This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft
File: Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft (raw, json)
Hash identifier: zt9egmCbIreCSEcGydqorMWzglb5YKgIF9zsy9GlXK8=
Subject key identifier: 01:B1:38:56:D2:0B:04:30:1A:66:CC:81:2C:38:80:DB:D0:0E:E6:C0
Authority key identifier: 63:71:04:D9:27:E7:E1:EF:8F:EB:BF:FD:DF:28:14:54:95:01:10:94
Certificate issuer: /CN=637104d927e7e1ef8febbffddf28145495011094
Certificate serial: 019BF83F4FCC73461F96748045E66BBF226D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft
Manifest number: 1715
Signing time: Mon 26 Jan 2026 03:00:57 +0000
Manifest this update: Mon 26 Jan 2026 03:00:57 +0000
Manifest next update: Tue 27 Jan 2026 03:00:57 +0000
Files and hashes: 1: Lsrf7nsJ0SILJoz91hQ7QSVYOyM.roa (hash: e35RQqzj6QwkN2NUro/zWKe5ECceCwxDtJyTfKjd9Gc=)
2: XCiWygchwIEKERqPFwZ00-sFrY0.roa (hash: tFv0lTiieMgtOpoLPIFuEMNuZOBOLhYh1Oi1gR7OKqY=)
3: Y3EE2Sfn4e-P67_93ygUVJUBEJQ.crl (hash: 8JB6agZqe/gASpc6ZCNcEQYzW3/AqzpFyP0XLem9Mr0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 03:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f8:3f:4f:cc:73:46:1f:96:74:80:45:e6:6b:bf:22:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=637104d927e7e1ef8febbffddf28145495011094
Validity
Not Before: Jan 26 03:00:57 2026 GMT
Not After : Jan 27 03:00:57 2026 GMT
Subject: CN=01b13856d20b04301a66cc812c3880dbd00ee6c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:84:ab:ad:2c:4d:91:87:8f:3f:4a:96:34:fa:
8b:b2:2d:b4:cf:df:b5:9c:71:bd:e4:11:f7:4d:53:
9a:6b:1e:ee:cb:17:76:92:cb:0f:8b:a7:0d:5f:80:
71:ef:df:45:8e:92:d1:a5:a6:e3:8a:97:2a:25:da:
46:05:98:a7:c5:9c:7c:58:b8:01:8e:bc:09:3d:a1:
d4:b1:e5:df:86:d8:c9:6c:e2:70:ca:6d:82:71:c1:
2a:80:4e:30:7d:b0:d6:38:04:a6:95:02:ed:1b:5b:
41:b3:03:bc:85:13:fe:e2:dd:d3:50:8d:20:a4:04:
8a:02:fa:61:04:e3:59:47:35:3d:65:d2:12:b0:bb:
e1:92:50:0f:97:10:74:0e:e0:2d:2e:8d:85:27:7f:
32:86:aa:56:48:8d:2b:ef:0d:d4:25:1e:a1:a5:e5:
a8:fe:8f:3e:97:46:db:67:ad:06:ca:02:0d:31:17:
69:3e:c9:d4:bb:cb:7a:01:ba:76:e3:69:10:fb:43:
c6:eb:23:2f:7e:5e:98:1e:b3:c1:8a:6b:95:60:09:
5a:16:7e:43:9c:b7:8c:0c:7e:86:98:9a:b7:d8:fa:
89:12:18:81:15:bd:e9:75:84:b5:97:49:85:08:4b:
72:11:10:ef:46:f9:2d:c5:a2:fd:b2:93:b6:f3:9d:
21:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:B1:38:56:D2:0B:04:30:1A:66:CC:81:2C:38:80:DB:D0:0E:E6:C0
X509v3 Authority Key Identifier:
keyid:63:71:04:D9:27:E7:E1:EF:8F:EB:BF:FD:DF:28:14:54:95:01:10:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:aa:71:72:70:da:1e:ae:9e:36:82:4d:c0:ec:6d:26:24:f1:
54:12:95:b5:10:d1:31:69:c8:7f:88:44:5e:57:8a:17:68:90:
b1:c9:ac:0f:8a:1d:be:65:fc:72:ba:bd:3a:80:7e:08:7e:bf:
8a:0b:2b:9d:45:56:9e:27:28:51:70:8a:7c:31:46:98:a8:3b:
d5:66:6e:b7:83:9b:80:15:66:68:8f:26:eb:3f:d4:ad:aa:17:
29:af:98:33:e0:dd:20:a0:68:0d:e2:fe:ce:c6:5a:3b:20:92:
bc:8a:74:67:4a:52:d3:68:62:c6:eb:4b:d2:35:ec:51:68:08:
d4:18:a9:77:bd:28:9d:e3:b0:08:b1:d1:6d:18:31:7f:4b:02:
b5:7e:3d:4f:98:5a:5d:ab:19:2f:60:3c:8d:cf:f4:e1:18:c4:
92:7f:97:49:6c:7e:2b:a1:83:1b:21:61:30:c5:fa:b1:2c:3a:
b1:eb:16:e3:07:4b:47:6e:bb:5c:67:0d:e4:00:ef:9a:6d:bd:
c2:5f:31:44:4f:0a:c9:ee:d3:50:8b:5f:01:cd:a0:bf:b5:7c:
6a:03:4f:c5:0d:50:ea:58:86:41:32:7d:64:d5:bd:19:50:b5:
45:66:fc:1d:74:01:e9:e5:2b:27:d0:a7:2f:bc:27:73:d2:47:
03:1a:f7:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 11:46:46 2026 by rpki-client