This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f8b381-692a-4830-8d7d-21bf708f3cad/1/Uylu4zFT725pONV6KhMsHlJtxDA.mft
File: Uylu4zFT725pONV6KhMsHlJtxDA.mft (raw, json)
Hash identifier: LmGtqPKEhg9tPyjfoppMCfXtBZE7gGdj3zC66FsYvGM=
Subject key identifier: 9D:24:FE:D6:95:21:35:A6:E9:D5:18:3E:90:77:0B:2C:7A:24:E6:45
Authority key identifier: 53:29:6E:E3:31:53:EF:6E:69:38:D5:7A:2A:13:2C:1E:52:6D:C4:30
Certificate issuer: /CN=53296ee33153ef6e6938d57a2a132c1e526dc430
Certificate serial: 019C4322EABF0D962A26E773FE0DD1ECB3D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uylu4zFT725pONV6KhMsHlJtxDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f8b381-692a-4830-8d7d-21bf708f3cad/1/Uylu4zFT725pONV6KhMsHlJtxDA.mft
Manifest number: 16E6
Signing time: Mon 09 Feb 2026 16:01:27 +0000
Manifest this update: Mon 09 Feb 2026 16:01:27 +0000
Manifest next update: Tue 10 Feb 2026 16:01:27 +0000
Files and hashes: 1: MGJC7B1Ba42lx5xp2OR9KB_r3CM.roa (hash: 3dEWz8p/HyJK1M8zb2CLGf2EvdGWCjzIW7fX7f0DY+A=)
2: Uylu4zFT725pONV6KhMsHlJtxDA.crl (hash: h6fdOyiPRRSnCsmftrV/pc+hz5wcrAkquZs5BJKjCc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f8b381-692a-4830-8d7d-21bf708f3cad/1/Uylu4zFT725pONV6KhMsHlJtxDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/f8b381-692a-4830-8d7d-21bf708f3cad/1/Uylu4zFT725pONV6KhMsHlJtxDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uylu4zFT725pONV6KhMsHlJtxDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:22:ea:bf:0d:96:2a:26:e7:73:fe:0d:d1:ec:b3:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53296ee33153ef6e6938d57a2a132c1e526dc430
Validity
Not Before: Feb 9 16:01:27 2026 GMT
Not After : Feb 10 16:01:27 2026 GMT
Subject: CN=9d24fed6952135a6e9d5183e90770b2c7a24e645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c3:31:ea:ef:58:00:20:74:38:c4:1c:05:c7:
dd:d3:7e:9f:ce:ca:e5:f6:aa:5c:4b:80:2a:bb:dd:
aa:e0:13:23:46:dc:a9:4e:c0:63:48:49:22:7e:11:
dd:f7:00:29:89:43:f8:44:55:ee:a7:aa:55:f2:36:
06:81:6e:6d:b0:65:9c:7b:34:e3:25:05:25:3f:28:
ea:52:1c:a0:39:ca:91:cd:33:5b:46:a8:55:a2:2b:
8d:8e:47:37:e4:73:d9:5d:73:c9:b6:b0:cc:68:09:
83:bd:5f:3c:48:9d:67:e5:a1:bf:68:eb:ee:95:d1:
41:02:a8:fe:85:0e:06:f4:93:66:d3:7d:aa:68:1d:
18:67:68:be:fc:3a:aa:16:ba:51:7c:76:41:02:a6:
34:79:25:35:7d:75:36:86:51:c8:b7:f9:10:09:e6:
c9:48:1e:94:5d:5f:d0:ce:44:85:12:66:3a:c9:4b:
03:b2:0a:23:ae:38:70:37:ff:b7:f5:61:86:f5:f0:
2c:0e:f5:3e:64:c1:8a:a7:fb:46:c7:7d:36:69:2b:
c4:b6:cd:e5:9d:44:ff:38:c5:92:2c:58:f2:0f:8a:
65:5f:8b:49:ad:6e:76:5e:67:a8:5c:2f:6e:ad:11:
e3:6d:b6:7a:79:fa:1f:87:0f:de:82:43:32:8f:7e:
a9:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:24:FE:D6:95:21:35:A6:E9:D5:18:3E:90:77:0B:2C:7A:24:E6:45
X509v3 Authority Key Identifier:
keyid:53:29:6E:E3:31:53:EF:6E:69:38:D5:7A:2A:13:2C:1E:52:6D:C4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uylu4zFT725pONV6KhMsHlJtxDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f8b381-692a-4830-8d7d-21bf708f3cad/1/Uylu4zFT725pONV6KhMsHlJtxDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f8b381-692a-4830-8d7d-21bf708f3cad/1/Uylu4zFT725pONV6KhMsHlJtxDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:17:56:54:2f:45:41:01:f8:c0:24:e3:75:45:d2:89:0d:70:
78:b5:02:32:f5:bd:d6:56:c6:ea:45:54:0e:fa:75:25:1f:c5:
ff:43:4e:30:2f:df:0d:43:73:d6:6c:5d:d9:18:b1:70:5f:55:
d1:ae:05:8e:b7:82:33:b6:06:0b:6d:13:36:0d:70:ac:52:db:
d1:7d:c7:41:d5:ce:f9:f2:f9:6a:3c:93:e7:3d:ef:e8:63:70:
b0:6e:e2:05:4e:2a:fb:57:45:c2:53:53:ed:71:2d:cb:00:25:
6b:75:8b:2a:31:8d:35:6a:f5:70:cd:6d:4d:3e:6f:2f:c7:b6:
1c:ea:64:02:bc:89:e7:3c:00:ab:e5:d8:87:27:1f:5e:ab:c9:
7e:89:58:06:9d:d4:ce:9e:87:8d:c5:8b:ae:2a:80:37:be:4e:
52:f5:2a:f1:26:cc:a3:46:63:fb:bb:7b:43:1a:bb:ae:6b:85:
01:66:46:28:c6:83:ff:eb:51:eb:6c:be:57:90:bf:b6:35:76:
22:fe:02:38:6d:75:ee:25:16:3e:75:4d:8c:c5:1b:ef:dd:29:
64:76:9e:8f:59:08:e6:29:6b:53:82:41:76:76:c3:8a:99:8b:
29:ef:8a:90:dc:c8:74:b0:6e:24:a8:cc:52:1c:11:00:7f:d9:
1c:c3:8e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:56:14 2026 by rpki-client