This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/b0045d-3ff7-43ab-a64d-c4cf16f2083f/1/Uu5InzbeBCGc0hkuBKe9sTkUZI8.mft
File: Uu5InzbeBCGc0hkuBKe9sTkUZI8.mft (raw, json)
Hash identifier: 3dWl7tTSLmfpjcSx84+tulncF3RFqDTistKrr/1I+Jg=
Subject key identifier: 73:50:1A:29:33:DC:69:0C:07:E5:06:71:51:3E:0E:79:F6:0A:78:7D
Authority key identifier: 52:EE:48:9F:36:DE:04:21:9C:D2:19:2E:04:A7:BD:B1:39:14:64:8F
Certificate issuer: /CN=52ee489f36de04219cd2192e04a7bdb13914648f
Certificate serial: 019C42466908017E7B5256607BCE7A6E0C48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uu5InzbeBCGc0hkuBKe9sTkUZI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/b0045d-3ff7-43ab-a64d-c4cf16f2083f/1/Uu5InzbeBCGc0hkuBKe9sTkUZI8.mft
Manifest number: 133A
Signing time: Mon 09 Feb 2026 12:00:36 +0000
Manifest this update: Mon 09 Feb 2026 12:00:36 +0000
Manifest next update: Tue 10 Feb 2026 12:00:36 +0000
Files and hashes: 1: DPFop1VRWflc2dwO-UaKsnysNA0.roa (hash: TxO2MJ8nHORjvCPU/MK/XDRpBmX4mMRcY4M/4fMMMyw=)
2: Uu5InzbeBCGc0hkuBKe9sTkUZI8.crl (hash: aId6YBfsoayFzngBZ00VMZoDXJMVcuTyBL+4jCDYFeI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/b0045d-3ff7-43ab-a64d-c4cf16f2083f/1/Uu5InzbeBCGc0hkuBKe9sTkUZI8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/b0045d-3ff7-43ab-a64d-c4cf16f2083f/1/Uu5InzbeBCGc0hkuBKe9sTkUZI8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uu5InzbeBCGc0hkuBKe9sTkUZI8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 12:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:46:69:08:01:7e:7b:52:56:60:7b:ce:7a:6e:0c:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52ee489f36de04219cd2192e04a7bdb13914648f
Validity
Not Before: Feb 9 12:00:36 2026 GMT
Not After : Feb 10 12:00:36 2026 GMT
Subject: CN=73501a2933dc690c07e50671513e0e79f60a787d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1b:69:f1:e5:43:2a:d0:e0:15:96:cf:1d:bc:
95:ef:3a:f9:95:6c:71:9c:2e:c7:99:a6:2c:7c:5a:
70:83:0d:66:10:93:4f:5d:8a:5d:b6:29:03:6a:59:
7b:1c:00:2e:15:db:aa:02:ad:64:64:22:0b:cd:ed:
b8:7e:f4:2c:88:86:22:ba:4b:29:93:86:ed:7d:a1:
5d:85:6e:71:d7:cc:74:0c:af:61:cd:a4:5c:ab:5e:
91:1f:e9:6a:ba:b0:92:e6:af:71:af:e8:5f:57:ce:
9d:5c:9b:84:9f:17:51:70:f8:a7:a1:b4:bf:9e:66:
01:a7:ee:65:ab:29:0e:55:f1:31:12:39:b8:24:5f:
99:11:95:31:24:42:1f:3e:f8:da:21:13:d5:6a:30:
4b:cb:7e:35:c4:32:12:eb:96:0b:72:b3:55:05:f9:
c9:48:d7:d4:bf:10:5d:5c:9c:76:e6:e2:f5:26:ae:
6e:c6:18:dc:0a:08:26:e9:52:bc:15:eb:29:95:a9:
da:69:d0:ef:a3:6f:11:cf:45:0c:59:22:d2:8e:64:
32:e3:f1:2c:86:7a:16:aa:74:e7:16:02:f6:77:34:
52:17:82:3d:8c:f2:9c:c8:a9:11:fa:63:14:50:71:
56:69:f4:e8:e2:af:7b:33:f4:d8:06:b4:17:1a:6d:
bb:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:50:1A:29:33:DC:69:0C:07:E5:06:71:51:3E:0E:79:F6:0A:78:7D
X509v3 Authority Key Identifier:
keyid:52:EE:48:9F:36:DE:04:21:9C:D2:19:2E:04:A7:BD:B1:39:14:64:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uu5InzbeBCGc0hkuBKe9sTkUZI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b0045d-3ff7-43ab-a64d-c4cf16f2083f/1/Uu5InzbeBCGc0hkuBKe9sTkUZI8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b0045d-3ff7-43ab-a64d-c4cf16f2083f/1/Uu5InzbeBCGc0hkuBKe9sTkUZI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:6d:82:63:d5:0c:3d:18:61:51:6d:84:af:d5:36:54:72:ac:
e2:ac:11:10:44:4d:d4:6e:87:64:ee:14:c6:a1:5c:b1:95:d8:
4f:ce:98:31:a7:72:46:a8:f7:8e:c7:7b:e3:0c:c6:44:24:c4:
81:b4:47:44:d2:46:2b:d8:e1:8d:f2:e7:10:63:43:c2:30:da:
dd:e2:d3:ee:00:b2:7c:26:7d:e5:22:d6:20:d8:c7:70:2b:1b:
d9:c6:40:28:c2:3d:f3:56:57:71:ea:9f:64:1d:8e:39:51:ac:
ad:9c:45:67:88:a8:fb:74:3a:06:5a:75:6e:21:7f:35:de:ef:
88:85:56:db:09:07:32:37:c2:d4:20:89:26:62:93:9c:cb:2b:
b3:df:39:2b:4c:f5:b2:94:ae:5f:a1:3d:66:a8:26:8b:2e:ed:
2d:0a:e3:fc:cc:87:0f:e2:59:50:47:af:80:3a:54:f1:7d:94:
18:50:43:d0:05:4c:28:c6:0c:3a:86:a1:5c:23:81:b3:76:6a:
6a:99:ee:68:7a:3a:b6:20:95:f7:d3:16:c8:ac:cd:8c:83:b2:
e3:8f:be:ae:c2:ea:41:c4:61:cb:d4:3e:0f:99:e2:47:dd:76:
01:bb:eb:d3:cd:13:24:79:8f:69:73:3e:5e:40:9a:34:88:3a:
a5:14:70:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:07:26 2026 by rpki-client