This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/42888b-aa3f-4611-803d-2db44c91ae60/1/Uz39bMFAxoo9O7qGulfPO4umqbc.mft
File: Uz39bMFAxoo9O7qGulfPO4umqbc.mft (raw, json)
Hash identifier: /d5S6oY52GWcuCy99Jo5qu7KOdpRa6SX77bsse1/wQk=
Subject key identifier: 4F:E9:44:88:DE:0B:CE:46:F9:AF:53:40:C3:65:2F:75:23:92:76:83
Authority key identifier: 53:3D:FD:6C:C1:40:C6:8A:3D:3B:BA:86:BA:57:CF:3B:8B:A6:A9:B7
Certificate issuer: /CN=533dfd6cc140c68a3d3bba86ba57cf3b8ba6a9b7
Certificate serial: 019C43C758976CF977C6647BD470BB7B405A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uz39bMFAxoo9O7qGulfPO4umqbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/42888b-aa3f-4611-803d-2db44c91ae60/1/Uz39bMFAxoo9O7qGulfPO4umqbc.mft
Manifest number: 1357
Signing time: Mon 09 Feb 2026 19:01:03 +0000
Manifest this update: Mon 09 Feb 2026 19:01:03 +0000
Manifest next update: Tue 10 Feb 2026 19:01:03 +0000
Files and hashes: 1: Uz39bMFAxoo9O7qGulfPO4umqbc.crl (hash: nKDnmmvoPsU60N+u5Q8BormhvI4atNIjynCA39lkh8U=)
2: b5tJsnlnSE6Xaiye0wcx51G5Jwk.roa (hash: v9RBu20odxkvsGZtyEDAzqjRkkYtJXPNlrRBy/h0EkY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/42888b-aa3f-4611-803d-2db44c91ae60/1/Uz39bMFAxoo9O7qGulfPO4umqbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/42888b-aa3f-4611-803d-2db44c91ae60/1/Uz39bMFAxoo9O7qGulfPO4umqbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uz39bMFAxoo9O7qGulfPO4umqbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:c7:58:97:6c:f9:77:c6:64:7b:d4:70:bb:7b:40:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=533dfd6cc140c68a3d3bba86ba57cf3b8ba6a9b7
Validity
Not Before: Feb 9 19:01:03 2026 GMT
Not After : Feb 10 19:01:03 2026 GMT
Subject: CN=4fe94488de0bce46f9af5340c3652f7523927683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:96:aa:d3:c1:44:a0:1f:3e:55:08:bd:93:0e:
43:57:67:7e:ed:40:d9:53:c6:3a:ba:f1:c2:85:6d:
53:83:dd:23:9b:5b:f4:6a:b3:0b:e1:26:30:9d:19:
5a:3d:69:54:6b:98:16:5c:32:41:0d:eb:f3:84:40:
2d:60:02:16:0c:d3:80:72:8c:16:1b:8e:fe:61:05:
7d:d5:13:8c:88:3e:0b:6c:d5:82:c3:cb:95:b3:d5:
61:4f:48:5c:bf:5f:8e:6e:bf:99:5c:5d:88:fb:28:
f3:42:70:87:90:6a:27:46:44:9b:57:fb:47:ba:87:
5f:8e:72:37:30:e6:6e:fe:7c:49:11:e0:2e:84:b4:
e0:b1:40:09:a8:30:1e:e2:c1:c6:b0:26:0d:62:0d:
22:8a:3a:d3:b1:29:e0:a0:b0:9a:fa:4c:5f:3d:72:
2b:38:88:08:37:ab:60:ef:5a:9c:1f:48:15:7f:25:
aa:55:7e:e1:aa:e4:a3:3d:34:16:5f:ae:78:a4:d8:
1b:2b:c4:47:a9:bf:6c:82:66:11:d6:bd:54:ae:1f:
4f:21:36:3e:c4:5e:33:b2:07:a7:7b:45:65:c7:dc:
33:6d:e8:69:4a:a6:fa:3c:59:34:07:b5:23:d2:fd:
e0:34:02:f7:1c:45:81:42:f7:46:71:f9:c3:08:f6:
ed:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:E9:44:88:DE:0B:CE:46:F9:AF:53:40:C3:65:2F:75:23:92:76:83
X509v3 Authority Key Identifier:
keyid:53:3D:FD:6C:C1:40:C6:8A:3D:3B:BA:86:BA:57:CF:3B:8B:A6:A9:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uz39bMFAxoo9O7qGulfPO4umqbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/42888b-aa3f-4611-803d-2db44c91ae60/1/Uz39bMFAxoo9O7qGulfPO4umqbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/42888b-aa3f-4611-803d-2db44c91ae60/1/Uz39bMFAxoo9O7qGulfPO4umqbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:04:0b:8f:78:44:22:51:c0:80:15:48:b1:5a:b4:74:a4:43:
f4:af:9d:f6:7c:5e:b7:51:3d:2b:3a:3e:cc:5c:d9:87:1f:1a:
51:06:f0:4a:1b:33:ad:4e:bb:72:65:0a:6b:49:ae:fa:8d:b2:
27:02:5f:eb:88:a7:8c:26:e8:4d:6b:18:b5:67:02:46:58:52:
a5:21:4a:c9:7c:17:d0:8f:b9:06:46:c2:3f:70:09:69:b3:12:
f4:ed:fe:1e:da:ef:bc:b1:1c:a7:a7:3e:89:52:4e:65:cf:4f:
59:18:6c:8c:40:fd:5c:12:03:27:c2:e8:4c:08:f2:6e:77:b5:
e5:43:84:c5:7f:e1:f9:46:56:83:49:6d:39:1c:18:12:1d:bd:
0c:db:5c:35:54:13:0b:30:ab:67:99:22:e4:ab:fa:f5:8d:2f:
36:d1:ab:98:7b:df:0a:f3:16:86:28:32:dc:dd:bc:2b:31:dc:
e2:65:42:e1:67:b4:f9:8c:91:b4:cb:62:b4:ee:6d:39:4c:59:
86:3c:69:4e:b6:25:39:e9:39:5a:a1:30:f0:61:aa:29:cb:03:
94:4a:c9:f3:fa:3e:52:66:67:61:7a:8e:e9:11:be:85:89:0e:
85:b8:4e:75:f9:2e:e4:24:32:26:98:12:96:ec:e3:db:72:c2:
2c:93:56:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDx1iXbPl3xmR71HC7e0BaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzM2RmZDZjYzE0MGM2OGEzZDNiYmE4NmJhNTdjZjNiOGJh
NmE5YjcwHhcNMjYwMjA5MTkwMTAzWhcNMjYwMjEwMTkwMTAzWjAzMTEwLwYDVQQD
Eyg0ZmU5NDQ4OGRlMGJjZTQ2ZjlhZjUzNDBjMzY1MmY3NTIzOTI3NjgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZaq08FEoB8+VQi9kw5DV2d+7UDZ
U8Y6uvHChW1Tg90jm1v0arML4SYwnRlaPWlUa5gWXDJBDevzhEAtYAIWDNOAcowW
G47+YQV91ROMiD4LbNWCw8uVs9VhT0hcv1+Obr+ZXF2I+yjzQnCHkGonRkSbV/tH
uodfjnI3MOZu/nxJEeAuhLTgsUAJqDAe4sHGsCYNYg0iijrTsSngoLCa+kxfPXIr
OIgIN6tg71qcH0gVfyWqVX7hquSjPTQWX654pNgbK8RHqb9sgmYR1r1Urh9PITY+
xF4zsgene0Vlx9wzbehpSqb6PFk0B7Uj0v3gNAL3HEWBQvdGcfnDCPbtFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE/pRIjeC85G+a9TQMNlL3UjknaDMB8GA1UdIwQY
MBaAFFM9/WzBQMaKPTu6hrpXzzuLpqm3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXozOWJNRkF4b285TzdxR3VsZlBPNHVtcWJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi80Mjg4OGItYWEzZi00NjExLTgwM2Qt
MmRiNDRjOTFhZTYwLzEvVXozOWJNRkF4b285TzdxR3VsZlBPNHVtcWJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi80Mjg4OGItYWEzZi00NjExLTgwM2QtMmRiNDRjOTFhZTYw
LzEvVXozOWJNRkF4b285TzdxR3VsZlBPNHVtcWJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXgQLj3hE
IlHAgBVIsVq0dKRD9K+d9nxet1E9Kzo+zFzZhx8aUQbwShszrU67cmUKa0mu+o2y
JwJf64injCboTWsYtWcCRlhSpSFKyXwX0I+5BkbCP3AJabMS9O3+HtrvvLEcp6c+
iVJOZc9PWRhsjED9XBIDJ8LoTAjybne15UOExX/h+UZWg0ltORwYEh29DNtcNVQT
CzCrZ5ki5Kv69Y0vNtGrmHvfCvMWhigy3N28KzHc4mVC4We0+YyRtMtitO5tOUxZ
hjxpTrYlOek5WqEw8GGqKcsDlErJ8/o+UmZnYXqO6RG+hYkOhbhOdfku5CQyJpgS
luzj23LCLJNWCA==
-----END CERTIFICATE-----
Generated at Mon Feb 9 21:10:20 2026 by rpki-client