This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ff0a7d-dccd-47ce-b21d-14809c938b76/1/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.mft
File: UJyPMqH0KB9xRjiV1UPHF5z3-Vk.mft (raw, json)
Hash identifier: trrdJYcunu3Qftm4Ic9BWkI/XaeAzcUAhCHDJ+qo9rU=
Subject key identifier: 4D:53:80:4E:63:85:75:68:F4:3C:F9:33:FA:F3:AE:83:52:16:7D:FB
Authority key identifier: 50:9C:8F:32:A1:F4:28:1F:71:46:38:95:D5:43:C7:17:9C:F7:F9:59
Certificate issuer: /CN=509c8f32a1f4281f71463895d543c7179cf7f959
Certificate serial: 019C42463F25C1554D0A1A241C4A1FFC1899
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/ff0a7d-dccd-47ce-b21d-14809c938b76/1/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.mft
Manifest number: 1805
Signing time: Mon 09 Feb 2026 12:00:25 +0000
Manifest this update: Mon 09 Feb 2026 12:00:25 +0000
Manifest next update: Tue 10 Feb 2026 12:00:25 +0000
Files and hashes: 1: UJyPMqH0KB9xRjiV1UPHF5z3-Vk.crl (hash: wExBeiSSk64OwSfpk0+RIgeWY418M7nGNtAFMqiJtDo=)
2: hEpkfnbvGtcIxWjUlVdPllfE-cY.roa (hash: QTunkkr+hN3fQscxIyK1dz5yS0xr1F0v7DcnxHiOT/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/ff0a7d-dccd-47ce-b21d-14809c938b76/1/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/ff0a7d-dccd-47ce-b21d-14809c938b76/1/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.mft
rsync://rpki.ripe.net/repository/DEFAULT/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 12:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:46:3f:25:c1:55:4d:0a:1a:24:1c:4a:1f:fc:18:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=509c8f32a1f4281f71463895d543c7179cf7f959
Validity
Not Before: Feb 9 12:00:25 2026 GMT
Not After : Feb 10 12:00:25 2026 GMT
Subject: CN=4d53804e63857568f43cf933faf3ae8352167dfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2b:f8:a8:c8:de:f9:ad:af:44:52:4c:bb:39:
9f:07:df:dc:33:13:4e:10:9e:89:06:6a:bb:87:7e:
2e:b8:f6:68:d8:2b:da:4a:f1:d8:ed:49:25:dc:79:
06:ce:ba:33:08:94:60:61:9b:20:e8:3e:e9:f1:fb:
4d:30:7a:66:6d:a2:c7:91:b1:28:d8:c8:13:23:7e:
2e:49:7e:e5:12:6c:33:fb:30:9d:28:99:ae:dd:85:
fc:0a:49:09:7a:27:ca:e1:24:e7:92:32:a0:d8:6c:
c6:71:54:26:7c:a7:40:db:9b:18:de:85:2d:15:f9:
d1:66:59:a2:f5:24:97:07:1e:35:04:20:94:e2:2e:
ed:fc:08:30:2b:ba:3b:a3:b0:37:64:46:f0:ec:86:
40:54:33:57:0d:03:3a:16:95:e2:ba:bf:29:3e:38:
23:0f:22:8b:57:37:7f:0a:67:60:f1:9d:b4:8c:c7:
95:1e:53:8b:8e:ff:b2:8a:8d:02:04:26:5b:a3:df:
26:e2:3f:33:a0:d1:d3:e8:16:35:be:42:fd:db:05:
c9:14:96:90:71:1d:46:9a:02:93:0e:b5:1e:58:f7:
24:1b:9b:19:3d:e1:44:d1:ae:77:46:79:4c:dd:fd:
80:3a:0d:0e:0b:12:ac:d5:83:d8:6d:4e:ba:4a:7c:
f8:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:53:80:4E:63:85:75:68:F4:3C:F9:33:FA:F3:AE:83:52:16:7D:FB
X509v3 Authority Key Identifier:
keyid:50:9C:8F:32:A1:F4:28:1F:71:46:38:95:D5:43:C7:17:9C:F7:F9:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ff0a7d-dccd-47ce-b21d-14809c938b76/1/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ff0a7d-dccd-47ce-b21d-14809c938b76/1/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:0e:cf:5a:e2:90:2a:64:d7:3c:ac:53:c9:10:ef:17:83:ab:
c1:2e:f7:b9:30:a5:4b:08:20:6a:a2:59:7d:8a:97:8f:56:e2:
da:8f:bb:fb:c3:fd:ea:3f:68:f7:8a:47:da:99:47:2f:73:65:
8d:51:d7:1a:91:db:f3:78:00:37:cd:ba:ed:2f:ce:a2:0e:c9:
6d:ef:b1:15:92:f5:20:c0:67:70:4f:ee:59:0c:46:6a:28:42:
9d:92:83:2a:46:a8:44:da:49:d4:0a:ef:ce:a8:b8:a6:a1:4e:
d4:05:1e:9c:ea:06:ca:7c:2a:12:e8:69:40:e2:74:38:33:fa:
63:10:10:6d:4e:b4:a9:b3:72:e0:30:e4:80:ab:3f:dc:d5:9d:
5e:a7:22:1a:3f:8c:83:e0:0b:f8:a2:72:94:dc:66:bf:f6:0c:
1a:18:39:3b:7e:2b:af:d1:b1:c0:3e:71:61:f6:36:bb:14:46:
b2:91:30:8f:5d:77:53:7e:d9:a2:72:77:1c:57:89:b7:ba:b2:
92:9e:23:0b:90:46:4e:0b:80:8b:66:6e:83:8f:57:5a:66:28:
75:8c:ea:1b:c1:c2:4c:7e:24:c6:31:39:ac:b5:4e:44:87:d7:
27:11:40:d2:b6:87:6a:1a:1b:ce:df:2b:e7:a0:66:50:71:31:
77:cf:89:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:30:49 2026 by rpki-client