This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/048df6-bccd-4885-8f43-4dc2071a5bf1/1/mUQHi0B3KxcscEbnRGIEmAzq4Tk.mft
File: mUQHi0B3KxcscEbnRGIEmAzq4Tk.mft (raw, json)
Hash identifier: uZCgKhTlQ6OQiQvSoGGnfDJZjXj2TgZvt6BQfGDSXiM=
Subject key identifier: 3B:EE:BE:C2:25:CA:2D:D4:A5:91:FC:49:61:52:45:A9:B5:E8:B3:5A
Authority key identifier: 99:44:07:8B:40:77:2B:17:2C:70:46:E7:44:62:04:98:0C:EA:E1:39
Certificate issuer: /CN=9944078b40772b172c7046e7446204980ceae139
Certificate serial: 019C42468E2945C4271A6DE05B707DEB1008
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mUQHi0B3KxcscEbnRGIEmAzq4Tk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/048df6-bccd-4885-8f43-4dc2071a5bf1/1/mUQHi0B3KxcscEbnRGIEmAzq4Tk.mft
Manifest number: 17E5
Signing time: Mon 09 Feb 2026 12:00:46 +0000
Manifest this update: Mon 09 Feb 2026 12:00:46 +0000
Manifest next update: Tue 10 Feb 2026 12:00:46 +0000
Files and hashes: 1: mUQHi0B3KxcscEbnRGIEmAzq4Tk.crl (hash: DgcAH/8u4/B32ei1mJ2ujWdnnnmi+uEuEoVv+9O2DtY=)
2: uGHVRNRL_tLrHeYc2ab2IcKFN0o.roa (hash: Rgrpa9BFgykqaCEIzp1M6C8GB9BsKEtf6xgAPY/or1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/048df6-bccd-4885-8f43-4dc2071a5bf1/1/mUQHi0B3KxcscEbnRGIEmAzq4Tk.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/048df6-bccd-4885-8f43-4dc2071a5bf1/1/mUQHi0B3KxcscEbnRGIEmAzq4Tk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mUQHi0B3KxcscEbnRGIEmAzq4Tk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 12:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:46:8e:29:45:c4:27:1a:6d:e0:5b:70:7d:eb:10:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9944078b40772b172c7046e7446204980ceae139
Validity
Not Before: Feb 9 12:00:46 2026 GMT
Not After : Feb 10 12:00:46 2026 GMT
Subject: CN=3beebec225ca2dd4a591fc49615245a9b5e8b35a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:50:56:e1:a7:b9:ed:1b:5d:d2:74:37:c6:07:
59:7f:14:e3:20:f5:02:0a:27:a7:b2:23:07:3b:e9:
a2:2e:2c:c1:9e:c8:e1:60:80:20:71:1f:ba:e5:bd:
3d:ae:7e:6b:bc:53:7d:07:c4:ad:f4:8e:02:03:44:
e5:3c:75:fe:9a:82:dc:c2:4f:17:ad:87:68:19:75:
d1:a6:a1:c1:27:cd:3a:d1:f2:db:1a:ca:58:79:f2:
f5:f3:b8:f0:4b:b8:ac:f4:60:a5:d0:78:c2:86:ef:
28:3f:7b:97:35:0e:d3:57:e0:4c:3f:02:58:4d:d7:
ea:76:18:9b:42:41:02:3d:02:cd:66:57:3a:05:52:
46:1a:86:4b:e7:37:a9:63:29:b7:f0:d5:a2:a5:05:
95:ff:39:0b:13:c4:f7:cb:39:3d:dd:35:12:e2:25:
9b:09:ff:55:d2:15:fc:31:de:21:76:13:cb:43:26:
97:8c:1f:61:1d:37:f6:fe:bc:28:9d:03:06:d8:67:
82:be:7f:ad:68:6e:4e:0b:94:33:ac:10:76:a3:b2:
dd:1f:b1:19:84:70:8d:3a:4e:30:2a:dc:1a:8c:7a:
69:b1:43:47:6a:4b:8e:21:be:76:9e:69:64:28:45:
9d:36:55:95:91:e0:62:50:d6:b3:29:34:a8:6f:1b:
e2:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:EE:BE:C2:25:CA:2D:D4:A5:91:FC:49:61:52:45:A9:B5:E8:B3:5A
X509v3 Authority Key Identifier:
keyid:99:44:07:8B:40:77:2B:17:2C:70:46:E7:44:62:04:98:0C:EA:E1:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mUQHi0B3KxcscEbnRGIEmAzq4Tk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/048df6-bccd-4885-8f43-4dc2071a5bf1/1/mUQHi0B3KxcscEbnRGIEmAzq4Tk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/048df6-bccd-4885-8f43-4dc2071a5bf1/1/mUQHi0B3KxcscEbnRGIEmAzq4Tk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:27:16:fd:20:28:e0:a6:4c:7b:ab:79:6d:f5:7f:30:d3:eb:
9e:16:c0:39:06:5a:61:95:ec:de:e7:92:e7:ba:0f:06:cc:c7:
d5:96:ca:0a:48:e8:a9:47:e7:7d:c7:a9:9b:18:db:db:51:94:
29:81:2b:37:a3:94:cf:a8:c2:41:d8:6c:4b:e0:c3:00:af:04:
c9:04:45:18:4d:af:bc:02:0e:c7:8a:3d:64:fa:a8:c0:df:fb:
8e:ce:32:57:df:3c:ce:57:b9:97:6a:ff:ec:ef:d9:33:8e:59:
98:36:b2:09:76:c3:de:c3:4f:0d:3d:8c:89:4f:22:1a:8b:be:
0a:f4:85:b7:ae:9c:89:d1:f1:e4:7b:d2:86:ab:30:17:14:39:
fa:20:c8:4b:2c:1b:da:fb:ea:d0:9e:2d:85:03:ca:0f:64:52:
18:a4:e8:85:95:e9:d1:10:94:6b:2a:cc:24:de:ff:6a:23:b7:
d3:13:b8:e4:d0:e5:47:9e:86:04:39:44:ff:6b:19:51:13:f0:
c6:58:bb:14:69:47:94:fc:5d:33:17:0b:fd:22:44:83:fc:b0:
77:21:64:0c:57:3f:7c:1a:8e:0b:27:92:10:13:52:29:41:b1:
a8:e3:85:2c:8c:a9:99:62:77:90:3c:ca:67:4d:fb:bc:38:e9:
a7:c3:35:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:29:47 2026 by rpki-client