This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/18b690-c5ae-4fb4-8bf8-63a0be6a8e5f/1/rujl3-xoOuXxoOvg-5b6JWswR2I.mft
File: rujl3-xoOuXxoOvg-5b6JWswR2I.mft (raw, json)
Hash identifier: Rz31KpGJ5wiQXrDMqHLYVakXtKj6uKzsYJkvy2gTwOU=
Subject key identifier: BE:D5:27:E0:18:A2:90:25:09:77:81:A3:64:0A:22:C1:8A:80:06:19
Authority key identifier: AE:E8:E5:DF:EC:68:3A:E5:F1:A0:EB:E0:FB:96:FA:25:6B:30:47:62
Certificate issuer: /CN=aee8e5dfec683ae5f1a0ebe0fb96fa256b304762
Certificate serial: 019C420F4CDD09EA051151FE157BACCDD651
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rujl3-xoOuXxoOvg-5b6JWswR2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/18b690-c5ae-4fb4-8bf8-63a0be6a8e5f/1/rujl3-xoOuXxoOvg-5b6JWswR2I.mft
Manifest number: 10CD
Signing time: Mon 09 Feb 2026 11:00:24 +0000
Manifest this update: Mon 09 Feb 2026 11:00:24 +0000
Manifest next update: Tue 10 Feb 2026 11:00:24 +0000
Files and hashes: 1: rujl3-xoOuXxoOvg-5b6JWswR2I.crl (hash: CilNPSkHuOxf8f1Rba91+kyONlXDvmBDccvvmKXTJtM=)
2: xQH4kxn8xBsyaqhIlNPO4xn-4HA.roa (hash: 4c/eyqsX/8YhnNDX8tQhJuM4UkjqguMRdc8B5oNvgSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/18b690-c5ae-4fb4-8bf8-63a0be6a8e5f/1/rujl3-xoOuXxoOvg-5b6JWswR2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/18b690-c5ae-4fb4-8bf8-63a0be6a8e5f/1/rujl3-xoOuXxoOvg-5b6JWswR2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/rujl3-xoOuXxoOvg-5b6JWswR2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:0f:4c:dd:09:ea:05:11:51:fe:15:7b:ac:cd:d6:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aee8e5dfec683ae5f1a0ebe0fb96fa256b304762
Validity
Not Before: Feb 9 11:00:24 2026 GMT
Not After : Feb 10 11:00:24 2026 GMT
Subject: CN=bed527e018a29025097781a3640a22c18a800619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:33:4a:ed:fd:1c:1e:54:c5:58:4d:f9:65:93:
2b:20:de:5a:2c:62:ab:2f:69:0a:aa:89:81:5b:eb:
58:24:85:66:cc:2d:a6:25:8c:86:3a:59:2f:35:4c:
0a:e2:15:32:8b:17:68:cf:49:d7:21:43:6e:9e:ab:
48:fb:f2:1d:c1:00:cd:97:a8:b4:40:11:a9:0d:f2:
e7:00:fb:c3:26:5f:69:8a:c2:09:1c:ab:be:38:12:
2f:03:bd:34:9e:5e:0f:fa:3b:83:57:0b:e1:60:fa:
81:9d:4a:00:c9:58:01:77:e4:06:0b:06:96:63:a0:
f2:03:fe:02:e8:15:30:9e:29:e7:90:ad:64:6c:f7:
99:8c:6f:0c:2e:30:83:1d:1f:c7:f5:1e:dc:62:64:
d7:19:82:60:e9:d3:ef:77:f8:0a:ba:6c:fc:6f:8a:
f6:48:32:bf:37:ee:93:84:19:76:3a:ba:54:b0:26:
ba:7d:8d:6e:b2:f9:6e:d5:73:f1:f4:fc:e0:35:50:
35:93:b1:4e:ca:b3:50:ad:a3:7d:16:8d:ee:ef:97:
31:02:d2:5a:40:82:91:6f:17:1e:d3:66:c9:fa:dc:
4f:a7:0a:3c:cb:ff:c0:ea:a4:7d:74:14:b5:64:2d:
f9:40:eb:4e:49:5b:bf:9b:14:b4:41:58:c2:57:06:
8a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:D5:27:E0:18:A2:90:25:09:77:81:A3:64:0A:22:C1:8A:80:06:19
X509v3 Authority Key Identifier:
keyid:AE:E8:E5:DF:EC:68:3A:E5:F1:A0:EB:E0:FB:96:FA:25:6B:30:47:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rujl3-xoOuXxoOvg-5b6JWswR2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/18b690-c5ae-4fb4-8bf8-63a0be6a8e5f/1/rujl3-xoOuXxoOvg-5b6JWswR2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/18b690-c5ae-4fb4-8bf8-63a0be6a8e5f/1/rujl3-xoOuXxoOvg-5b6JWswR2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:11:16:99:93:e6:41:22:f6:e1:8d:d4:13:6c:6c:d0:26:d2:
e5:a1:a8:79:72:a2:af:41:4b:e3:cb:82:4b:47:b4:57:c6:c0:
61:75:d9:18:70:c8:45:23:98:e8:29:1e:3a:a0:41:8b:32:df:
af:44:5b:d2:a6:80:d0:be:19:a6:09:ef:c3:5d:af:12:ea:48:
de:60:61:93:07:47:e5:80:60:29:01:78:26:c1:69:b4:f1:51:
dc:b6:f0:e7:19:17:dd:2e:04:2a:4f:e8:10:9b:3f:db:f3:a6:
a7:5c:03:61:84:15:d1:12:c9:88:50:99:d6:5d:3d:4d:e8:39:
14:dc:14:8e:08:8b:d3:1b:3e:a8:4c:62:3a:c4:69:21:5b:be:
d7:5c:bd:fe:81:73:b2:3c:a8:26:c7:0c:b5:dd:f6:41:9d:b2:
33:a6:18:f0:cd:b9:cb:0c:24:02:f8:db:05:74:fa:96:a8:20:
c8:1d:93:b3:b1:7d:2d:a5:ad:6f:4b:20:bf:09:6a:79:48:41:
b9:62:51:59:83:f6:c2:ad:1d:98:7b:59:19:9f:74:05:85:80:
30:36:86:ab:4e:70:6a:a0:09:51:88:5d:48:e2:a9:02:c6:ae:
49:ff:92:32:3a:50:a5:d2:d3:b7:9a:6f:d2:8c:79:d6:24:00:
b3:61:5e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:06:30 2026 by rpki-client