This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.mft
File: YwITq6Hqkoue0ySR3puhBGSwY2w.mft (raw, json)
Hash identifier: EY3Cpu007FEA7cmBxwV/ezjTkUqhFYCz/a9PDqIefOM=
Subject key identifier: BE:5C:53:3A:51:AD:93:38:BF:44:41:45:6F:CB:F6:6C:6C:1D:92:B2
Authority key identifier: 63:02:13:AB:A1:EA:92:8B:9E:D3:24:91:DE:9B:A1:04:64:B0:63:6C
Certificate issuer: /CN=630213aba1ea928b9ed32491de9ba10464b0636c
Certificate serial: 019BF7633BFBC8F30581E4582BE02D0F19EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YwITq6Hqkoue0ySR3puhBGSwY2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.mft
Manifest number: 17EA
Signing time: Sun 25 Jan 2026 23:00:34 +0000
Manifest this update: Sun 25 Jan 2026 23:00:34 +0000
Manifest next update: Mon 26 Jan 2026 23:00:34 +0000
Files and hashes: 1: YwITq6Hqkoue0ySR3puhBGSwY2w.crl (hash: 8wKXJq+fqVs+oFWsAtHD7xSWJ39BCaIUMm45TLPRPTk=)
2: zk24Xibi_69XM4miradQH_-zfVo.roa (hash: 8vWhGhRcVD9hGye0zCP9w/L6uhcw5ZBizDAK5O4GtQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/YwITq6Hqkoue0ySR3puhBGSwY2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f7:63:3b:fb:c8:f3:05:81:e4:58:2b:e0:2d:0f:19:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=630213aba1ea928b9ed32491de9ba10464b0636c
Validity
Not Before: Jan 25 23:00:34 2026 GMT
Not After : Jan 26 23:00:34 2026 GMT
Subject: CN=be5c533a51ad9338bf4441456fcbf66c6c1d92b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c6:01:42:cd:2d:7f:16:a2:a2:76:b1:4a:75:
1b:b7:ac:16:8e:ba:ba:c9:55:3e:d8:07:7e:9c:30:
22:f0:93:cf:f5:7a:20:ca:a5:ba:74:79:7a:2d:a2:
e3:8c:f9:ea:a9:22:4d:e7:ff:72:e1:76:78:56:7a:
9a:51:93:35:20:21:13:d5:64:5d:dc:61:bf:03:61:
eb:8e:b6:7e:5c:c5:b9:8d:25:78:af:f5:79:6c:dc:
89:83:38:0c:c0:22:02:f5:6c:1d:f9:4f:0f:5b:14:
13:0e:63:54:b3:75:fa:29:bc:ad:e9:b7:72:9b:04:
84:45:2e:e8:2f:79:c1:c5:86:02:c4:d8:ab:91:68:
06:19:da:07:56:50:9a:35:2b:68:e3:1e:d9:b2:d7:
c4:b7:79:25:ba:d7:84:de:7e:66:44:f6:ef:78:41:
55:f5:39:fd:e2:ef:e9:76:bd:f8:fc:cf:12:b1:c5:
f0:35:42:07:f7:c1:74:40:ec:53:e5:56:e5:e9:62:
a6:ea:6c:42:96:55:17:4e:ff:2e:80:a7:9a:9a:01:
7c:b5:22:01:7b:f1:38:01:65:14:d6:b8:ca:d6:9d:
be:ff:6e:1b:08:bf:48:88:2a:08:0a:06:56:35:7c:
ec:ea:a3:7d:b3:19:d9:02:0f:85:a6:86:f0:4a:91:
30:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:5C:53:3A:51:AD:93:38:BF:44:41:45:6F:CB:F6:6C:6C:1D:92:B2
X509v3 Authority Key Identifier:
keyid:63:02:13:AB:A1:EA:92:8B:9E:D3:24:91:DE:9B:A1:04:64:B0:63:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YwITq6Hqkoue0ySR3puhBGSwY2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:60:be:af:53:21:e0:dc:75:ea:72:12:eb:43:0c:ed:2b:f4:
db:ae:a4:d3:f4:eb:ec:e1:71:70:75:45:d1:fb:cd:28:df:87:
6d:0c:5c:67:40:74:7e:ac:d8:00:e3:58:bb:da:7b:3f:58:7e:
f2:e2:6c:6c:17:2b:e3:ef:e9:83:1f:28:b6:5c:96:ef:b2:44:
91:61:1d:3c:b8:2a:8a:2f:c2:40:df:2a:3c:1e:b0:b2:83:d3:
e6:84:47:eb:50:d0:99:7b:f2:b2:fb:ce:c1:f0:20:f7:76:d6:
99:d4:7c:d6:43:14:fc:be:98:b9:a0:a0:64:ac:d9:2c:03:52:
75:52:ad:3f:2d:64:e9:a4:dc:5f:0f:f2:d0:9e:44:16:71:83:
c3:ad:80:4b:9e:2e:20:fd:be:1d:0a:8a:c5:09:85:49:d0:d5:
b2:15:96:42:37:d9:6c:24:23:30:2b:52:59:ab:25:dc:80:73:
89:86:b2:e6:b3:aa:a8:7b:bb:eb:27:74:44:12:4d:b0:a0:a9:
f4:c6:62:14:57:c4:b0:70:7f:bc:74:f5:af:12:10:1f:93:b2:
52:75:62:30:63:cd:71:e5:63:9f:c5:29:d6:fd:ad:d8:a7:85:
bb:88:dc:36:67:de:43:96:b9:26:55:b8:88:4e:a3:92:17:79:
06:f1:bb:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:33:31 2026 by rpki-client