This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/16eeb2-c827-42c9-8e48-2a3df9b33313/1/ynSM0AzX_mohdVr2QtiBuN2aOfc.mft
File: ynSM0AzX_mohdVr2QtiBuN2aOfc.mft (raw, json)
Hash identifier: hmSvTFUGRicIfGqXgz78zegKHofO/cRogFq2PfzRSq0=
Subject key identifier: FE:79:BA:50:B9:B4:3B:66:EC:16:D3:47:82:95:C6:F8:0A:4B:93:B4
Authority key identifier: CA:74:8C:D0:0C:D7:FE:6A:21:75:5A:F6:42:D8:81:B8:DD:9A:39:F7
Certificate issuer: /CN=ca748cd00cd7fe6a21755af642d881b8dd9a39f7
Certificate serial: 019BF4D09C0BD4437FBA8D4E236DD33BF20F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ynSM0AzX_mohdVr2QtiBuN2aOfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/16eeb2-c827-42c9-8e48-2a3df9b33313/1/ynSM0AzX_mohdVr2QtiBuN2aOfc.mft
Manifest number: 17E9
Signing time: Sun 25 Jan 2026 11:01:10 +0000
Manifest this update: Sun 25 Jan 2026 11:01:10 +0000
Manifest next update: Mon 26 Jan 2026 11:01:10 +0000
Files and hashes: 1: gVEq3NnVdt_2WnJ5HkFKQbFF6gI.roa (hash: PhtT91kBJsBi6v+NJo/OC9S74yakm+F5W9I39PDYLyk=)
2: ynSM0AzX_mohdVr2QtiBuN2aOfc.crl (hash: aNHIcohMBee5/GEe0PN7d4DL0UpaxeTAfaPHifzIjOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/16eeb2-c827-42c9-8e48-2a3df9b33313/1/ynSM0AzX_mohdVr2QtiBuN2aOfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/16eeb2-c827-42c9-8e48-2a3df9b33313/1/ynSM0AzX_mohdVr2QtiBuN2aOfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ynSM0AzX_mohdVr2QtiBuN2aOfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f4:d0:9c:0b:d4:43:7f:ba:8d:4e:23:6d:d3:3b:f2:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca748cd00cd7fe6a21755af642d881b8dd9a39f7
Validity
Not Before: Jan 25 11:01:10 2026 GMT
Not After : Jan 26 11:01:10 2026 GMT
Subject: CN=fe79ba50b9b43b66ec16d3478295c6f80a4b93b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:ed:28:74:cc:be:79:a9:73:66:19:a2:33:5d:
71:5d:92:c0:67:29:ec:55:2e:f1:ac:e0:90:3b:f0:
53:11:65:03:40:b6:ac:cd:72:b9:6b:b8:66:be:2d:
ca:f3:3a:57:6d:91:86:4a:97:2f:d8:f3:d6:c9:51:
93:f9:a7:e1:0d:47:28:04:2a:86:fd:c7:ea:ef:35:
82:a7:3b:fe:51:6b:f5:c2:1b:9a:92:a3:a9:76:0e:
7f:86:02:68:de:d1:02:a7:e6:4d:62:7b:c3:10:33:
37:9c:3a:e3:33:57:0c:3b:b8:dd:ad:c7:38:a1:c4:
9a:fd:2b:e5:6e:23:8c:2d:ee:d8:ff:8d:f3:ec:a1:
28:6e:40:3d:b3:63:9c:2e:35:34:d9:13:da:fc:31:
4c:a8:5c:92:c1:80:f1:e6:0c:ae:35:9e:ce:17:a2:
76:a5:81:f5:cf:0d:1c:9c:c7:67:c3:6c:9d:f7:e4:
02:d5:33:31:69:eb:b1:fd:26:85:df:13:f4:90:df:
e4:1e:07:a9:7c:33:77:03:7f:fc:23:6e:a8:7f:10:
58:b3:64:d0:06:62:32:24:df:7a:0d:1c:de:20:b5:
bb:1c:f5:df:90:bc:34:b9:84:81:58:99:3f:24:c8:
e7:ad:3a:de:c1:dc:20:d0:fe:98:2c:5a:5d:be:7f:
1a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:79:BA:50:B9:B4:3B:66:EC:16:D3:47:82:95:C6:F8:0A:4B:93:B4
X509v3 Authority Key Identifier:
keyid:CA:74:8C:D0:0C:D7:FE:6A:21:75:5A:F6:42:D8:81:B8:DD:9A:39:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ynSM0AzX_mohdVr2QtiBuN2aOfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/16eeb2-c827-42c9-8e48-2a3df9b33313/1/ynSM0AzX_mohdVr2QtiBuN2aOfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/16eeb2-c827-42c9-8e48-2a3df9b33313/1/ynSM0AzX_mohdVr2QtiBuN2aOfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:70:6b:ca:2e:a0:f7:7a:e3:f1:87:b4:92:dc:ce:56:1f:72:
1d:13:ec:b7:8f:da:f3:10:46:91:24:5d:2d:ef:05:6d:b9:9f:
5a:2c:18:e1:1d:cb:15:1a:68:d3:2c:7b:43:39:f8:55:75:c7:
bd:40:71:1e:73:49:bb:22:12:25:b3:c2:5b:5c:ea:17:d9:07:
a5:12:2a:02:12:79:a3:89:d7:cf:f8:65:ab:3a:8b:d4:bf:96:
68:64:99:5c:c2:04:49:1f:9c:fe:17:ad:b9:d0:85:5b:1a:48:
50:be:4e:48:1d:37:a2:4d:59:e4:4e:92:c1:82:88:ee:f3:48:
b7:de:04:18:89:f3:61:c9:43:78:b1:41:cf:5d:87:e6:d5:a7:
31:18:90:46:7f:cb:0b:34:1e:9e:2b:06:8f:78:16:7c:89:a9:
62:2e:33:0c:10:0b:49:18:e4:76:02:03:32:15:41:3e:d2:11:
43:d0:f6:73:0f:b9:16:74:1d:15:6c:3d:3d:b2:69:92:28:41:
3e:84:cc:3e:7c:18:75:22:25:09:28:f1:11:aa:67:0b:bf:ec:
9d:7e:b1:6a:04:2c:94:d0:79:af:71:17:50:79:88:18:40:4d:
0f:23:a9:e7:84:dc:3f:b4:60:e0:aa:96:23:03:7f:1a:46:8a:
42:51:dd:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:44:14 2026 by rpki-client