This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.mft
File: UquWU4x2TSMgXTMr4Te94EYvG4w.mft (raw, json)
Hash identifier: 8zWwU9gLESi8Esr+NVVM8P1vVkbgkoBaBNBBK88f+x8=
Subject key identifier: 25:D5:DA:6D:AC:EE:46:A7:C2:29:27:BB:95:FF:86:D1:D4:F9:46:4D
Authority key identifier: 52:AB:96:53:8C:76:4D:23:20:5D:33:2B:E1:37:BD:E0:46:2F:1B:8C
Certificate issuer: /CN=52ab96538c764d23205d332be137bde0462f1b8c
Certificate serial: 019C427CFDDCD2D8D3CB797586FB0D0F187E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UquWU4x2TSMgXTMr4Te94EYvG4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.mft
Manifest number: 1656
Signing time: Mon 09 Feb 2026 13:00:13 +0000
Manifest this update: Mon 09 Feb 2026 13:00:13 +0000
Manifest next update: Tue 10 Feb 2026 13:00:13 +0000
Files and hashes: 1: 02UbpjggiD2hCuBROuOMzSrBNes.roa (hash: oD92ZLodntYyRevIXaKbN61NlRaYP5OLaBNueXJo8rI=)
2: UquWU4x2TSMgXTMr4Te94EYvG4w.crl (hash: SVZ2qOHJdm3oLw7SN0SCDw8FVqU0HFv58QEd58ZD8ho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/UquWU4x2TSMgXTMr4Te94EYvG4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7c:fd:dc:d2:d8:d3:cb:79:75:86:fb:0d:0f:18:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52ab96538c764d23205d332be137bde0462f1b8c
Validity
Not Before: Feb 9 13:00:13 2026 GMT
Not After : Feb 10 13:00:13 2026 GMT
Subject: CN=25d5da6dacee46a7c22927bb95ff86d1d4f9464d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:be:89:1f:73:33:23:78:e2:fe:9a:43:15:89:
7c:96:17:72:9b:ac:eb:dd:ba:8f:a9:4d:db:1e:e1:
e9:97:e0:59:70:dc:c2:84:63:ae:8a:79:e9:20:c7:
52:a8:15:9b:cf:99:a9:7c:3e:14:e1:b4:3e:1d:b4:
bf:5c:16:28:39:c6:08:ee:22:29:ee:08:77:aa:6d:
22:1a:05:3f:30:11:c4:65:14:52:01:ad:04:ba:a3:
bd:0d:bb:07:37:42:2c:43:61:27:ca:70:e7:5a:1b:
b6:69:ff:b6:e6:6a:e4:8b:7f:b3:48:a3:50:82:97:
95:a0:57:9b:ab:17:87:8b:8f:bf:95:b4:bb:fa:e7:
fc:12:1e:de:4c:b5:f1:49:fb:a4:1b:0d:36:01:3d:
75:23:a6:ee:05:67:61:4e:39:ae:e2:b0:9b:49:9d:
33:2f:42:d3:01:86:2c:1f:61:b5:9b:d1:82:18:8b:
38:3e:6a:ee:7b:e2:7f:67:09:b3:6d:12:08:3f:39:
40:eb:5a:74:03:c6:9c:85:af:d6:f7:f8:a4:aa:e0:
3e:c7:2f:f7:09:2b:ee:08:c9:b7:5d:00:0c:77:20:
64:06:35:df:bd:79:6d:18:eb:29:4d:2d:2c:57:86:
97:60:d4:d2:fc:8a:45:fe:e5:68:4b:14:0e:b7:6f:
5a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:D5:DA:6D:AC:EE:46:A7:C2:29:27:BB:95:FF:86:D1:D4:F9:46:4D
X509v3 Authority Key Identifier:
keyid:52:AB:96:53:8C:76:4D:23:20:5D:33:2B:E1:37:BD:E0:46:2F:1B:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UquWU4x2TSMgXTMr4Te94EYvG4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/19b812-b1a4-492a-8b45-38ad4179ff29/1/UquWU4x2TSMgXTMr4Te94EYvG4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:9d:a6:95:0b:f8:4c:4f:76:52:ca:40:38:90:6d:ab:00:ab:
7a:50:52:07:47:84:e0:64:d0:e9:25:ed:63:b2:ff:d1:3f:06:
3c:34:78:09:63:84:37:22:a9:bd:67:76:7a:1c:f9:23:04:e3:
8e:1d:d6:31:eb:4d:34:e9:a3:f5:da:4a:a6:98:2d:fa:80:69:
4b:ed:2f:57:6c:fe:78:10:13:09:8d:71:5c:fa:11:aa:09:e9:
16:eb:c7:50:a1:85:37:f5:ea:4f:f0:f3:20:7f:dd:ed:b6:bf:
7d:ce:d7:f1:70:01:5f:6b:e7:be:6b:7d:48:66:c1:a7:67:b5:
19:e1:2b:48:0a:1f:d2:77:2c:69:96:cb:97:b3:6b:2f:54:5b:
23:a8:8f:a9:7c:fb:eb:b6:b3:d0:ec:33:f2:ea:0c:70:2e:3f:
98:42:a3:5a:2b:ef:f4:3c:66:13:76:98:5f:7d:b1:fb:ea:65:
2d:f7:f6:0c:bd:62:a6:aa:35:e2:fb:53:41:a4:1f:a6:39:4d:
99:43:33:aa:c7:ad:b4:c3:c7:09:30:40:12:54:8b:d3:a8:25:
3a:33:df:7e:84:d6:97:13:09:e5:b9:da:a7:d9:4c:e3:c9:3c:
24:b7:55:58:ca:67:de:01:cb:a4:f8:51:60:bd:9f:e3:46:dc:
a5:97:f6:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:56:41 2026 by rpki-client