This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft
File: ymRB2dgH4NeM51IToQNADuFKfNw.mft (raw, json)
Hash identifier: Knq/OcHookR5lQM6N8+D7KOa6oM/p3nv8OXdOJTHXLo=
Subject key identifier: 10:D2:A1:D3:92:3D:85:5D:A3:25:05:ED:AC:98:24:7A:8B:E4:0E:35
Authority key identifier: CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC
Certificate issuer: /CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc
Certificate serial: 019BF462C0597B9FED554202CF0BC8EF87F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft
Manifest number: 035F
Signing time: Sun 25 Jan 2026 09:01:10 +0000
Manifest this update: Sun 25 Jan 2026 09:01:10 +0000
Manifest next update: Mon 26 Jan 2026 09:01:10 +0000
Files and hashes: 1: 5gYY22Jz1wKNyzXN9Gt_xzvZSfY.roa (hash: 5wrEQMdQmaY0xkABdOrQufd1yopCOpthee6ppiUQDI8=)
2: Brag2AWJxCJOzUNfJ9j8KRrHLV0.roa (hash: 4rlDWgZec7ow5gytumrcSsGCSJMzxJPXHxRRER4U6Jo=)
3: E-oIiGlZfX5hqiKQXtKucjllYUk.roa (hash: lyqop0HaLt07HWCMdbsYQ/bfLgKyF02QQKQwg4136FM=)
4: FVXQwmYUOfA-cy8XiaHN8ohstLo.roa (hash: KoIZnDM2RImr+Wy3ZdTY9y9ejiMX27DEBwUolXbHWds=)
5: HvmqBtWUYMGFh5C-KyBSOzuc75c.roa (hash: i4C3k1sm5mmjzNZsvd78LY+nyVs9jkbVVK2+DN/cqVE=)
6: ITjk15GoeXUStvbei6OTnPw4VPA.roa (hash: bu3amWDD7vB0Qvh2/XREDdBDpVUP6PJeeJTwRsWKt9c=)
7: crkhxGWkgmwG_-vobiP0N73TayI.roa (hash: HhQ6usYG3RK7Np90x4q/JofxoV9ftVupdPb8WruxpMw=)
8: dFDOquBHGD-AFmurq1VxtTHvCMc.roa (hash: 2K3X7UMlwhz82X+PiKHNI6WLBziZhG0YvyqsHW/KTcc=)
9: gC3_J_xT-GThmBsVujKFuCMCozU.roa (hash: D5aS1zozYEbd79/uXIgd19tuBfFWZjES3cPyLF6ZWd4=)
10: pl5TgcI9rIRH0y77nHhxnfwWtPk.roa (hash: CkXLY7tCmd+sGKHgRWHWB416fZODZOIxKK4kNfkQp/g=)
11: rKS9FaM6Qt0Ms5YBUHAjfIaHFX8.roa (hash: eCTO0OljowtR9aX2ozemU+6YK6WKceHzqOl/CJ0iOhA=)
12: sZvUJy9pKKZaIPkC0FeyTm3InJU.roa (hash: X4ClPs2a0PA/IXC9Aa6T1qT+s5gyd3dmGDaPzOpi0Lk=)
13: uSOwId1qIYVukNJzL3tphSWmSqk.roa (hash: Hvrj2M1fkLAroWyWgyKi9FWdxr1RbWVO4o7VW+KyG7I=)
14: ymRB2dgH4NeM51IToQNADuFKfNw.crl (hash: 5K44p7thaAO0znWFtzMxzmw2EHvhK5mzFx8IlmXYQhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f4:62:c0:59:7b:9f:ed:55:42:02:cf:0b:c8:ef:87:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc
Validity
Not Before: Jan 25 09:01:10 2026 GMT
Not After : Jan 26 09:01:10 2026 GMT
Subject: CN=10d2a1d3923d855da32505edac98247a8be40e35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:79:20:29:43:ac:47:02:1b:d6:3d:34:fb:3d:
e3:76:13:c0:df:fb:d5:91:48:95:38:40:9f:29:b8:
96:bd:6c:86:4d:ae:5a:04:b2:5d:91:06:e4:c6:a7:
d8:8f:e3:3d:ae:c7:db:6d:95:d6:e6:14:7a:76:d9:
9f:3e:4d:1b:f3:7b:47:ba:0c:42:1a:6a:fa:11:3d:
50:83:ec:f9:77:e0:2a:9f:07:2b:39:66:1c:c9:b9:
86:c0:26:5c:c0:a3:26:4f:bf:4b:e6:2c:09:06:5b:
2b:04:01:2d:05:50:e3:83:0d:b7:2c:2a:c3:9a:be:
0f:fd:df:ae:bb:6e:ca:e2:32:14:4a:29:be:c5:cf:
65:60:31:d5:17:79:3b:94:0b:88:03:64:cd:14:1b:
1b:ed:7d:2a:63:d1:13:81:56:57:50:41:c5:e6:dd:
89:a5:35:4d:4b:57:4b:a1:19:58:82:4e:eb:ec:7c:
cc:43:d2:6d:02:d7:78:cc:35:43:c9:d2:73:99:b8:
c0:2e:dc:ef:4a:b8:68:10:f3:8e:fc:1f:d2:ca:b2:
04:c9:fb:17:25:f7:3c:c3:f7:58:6c:2a:ec:ff:a3:
d7:73:26:aa:1b:a3:05:e1:28:f0:a0:d8:40:52:19:
3f:0b:fc:f2:3d:74:35:32:31:27:90:0e:e2:b3:22:
cf:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:D2:A1:D3:92:3D:85:5D:A3:25:05:ED:AC:98:24:7A:8B:E4:0E:35
X509v3 Authority Key Identifier:
keyid:CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:69:13:4f:af:c0:d3:4a:be:a6:f9:9d:fc:32:63:fb:cf:e6:
b3:f1:4e:58:ef:c9:dd:11:d1:04:57:bd:4a:3d:a0:aa:f9:ec:
d2:b6:c4:1b:f0:c4:bb:11:bb:17:1f:5c:47:4c:fd:24:67:72:
23:0a:51:07:b8:43:d1:bc:e1:c8:b0:7c:36:ba:d8:c9:d2:65:
29:c1:35:0d:cd:77:40:08:8d:bc:4f:0c:92:da:fc:97:bb:69:
a8:73:ff:7d:41:45:15:5b:8a:8a:d5:5c:c0:1e:1e:61:20:e1:
52:0e:28:c2:0f:5e:13:55:c2:68:c3:94:3d:74:ca:3d:5a:2c:
b1:b6:b0:3c:6c:28:f5:e9:c5:d6:b6:be:e1:5a:2f:c9:f9:0a:
88:56:4a:39:5e:4c:94:76:24:d0:c5:f7:cd:f8:db:02:a5:ea:
45:4c:97:ed:da:30:ca:9c:01:7f:d9:c7:60:57:da:cd:bf:95:
eb:6e:59:83:b5:c9:1c:2d:11:07:d5:44:f9:9a:e5:28:07:38:
df:20:c6:35:e1:81:37:aa:cb:20:0e:b4:8c:3c:e1:40:7f:71:
c0:98:af:be:58:68:2f:95:c8:d0:93:9d:a4:71:2b:df:45:f5:
b7:10:42:1b:59:44:79:68:05:da:b4:a5:f3:ad:98:5b:0c:11:
e2:73:c4:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:21:44 2026 by rpki-client