This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/77a9f1-f1fb-485f-923f-7c3789405bd6/1/U170D69INDOz4zaY5NHulfPJS-w.mft
File: U170D69INDOz4zaY5NHulfPJS-w.mft (raw, json)
Hash identifier: nLZ4/AG6ia1EPWKINFxCStH2T04r+NrqZ+a6krWks+I=
Subject key identifier: F5:AE:9B:E9:7C:2F:39:05:5C:3F:B2:D5:6D:EA:74:A5:52:C6:15:90
Authority key identifier: 53:5E:F4:0F:AF:48:34:33:B3:E3:36:98:E4:D1:EE:95:F3:C9:4B:EC
Certificate issuer: /CN=535ef40faf483433b3e33698e4d1ee95f3c94bec
Certificate serial: 019C446C7EC474F48D2E0E8571B30FD33066
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U170D69INDOz4zaY5NHulfPJS-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/77a9f1-f1fb-485f-923f-7c3789405bd6/1/U170D69INDOz4zaY5NHulfPJS-w.mft
Manifest number: 1810
Signing time: Mon 09 Feb 2026 22:01:26 +0000
Manifest this update: Mon 09 Feb 2026 22:01:26 +0000
Manifest next update: Tue 10 Feb 2026 22:01:26 +0000
Files and hashes: 1: QKjP2N8r4nDoEM9cPJ71JOp2ddU.roa (hash: W/BKNtYHRWaJtO1Nu7XJOX8Q45kPzU4r+lT7o1huThQ=)
2: U170D69INDOz4zaY5NHulfPJS-w.crl (hash: t9qdX68evwJCEXWQU5qWi6/H05VL/wCuxZOAMSh6pq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/77a9f1-f1fb-485f-923f-7c3789405bd6/1/U170D69INDOz4zaY5NHulfPJS-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/77a9f1-f1fb-485f-923f-7c3789405bd6/1/U170D69INDOz4zaY5NHulfPJS-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/U170D69INDOz4zaY5NHulfPJS-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:44:6c:7e:c4:74:f4:8d:2e:0e:85:71:b3:0f:d3:30:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535ef40faf483433b3e33698e4d1ee95f3c94bec
Validity
Not Before: Feb 9 22:01:26 2026 GMT
Not After : Feb 10 22:01:26 2026 GMT
Subject: CN=f5ae9be97c2f39055c3fb2d56dea74a552c61590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:be:1b:77:6f:00:d9:d5:67:ad:da:d4:46:77:
1b:22:77:44:24:e4:f4:78:51:95:d5:c0:45:b7:c0:
8b:44:cf:77:a9:b9:c4:b6:0a:e2:fe:c0:4f:36:24:
15:ec:25:7a:c7:ce:cf:62:b7:33:94:fa:92:51:19:
a1:a9:25:da:06:9e:03:0d:ac:e9:a5:7b:9f:34:35:
9f:92:21:ed:c2:6a:c0:f4:d6:05:0c:0e:92:f2:0d:
73:4c:84:46:02:91:fa:6e:5d:df:8b:1c:47:02:7d:
ad:d4:34:d6:73:17:8d:df:5c:4e:5e:d4:df:ef:e4:
33:96:ba:b4:d7:a1:bb:d6:90:5e:c5:5e:3c:5b:ce:
e5:24:7d:29:fc:d9:3e:36:f9:ff:4f:fb:5f:46:8a:
ee:a0:17:62:68:6e:c5:bc:c7:3d:9f:16:cc:1c:b2:
2d:b8:6a:85:3d:15:81:10:11:3d:ca:c0:87:69:e4:
1a:69:01:0d:1e:6b:de:14:29:4d:7d:01:f6:b0:57:
6b:0e:64:f5:4c:31:0c:1c:d6:71:4a:f3:7c:88:90:
05:fd:73:b5:19:39:00:16:25:60:4a:29:c3:07:cd:
b4:de:8c:d2:b5:ca:2b:12:cb:5f:36:5d:e4:81:f1:
80:3a:ea:39:6a:a6:f9:88:e2:4e:31:08:26:5c:27:
d3:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:AE:9B:E9:7C:2F:39:05:5C:3F:B2:D5:6D:EA:74:A5:52:C6:15:90
X509v3 Authority Key Identifier:
keyid:53:5E:F4:0F:AF:48:34:33:B3:E3:36:98:E4:D1:EE:95:F3:C9:4B:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U170D69INDOz4zaY5NHulfPJS-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/77a9f1-f1fb-485f-923f-7c3789405bd6/1/U170D69INDOz4zaY5NHulfPJS-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/77a9f1-f1fb-485f-923f-7c3789405bd6/1/U170D69INDOz4zaY5NHulfPJS-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:54:db:f6:47:7f:ec:6e:cf:57:66:84:c8:39:d7:5a:88:5a:
71:b7:30:10:f0:c0:43:89:74:a0:23:4b:27:cc:21:75:e1:1b:
25:eb:1f:37:46:2f:3e:b7:83:2a:96:67:49:bb:54:77:8b:73:
42:f3:84:be:96:49:8f:15:9c:f2:64:9a:e8:f8:ce:b3:8e:33:
85:18:0c:b1:f1:c6:f5:d3:48:72:d3:7d:69:37:9f:bc:ec:c9:
76:b4:40:de:6f:56:e0:18:99:25:58:31:51:4a:8b:7e:cb:4a:
fc:84:e7:bd:d7:7a:e7:62:19:8d:ac:b0:05:30:7b:05:71:8c:
13:6b:61:9e:cb:b9:8b:b7:63:62:b9:2c:f9:36:8b:1c:7c:bb:
6d:da:13:d7:7f:9c:f5:26:ac:7c:f0:1e:02:cd:d2:60:a6:8b:
8c:eb:b9:3c:51:30:bc:43:57:1a:8f:33:c9:5a:e3:64:ac:25:
79:9f:cf:8e:cd:f0:86:c6:f1:5e:56:1d:ef:d9:82:7a:c0:1b:
6a:0f:20:82:40:31:f9:6c:0b:f3:3d:e7:72:a2:71:ea:98:2f:
01:e0:a8:6c:24:56:45:e3:da:80:29:1f:b9:68:5e:2e:24:1d:
06:a6:cf:46:d2:8e:c7:5a:a1:9e:cd:f4:94:76:74:04:9f:c2:
40:bd:70:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:22:31 2026 by rpki-client