This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.mft
File: ysIWQb28-sJMVLakhZSDxeQWQLY.mft (raw, json)
Hash identifier: yPzU1WW3w7ZmNLXKvz2uigBpiHaEFaqM3RBSslDy6R8=
Subject key identifier: CE:47:35:84:74:66:6C:E1:50:DD:AA:87:07:6A:AF:20:23:F8:DC:E5
Authority key identifier: CA:C2:16:41:BD:BC:FA:C2:4C:54:B6:A4:85:94:83:C5:E4:16:40:B6
Certificate issuer: /CN=cac21641bdbcfac24c54b6a4859483c5e41640b6
Certificate serial: 019BF42BC245D7217AAFF5B0515E8373D39E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ysIWQb28-sJMVLakhZSDxeQWQLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.mft
Manifest number: 17EE
Signing time: Sun 25 Jan 2026 08:01:06 +0000
Manifest this update: Sun 25 Jan 2026 08:01:06 +0000
Manifest next update: Mon 26 Jan 2026 08:01:06 +0000
Files and hashes: 1: 3I0ccbWDDm2AJ0Og3v2UYgTm0kU.roa (hash: vjrwzp/zqZBxc6wOSE5N6kztkRal6ScIrhGe+5Xi3bI=)
2: MEjN6NiBRUno6jMiVrI76qBgUXE.roa (hash: s2vQYXj0w7LOeK8L7upi2AL1yMhCtXme3TjzeGEM0n8=)
3: ZknLlp2vh9WJk0H7iXXLOw9c2pU.roa (hash: S6ynW8hTvcrSOBVEp2ULNqC2ZlGWhPVxKi1FBjbkc4c=)
4: ysIWQb28-sJMVLakhZSDxeQWQLY.crl (hash: wMOBt0nCRs5tppaZlhpYYfLnwpkL7XooMAmnjvBbYII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ysIWQb28-sJMVLakhZSDxeQWQLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f4:2b:c2:45:d7:21:7a:af:f5:b0:51:5e:83:73:d3:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cac21641bdbcfac24c54b6a4859483c5e41640b6
Validity
Not Before: Jan 25 08:01:06 2026 GMT
Not After : Jan 26 08:01:06 2026 GMT
Subject: CN=ce47358474666ce150ddaa87076aaf2023f8dce5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:81:65:58:15:32:77:50:1c:ce:d5:02:8a:01:
9a:81:b4:91:8a:cf:ba:ea:10:20:95:10:04:9b:53:
07:cc:59:93:b1:a7:bb:c6:50:89:31:de:b1:b2:75:
42:64:87:43:cd:d2:e2:93:ce:2c:c9:05:80:8f:c9:
d1:6a:1b:ba:c0:7e:3b:2e:2d:0b:93:ab:f3:b7:ce:
f2:14:9d:8d:16:22:ae:b4:a2:50:92:2f:1a:40:a7:
77:ad:01:a1:5e:cd:03:38:d5:0c:93:d8:9d:64:dd:
77:94:0e:80:36:23:7c:87:e7:cc:71:4d:28:6f:9d:
25:ad:a4:c5:80:86:8c:85:42:89:da:f4:86:df:76:
3a:28:67:d2:60:19:4c:0b:73:b1:17:fd:88:1c:83:
e8:57:3b:b9:4d:dd:4f:f5:9d:e6:49:ad:88:6e:71:
2f:b9:41:c0:1a:99:8e:2c:91:4e:ff:2e:80:9e:ad:
47:71:b9:56:a4:1a:45:b4:4c:e0:3a:5e:b3:7a:ef:
9e:e0:84:c7:3a:b7:2c:37:ad:7b:1a:e1:99:9f:76:
2d:c0:0e:1d:8e:df:53:d3:ab:b6:d7:81:8e:ec:53:
60:fd:4f:5c:b7:b8:c7:8a:58:c6:31:49:f2:c5:85:
40:d2:33:35:25:80:00:83:af:99:23:b6:cd:87:83:
f5:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:47:35:84:74:66:6C:E1:50:DD:AA:87:07:6A:AF:20:23:F8:DC:E5
X509v3 Authority Key Identifier:
keyid:CA:C2:16:41:BD:BC:FA:C2:4C:54:B6:A4:85:94:83:C5:E4:16:40:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ysIWQb28-sJMVLakhZSDxeQWQLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:b9:a6:51:5e:d8:d4:d4:15:11:d4:31:0c:b8:2e:f9:d3:3c:
01:a3:9a:a2:b7:0a:d5:53:a4:a9:78:b6:a8:93:df:e9:39:45:
21:0d:5f:b4:70:1b:21:5c:bf:7e:cc:ce:b8:48:af:22:13:94:
80:d7:88:a7:6f:6b:7c:4d:c6:3c:56:6d:a5:ef:48:8d:d5:e3:
d2:c5:89:1c:2b:a3:1e:0a:cd:57:5c:ad:1d:2a:10:cd:c9:8a:
a3:e4:81:28:5f:2c:38:75:79:73:56:ff:7f:ad:8d:7e:60:3a:
32:28:64:6c:5f:7f:d8:4e:92:21:2b:01:8b:95:12:af:b8:40:
6d:37:de:c4:8e:58:ca:91:28:12:15:23:4f:4a:5f:b2:37:4e:
49:bf:75:77:f2:e6:27:81:8e:d0:bb:ea:1f:c4:cf:d8:38:09:
49:1a:f5:7e:7a:c0:c2:92:70:10:b8:1f:e2:16:8a:1a:b0:2e:
e6:f7:89:3f:48:6e:89:51:a7:6d:22:dd:40:6d:ca:8e:bb:68:
cf:07:ea:ad:64:09:b6:15:73:86:2b:78:2f:3d:cf:67:36:08:
73:5c:a2:2c:9a:fd:28:fd:eb:91:13:97:ed:ec:59:f8:00:c5:
e6:15:0c:69:13:f4:f9:90:14:86:0b:c2:34:a3:d0:5a:5a:61:
f4:f6:51:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:10:02 2026 by rpki-client