This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/UFZxLM-od6u3YMt34nBBd0ywRzk.mft
File: UFZxLM-od6u3YMt34nBBd0ywRzk.mft (raw, json)
Hash identifier: tbzwZ+i8haoMABSTQMK0RjXPMA0hKVSax+xEBbVpJ3Q=
Subject key identifier: FA:53:C6:F2:2E:9F:9F:5E:80:FD:B6:86:AC:1B:91:F9:AF:9A:1D:B8
Authority key identifier: 50:56:71:2C:CF:A8:77:AB:B7:60:CB:77:E2:70:41:77:4C:B0:47:39
Certificate issuer: /CN=5056712ccfa877abb760cb77e27041774cb04739
Certificate serial: 019C421012EE22DD8FB2ECB659EF1C1C8186
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFZxLM-od6u3YMt34nBBd0ywRzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/UFZxLM-od6u3YMt34nBBd0ywRzk.mft
Manifest number: 1814
Signing time: Mon 09 Feb 2026 11:01:15 +0000
Manifest this update: Mon 09 Feb 2026 11:01:15 +0000
Manifest next update: Tue 10 Feb 2026 11:01:15 +0000
Files and hashes: 1: L5RtN4MYgylQB2sxCXbY7rkj9cw.roa (hash: qjznCSz3UWXsKIxhvu2fQzujS0se59sICJHUHPBxLVY=)
2: UFZxLM-od6u3YMt34nBBd0ywRzk.crl (hash: LLIMO+IhO14Xbq99HuXK7/NZOrZrS8DPkA8y53rx/Hs=)
3: ve2xnNSznR3jgazHd-AYZFn-sds.roa (hash: 23cgt8zKs/gW5LTZzpzr40f5utV3g89KsGnqM+0cNAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/UFZxLM-od6u3YMt34nBBd0ywRzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/UFZxLM-od6u3YMt34nBBd0ywRzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFZxLM-od6u3YMt34nBBd0ywRzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:10:12:ee:22:dd:8f:b2:ec:b6:59:ef:1c:1c:81:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5056712ccfa877abb760cb77e27041774cb04739
Validity
Not Before: Feb 9 11:01:15 2026 GMT
Not After : Feb 10 11:01:15 2026 GMT
Subject: CN=fa53c6f22e9f9f5e80fdb686ac1b91f9af9a1db8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cc:06:6e:8e:dc:59:53:9c:0c:89:70:1a:bd:
47:db:d2:98:6c:68:6e:ab:3b:b0:9d:c4:5e:de:3f:
75:4f:82:b1:5f:ce:b2:40:d3:d0:21:05:2c:6d:26:
90:06:2d:96:b8:15:1c:40:1e:06:3b:b9:f3:5c:de:
bd:47:8b:00:6d:e2:34:2f:59:b5:88:e8:5e:f4:0e:
34:cb:8c:ce:59:dd:56:ec:00:2b:27:0f:4a:7d:e0:
ba:2d:f9:e0:35:ce:0d:06:60:67:32:19:d5:fb:2d:
c5:db:70:e1:7c:da:b2:bd:dc:0e:93:05:92:fe:aa:
4d:f4:f5:d9:cb:da:3b:05:06:1b:2c:26:63:4d:61:
d0:48:21:f7:e3:3f:c6:19:16:72:9c:54:58:03:39:
a2:65:b4:c6:b7:b6:e3:1c:38:f3:6e:09:54:a8:04:
97:c6:a3:91:a8:23:4c:e2:ae:4c:64:98:cd:e9:6f:
dc:a1:62:16:84:1a:3f:03:0c:28:98:dc:1a:3f:46:
9e:95:a7:3b:37:73:49:af:0a:aa:2d:3b:f0:9a:8c:
73:18:fc:55:9f:94:8c:68:94:24:82:15:fd:28:c4:
20:1f:38:d6:8e:6b:66:09:d1:6d:cc:3c:93:1a:6c:
c9:0e:5f:81:b7:59:d9:4f:94:59:9b:34:8a:15:01:
3d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:53:C6:F2:2E:9F:9F:5E:80:FD:B6:86:AC:1B:91:F9:AF:9A:1D:B8
X509v3 Authority Key Identifier:
keyid:50:56:71:2C:CF:A8:77:AB:B7:60:CB:77:E2:70:41:77:4C:B0:47:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFZxLM-od6u3YMt34nBBd0ywRzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/UFZxLM-od6u3YMt34nBBd0ywRzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/UFZxLM-od6u3YMt34nBBd0ywRzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:c3:9d:1d:81:0b:e6:19:cd:37:ac:e1:70:19:69:5d:32:e1:
0e:8b:76:01:6d:39:ea:9e:4d:b7:7d:52:15:7e:04:c9:e7:a7:
09:b9:ba:fb:c7:27:5b:44:f1:fb:71:cb:01:21:55:73:d4:b3:
20:94:47:b3:cd:8f:ff:bc:44:a5:8a:83:1b:b1:fa:69:67:62:
db:57:ac:13:8e:f0:6b:91:a9:3d:27:64:81:69:a3:92:9c:bf:
22:c1:37:db:99:24:01:5e:81:4d:d4:07:df:53:c3:b4:04:61:
6f:35:b1:8f:90:20:57:d1:49:53:8c:ce:fb:63:f1:e7:75:cc:
59:26:87:04:51:e1:d1:b5:56:c3:55:90:20:59:9f:9b:5f:fa:
9f:c8:9d:d5:d0:2a:53:39:f3:fe:22:e8:b0:8b:db:4d:29:3d:
f7:cd:f7:bf:ea:73:b9:d4:f0:42:a9:f9:16:0a:6e:27:ce:f5:
7f:a5:65:b2:3d:d3:b4:08:7c:ec:84:6a:da:cb:37:1a:ab:0e:
f7:60:0a:c8:f6:82:5a:87:71:d2:03:f5:ec:c3:10:12:f2:41:
ab:97:bc:a7:d6:a9:82:a6:3d:e7:a7:28:67:55:ea:10:25:d1:
67:78:97:8d:fd:06:67:ba:71:97:e6:c9:fb:f8:12:ce:da:04:
dd:00:50:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:02:23 2026 by rpki-client