This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/985da5-788c-47a0-ab8e-8854b019db9a/1/uiZ7jiFT-_yZA4R7RQKivvRLVuY.mft
File: uiZ7jiFT-_yZA4R7RQKivvRLVuY.mft (raw, json)
Hash identifier: O/gkv+fpqy1CRGZt8Spp/kWV/sVUvxQF8TmoY3h8e0s=
Subject key identifier: DC:FF:9F:08:04:6F:10:30:A7:74:8F:AE:F1:69:AF:01:F4:36:20:13
Authority key identifier: BA:26:7B:8E:21:53:FB:FC:99:03:84:7B:45:02:A2:BE:F4:4B:56:E6
Certificate issuer: /CN=ba267b8e2153fbfc9903847b4502a2bef44b56e6
Certificate serial: 019C424678CF6749681680E4772CBDDA21B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uiZ7jiFT-_yZA4R7RQKivvRLVuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/985da5-788c-47a0-ab8e-8854b019db9a/1/uiZ7jiFT-_yZA4R7RQKivvRLVuY.mft
Manifest number: 01A9
Signing time: Mon 09 Feb 2026 12:00:40 +0000
Manifest this update: Mon 09 Feb 2026 12:00:40 +0000
Manifest next update: Tue 10 Feb 2026 12:00:40 +0000
Files and hashes: 1: EXoshLHlQDsApmd1V01L7rMBQ7A.roa (hash: CqEH7hqvO2kXVEWBRyC0k4ixmEgnsnbOiK5wB+Ko5SU=)
2: uiZ7jiFT-_yZA4R7RQKivvRLVuY.crl (hash: P6h30mSlCQe+0D5kjW4FQp4NTPLuFTzTgOt5IHOdh28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/985da5-788c-47a0-ab8e-8854b019db9a/1/uiZ7jiFT-_yZA4R7RQKivvRLVuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/985da5-788c-47a0-ab8e-8854b019db9a/1/uiZ7jiFT-_yZA4R7RQKivvRLVuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/uiZ7jiFT-_yZA4R7RQKivvRLVuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 12:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:46:78:cf:67:49:68:16:80:e4:77:2c:bd:da:21:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba267b8e2153fbfc9903847b4502a2bef44b56e6
Validity
Not Before: Feb 9 12:00:40 2026 GMT
Not After : Feb 10 12:00:40 2026 GMT
Subject: CN=dcff9f08046f1030a7748faef169af01f4362013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9c:3e:97:8c:71:41:9d:ad:2e:2c:92:0f:3b:
93:c6:02:fb:3d:b2:8e:94:b4:d2:b6:64:c6:89:4c:
76:11:e7:7b:8c:7d:5f:cd:72:a3:ca:60:01:80:1f:
1e:1e:3e:ec:cf:58:50:e5:64:5a:f4:41:c3:af:c9:
fa:2e:d6:4f:37:fb:2c:9f:9a:37:bf:b2:68:6b:6d:
7f:0d:97:64:1e:bc:a4:f1:90:10:d7:79:c7:08:34:
70:a5:b9:05:2a:8c:ab:c8:81:29:c9:69:7e:00:31:
87:7a:3e:ea:ca:f3:bf:59:a0:ab:b7:13:c9:50:c1:
f9:5f:f7:15:6e:58:43:d3:29:df:f4:f3:77:e6:e6:
f7:03:8a:0d:c2:82:e2:8b:fb:da:e9:35:23:57:fe:
43:19:4f:16:4a:7d:2d:75:aa:f1:b5:00:fc:b6:aa:
e6:df:97:68:3c:7e:26:7a:5d:c4:f9:ff:f9:eb:77:
e2:38:ed:13:3c:92:ec:f0:a9:e1:da:eb:b7:d0:9c:
9d:72:e1:46:85:ae:d8:1b:26:e9:22:a6:bc:81:3c:
85:42:09:1a:9e:66:d0:5e:f8:74:0f:ab:54:b4:11:
bd:11:f4:b4:28:32:20:33:fc:ce:8a:87:10:3e:72:
df:f5:70:53:26:e3:b8:ff:8f:d6:a3:98:22:b9:50:
ed:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:FF:9F:08:04:6F:10:30:A7:74:8F:AE:F1:69:AF:01:F4:36:20:13
X509v3 Authority Key Identifier:
keyid:BA:26:7B:8E:21:53:FB:FC:99:03:84:7B:45:02:A2:BE:F4:4B:56:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uiZ7jiFT-_yZA4R7RQKivvRLVuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/985da5-788c-47a0-ab8e-8854b019db9a/1/uiZ7jiFT-_yZA4R7RQKivvRLVuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/985da5-788c-47a0-ab8e-8854b019db9a/1/uiZ7jiFT-_yZA4R7RQKivvRLVuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:7e:97:d3:ca:f5:37:17:5e:87:76:ed:62:77:c2:1d:63:74:
c2:0c:73:05:8f:b1:bc:d9:62:28:32:54:1e:e2:69:33:db:63:
c5:0e:70:c6:80:ae:2d:66:b5:31:55:81:b6:39:14:41:be:86:
56:ff:4e:88:8f:dd:9a:87:d9:5a:ed:7b:45:f1:15:be:e8:a3:
66:3c:42:26:da:64:26:0e:dd:6e:1c:85:1e:4a:ce:a7:6f:5d:
7c:b6:4d:61:c1:99:65:47:dc:03:21:64:4e:a1:61:20:55:0f:
08:64:bb:8d:62:4b:ba:fb:2d:2e:11:d6:9b:28:e5:93:b5:1b:
21:28:57:d8:9f:ed:55:5a:a5:1d:bc:91:de:df:0a:7c:f1:e6:
26:b7:2a:07:29:ce:0e:15:b4:32:18:b3:e7:2c:c8:7b:c0:05:
f5:b0:78:19:bd:f3:11:d7:4c:eb:bb:b7:30:73:61:8c:e0:02:
3f:73:d2:55:0e:d7:43:f1:53:50:0c:7d:2b:7b:08:28:e5:7a:
51:2c:61:bd:68:a3:b9:f2:64:51:5b:82:6d:24:59:7e:ea:93:
9e:d1:d1:b5:a7:ca:cd:73:23:9c:09:a3:2f:bb:a9:5e:72:16:
fd:88:5c:8f:9a:b6:f3:9d:01:71:3e:04:eb:4b:fa:55:2f:9e:
75:b6:c2:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:59:25 2026 by rpki-client