This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.mft
File: yp4g0QNLRO916V_ffriIFbb30vg.mft (raw, json)
Hash identifier: FdhhQArarj5okRWHKt4RQZ0S0z2uylk59RmFIwQNlWA=
Subject key identifier: DB:6C:32:4C:6E:55:CD:8C:19:E8:96:EA:34:E9:21:F6:C7:8B:BE:8F
Authority key identifier: CA:9E:20:D1:03:4B:44:EF:75:E9:5F:DF:7E:B8:88:15:B6:F7:D2:F8
Certificate issuer: /CN=ca9e20d1034b44ef75e95fdf7eb88815b6f7d2f8
Certificate serial: 019BF91BE73C5E8957317E719FCEDFFBBA7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yp4g0QNLRO916V_ffriIFbb30vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.mft
Manifest number: 1046
Signing time: Mon 26 Jan 2026 07:01:53 +0000
Manifest this update: Mon 26 Jan 2026 07:01:53 +0000
Manifest next update: Tue 27 Jan 2026 07:01:53 +0000
Files and hashes: 1: D3wkpKKSoJovDsiCfvbh1DYTkx8.roa (hash: c0FcHGYTB+tG9IR/+QbyBfjUn2VqFpbtfy3DDserGhM=)
2: KSjHgXPRASqnBW1tjOtvhmkWPHE.roa (hash: h5XvzMTTFxSuHg9vWwCmjacM7SXacJTLfB8wl2n3Cec=)
3: yp4g0QNLRO916V_ffriIFbb30vg.crl (hash: cjh4kfRDt5yOSm/6pJnVob38218rERJ6aV885nY/cKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yp4g0QNLRO916V_ffriIFbb30vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 01:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f9:1b:e7:3c:5e:89:57:31:7e:71:9f:ce:df:fb:ba:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca9e20d1034b44ef75e95fdf7eb88815b6f7d2f8
Validity
Not Before: Jan 26 07:01:53 2026 GMT
Not After : Jan 27 07:01:53 2026 GMT
Subject: CN=db6c324c6e55cd8c19e896ea34e921f6c78bbe8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:7a:09:05:2f:7d:68:34:77:c0:85:f4:17:c2:
f8:51:05:4c:47:13:46:c0:99:09:d9:45:34:e7:54:
f9:01:d0:6a:03:ff:56:e6:80:be:db:07:60:ca:3b:
54:b0:fc:a2:61:d8:8e:8c:1d:3c:33:f2:50:93:89:
e7:f1:35:56:30:e4:31:08:96:e6:21:c7:be:19:0b:
2c:75:f4:6c:2c:59:d0:7b:74:6f:ae:b8:9d:16:10:
4f:92:a2:27:f0:75:76:d8:3e:4f:f3:24:6d:95:f9:
e1:b5:61:3c:da:a2:99:a0:eb:c0:d1:83:bd:00:38:
9e:21:1f:f6:3d:a6:30:f4:a8:79:36:74:de:c3:98:
60:86:d8:fe:35:cf:fe:08:93:3d:b5:e9:21:4e:26:
dc:7d:6b:72:85:77:2e:c2:81:4c:8b:61:42:a3:63:
a0:97:86:de:8b:37:fe:a8:50:3a:9a:fc:c7:f1:28:
ae:4b:2a:1a:92:19:b7:ea:48:35:a6:c0:7d:fa:f3:
49:a7:54:61:05:a3:36:6b:99:53:c2:68:e3:04:40:
27:e8:bb:44:47:16:e6:a1:3b:c3:be:76:39:4b:76:
90:0a:15:81:a4:4b:9a:51:e5:c4:af:26:6e:ff:f0:
1b:32:c9:2e:77:38:90:d8:98:ca:6e:95:46:c1:47:
35:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:6C:32:4C:6E:55:CD:8C:19:E8:96:EA:34:E9:21:F6:C7:8B:BE:8F
X509v3 Authority Key Identifier:
keyid:CA:9E:20:D1:03:4B:44:EF:75:E9:5F:DF:7E:B8:88:15:B6:F7:D2:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yp4g0QNLRO916V_ffriIFbb30vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:fc:86:db:e4:6f:af:11:5e:82:2f:cd:e4:e8:b6:04:a3:a5:
42:4e:9b:a7:46:7b:b0:be:99:fd:9b:41:ed:a6:5f:f4:a2:6c:
96:02:53:72:26:f3:5c:53:1f:c0:69:83:5d:ff:b4:50:64:e3:
03:47:c5:04:56:7e:28:37:c4:77:c8:9d:66:05:11:9b:de:62:
49:7a:36:ee:d9:e3:28:81:c2:5a:b0:83:90:59:a2:14:7e:7a:
3b:2b:34:3b:0b:a9:6f:c5:25:d0:a7:3b:00:df:56:0a:8f:6c:
1a:29:98:cb:f6:f4:94:2f:ed:75:58:11:ec:56:df:92:78:9a:
63:a1:3c:9b:e7:7c:37:1b:cd:57:25:f3:cd:22:17:7a:d1:55:
64:05:a2:69:99:5b:60:ea:c8:6b:7a:b6:71:53:77:f5:c8:44:
a8:c0:44:5c:6f:b2:39:9d:bb:b1:9f:67:13:c5:fc:e1:ce:f4:
97:ff:71:39:94:4f:68:3c:01:a3:bb:6e:f3:76:f9:5f:a6:45:
e8:a0:88:d9:c3:7a:54:59:e1:14:46:ae:dd:25:fb:5e:46:4b:
f7:42:78:1f:0c:61:e7:80:c5:4d:7e:24:e1:ce:31:08:3a:15:
2a:b6:b0:ab:af:cc:a7:6e:fa:02:bb:0c:ee:6e:ed:7c:5e:33:
0c:04:5a:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv5G+c8XolXMX5xn87f+7p+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhOWUyMGQxMDM0YjQ0ZWY3NWU5NWZkZjdlYjg4ODE1YjZm
N2QyZjgwHhcNMjYwMTI2MDcwMTUzWhcNMjYwMTI3MDcwMTUzWjAzMTEwLwYDVQQD
EyhkYjZjMzI0YzZlNTVjZDhjMTllODk2ZWEzNGU5MjFmNmM3OGJiZThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3oJBS99aDR3wIX0F8L4UQVMRxNG
wJkJ2UU051T5AdBqA/9W5oC+2wdgyjtUsPyiYdiOjB08M/JQk4nn8TVWMOQxCJbm
Ice+GQssdfRsLFnQe3RvrridFhBPkqIn8HV22D5P8yRtlfnhtWE82qKZoOvA0YO9
ADieIR/2PaYw9Kh5NnTew5hghtj+Nc/+CJM9tekhTibcfWtyhXcuwoFMi2FCo2Og
l4beizf+qFA6mvzH8SiuSyoakhm36kg1psB9+vNJp1RhBaM2a5lTwmjjBEAn6LtE
RxbmoTvDvnY5S3aQChWBpEuaUeXEryZu//AbMskudziQ2JjKbpVGwUc1+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNtsMkxuVc2MGeiW6jTpIfbHi76PMB8GA1UdIwQY
MBaAFMqeINEDS0Tvdelf3364iBW299L4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXA0ZzBRTkxSTzkxNlZfZmZyaUlGYmIzMHZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8xM2E2ODAtZjY5OC00Yzk3LTliYjYt
MTI3MDFhYjUxYWNmLzEveXA0ZzBRTkxSTzkxNlZfZmZyaUlGYmIzMHZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny8xM2E2ODAtZjY5OC00Yzk3LTliYjYtMTI3MDFhYjUxYWNm
LzEveXA0ZzBRTkxSTzkxNlZfZmZyaUlGYmIzMHZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABPyG2+Rv
rxFegi/N5Oi2BKOlQk6bp0Z7sL6Z/ZtB7aZf9KJslgJTcibzXFMfwGmDXf+0UGTj
A0fFBFZ+KDfEd8idZgURm95iSXo27tnjKIHCWrCDkFmiFH56Oys0Owupb8Ul0Kc7
AN9WCo9sGimYy/b0lC/tdVgR7FbfkniaY6E8m+d8NxvNVyXzzSIXetFVZAWiaZlb
YOrIa3q2cVN39chEqMBEXG+yOZ27sZ9nE8X84c70l/9xOZRPaDwBo7tu83b5X6ZF
6KCI2cN6VFnhFEau3SX7XkZL90J4Hwxh54DFTX4k4c4xCDoVKrawq6/Mp276ArsM
7m7tfF4zDARa4A==
-----END CERTIFICATE-----
Generated at Mon Jan 26 10:27:37 2026 by rpki-client