This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/yUcK5Bju3dazna6eehd6Gcd5nEE.mft
File: yUcK5Bju3dazna6eehd6Gcd5nEE.mft (raw, json)
Hash identifier: bL9bT6L4qzhi+abVVY54fAP/mwHK3N88JVOAUyhEH9Y=
Subject key identifier: EB:67:D9:D4:7E:34:43:8B:06:9C:8B:2A:44:85:22:D2:30:F1:94:C5
Authority key identifier: C9:47:0A:E4:18:EE:DD:D6:B3:9D:AE:9E:7A:17:7A:19:C7:79:9C:41
Certificate issuer: /CN=c9470ae418eeddd6b39dae9e7a177a19c7799c41
Certificate serial: 019BF2072D6419122C92E03E7AD4CEF9EAF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yUcK5Bju3dazna6eehd6Gcd5nEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/yUcK5Bju3dazna6eehd6Gcd5nEE.mft
Manifest number: 17E7
Signing time: Sat 24 Jan 2026 22:01:55 +0000
Manifest this update: Sat 24 Jan 2026 22:01:55 +0000
Manifest next update: Sun 25 Jan 2026 22:01:55 +0000
Files and hashes: 1: CSaWGPAuSxGyvK0vYNlwHF6hyLk.roa (hash: /XZl1WB2nbiNcL9b2RlvpS4iBe26ZsfShmWMbksslmc=)
2: R7rOqqQV9FpDCZLBm9QH6KbRejI.roa (hash: mcqImNWLjpTecGkgufT+Ix02VEv/VipznJBswQOZYeo=)
3: S3ly6OpAOrIt_7luoCILOFS7SJ0.roa (hash: MI6S4+JLe7VwJwm81yAr9HyDfPieJGPwWA3IVqKAm4s=)
4: yUcK5Bju3dazna6eehd6Gcd5nEE.crl (hash: cUknYnSZwv8R5jx++BpcbPyXylrEPUubNwjMB6lXATg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/yUcK5Bju3dazna6eehd6Gcd5nEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/yUcK5Bju3dazna6eehd6Gcd5nEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yUcK5Bju3dazna6eehd6Gcd5nEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f2:07:2d:64:19:12:2c:92:e0:3e:7a:d4:ce:f9:ea:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9470ae418eeddd6b39dae9e7a177a19c7799c41
Validity
Not Before: Jan 24 22:01:55 2026 GMT
Not After : Jan 25 22:01:55 2026 GMT
Subject: CN=eb67d9d47e34438b069c8b2a448522d230f194c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e3:33:95:de:42:08:bd:61:9d:9c:ae:88:f0:
e4:c5:2c:d9:83:b8:11:d9:4d:6b:56:62:3c:c0:23:
33:07:f5:41:b2:21:14:c7:10:c3:6b:da:1a:af:08:
3d:80:28:42:b8:9d:10:9e:da:f2:a3:a7:88:08:f5:
db:e3:e0:62:2e:86:da:c7:64:e8:07:89:f2:25:62:
e6:dd:01:3d:ba:91:ed:b3:a3:c9:df:34:2a:ec:5d:
8a:22:0d:f7:54:30:c7:49:81:e2:aa:a5:a3:48:d5:
e1:bc:58:ae:0a:b6:66:8f:35:9c:1d:79:ad:0c:e5:
0f:20:4a:41:59:17:0d:2a:5e:e4:01:13:63:99:66:
9f:b4:70:bf:99:80:cc:40:30:a2:c3:d5:01:9b:dd:
f8:e9:75:0f:4f:64:76:6b:af:3e:59:9c:fb:3b:d3:
28:6d:9b:68:a0:b1:79:3e:ae:09:2f:63:97:53:ab:
bc:e4:a7:80:54:34:45:70:63:be:ab:15:d4:e7:25:
16:c8:59:90:e0:a6:49:89:7e:e8:4b:6e:f3:05:7a:
3a:4f:6c:06:98:bb:6d:cf:4c:18:ce:90:a7:2b:8b:
21:2f:e9:0c:d8:64:e5:a2:0d:b7:4b:de:00:90:79:
d1:93:92:68:c0:b8:65:57:91:48:e7:8c:87:ff:3c:
e2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:67:D9:D4:7E:34:43:8B:06:9C:8B:2A:44:85:22:D2:30:F1:94:C5
X509v3 Authority Key Identifier:
keyid:C9:47:0A:E4:18:EE:DD:D6:B3:9D:AE:9E:7A:17:7A:19:C7:79:9C:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yUcK5Bju3dazna6eehd6Gcd5nEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/yUcK5Bju3dazna6eehd6Gcd5nEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/yUcK5Bju3dazna6eehd6Gcd5nEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:6d:f5:23:67:03:4c:14:d4:92:09:09:e3:72:82:2a:81:7a:
98:24:02:5d:30:5f:e7:37:db:41:d1:c8:73:17:d7:70:8f:b8:
f5:1e:c7:e6:30:e3:19:bc:51:c1:92:73:2c:6b:a7:2e:4c:ec:
0f:82:80:0a:98:70:6d:fa:4a:5a:bb:b8:9a:e0:cc:15:1e:9d:
16:f3:04:62:8d:af:27:a4:94:b0:67:ee:cd:f1:ef:ce:57:04:
fb:29:f8:6f:0b:de:ef:9b:21:f1:93:08:67:fd:f6:0d:e2:66:
bd:61:7e:fb:a3:95:2f:e0:c7:a2:8a:9a:d3:b2:45:9e:e8:8b:
9f:b4:62:8c:95:32:5f:fb:66:1f:c6:d0:3a:cf:13:76:95:cd:
7b:44:d1:90:c9:8a:ec:15:4d:f1:4a:7b:8e:75:a9:a9:f1:0a:
55:6a:f1:9b:bc:49:1a:e3:d5:91:f1:fa:c3:75:a5:66:9a:69:
ac:6a:61:4e:1b:ca:41:19:ce:36:01:3b:c3:ef:a6:25:08:d1:
21:90:e4:60:d5:31:63:fc:90:2e:0d:91:7a:e7:91:28:b4:c9:
8a:33:ea:22:4e:82:9f:94:41:27:a1:8d:c8:f5:0e:fc:9d:71:
25:fe:5f:97:50:61:cd:bb:15:ab:3d:7d:61:8f:e3:67:05:44:
74:12:5f:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZvyBy1kGRIskuA+etTO+eryMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5NDcwYWU0MThlZWRkZDZiMzlkYWU5ZTdhMTc3YTE5Yzc3
OTljNDEwHhcNMjYwMTI0MjIwMTU1WhcNMjYwMTI1MjIwMTU1WjAzMTEwLwYDVQQD
EyhlYjY3ZDlkNDdlMzQ0MzhiMDY5YzhiMmE0NDg1MjJkMjMwZjE5NGM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOMzld5CCL1hnZyuiPDkxSzZg7gR
2U1rVmI8wCMzB/VBsiEUxxDDa9oarwg9gChCuJ0Qntryo6eICPXb4+BiLobax2To
B4nyJWLm3QE9upHts6PJ3zQq7F2KIg33VDDHSYHiqqWjSNXhvFiuCrZmjzWcHXmt
DOUPIEpBWRcNKl7kARNjmWaftHC/mYDMQDCiw9UBm9346XUPT2R2a68+WZz7O9Mo
bZtooLF5Pq4JL2OXU6u85KeAVDRFcGO+qxXU5yUWyFmQ4KZJiX7oS27zBXo6T2wG
mLttz0wYzpCnK4shL+kM2GTlog23S94AkHnRk5JowLhlV5FI54yH/zziOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOtn2dR+NEOLBpyLKkSFItIw8ZTFMB8GA1UdIwQY
MBaAFMlHCuQY7t3Ws52unnoXehnHeZxBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVVjSzVCanUzZGF6bmE2ZWVoZDZHY2Q1bkVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9jZTAyMmQtZDhkYi00NDU5LWJlMWMt
YjA5MTIxNWQ1ZTRkLzEveVVjSzVCanUzZGF6bmE2ZWVoZDZHY2Q1bkVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9jZTAyMmQtZDhkYi00NDU5LWJlMWMtYjA5MTIxNWQ1ZTRk
LzEveVVjSzVCanUzZGF6bmE2ZWVoZDZHY2Q1bkVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl231I2cD
TBTUkgkJ43KCKoF6mCQCXTBf5zfbQdHIcxfXcI+49R7H5jDjGbxRwZJzLGunLkzs
D4KACphwbfpKWru4muDMFR6dFvMEYo2vJ6SUsGfuzfHvzlcE+yn4bwve75sh8ZMI
Z/32DeJmvWF++6OVL+DHooqa07JFnuiLn7RijJUyX/tmH8bQOs8TdpXNe0TRkMmK
7BVN8Up7jnWpqfEKVWrxm7xJGuPVkfH6w3WlZppprGphThvKQRnONgE7w++mJQjR
IZDkYNUxY/yQLg2ReueRKLTJijPqIk6Cn5RBJ6GNyPUO/J1xJf5fl1BhzbsVqz19
YY/jZwVEdBJfQA==
-----END CERTIFICATE-----
Generated at Sun Jan 25 06:09:08 2026 by rpki-client