This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.mft
File: UJvGPmjJCTK0_CiZf8O_eN47N0M.mft (raw, json)
Hash identifier: 3mwuUnBluMTtxeHwkhOOEhxbsZu+SGSMc/9shv/v6R8=
Subject key identifier: 5A:E7:F9:FB:20:CB:22:0E:61:1F:17:B2:67:35:91:2D:DD:08:A1:1E
Authority key identifier: 50:9B:C6:3E:68:C9:09:32:B4:FC:28:99:7F:C3:BF:78:DE:3B:37:43
Certificate issuer: /CN=509bc63e68c90932b4fc28997fc3bf78de3b3743
Certificate serial: 019C42EB2A3A58DF1FFCB8789F7AFE39AC17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJvGPmjJCTK0_CiZf8O_eN47N0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.mft
Manifest number: 1117
Signing time: Mon 09 Feb 2026 15:00:33 +0000
Manifest this update: Mon 09 Feb 2026 15:00:33 +0000
Manifest next update: Tue 10 Feb 2026 15:00:33 +0000
Files and hashes: 1: 6TGUfIQg-VBwQ1TSjbACENP0Fuk.roa (hash: KbUe0U97E5HGIjpIMaXPTxhvroq3ZGOD2BiTeZCgmUA=)
2: UJvGPmjJCTK0_CiZf8O_eN47N0M.crl (hash: jfIKhCEBxowcZ7Xt97Nzmrv4Ota3x/HdCYmXMSTaOa8=)
3: vFIy0amMxxYp6t0XVtNNLn2R_I8.roa (hash: vax2PUgWucdwxjsswO26V1j+tAN7zRvvsr/R7FSg7S0=)
4: zr2faZR5YeSQwhfP1BestpJXC-c.roa (hash: l0wUse8So6p8HXiUpDrAoN5JVZGYHdfzX/5wlHsppLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/UJvGPmjJCTK0_CiZf8O_eN47N0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:eb:2a:3a:58:df:1f:fc:b8:78:9f:7a:fe:39:ac:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=509bc63e68c90932b4fc28997fc3bf78de3b3743
Validity
Not Before: Feb 9 15:00:33 2026 GMT
Not After : Feb 10 15:00:33 2026 GMT
Subject: CN=5ae7f9fb20cb220e611f17b26735912ddd08a11e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:20:e2:fc:f6:c4:81:3e:6e:59:e7:ea:cb:59:
6d:06:e0:c1:90:58:2d:fa:f0:31:be:58:80:52:ac:
0d:de:8c:97:9a:b8:2f:f6:ed:b9:c6:b4:54:0d:49:
c9:c3:41:2a:73:84:59:50:fc:f8:79:60:df:df:ad:
8b:f4:b5:90:86:86:c7:16:45:b4:70:d3:00:64:3c:
1a:25:6e:72:10:fb:4a:54:2b:97:f5:31:9c:43:10:
3a:98:86:50:bf:99:3d:b9:2d:91:dd:6d:18:6d:47:
eb:40:60:da:1c:55:6f:1c:6d:e8:43:4c:a1:52:84:
e3:d5:a0:a2:37:a2:30:83:1f:11:83:21:69:46:af:
27:38:2c:80:d2:2e:e4:5d:b7:da:d1:6a:39:6d:73:
08:b7:d0:c3:9c:13:90:c1:de:9c:41:0c:58:ff:70:
82:b0:4e:bb:23:62:6c:40:af:25:46:eb:3e:6d:c4:
44:84:b2:e5:03:6d:ef:fe:d5:01:2f:af:8f:56:62:
ec:02:b8:79:20:ba:c9:d7:08:5d:01:36:92:73:dc:
9f:cb:b5:dd:71:5e:8a:44:81:71:78:e8:16:21:49:
c6:cf:ec:1e:a9:b3:ba:7c:66:1b:16:a4:b6:83:87:
58:39:2d:13:8f:8d:cf:04:7b:e1:b1:b0:ca:ec:31:
fa:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:E7:F9:FB:20:CB:22:0E:61:1F:17:B2:67:35:91:2D:DD:08:A1:1E
X509v3 Authority Key Identifier:
keyid:50:9B:C6:3E:68:C9:09:32:B4:FC:28:99:7F:C3:BF:78:DE:3B:37:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJvGPmjJCTK0_CiZf8O_eN47N0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:e0:50:e5:b1:4b:0a:6e:33:ff:d8:cf:49:84:a8:e4:01:db:
be:b1:da:37:cc:65:fc:68:fb:06:9f:b7:3c:42:22:ec:b9:0a:
a7:cd:0f:6d:01:ad:94:27:cd:10:25:ae:ac:05:3b:1f:80:08:
06:0d:84:cb:ec:e2:35:1d:3b:d8:bb:13:f2:80:10:cf:6c:8d:
bf:79:6e:a5:1b:40:70:35:f8:f2:a0:8a:c9:5b:87:56:f3:2f:
4c:be:83:cd:fa:56:7c:cf:f4:a2:13:b3:43:68:00:f5:97:ef:
04:9f:63:96:eb:ff:c9:4d:0e:ec:ed:4f:b2:21:99:d4:fe:4e:
45:8c:a4:6a:75:0f:b8:e8:ec:01:5a:33:6b:82:db:f7:1b:81:
37:6d:26:62:08:78:ec:14:d4:e5:8e:7c:b2:7b:3c:0c:62:00:
af:a1:82:4b:87:eb:9d:9c:3e:36:3a:ee:27:d7:db:24:8c:7c:
63:a8:e5:7c:07:ff:a7:2e:c0:5d:b8:77:4a:bf:36:ed:83:78:
f0:56:d2:d1:e4:35:fc:6a:07:5f:b5:0b:a9:8b:00:4e:e8:25:
83:08:8d:37:bc:d0:8b:c8:f7:97:42:96:aa:37:33:7d:d6:53:
64:af:b4:dc:92:93:e6:e1:3d:14:f0:8b:7b:03:cc:09:b7:44:
0b:3c:e3:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:41:42 2026 by rpki-client