This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.mft
File: u44vWsfL5iEX2keKwMAnrW2EPFY.mft (raw, json)
Hash identifier: qve2UwPs69h1sDoEptqHcIK0Auvht6xfC+au/YCEDWs=
Subject key identifier: 82:16:4E:AB:33:D9:77:26:49:C3:D1:8A:D0:6D:0B:CE:BE:B4:74:13
Authority key identifier: BB:8E:2F:5A:C7:CB:E6:21:17:DA:47:8A:C0:C0:27:AD:6D:84:3C:56
Certificate issuer: /CN=bb8e2f5ac7cbe62117da478ac0c027ad6d843c56
Certificate serial: 019BFD2E577A8BCC7854D66BAEBE8F433699
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u44vWsfL5iEX2keKwMAnrW2EPFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.mft
Manifest number: 17ED
Signing time: Tue 27 Jan 2026 02:00:31 +0000
Manifest this update: Tue 27 Jan 2026 02:00:31 +0000
Manifest next update: Wed 28 Jan 2026 02:00:31 +0000
Files and hashes: 1: EK98MbFFSSPIZHcJY-ZW_UF_ED0.roa (hash: Ug1DIE2wtnkuxo6OV5HarCRpdJ5eCoWMxa7DhgeBQVc=)
2: u44vWsfL5iEX2keKwMAnrW2EPFY.crl (hash: fVjALO4pKDplE2GyCqaUfd/W4EL4IHAOGz47iWYGm5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/u44vWsfL5iEX2keKwMAnrW2EPFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 20:39:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:fd:2e:57:7a:8b:cc:78:54:d6:6b:ae:be:8f:43:36:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8e2f5ac7cbe62117da478ac0c027ad6d843c56
Validity
Not Before: Jan 27 02:00:31 2026 GMT
Not After : Jan 28 02:00:31 2026 GMT
Subject: CN=82164eab33d9772649c3d18ad06d0bcebeb47413
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d3:2c:15:6b:d3:c2:59:68:4f:cd:58:57:0b:
ab:c1:66:ed:0b:f8:f9:43:2e:e8:86:40:e4:d2:da:
95:95:82:b8:f9:bf:16:f5:ef:1a:ca:28:5f:ce:d8:
ab:76:94:8b:4a:6a:f5:91:1c:24:42:58:c5:d5:ba:
78:3b:48:61:41:e9:cf:c7:4c:cb:2b:dd:3f:05:0e:
04:c1:67:c4:5f:0d:72:27:8b:a3:77:8d:64:44:f3:
fc:87:10:ee:17:57:3a:40:74:21:ed:4b:f9:f7:42:
a8:f1:c3:38:c0:6c:ca:6f:06:d4:71:c3:b4:24:25:
f3:11:a3:fa:f1:bd:ba:52:17:66:21:ee:b7:b2:9e:
57:fb:11:ab:44:96:86:2c:ec:e8:65:85:7e:d8:57:
89:dc:f7:96:48:db:c4:d0:11:6a:7f:01:fc:84:00:
6f:3f:78:94:93:69:8e:6c:2d:50:7a:64:f4:a7:6f:
97:57:ee:16:0a:0d:ff:f4:6e:a0:03:03:ef:cb:94:
b3:5e:6f:74:53:4e:a3:d9:22:bd:09:dd:93:a5:1f:
c6:8d:59:d7:15:d7:18:e5:4a:b2:a0:51:08:c8:fb:
03:2e:1a:2f:01:e3:c9:2d:ee:28:7f:b1:6c:ab:bc:
84:1c:a6:0f:c5:f9:fa:4f:e4:04:8e:0f:da:fc:2f:
16:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:16:4E:AB:33:D9:77:26:49:C3:D1:8A:D0:6D:0B:CE:BE:B4:74:13
X509v3 Authority Key Identifier:
keyid:BB:8E:2F:5A:C7:CB:E6:21:17:DA:47:8A:C0:C0:27:AD:6D:84:3C:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u44vWsfL5iEX2keKwMAnrW2EPFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:ae:97:8b:7b:e4:ea:7f:f1:71:89:48:ae:bc:21:ce:80:58:
9b:d8:2d:e2:a6:68:08:be:94:73:95:d0:ee:20:94:59:3e:85:
0b:bd:cd:fa:96:18:68:a8:fd:3a:20:61:e7:cd:33:ad:8f:69:
f6:e6:52:f7:9d:28:4d:9f:cb:f1:fa:93:3b:44:71:8c:61:59:
83:56:4e:f6:ae:77:99:ef:63:ce:8c:82:56:46:65:c9:73:b9:
0f:7f:da:3b:f8:c1:17:ea:bc:e9:4a:2d:90:e2:2b:8d:4f:64:
86:93:ec:9d:fd:6b:b8:83:f8:f6:ab:56:e3:bd:d2:df:5d:a7:
82:56:6f:8b:47:82:43:67:60:26:f3:59:da:c5:b5:e0:ca:c0:
61:8d:fd:8f:85:3a:a0:f9:97:3b:7a:8e:8f:c0:e3:25:99:0b:
25:31:72:07:5c:b8:0c:37:6e:f4:85:0c:3c:e6:b6:10:b1:86:
84:2b:ae:3f:f7:f9:ab:87:8d:fa:f2:69:cb:11:73:9c:a5:70:
c2:de:dd:45:5c:1d:03:6e:77:1e:ce:ee:43:94:59:d6:29:cc:
af:7f:35:29:68:83:e4:2d:e6:8d:0a:06:f0:f3:50:b7:d6:d1:
85:18:9c:5f:d6:e6:07:60:9b:3f:dd:63:50:7c:bb:6f:7c:ad:
54:72:01:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 07:16:29 2026 by rpki-client