This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.mft
File: ydSf722tJmGevuBl0fIxwaJ2198.mft (raw, json)
Hash identifier: UDhl0xNozDeqb3GC0gnqdST5+LMMxcS7zV0sB9TXK9g=
Subject key identifier: 18:48:25:2C:B3:3C:E6:F2:EF:1D:64:19:1D:4C:4D:4B:CD:5B:F9:AA
Authority key identifier: C9:D4:9F:EF:6D:AD:26:61:9E:BE:E0:65:D1:F2:31:C1:A2:76:D7:DF
Certificate issuer: /CN=c9d49fef6dad26619ebee065d1f231c1a276d7df
Certificate serial: 019BF2AAF1E9EA12B88EBDFA726E653B6F85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydSf722tJmGevuBl0fIxwaJ2198.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.mft
Manifest number: 0708
Signing time: Sun 25 Jan 2026 01:00:47 +0000
Manifest this update: Sun 25 Jan 2026 01:00:47 +0000
Manifest next update: Mon 26 Jan 2026 01:00:47 +0000
Files and hashes: 1: 7ddZ6AuTaKTVHMzwtcM1Koce3jI.roa (hash: xG5K9PIIy6VwRa0eYfMip6RI0P+1GY89uLI9ih9L+Uo=)
2: d3-5CKAZ7Mk-2t_tjSmFOfnjMzk.roa (hash: vwsp8oVhgfqNXWForlLjiHqAE45N0F3rkdkhErDxiHo=)
3: ydSf722tJmGevuBl0fIxwaJ2198.crl (hash: Qg0xxHwPU1xNBsdLB+l0eH/M9J6/3hzMB4MfpaJcjws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydSf722tJmGevuBl0fIxwaJ2198.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 01:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f2:aa:f1:e9:ea:12:b8:8e:bd:fa:72:6e:65:3b:6f:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d49fef6dad26619ebee065d1f231c1a276d7df
Validity
Not Before: Jan 25 01:00:47 2026 GMT
Not After : Jan 26 01:00:47 2026 GMT
Subject: CN=1848252cb33ce6f2ef1d64191d4c4d4bcd5bf9aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:23:11:3d:2d:89:f4:2f:5c:ac:8e:80:3a:ab:
93:16:01:32:f7:69:b9:84:a2:11:00:9a:01:77:d2:
25:8c:eb:6b:4b:46:6a:59:28:70:0d:7a:9a:c5:9d:
fd:4f:40:f5:84:66:12:3e:5c:9f:c8:0a:84:5a:e1:
30:bc:4d:06:ac:11:fb:36:48:3c:17:4d:e3:d1:72:
bb:78:c7:b0:27:d8:39:70:9d:dc:34:47:7b:11:ad:
0f:9d:b0:da:2a:2f:ee:5a:cf:f4:37:7d:8b:f2:e9:
a5:0e:6d:5e:45:73:d3:52:de:6f:cf:d6:ca:d2:d4:
2e:a4:5e:3e:13:bd:91:0b:14:4c:e3:d2:77:3c:b0:
5c:51:03:dd:df:79:c1:26:b8:ae:76:9c:d8:be:73:
6e:e4:eb:41:17:37:0c:6b:14:e4:56:6b:e8:a2:de:
46:cc:e9:41:ac:8b:3e:5e:de:2d:eb:59:05:9f:cf:
83:2a:ad:2c:1d:f9:97:2b:e6:37:91:2d:0d:5e:9d:
32:0a:bc:d6:d9:21:52:fb:1e:8e:6d:ce:26:61:e2:
12:e6:b7:eb:29:15:d9:08:7e:38:d8:9f:ca:57:7c:
1e:07:f6:a7:ac:1c:12:87:0f:8c:7a:65:49:48:f2:
6e:eb:72:7d:b7:31:bb:4a:91:56:66:d1:50:8f:2b:
99:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:48:25:2C:B3:3C:E6:F2:EF:1D:64:19:1D:4C:4D:4B:CD:5B:F9:AA
X509v3 Authority Key Identifier:
keyid:C9:D4:9F:EF:6D:AD:26:61:9E:BE:E0:65:D1:F2:31:C1:A2:76:D7:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydSf722tJmGevuBl0fIxwaJ2198.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/279269-f4f3-4214-9130-0d4f40bc3faa/1/ydSf722tJmGevuBl0fIxwaJ2198.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:60:26:04:f3:6d:81:ba:76:1e:5d:7a:e7:58:ab:38:04:3a:
2d:16:91:64:a6:aa:10:d4:c7:a2:0b:3a:08:a8:c6:3f:f1:43:
17:be:04:67:0b:7b:69:0c:7a:f5:bc:c9:7b:c5:0c:ad:05:86:
83:01:02:93:ac:d8:34:28:20:06:9b:a7:02:e5:33:24:28:5b:
d7:52:9b:eb:46:8a:b8:82:24:43:32:d3:cc:93:77:a4:4d:40:
c6:43:da:c9:bb:e2:bf:ef:37:0b:45:e5:b9:5e:e8:1f:2f:c9:
fe:39:b2:d7:f3:00:ab:03:3f:1e:ca:b3:0b:bc:79:12:c1:52:
d2:47:ad:d7:80:f0:07:07:17:e8:c0:38:ac:76:8e:b9:9a:fe:
a8:38:cd:7f:47:e7:1b:c7:79:e4:c3:f7:c8:74:fd:48:4b:28:
ed:bf:9b:28:5a:31:aa:e9:16:5a:ce:fa:3d:77:fc:b0:c7:1b:
9b:6a:ae:85:95:79:90:39:bd:86:36:f7:6a:6d:eb:7c:dd:33:
04:36:55:1d:28:da:f2:7b:26:c0:85:d0:14:fa:18:48:cd:9d:
34:d1:6b:38:f0:73:70:d0:b8:47:95:3b:01:94:a5:36:6a:0b:
18:ff:31:4f:46:27:b1:0a:29:9f:f2:4f:19:0c:9e:bc:d3:a6:
7f:05:de:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZvyqvHp6hK4jr36cm5lO2+FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZDQ5ZmVmNmRhZDI2NjE5ZWJlZTA2NWQxZjIzMWMxYTI3
NmQ3ZGYwHhcNMjYwMTI1MDEwMDQ3WhcNMjYwMTI2MDEwMDQ3WjAzMTEwLwYDVQQD
EygxODQ4MjUyY2IzM2NlNmYyZWYxZDY0MTkxZDRjNGQ0YmNkNWJmOWFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCMRPS2J9C9crI6AOquTFgEy92m5
hKIRAJoBd9IljOtrS0ZqWShwDXqaxZ39T0D1hGYSPlyfyAqEWuEwvE0GrBH7Nkg8
F03j0XK7eMewJ9g5cJ3cNEd7Ea0PnbDaKi/uWs/0N32L8umlDm1eRXPTUt5vz9bK
0tQupF4+E72RCxRM49J3PLBcUQPd33nBJriudpzYvnNu5OtBFzcMaxTkVmvoot5G
zOlBrIs+Xt4t61kFn8+DKq0sHfmXK+Y3kS0NXp0yCrzW2SFS+x6Obc4mYeIS5rfr
KRXZCH442J/KV3weB/anrBwShw+MemVJSPJu63J9tzG7SpFWZtFQjyuZ+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBhIJSyzPOby7x1kGR1MTUvNW/mqMB8GA1UdIwQY
MBaAFMnUn+9trSZhnr7gZdHyMcGidtffMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWRTZjcyMnRKbUdldnVCbDBmSXh3YUoyMTk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8yNzkyNjktZjRmMy00MjE0LTkxMzAt
MGQ0ZjQwYmMzZmFhLzEveWRTZjcyMnRKbUdldnVCbDBmSXh3YUoyMTk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy8yNzkyNjktZjRmMy00MjE0LTkxMzAtMGQ0ZjQwYmMzZmFh
LzEveWRTZjcyMnRKbUdldnVCbDBmSXh3YUoyMTk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqGAmBPNt
gbp2Hl1651irOAQ6LRaRZKaqENTHogs6CKjGP/FDF74EZwt7aQx69bzJe8UMrQWG
gwECk6zYNCggBpunAuUzJChb11Kb60aKuIIkQzLTzJN3pE1AxkPaybviv+83C0Xl
uV7oHy/J/jmy1/MAqwM/HsqzC7x5EsFS0ket14DwBwcX6MA4rHaOuZr+qDjNf0fn
G8d55MP3yHT9SEso7b+bKFoxqukWWs76PXf8sMcbm2quhZV5kDm9hjb3am3rfN0z
BDZVHSja8nsmwIXQFPoYSM2dNNFrOPBzcNC4R5U7AZSlNmoLGP8xT0YnsQopn/JP
GQyevNOmfwXeTQ==
-----END CERTIFICATE-----
Generated at Sun Jan 25 11:23:36 2026 by rpki-client