This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.mft
File: yNXjcXjYUkxyZgodeWFlmZ5YZiI.mft (raw, json)
Hash identifier: CyZ1zvOGB1hS2vOD9ICxjKuTmbyiCAPsckRsPSORywA=
Subject key identifier: 48:96:7A:F9:02:B1:26:62:CE:D7:AD:1F:38:74:8A:36:AC:D5:30:07
Authority key identifier: C8:D5:E3:71:78:D8:52:4C:72:66:0A:1D:79:61:65:99:9E:58:66:22
Certificate issuer: /CN=c8d5e37178d8524c72660a1d796165999e586622
Certificate serial: 019BF5E3B20A8011DF63A7707862A1473D93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNXjcXjYUkxyZgodeWFlmZ5YZiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.mft
Manifest number: 1538
Signing time: Sun 25 Jan 2026 16:01:38 +0000
Manifest this update: Sun 25 Jan 2026 16:01:38 +0000
Manifest next update: Mon 26 Jan 2026 16:01:38 +0000
Files and hashes: 1: 2Rt9Gwr4sjkr8DA_k8J0_h0v0S4.roa (hash: tqZC3K8qhKl5fCuSFTCvvWh/uoUIwg2YeD8aanIXDKI=)
2: C4oO91IxmGyKFholC61-KwsSaXQ.roa (hash: 9NJoOpIrcUw0qct1EClP9jXzRLM6KtP8sB6Z2ERkozE=)
3: G6JvpqCYvPpC7VM1ZZPSfJgdNhc.roa (hash: D1iE+lUItdHWGUL+J972PCDTzMoGyX6bUifXJiUpjwY=)
4: lUtDTycr7tmHl8som-NIOGSL4hQ.roa (hash: bob91L00C+zBJmnNvfIjHOpV1SfQVQs/iVPuHdwEzf0=)
5: qmENFYyAeg7xsb85_S16S6VQXm4.roa (hash: p81fR5IiVt8MAfNa2jag/aWs/EJxKXj180iPtNI3x2I=)
6: yNXjcXjYUkxyZgodeWFlmZ5YZiI.crl (hash: tak1omtvoFU1aqLkt+bpmoWMxobAK+0fPBncSh16AYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yNXjcXjYUkxyZgodeWFlmZ5YZiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f5:e3:b2:0a:80:11:df:63:a7:70:78:62:a1:47:3d:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8d5e37178d8524c72660a1d796165999e586622
Validity
Not Before: Jan 25 16:01:38 2026 GMT
Not After : Jan 26 16:01:38 2026 GMT
Subject: CN=48967af902b12662ced7ad1f38748a36acd53007
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:57:b1:1e:df:a3:a2:c1:24:2d:cf:2a:ac:62:
df:71:5f:8c:6b:92:70:4a:0b:c5:0e:19:5b:79:ad:
65:80:ea:a2:c6:e1:f1:7b:94:dd:06:43:9a:01:21:
38:55:91:e6:ca:f9:e7:5c:fe:24:d9:9b:a7:2f:b4:
71:03:f4:b6:fe:2f:91:b9:62:c7:39:85:be:32:25:
04:00:50:49:e7:f9:01:0b:89:63:f0:5b:a1:28:94:
e1:b0:92:c2:65:8e:58:8a:aa:7b:03:ca:bd:e7:02:
a6:6f:38:d3:46:2d:7a:39:78:12:cb:7e:b1:e8:d2:
6f:7c:7d:c2:11:da:72:f8:39:bd:cb:a0:02:f7:3e:
ac:95:ec:39:99:4a:15:ce:93:72:4c:48:58:8c:44:
85:3b:7e:fc:1a:66:c0:2a:23:25:27:70:ac:02:e1:
bd:3e:ab:83:19:96:f1:e5:c7:99:aa:2c:4c:c1:09:
e7:a1:86:3a:56:97:5e:6c:2f:07:eb:dd:f3:16:9f:
cb:00:8e:71:b7:ed:21:e7:eb:b3:78:74:e3:be:45:
02:4e:3d:07:ea:24:65:e3:fa:6e:b8:ef:f8:48:72:
d8:03:dc:e6:74:48:f3:62:6e:e5:16:37:f7:44:4f:
1a:e3:f1:a0:96:eb:61:6f:d7:9a:6c:1f:e4:ea:53:
5c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:96:7A:F9:02:B1:26:62:CE:D7:AD:1F:38:74:8A:36:AC:D5:30:07
X509v3 Authority Key Identifier:
keyid:C8:D5:E3:71:78:D8:52:4C:72:66:0A:1D:79:61:65:99:9E:58:66:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNXjcXjYUkxyZgodeWFlmZ5YZiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:a2:5a:25:ac:bf:c2:50:f8:89:23:aa:74:fd:d3:16:d3:c7:
25:8d:e8:1c:4c:1c:52:1f:54:67:5a:05:e2:db:16:4e:4c:e8:
b4:1c:62:92:b9:27:73:59:db:66:34:0c:60:7e:fd:7d:35:b2:
12:a6:c5:14:31:9b:72:19:04:81:ae:eb:d5:97:58:df:fe:59:
04:b0:b4:d4:80:d9:46:36:e8:ab:73:49:ba:c5:a1:26:d4:c2:
ca:ca:44:b5:81:bf:36:6e:06:d6:f2:99:5c:24:00:17:49:45:
ef:3c:50:86:23:6a:0e:eb:43:5c:ad:10:3f:cb:d2:3b:32:0c:
57:da:11:3f:fc:ef:cb:0b:5c:37:78:a8:97:54:3e:8c:5d:1c:
12:3d:56:70:14:0a:19:34:df:27:f8:1e:e4:f4:77:16:d6:a0:
7a:a0:a4:cc:f6:eb:45:c2:8d:30:76:86:a4:a0:4e:be:ad:1b:
4d:98:b5:bb:13:27:1f:04:10:49:e5:8f:23:d1:15:de:23:67:
79:33:73:0f:5a:66:7d:58:3b:0b:de:00:03:3f:a7:9b:a9:8c:
1f:16:8c:c3:25:42:c3:3a:e5:35:c6:25:45:6c:93:2a:7a:c3:
aa:a5:a7:f1:12:d8:a2:e3:99:e4:b6:f9:d1:1e:50:3f:95:27:
07:e6:b2:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:22:37 2026 by rpki-client