuj5mKb6uv7aWaGeK2lF0SJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/YUnLuj5mKb6uv7aWaGeK2lF0SJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/23f532-fe86-4198-8c3b-4d43f66ab731/1/YUnLuj5mKb6uv7aWaGeK2lF0SJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:98:81:f0:7b:f7:8e:81:13:1f:27:82:0c:a3:51:0d:ca:a6:
dd:73:db:88:0f:ac:3c:d3:7e:ad:5d:bb:1b:40:ae:84:85:cf:
0f:cf:8f:f9:da:87:bc:5b:c5:22:78:cc:bf:db:c6:6b:1b:48:
f0:a9:ed:7c:b6:f0:22:9b:bb:b9:92:77:61:22:da:21:71:87:
ca:1d:fe:51:af:22:eb:10:76:13:7f:22:72:55:10:63:d7:34:
cd:ed:86:bb:4c:12:85:f6:70:49:39:6e:53:dd:f5:3d:3e:9a:
b0:55:53:b1:38:f4:f8:af:d0:cf:d9:c1:04:71:dc:df:e4:c2:
86:9c:0a:c3:68:ce:e2:5b:65:aa:22:3f:99:7a:13:ef:20:fd:
0b:b9:1e:72:7c:98:e3:97:d1:18:f2:bf:cf:74:08:7c:7a:6a:
aa:d7:f0:e1:9d:7f:82:63:c7:49:46:ac:7e:4f:ae:69:2b:7a:
7b:94:9c:22:c0:c7:f4:e8:8c:2e:99:8e:e2:96:7c:bd:44:18:
54:61:31:4d:d2:bf:4a:c3:c4:e9:b7:0f:8c:d6:76:e6:a4:94:
0b:98:6f:ae:4a:da:eb:5b:b8:df:f8:a6:83:1b:c9:6d:23:3f:
f1:a3:a9:59:3b:e8:13:5e:ab:59:7e:8f:86:88:9d:65:7a:58:
7d:fc:91:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv2USds3qZBLMfReGKc3kDcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxNDljYmJhM2U2NjI5YmVhZWJmYjY5NjY4Njc4YWRhNTE3
NDQ4OTgwHhcNMjYwMTI1MTgwMTEyWhcNMjYwMTI2MTgwMTEyWjAzMTEwLwYDVQQD
Eyg3MGZiMTA3ZjVjZWMzN2RjZjVjZjA1M2QyNmIwNDEwZmE1ZThmMWM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnK+0RA27RsxYIVQK0GwGzZbAkxMo
q63GTPJ3YoGN6Sto+OF9mjvEGBod2KN6elKyRdIA21CKEnofGq+XamhtvNjDSmQc
Up7RCNmIehA02e/WG7G/DY4WwF7Mn/bEdCpZyvOr4L7tdEcrFzJqnBiyGaTYI6e8
phbSL39bHsLnVPxIS2NJ+loHgL17llh4MAMe6yk7NQrnhbAN/J3Uc1QP0XVwM+7a
R5DP4URjwZr6nLB+JG+7FCYxq2u7TnyAT2xRADv0/BFq00+VAJ0lQbOOoUMs8TrP
cQXZrIfY7KD7SQ+yE8v1bLZpAKXTOGi+lxlflXi4ReRsKFbTigVT0LE+ywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHD7EH9c7Dfc9c8FPSawQQ+l6PHIMB8GA1UdIwQY
MBaAFGFJy7o+Zim+rr+2lmhnitpRdEiYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVVuTHVqNW1LYjZ1djdhV2FHZUsybEYwU0pnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8yM2Y1MzItZmU4Ni00MTk4LThjM2It
NGQ0M2Y2NmFiNzMxLzEvWVVuTHVqNW1LYjZ1djdhV2FHZUsybEYwU0pnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS8yM2Y1MzItZmU4Ni00MTk4LThjM2ItNGQ0M2Y2NmFiNzMx
LzEvWVVuTHVqNW1LYjZ1djdhV2FHZUsybEYwU0pnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqZiB8Hv3
joETHyeCDKNRDcqm3XPbiA+sPNN+rV27G0CuhIXPD8+P+dqHvFvFInjMv9vGaxtI
8KntfLbwIpu7uZJ3YSLaIXGHyh3+Ua8i6xB2E38iclUQY9c0ze2Gu0wShfZwSTlu
U931PT6asFVTsTj0+K/Qz9nBBHHc3+TChpwKw2jO4ltlqiI/mXoT7yD9C7kecnyY
45fRGPK/z3QIfHpqqtfw4Z1/gmPHSUasfk+uaSt6e5ScIsDH9OiMLpmO4pZ8vUQY
VGExTdK/SsPE6bcPjNZ25qSUC5hvrkra61u43/imgxvJbSM/8aOpWTvoE16rWX6P
hoidZXpYffyRbg==
-----END CERTIFICATE-----
Generated at Mon Jan 26 04:54:26 2026 by rpki-client