This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c7d722-dd1b-45cd-9983-cc3b78e77a07/1/Uf5NSKoBPUDgbDEv9xBImyDf4H8.mft
File: Uf5NSKoBPUDgbDEv9xBImyDf4H8.mft (raw, json)
Hash identifier: 4O7EU1nf6wjfzeU5UpW5N7UT/Kr/Wbxz8Ak/gG1JfAU=
Subject key identifier: F8:27:1F:86:E5:06:D6:E5:10:B7:EC:20:FC:8D:5C:C7:26:D9:2C:49
Authority key identifier: 51:FE:4D:48:AA:01:3D:40:E0:6C:31:2F:F7:10:48:9B:20:DF:E0:7F
Certificate issuer: /CN=51fe4d48aa013d40e06c312ff710489b20dfe07f
Certificate serial: 019C4321E417F6A298F5CEA4F8153C544C6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uf5NSKoBPUDgbDEv9xBImyDf4H8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/c7d722-dd1b-45cd-9983-cc3b78e77a07/1/Uf5NSKoBPUDgbDEv9xBImyDf4H8.mft
Manifest number: 0EF5
Signing time: Mon 09 Feb 2026 16:00:20 +0000
Manifest this update: Mon 09 Feb 2026 16:00:20 +0000
Manifest next update: Tue 10 Feb 2026 16:00:20 +0000
Files and hashes: 1: Uf5NSKoBPUDgbDEv9xBImyDf4H8.crl (hash: c7MorzhMxl8qDw+Lxx3yneYdMxZMhJPLBogipqiFMoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/c7d722-dd1b-45cd-9983-cc3b78e77a07/1/Uf5NSKoBPUDgbDEv9xBImyDf4H8.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/c7d722-dd1b-45cd-9983-cc3b78e77a07/1/Uf5NSKoBPUDgbDEv9xBImyDf4H8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uf5NSKoBPUDgbDEv9xBImyDf4H8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:21:e4:17:f6:a2:98:f5:ce:a4:f8:15:3c:54:4c:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51fe4d48aa013d40e06c312ff710489b20dfe07f
Validity
Not Before: Feb 9 16:00:20 2026 GMT
Not After : Feb 10 16:00:20 2026 GMT
Subject: CN=f8271f86e506d6e510b7ec20fc8d5cc726d92c49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:72:f3:0b:cb:a8:c0:c4:b4:17:98:cb:e1:d9:
82:22:cd:df:e8:3f:86:b2:1a:05:07:64:4c:4c:2b:
a7:9b:94:1e:cc:2b:9c:0a:10:cf:1d:9e:d1:d3:db:
6b:ab:ee:6f:4e:e8:ef:50:49:eb:df:fb:f7:71:be:
96:5f:9f:4e:90:6f:e0:07:ee:64:19:1a:d4:aa:c0:
c3:65:13:11:2f:ce:fd:22:b1:68:3a:96:89:54:6d:
59:10:3d:70:08:83:7b:68:8b:b1:70:fd:98:69:84:
df:9f:e1:41:cb:4f:e9:2d:8b:a5:03:76:99:24:80:
76:79:46:1f:48:c1:46:27:42:da:5f:3a:52:00:85:
70:75:60:f3:6a:5f:2b:f9:96:9c:4e:d8:7b:11:91:
31:39:5c:22:9f:7f:65:25:82:01:cb:aa:e4:c8:e7:
b2:a6:43:85:76:62:aa:0e:99:3d:02:13:34:6e:79:
b5:12:d4:e1:64:44:20:78:21:63:38:ab:5f:bf:d9:
00:6e:2c:6e:34:cb:bf:9f:53:21:c6:e1:11:fe:59:
bb:2e:6c:e7:64:fe:99:98:78:d3:13:86:e3:17:0e:
ae:df:1f:3b:fc:a2:9c:c7:c5:4c:ee:38:ad:0e:3b:
76:c1:36:c4:de:f4:6d:af:7f:79:46:3a:06:17:1c:
f6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:27:1F:86:E5:06:D6:E5:10:B7:EC:20:FC:8D:5C:C7:26:D9:2C:49
X509v3 Authority Key Identifier:
keyid:51:FE:4D:48:AA:01:3D:40:E0:6C:31:2F:F7:10:48:9B:20:DF:E0:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uf5NSKoBPUDgbDEv9xBImyDf4H8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c7d722-dd1b-45cd-9983-cc3b78e77a07/1/Uf5NSKoBPUDgbDEv9xBImyDf4H8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c7d722-dd1b-45cd-9983-cc3b78e77a07/1/Uf5NSKoBPUDgbDEv9xBImyDf4H8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:16:6e:f7:41:a4:d7:ff:2b:d3:c2:76:37:ce:78:06:39:7e:
12:a6:05:8b:ff:78:91:53:fd:51:28:24:93:80:7d:40:58:d8:
5f:52:13:17:bf:f8:77:02:70:d6:aa:a6:8a:97:7f:e6:7c:ea:
09:bd:58:61:6e:7f:18:3c:24:dd:ef:5d:91:02:79:30:b3:62:
30:42:1d:c8:78:f5:0d:90:aa:25:33:fa:b0:55:58:07:b3:df:
e7:29:94:87:f3:41:99:84:37:c8:c2:0e:c4:05:3c:fb:ca:cf:
37:e6:da:6e:ea:e4:f5:5f:f0:23:ab:d7:80:77:f2:fe:79:b1:
82:39:b2:d0:69:19:e2:9f:34:05:f9:1c:cc:45:2c:de:7b:ef:
c0:69:ed:32:f3:9e:81:bf:e6:45:50:a2:d6:6a:fc:57:52:ec:
f1:06:96:6b:c1:52:ce:bd:10:83:aa:d0:4d:d0:4f:0e:ed:b2:
ec:e9:e2:21:63:30:8e:0c:ce:af:c6:30:19:20:50:58:91:86:
35:c1:bf:26:0c:03:8a:65:ea:6f:8d:fe:10:fb:da:d6:d8:81:
ee:0e:2f:0f:04:88:84:41:0a:a9:7e:e0:4c:e2:56:92:47:1e:
1d:6e:2a:a4:9d:80:2f:07:60:3a:0e:de:44:3d:9e:64:a4:8d:
41:0a:f8:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:41:29 2026 by rpki-client