This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/6679f4-9165-4a8b-8892-7dea8fff2e08/1/uG3av8SJUr7ibW1fgogx9ZahVOk.mft
File: uG3av8SJUr7ibW1fgogx9ZahVOk.mft (raw, json)
Hash identifier: P6V4XWFbApjGGHD5WAO8GN9G96tHV6LgdrzVU23E66U=
Subject key identifier: CF:50:0F:AE:1B:38:29:7F:96:B1:6E:AE:F5:E1:C6:D7:CC:1F:69:25
Authority key identifier: B8:6D:DA:BF:C4:89:52:BE:E2:6D:6D:5F:82:88:31:F5:96:A1:54:E9
Certificate issuer: /CN=b86ddabfc48952bee26d6d5f828831f596a154e9
Certificate serial: 019C4390A2C4DBF62C94D480E57594611E92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uG3av8SJUr7ibW1fgogx9ZahVOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/6679f4-9165-4a8b-8892-7dea8fff2e08/1/uG3av8SJUr7ibW1fgogx9ZahVOk.mft
Manifest number: 0667
Signing time: Mon 09 Feb 2026 18:01:18 +0000
Manifest this update: Mon 09 Feb 2026 18:01:18 +0000
Manifest next update: Tue 10 Feb 2026 18:01:18 +0000
Files and hashes: 1: uG3av8SJUr7ibW1fgogx9ZahVOk.crl (hash: VsmZIhs/4RbPu1Q/BHdR2TuJN1+g15LpxvoD41DfR1s=)
2: vK9AviNHBBZmkmPl_0sSpGx75xE.roa (hash: fK0YnxZPR23tzgwVRccUAsgY3YVzMSTdNPagihczIFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/6679f4-9165-4a8b-8892-7dea8fff2e08/1/uG3av8SJUr7ibW1fgogx9ZahVOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/6679f4-9165-4a8b-8892-7dea8fff2e08/1/uG3av8SJUr7ibW1fgogx9ZahVOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/uG3av8SJUr7ibW1fgogx9ZahVOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:90:a2:c4:db:f6:2c:94:d4:80:e5:75:94:61:1e:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b86ddabfc48952bee26d6d5f828831f596a154e9
Validity
Not Before: Feb 9 18:01:18 2026 GMT
Not After : Feb 10 18:01:18 2026 GMT
Subject: CN=cf500fae1b38297f96b16eaef5e1c6d7cc1f6925
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ca:ff:3d:8e:13:36:1a:46:e2:38:d3:57:34:
9b:49:ce:39:01:12:49:23:82:bb:59:f3:11:af:72:
ea:71:07:ae:ed:33:86:5d:4e:16:a2:e0:b6:bd:b0:
74:09:bb:d8:46:10:db:e5:2c:39:6d:19:39:71:bd:
54:80:a6:ab:7a:52:20:12:72:c5:bb:39:c7:84:1d:
7f:82:97:b6:28:2e:22:63:23:f7:60:e6:83:10:74:
c6:7d:25:7c:a3:a2:57:c0:b1:5d:5c:a2:27:d1:a3:
1e:2e:ec:68:8d:09:24:dd:78:f6:43:99:27:b4:05:
99:18:58:88:e0:bd:4b:29:69:37:08:bb:2c:4d:30:
d7:de:52:7a:a4:d4:cb:22:db:31:61:7e:3f:dc:fc:
50:ce:61:c1:df:35:6f:1a:72:76:b9:41:87:41:b0:
8e:64:0f:be:36:16:3a:49:74:da:12:8a:a7:eb:5d:
2a:65:a9:68:c6:2d:24:3b:63:40:90:5e:0f:ba:ef:
db:d6:e6:83:36:5b:2e:bf:1b:fb:bc:0a:97:49:32:
0e:13:0c:e5:56:66:6e:a2:ec:fd:3f:93:da:c2:69:
d0:0c:de:d2:17:dd:be:fc:f0:00:ab:92:27:c7:86:
e3:0c:12:39:d4:12:01:43:1c:f3:b7:23:d4:b7:12:
d7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:50:0F:AE:1B:38:29:7F:96:B1:6E:AE:F5:E1:C6:D7:CC:1F:69:25
X509v3 Authority Key Identifier:
keyid:B8:6D:DA:BF:C4:89:52:BE:E2:6D:6D:5F:82:88:31:F5:96:A1:54:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uG3av8SJUr7ibW1fgogx9ZahVOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/6679f4-9165-4a8b-8892-7dea8fff2e08/1/uG3av8SJUr7ibW1fgogx9ZahVOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/6679f4-9165-4a8b-8892-7dea8fff2e08/1/uG3av8SJUr7ibW1fgogx9ZahVOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:3c:f1:ed:53:16:d8:17:51:1a:9b:3a:8f:9b:8e:8f:0d:d0:
87:5b:39:82:3f:75:a1:93:78:be:b0:7e:c2:ab:26:f9:72:fc:
92:80:a2:59:af:d2:cb:90:bb:b6:16:4a:22:3c:79:48:a5:53:
70:ed:0f:4b:d4:00:5b:c6:9a:b8:e6:77:bd:e6:a6:a8:0a:f0:
19:a3:bb:dc:b8:0a:9d:01:f7:d5:0a:e3:d4:81:1c:ca:fe:7c:
cf:d0:28:80:a2:fb:a9:72:72:a0:09:86:9d:c3:eb:af:07:69:
7c:99:15:b0:47:ed:f4:2c:6e:b0:af:79:66:0e:de:42:69:7e:
19:47:c9:77:f1:4f:ad:75:c3:26:43:90:e0:54:6e:5f:0e:fb:
db:7e:22:c7:eb:bc:c5:1a:8a:01:02:45:ed:57:a7:52:66:7a:
3f:c1:71:1b:26:f9:07:b8:2d:0c:4c:91:1f:f4:94:cc:49:9a:
83:68:79:7a:ff:01:8d:04:0b:f1:e2:0c:56:f7:af:58:dc:40:
f9:9d:07:f9:5e:07:58:a9:cb:8f:08:c6:cf:3a:5c:5d:97:8a:
b3:b0:09:d3:d2:44:4f:a2:cf:31:fe:43:b6:ae:75:0d:9b:fe:
48:ae:68:6b:7c:83:8f:da:0e:f2:67:9e:c0:da:5c:bb:80:9e:
1b:8a:b2:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:45:22 2026 by rpki-client