This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.mft
File: 0UTELhyjA3u29UHx4UBPZiw2mTg.mft (raw, json)
Hash identifier: i0roy6iQzDyif34t+Ta++cuWL6RDBHS/Oc9bK86DTa0=
Subject key identifier: D3:71:10:7C:73:4E:56:7A:5F:54:75:CF:41:58:4E:24:A6:CE:29:9C
Authority key identifier: D1:44:C4:2E:1C:A3:03:7B:B6:F5:41:F1:E1:40:4F:66:2C:36:99:38
Certificate issuer: /CN=d144c42e1ca3037bb6f541f1e1404f662c369938
Certificate serial: 019C427D49D3BB2247EF17C0888ED40951CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0UTELhyjA3u29UHx4UBPZiw2mTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.mft
Manifest number: 0E8B
Signing time: Mon 09 Feb 2026 13:00:32 +0000
Manifest this update: Mon 09 Feb 2026 13:00:32 +0000
Manifest next update: Tue 10 Feb 2026 13:00:32 +0000
Files and hashes: 1: 0UTELhyjA3u29UHx4UBPZiw2mTg.crl (hash: yLeUCP47YGHUs1ZmzQxnrurLpDE3Nds6Znb3WqVyZ1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0UTELhyjA3u29UHx4UBPZiw2mTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7d:49:d3:bb:22:47:ef:17:c0:88:8e:d4:09:51:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d144c42e1ca3037bb6f541f1e1404f662c369938
Validity
Not Before: Feb 9 13:00:32 2026 GMT
Not After : Feb 10 13:00:32 2026 GMT
Subject: CN=d371107c734e567a5f5475cf41584e24a6ce299c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0b:93:97:c8:c9:f5:56:7a:86:d0:87:ca:96:
68:cd:90:b4:80:e3:15:f1:46:7c:2b:69:c0:5d:fd:
cd:78:16:c2:5a:ed:27:69:8a:0b:9f:9f:a7:fa:ff:
f1:02:6d:2d:02:59:fb:15:82:8c:5c:6c:d8:64:1e:
4d:91:5a:7a:7f:97:51:d8:54:98:a3:e8:db:49:e1:
8a:4b:de:1a:15:f4:76:2c:6d:4f:69:2e:98:66:b0:
f3:3b:06:90:cc:63:a3:94:36:68:3b:b4:f1:27:cc:
26:33:99:fe:4e:f3:ac:24:35:1e:de:04:8b:25:f9:
47:3c:f4:52:23:34:2f:70:e3:f5:64:d0:03:ea:32:
44:58:17:dc:57:0d:87:68:25:d3:a5:99:31:59:7a:
f6:ce:71:dc:af:e7:7e:eb:19:04:2a:27:a6:38:a3:
f3:0c:ff:cd:0d:98:41:84:c0:e6:2e:e9:d8:a0:2c:
fa:eb:69:75:55:13:ac:05:cb:3e:44:8d:05:29:e2:
1c:22:43:54:0d:fe:e9:89:01:f7:03:78:e9:3f:d1:
d4:eb:f6:9a:32:0f:fa:6d:a8:6c:ce:5d:e8:f1:14:
99:e7:f3:8c:e7:26:e2:a3:d8:0e:b5:e1:b2:a5:54:
36:0f:bb:5d:c0:66:ee:ce:f5:e2:d2:90:57:8e:59:
04:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:71:10:7C:73:4E:56:7A:5F:54:75:CF:41:58:4E:24:A6:CE:29:9C
X509v3 Authority Key Identifier:
keyid:D1:44:C4:2E:1C:A3:03:7B:B6:F5:41:F1:E1:40:4F:66:2C:36:99:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0UTELhyjA3u29UHx4UBPZiw2mTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:7f:dc:30:cf:41:31:42:fd:b6:7a:49:23:bd:6f:d7:86:8d:
6c:ad:12:d2:7e:52:58:8c:11:0e:4c:75:48:76:ae:42:00:cf:
a9:2c:7e:99:19:f4:a9:cc:10:71:4c:e2:b0:02:94:63:a5:9a:
79:9d:24:d8:cd:d6:f8:8c:43:78:8c:03:cd:a0:dd:61:73:90:
c5:e2:bd:34:77:7f:29:ab:58:02:be:c8:d4:ad:2c:bd:26:5d:
e2:53:8d:48:70:57:ac:58:b2:b7:b5:89:32:f9:59:ea:fb:4c:
dc:5d:e2:8a:db:60:1d:80:b0:bb:09:ad:e3:d8:63:ce:8b:8f:
31:c3:de:f3:21:73:93:c3:d7:33:e3:31:ec:1e:3f:b9:33:cb:
18:d7:ea:44:71:9c:de:6e:7b:2a:79:42:85:c4:3b:d5:b3:20:
5e:1f:61:f2:14:97:b1:81:8c:e7:80:43:24:20:45:e6:46:c3:
fa:06:dc:f5:dd:bd:67:da:2b:e9:2c:40:98:6f:f7:76:80:2e:
cf:2a:6f:2f:f6:68:5c:1f:d8:52:16:0e:46:3d:00:07:d7:2e:
67:b9:bd:2d:cd:b0:23:b4:ba:8c:d1:a6:f7:33:85:d9:ba:e7:
6a:b1:a4:ab:cc:e5:e9:d5:00:ed:9b:fc:f4:00:df:67:f5:c0:
b9:5c:d5:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:07:24 2026 by rpki-client