This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.mft
File: ysmATiJ-qsmsCbCCH8B-4oF3d7U.mft (raw, json)
Hash identifier: zCxPkGkecPH8qr1Wh0Vb8TeoovizKu/xaV+PZLa7eZg=
Subject key identifier: F8:4C:4C:90:E5:14:EE:E5:95:AA:1C:E9:6D:B7:3D:E6:FF:58:6C:92
Authority key identifier: CA:C9:80:4E:22:7E:AA:C9:AC:09:B0:82:1F:C0:7E:E2:81:77:77:B5
Certificate issuer: /CN=cac9804e227eaac9ac09b0821fc07ee2817777b5
Certificate serial: 019BF3F4E6A99DC95D3622CF2D6968F351E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ysmATiJ-qsmsCbCCH8B-4oF3d7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.mft
Manifest number: 1151
Signing time: Sun 25 Jan 2026 07:01:11 +0000
Manifest this update: Sun 25 Jan 2026 07:01:11 +0000
Manifest next update: Mon 26 Jan 2026 07:01:11 +0000
Files and hashes: 1: 16Fc5-LnF5siMEpZnuR4lKcQNuI.roa (hash: /DFWjdkQzHlEBKOGD6xuczzfIPaMRVwEIuK9rhvSJyI=)
2: II2FD1f4xCm3D1NbPKz8FS6h0Jc.roa (hash: 7LsFeRZGlNF+Y+qphYoLdVC4raU4LnXBUOFidUeAFTk=)
3: XO1viMFitX_oQoNKUBYNw7H6D54.roa (hash: jVh+iUQm/gwRWI08v+pcXmrPul1qy5rkSN9bPBWuSAg=)
4: ysmATiJ-qsmsCbCCH8B-4oF3d7U.crl (hash: 1l5HMX8Tw7wAflhBw8VXempiYkHI/ZN/8EUcqKeri9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/ysmATiJ-qsmsCbCCH8B-4oF3d7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f3:f4:e6:a9:9d:c9:5d:36:22:cf:2d:69:68:f3:51:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cac9804e227eaac9ac09b0821fc07ee2817777b5
Validity
Not Before: Jan 25 07:01:11 2026 GMT
Not After : Jan 26 07:01:11 2026 GMT
Subject: CN=f84c4c90e514eee595aa1ce96db73de6ff586c92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e9:1d:56:d9:80:f4:7d:3a:8c:63:17:a5:61:
84:a9:a2:73:60:ba:c0:1d:a7:fa:5d:ca:ca:a2:c3:
0c:cf:58:0d:8b:dd:b7:ab:79:8d:05:14:41:95:4f:
e1:41:94:19:cb:5e:2c:4a:c7:6f:a7:75:01:a1:0e:
23:7b:54:a4:d9:aa:9c:99:16:a0:18:13:c2:2d:0b:
ef:56:3c:0c:68:48:48:42:4a:4d:3f:d8:1e:8c:65:
45:cb:1d:dd:f0:a2:75:bc:5e:f7:36:14:0d:e6:7b:
f0:65:05:6a:53:a9:31:ed:a3:7e:ad:30:87:a8:b2:
d9:8c:5b:16:60:6b:09:59:47:d2:4c:49:7d:84:27:
55:13:f7:c1:86:29:09:5f:ca:ea:cb:8e:3a:24:68:
c9:1d:0b:88:a6:22:9c:7c:b0:72:57:60:d7:bd:b4:
62:38:8a:0b:90:f4:e8:30:c6:51:fc:26:bb:63:41:
70:2c:50:a4:44:57:98:99:89:e8:75:35:b6:f2:53:
2b:b5:4c:73:95:8d:9d:b6:59:91:59:12:8f:42:97:
e9:26:ed:30:d3:39:ef:dc:17:55:a9:c1:34:5c:0c:
17:e8:69:5e:18:62:63:7e:47:70:3b:8f:49:69:25:
9a:d1:b9:69:55:d0:5c:4b:ae:82:aa:a5:ea:7e:83:
b0:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:4C:4C:90:E5:14:EE:E5:95:AA:1C:E9:6D:B7:3D:E6:FF:58:6C:92
X509v3 Authority Key Identifier:
keyid:CA:C9:80:4E:22:7E:AA:C9:AC:09:B0:82:1F:C0:7E:E2:81:77:77:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ysmATiJ-qsmsCbCCH8B-4oF3d7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:00:48:82:6c:6f:57:97:4d:34:8c:a0:c4:9d:a4:9b:97:93:
45:24:34:14:68:de:33:51:a8:49:7c:8e:2a:1f:8b:1a:13:d8:
fd:97:4b:4a:01:2a:e0:a9:32:68:2d:e1:75:d0:ca:c6:30:01:
06:20:84:bb:f3:25:ce:30:7a:a5:22:b8:ad:55:ef:3a:09:d7:
84:11:8f:35:a1:4e:5c:2c:c0:e4:f2:f0:ca:90:63:f5:a5:6f:
bf:8f:65:80:38:4e:fc:bd:28:5d:bd:94:28:5d:63:d1:6a:b9:
c4:f0:5c:d9:06:a0:5b:16:be:d1:23:18:3a:04:5d:7f:99:ed:
ba:1b:9f:5c:43:a7:dd:33:4f:f1:bf:d4:8e:be:bb:c8:dc:b8:
bd:09:49:2a:4a:37:9f:bb:8f:b3:4f:cd:45:3e:ed:d5:4e:68:
f8:7f:f8:2b:25:6a:db:ae:18:1d:85:bd:ad:f9:73:2c:c3:63:
44:90:c2:74:7d:e0:30:57:80:78:87:13:c7:12:c5:40:7b:8c:
e3:ef:00:fd:3a:96:25:32:ad:be:57:a9:42:26:96:79:6f:c3:
52:78:25:8c:3c:69:f1:55:a9:a8:84:8f:61:74:e8:ec:3f:6a:
72:21:a0:5b:58:ee:ca:25:f3:52:59:c0:1a:4b:97:3c:49:64:
08:2e:cc:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:31:48 2026 by rpki-client