This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.mft
File: UzkLE8nvSvz9CBJBEeb2PcMBZao.mft (raw, json)
Hash identifier: /q138QqkkCeiuunGOQk7Qr6HvCnD1CLthbGirSbNfJw=
Subject key identifier: 16:A0:E7:96:D0:A6:9E:89:88:23:FB:39:FD:3B:7B:5F:A6:7C:A3:3F
Authority key identifier: 53:39:0B:13:C9:EF:4A:FC:FD:08:12:41:11:E6:F6:3D:C3:01:65:AA
Certificate issuer: /CN=53390b13c9ef4afcfd08124111e6f63dc30165aa
Certificate serial: 019C4434AC96D25D66AFB20AF196C9483312
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzkLE8nvSvz9CBJBEeb2PcMBZao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.mft
Manifest number: 17E3
Signing time: Mon 09 Feb 2026 21:00:28 +0000
Manifest this update: Mon 09 Feb 2026 21:00:28 +0000
Manifest next update: Tue 10 Feb 2026 21:00:28 +0000
Files and hashes: 1: UzkLE8nvSvz9CBJBEeb2PcMBZao.crl (hash: 9E5SC81xOBR/lss5bAtcXOyBb3s0O9q/Tf29txoLXXE=)
2: ZsE_mt7ku7Fr5hPoQLALle6qg7o.roa (hash: HUKBNWBBwbvfcuNQzCGO+9wjMStLGidRG99eNbwf4fs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.mft
rsync://rpki.ripe.net/repository/DEFAULT/UzkLE8nvSvz9CBJBEeb2PcMBZao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:44:34:ac:96:d2:5d:66:af:b2:0a:f1:96:c9:48:33:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53390b13c9ef4afcfd08124111e6f63dc30165aa
Validity
Not Before: Feb 9 21:00:28 2026 GMT
Not After : Feb 10 21:00:28 2026 GMT
Subject: CN=16a0e796d0a69e898823fb39fd3b7b5fa67ca33f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c5:66:dd:fd:25:a1:30:96:cf:04:00:84:0e:
d4:2f:00:35:a8:0e:fa:45:35:65:eb:c9:c7:5c:f1:
d7:f8:3c:3c:bb:56:4d:1c:83:ed:bb:79:c6:c5:c9:
bc:dc:08:d2:e2:f7:b2:68:8c:b4:d4:76:88:9c:84:
3b:44:de:59:f2:8f:35:4d:c6:03:e2:67:f6:8d:ec:
bc:8e:2a:f0:30:48:39:22:05:25:82:e1:c5:ae:86:
c8:b3:12:47:d4:c9:57:15:a7:d9:44:87:0e:6e:b5:
94:62:3a:f1:63:6e:ef:90:0e:b8:fc:c7:d6:b0:3c:
19:38:c8:97:23:da:47:92:43:0a:f1:53:61:84:33:
e2:b8:d2:9d:d5:75:e2:a2:50:9e:ea:9d:f8:dc:57:
8b:22:34:6d:d8:94:27:32:d1:db:61:55:15:7b:41:
38:ee:6c:ac:6c:bc:24:1d:e2:8d:f7:9c:c2:eb:ee:
fd:1e:60:1d:f1:c5:7d:83:4b:e8:c2:25:a3:fc:7f:
c6:12:e0:69:65:86:a2:80:63:8c:dc:7a:50:af:16:
9e:e6:c1:c5:94:e8:90:a8:85:ff:1d:76:ff:8d:53:
ed:67:53:49:26:d9:fc:50:b2:31:93:37:ba:a2:66:
43:fc:35:0e:17:53:eb:5d:2a:38:26:95:6a:aa:3d:
b0:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:A0:E7:96:D0:A6:9E:89:88:23:FB:39:FD:3B:7B:5F:A6:7C:A3:3F
X509v3 Authority Key Identifier:
keyid:53:39:0B:13:C9:EF:4A:FC:FD:08:12:41:11:E6:F6:3D:C3:01:65:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzkLE8nvSvz9CBJBEeb2PcMBZao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:26:f1:3e:93:11:53:9a:57:93:58:d1:a9:43:f0:e4:a0:4e:
25:1b:54:57:3b:d7:93:34:f6:27:e9:df:40:ef:9e:5a:98:92:
d3:c8:f1:38:06:5a:12:41:f9:e7:3b:de:9a:b3:8b:77:dd:16:
2b:2a:c7:6f:83:cf:a7:ad:90:de:01:c1:28:49:a4:67:de:5c:
f6:c0:4b:13:0e:b9:55:01:9b:98:48:0f:5b:f7:46:9a:d2:d1:
e5:4c:d3:f4:21:04:67:a8:db:71:68:15:e8:14:85:86:3f:75:
17:15:86:b1:7a:a0:7a:2b:cf:c4:2d:9d:9b:fe:09:d1:b7:8a:
bd:ac:fd:64:67:39:7e:35:17:93:ed:10:9d:26:84:65:6c:24:
c2:df:b2:fa:38:92:0c:4d:b7:39:ce:22:78:cb:fd:6c:94:3b:
1e:fe:69:96:29:49:7b:5c:64:70:3a:bb:54:f2:ec:cd:40:a1:
ba:e7:60:2d:c2:73:ed:24:c7:84:49:84:3a:04:8b:45:6c:5a:
a8:06:20:b6:d5:61:23:61:b5:0a:f8:ad:dd:0a:95:20:fa:57:
af:7f:a6:06:a1:b1:0e:c1:c4:b1:63:98:3e:c1:35:eb:08:fd:
d0:80:90:9b:b0:36:ea:50:3e:14:dd:99:bf:c4:80:58:b0:9f:
57:63:e6:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:02:23 2026 by rpki-client