This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.mft
File: ybBR6OaBSbZgROfeSuWdc25Teqo.mft (raw, json)
Hash identifier: R1jj185ewPotC08E2b39wq37DYdhU+7t4S2gmwhZNsM=
Subject key identifier: B4:94:B3:A8:46:91:C8:28:29:C5:ED:01:02:69:95:E5:BA:66:C1:D1
Authority key identifier: C9:B0:51:E8:E6:81:49:B6:60:44:E7:DE:4A:E5:9D:73:6E:53:7A:AA
Certificate issuer: /CN=c9b051e8e68149b66044e7de4ae59d736e537aaa
Certificate serial: 019BF5ABBADED985B312B7A33B309E3A89CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ybBR6OaBSbZgROfeSuWdc25Teqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.mft
Manifest number: 07D1
Signing time: Sun 25 Jan 2026 15:00:30 +0000
Manifest this update: Sun 25 Jan 2026 15:00:30 +0000
Manifest next update: Mon 26 Jan 2026 15:00:30 +0000
Files and hashes: 1: ElQ5chtEAtBtP2GIXdac_TddA80.roa (hash: HOH5oCt/YkRKpTxo1H1ugWQGWMm04Hcv5fnFxFjdw8s=)
2: mDTOHKx9pFPb6EOP9UxQxm-ClKw.roa (hash: 38/vqHt1v0uvrIdlEvEwCRci+eMQynBKytD9wiXBCtc=)
3: nu9XCXuPflVxiBkepDLOxds4g2s.roa (hash: W/feVk1DUwfkmSjB+I5O4CPhUu5C032era/IbMRpza0=)
4: ybBR6OaBSbZgROfeSuWdc25Teqo.crl (hash: M8zfsutcQ7u7rPNoPhDBKVc2Dq6YpIFkcwKJVtAgD94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ybBR6OaBSbZgROfeSuWdc25Teqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f5:ab:ba:de:d9:85:b3:12:b7:a3:3b:30:9e:3a:89:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9b051e8e68149b66044e7de4ae59d736e537aaa
Validity
Not Before: Jan 25 15:00:30 2026 GMT
Not After : Jan 26 15:00:30 2026 GMT
Subject: CN=b494b3a84691c82829c5ed01026995e5ba66c1d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:91:cc:00:45:df:aa:37:11:b0:fc:2e:4c:c0:
a5:0c:93:f7:55:f3:e6:f3:12:7c:1f:f2:96:78:65:
f7:d9:83:6e:5a:43:fb:1d:79:4e:33:05:21:37:b8:
cd:a6:ba:c5:f7:9c:2b:bb:41:49:ac:79:0e:05:b2:
17:87:e3:b4:1a:5f:e1:ae:9a:d3:6d:e5:ed:96:37:
33:9b:1e:3e:5d:f7:91:e4:a2:24:e6:9e:85:aa:55:
90:2e:ce:5f:c4:d0:f7:42:af:35:5b:ff:61:77:de:
7c:35:da:b9:a4:9a:67:b0:79:51:77:dc:fe:6f:4e:
da:c9:4f:48:96:35:0a:03:b6:84:51:3f:6c:58:48:
44:bf:8d:fc:d3:e4:7d:3c:16:c5:18:4c:25:5a:e1:
71:6d:71:2e:38:55:4d:2e:5a:22:74:88:14:02:28:
39:86:53:02:18:ae:cf:60:b4:3d:70:6a:bd:09:00:
e5:23:c8:6d:88:2a:13:28:0f:23:78:4d:a2:6d:c5:
ba:58:87:0a:1e:f5:a8:ff:54:60:b9:e4:cc:78:0c:
d7:37:9e:26:e2:d8:34:c7:a9:53:6b:91:4b:7d:ee:
a7:90:cb:57:2c:48:a0:5d:4a:0a:3b:a5:56:f6:f8:
1d:d4:5c:72:9d:8c:4e:cb:3d:b7:9e:49:08:a7:b5:
99:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:94:B3:A8:46:91:C8:28:29:C5:ED:01:02:69:95:E5:BA:66:C1:D1
X509v3 Authority Key Identifier:
keyid:C9:B0:51:E8:E6:81:49:B6:60:44:E7:DE:4A:E5:9D:73:6E:53:7A:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ybBR6OaBSbZgROfeSuWdc25Teqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:76:ce:9b:82:7d:3e:6a:b5:70:8a:30:af:68:14:b4:dc:20:
40:0d:e2:0f:de:89:d9:20:29:7f:e4:7c:ff:fb:f7:9f:88:b4:
f6:1a:22:65:bb:eb:73:4d:df:e8:de:cc:b2:ea:73:d6:d9:73:
8d:1e:33:81:d5:01:64:6c:1c:e0:d4:00:c9:68:0e:ac:d6:5f:
67:f9:2f:11:ae:41:b9:55:32:a6:4d:eb:d4:55:e6:1a:11:b7:
61:5b:6c:b7:41:85:45:7f:27:f6:e0:47:de:fc:76:6c:6e:49:
7e:7f:8a:93:1a:ed:24:9c:11:7f:88:47:dd:50:e7:8c:82:e4:
c5:93:e7:f5:53:a8:05:90:50:c0:9c:50:0f:57:93:f4:c2:26:
d5:81:f5:d8:0a:f5:98:e2:ff:42:43:d5:66:1e:a0:dc:9b:b0:
bd:91:1a:6d:df:8a:58:5f:2a:c3:c8:24:b5:f9:b9:bb:cc:67:
40:aa:48:b6:55:db:da:91:bf:db:e8:f7:a1:76:ef:98:a3:53:
49:da:8e:42:3c:9e:a8:1e:a3:40:0b:a9:96:7f:29:fe:5d:53:
89:0e:8b:b0:4f:de:a5:5a:be:f7:b3:52:44:2d:42:c1:49:72:
a5:14:15:b8:1e:4a:65:f3:80:4e:ea:c8:f9:d1:6b:b5:62:2c:
d4:ba:66:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:52:53 2026 by rpki-client