This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/ab3219-c64b-470e-8341-3a12027400e6/1/ukQzhlmFp7teJpw3lK5vFkz8Lds.mft
File: ukQzhlmFp7teJpw3lK5vFkz8Lds.mft (raw, json)
Hash identifier: jew6KYK5q+Tfpv0FaWD9yNs+PnaVwbpXkhZ9CebbURI=
Subject key identifier: A3:49:33:B3:94:E2:0A:D7:CB:83:5D:EF:9D:AE:99:BB:22:2A:05:7C
Authority key identifier: BA:44:33:86:59:85:A7:BB:5E:26:9C:37:94:AE:6F:16:4C:FC:2D:DB
Certificate issuer: /CN=ba4433865985a7bb5e269c3794ae6f164cfc2ddb
Certificate serial: 019C457E6A1AE2B8CB0DDB918EB3FC7A7FB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ukQzhlmFp7teJpw3lK5vFkz8Lds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/ab3219-c64b-470e-8341-3a12027400e6/1/ukQzhlmFp7teJpw3lK5vFkz8Lds.mft
Manifest number: 07F1
Signing time: Tue 10 Feb 2026 03:00:38 +0000
Manifest this update: Tue 10 Feb 2026 03:00:38 +0000
Manifest next update: Wed 11 Feb 2026 03:00:38 +0000
Files and hashes: 1: UfxnZEwkQdyHN4gibAtk_ce1zeI.roa (hash: Bl9GgITeZ3znWiaIE2fwC3TQwsJfWdhy5zENaMdMELI=)
2: ukQzhlmFp7teJpw3lK5vFkz8Lds.crl (hash: CCgtK11/U6PdpVFTx/Q/tQZMmHwQ3xIrO7qwqPAxpr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/ab3219-c64b-470e-8341-3a12027400e6/1/ukQzhlmFp7teJpw3lK5vFkz8Lds.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/ab3219-c64b-470e-8341-3a12027400e6/1/ukQzhlmFp7teJpw3lK5vFkz8Lds.mft
rsync://rpki.ripe.net/repository/DEFAULT/ukQzhlmFp7teJpw3lK5vFkz8Lds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Feb 2026 00:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:45:7e:6a:1a:e2:b8:cb:0d:db:91:8e:b3:fc:7a:7f:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba4433865985a7bb5e269c3794ae6f164cfc2ddb
Validity
Not Before: Feb 10 03:00:38 2026 GMT
Not After : Feb 11 03:00:38 2026 GMT
Subject: CN=a34933b394e20ad7cb835def9dae99bb222a057c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:6d:cf:58:0e:b7:f4:c5:b3:6e:fe:39:97:27:
ee:88:b0:27:9a:f9:5a:82:61:c1:f4:26:a5:26:69:
f5:f9:d3:8f:b5:9a:c6:b5:c3:3b:03:2b:21:98:bc:
19:b1:85:e9:3f:a9:65:b5:30:40:24:1f:43:32:ec:
ae:4a:63:6d:f0:bc:55:70:ba:e1:c1:bc:ef:a3:d8:
53:c8:7a:e0:a7:7e:59:c2:cf:d4:98:a5:da:5d:ca:
80:68:3b:83:5b:0f:68:32:b8:7b:29:a0:14:ce:06:
8d:89:76:86:8a:3d:80:0d:91:3b:93:a2:c4:d6:ee:
cd:ab:e1:98:75:88:fc:1d:f1:72:1d:c0:76:d8:3e:
5d:c7:86:0f:71:f1:b1:74:d3:30:42:c7:34:5f:4d:
12:bd:73:44:fb:e2:37:75:01:f7:a5:4c:5b:51:5e:
bc:15:a9:7d:03:91:18:cd:e6:91:ea:0b:ed:53:31:
87:16:2e:b5:14:3e:95:64:e6:03:7b:93:36:a6:be:
37:b2:fb:43:da:20:81:8f:7c:15:a4:6c:bd:e3:be:
22:fb:16:38:35:0c:b7:76:2b:14:dd:a5:e9:df:c5:
0c:1a:eb:26:ea:8a:9d:23:c5:d7:59:4b:f4:3f:91:
bb:b1:f1:79:20:14:2c:a2:e1:36:5f:de:94:21:5d:
cc:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:49:33:B3:94:E2:0A:D7:CB:83:5D:EF:9D:AE:99:BB:22:2A:05:7C
X509v3 Authority Key Identifier:
keyid:BA:44:33:86:59:85:A7:BB:5E:26:9C:37:94:AE:6F:16:4C:FC:2D:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ukQzhlmFp7teJpw3lK5vFkz8Lds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ab3219-c64b-470e-8341-3a12027400e6/1/ukQzhlmFp7teJpw3lK5vFkz8Lds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ab3219-c64b-470e-8341-3a12027400e6/1/ukQzhlmFp7teJpw3lK5vFkz8Lds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:ac:71:09:51:05:bc:dd:a5:34:0b:28:b5:ad:1a:0a:25:07:
b1:3e:f8:ab:ef:3e:16:6b:5f:10:14:21:f7:b3:07:ea:17:bd:
a0:ee:bb:24:fd:de:5c:00:51:bc:0f:99:2d:d4:13:4b:05:af:
25:1a:e5:4f:2f:1f:25:cd:2f:ff:ff:c0:4e:ed:6b:ac:e9:f5:
e3:b8:2f:a4:15:ab:8b:6f:83:51:2f:1c:cc:e9:c1:5f:53:29:
ff:2d:97:a8:fc:38:7e:0e:7f:c0:ae:de:0f:36:1a:57:c5:e8:
b2:cf:bc:e8:6c:db:09:12:a4:03:36:12:3b:66:b3:ed:d5:61:
98:39:a8:ad:04:81:ee:99:54:f9:78:41:7a:33:bd:a9:62:5a:
03:99:33:a9:2c:de:9a:75:b0:66:e8:c8:f6:27:29:c7:71:b0:
42:cc:54:bc:74:12:47:0e:84:b6:96:ac:e1:e5:d0:c6:da:c3:
e7:c5:79:ba:02:f7:c9:f8:e6:e4:b2:a6:36:1f:2f:f7:e5:71:
f0:01:23:08:3f:51:90:d4:c1:26:c3:8f:ca:9a:87:3d:65:e2:
b6:93:55:7d:8f:9e:31:79:81:3e:2c:35:ae:5f:3b:81:28:7b:
d0:91:8e:b8:c4:0a:3e:64:6a:b5:cb:66:76:4b:a9:4a:ae:16:
17:e6:f0:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 08:40:06 2026 by rpki-client