This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/057a69-e68e-4004-8625-9177b14ee633/1/uUUIWZXzy3x9vQXkF3TaYksa8uk.mft
File: uUUIWZXzy3x9vQXkF3TaYksa8uk.mft (raw, json)
Hash identifier: WYfY5VGZuPgL9OhPysGmqbCTYH78FTHOOryqSuL42xA=
Subject key identifier: 28:8A:CF:B9:4B:82:91:2D:A3:50:E5:BA:8B:43:98:85:14:81:79:4F
Authority key identifier: B9:45:08:59:95:F3:CB:7C:7D:BD:05:E4:17:74:DA:62:4B:1A:F2:E9
Certificate issuer: /CN=b945085995f3cb7c7dbd05e41774da624b1af2e9
Certificate serial: 019C427D7EACECBF05D04F6553FB105F748C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUUIWZXzy3x9vQXkF3TaYksa8uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/057a69-e68e-4004-8625-9177b14ee633/1/uUUIWZXzy3x9vQXkF3TaYksa8uk.mft
Manifest number: 17BD
Signing time: Mon 09 Feb 2026 13:00:46 +0000
Manifest this update: Mon 09 Feb 2026 13:00:46 +0000
Manifest next update: Tue 10 Feb 2026 13:00:46 +0000
Files and hashes: 1: gOkqAAVYzcbJi9mXjRFsZ5cDFrc.roa (hash: IMKFdbmtSocn1WUlnnsI4QXTF0mL0Cdjvv03Eim+48U=)
2: uUUIWZXzy3x9vQXkF3TaYksa8uk.crl (hash: y4shklKJIBII22T2lX3cAg9ZmuWqxuS/zZH/J2HJ9R4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/057a69-e68e-4004-8625-9177b14ee633/1/uUUIWZXzy3x9vQXkF3TaYksa8uk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/057a69-e68e-4004-8625-9177b14ee633/1/uUUIWZXzy3x9vQXkF3TaYksa8uk.mft
rsync://rpki.ripe.net/repository/DEFAULT/uUUIWZXzy3x9vQXkF3TaYksa8uk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7d:7e:ac:ec:bf:05:d0:4f:65:53:fb:10:5f:74:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b945085995f3cb7c7dbd05e41774da624b1af2e9
Validity
Not Before: Feb 9 13:00:46 2026 GMT
Not After : Feb 10 13:00:46 2026 GMT
Subject: CN=288acfb94b82912da350e5ba8b4398851481794f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c1:fe:72:72:ec:85:e8:1e:24:1f:0e:db:da:
5a:6e:43:29:49:ec:31:a1:9d:7d:4e:cb:2a:46:bc:
92:16:3b:5b:32:d1:ca:65:47:74:2b:8d:32:71:e6:
f1:32:7b:7d:94:ad:33:8d:83:7d:e4:a1:ba:5d:18:
f1:86:71:d3:ec:ae:e1:4d:62:13:57:96:bc:e7:57:
2f:45:0e:e6:ea:25:1e:91:80:be:63:dc:62:ec:a9:
e2:ba:e0:41:47:cc:e4:fa:d6:23:44:e4:1b:9d:d8:
ae:81:b7:a8:f9:76:67:43:13:1d:1b:a8:52:53:6d:
91:07:a1:fc:e4:9d:c2:13:37:e7:40:8d:cf:de:94:
46:ad:7f:07:e3:8e:53:78:a3:b6:0a:eb:61:46:75:
21:9b:d1:62:4b:6d:10:ac:88:28:63:ce:aa:3f:bd:
30:18:01:2b:d3:9b:a6:e2:6e:90:0d:64:fc:31:d4:
99:73:3e:ee:8b:84:2b:a6:3b:be:d6:21:6a:4c:23:
a0:4b:75:cd:13:2a:f0:3e:08:76:1b:40:f1:0b:4f:
63:40:c2:c3:77:7a:1f:e8:1a:4a:8a:1c:5e:05:4f:
b7:5c:28:1e:0f:f9:e4:9a:a2:7d:d9:b2:d5:58:20:
2f:ea:05:67:cf:bf:ed:c9:ff:fd:72:23:cd:2a:21:
4a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:8A:CF:B9:4B:82:91:2D:A3:50:E5:BA:8B:43:98:85:14:81:79:4F
X509v3 Authority Key Identifier:
keyid:B9:45:08:59:95:F3:CB:7C:7D:BD:05:E4:17:74:DA:62:4B:1A:F2:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUUIWZXzy3x9vQXkF3TaYksa8uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/057a69-e68e-4004-8625-9177b14ee633/1/uUUIWZXzy3x9vQXkF3TaYksa8uk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/057a69-e68e-4004-8625-9177b14ee633/1/uUUIWZXzy3x9vQXkF3TaYksa8uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:e2:e2:f5:28:39:df:a0:de:f5:0f:16:7b:17:e4:45:14:ee:
c6:bc:d4:f0:32:56:e6:29:86:3a:64:85:8e:78:28:54:de:c7:
1d:a5:40:48:4e:a3:5d:00:ac:d0:ef:3f:01:8c:3b:21:d4:f1:
28:0d:95:5a:8f:c1:88:93:d9:e9:ac:4e:43:59:09:70:c5:13:
3b:3d:50:b5:d7:34:36:fa:bd:8d:db:48:b2:75:3b:57:82:7a:
e6:35:70:e6:76:ed:07:71:21:7f:97:44:cd:85:f5:57:ed:5d:
b7:2b:05:8d:c9:e9:ee:62:8f:9b:66:42:44:8f:54:3f:1b:b2:
96:76:d9:d5:9e:8d:cf:39:51:29:f3:3c:58:41:a1:66:e4:53:
fd:2a:8f:d7:be:19:4d:d4:25:85:d9:1b:0b:19:15:de:94:18:
80:03:db:3d:97:96:30:19:9f:65:b9:28:56:0b:17:9f:c1:d7:
72:29:82:c5:0d:98:9e:78:91:ab:28:de:21:fd:2c:4c:92:11:
03:80:53:ff:d0:b5:be:6f:69:45:01:16:b8:97:33:05:2a:19:
24:78:58:d7:26:de:de:08:8a:a3:9f:0b:07:ec:69:b8:06:30:
f1:2e:b7:66:b8:00:9d:04:b9:e9:0f:0f:7d:1b:e4:6b:d2:12:
00:66:eb:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCfX6s7L8F0E9lU/sQX3SMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5NDUwODU5OTVmM2NiN2M3ZGJkMDVlNDE3NzRkYTYyNGIx
YWYyZTkwHhcNMjYwMjA5MTMwMDQ2WhcNMjYwMjEwMTMwMDQ2WjAzMTEwLwYDVQQD
EygyODhhY2ZiOTRiODI5MTJkYTM1MGU1YmE4YjQzOTg4NTE0ODE3OTRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA38H+cnLshegeJB8O29pabkMpSewx
oZ19TssqRrySFjtbMtHKZUd0K40ycebxMnt9lK0zjYN95KG6XRjxhnHT7K7hTWIT
V5a851cvRQ7m6iUekYC+Y9xi7KniuuBBR8zk+tYjROQbndiugbeo+XZnQxMdG6hS
U22RB6H85J3CEzfnQI3P3pRGrX8H445TeKO2CuthRnUhm9FiS20QrIgoY86qP70w
GAEr05um4m6QDWT8MdSZcz7ui4Qrpju+1iFqTCOgS3XNEyrwPgh2G0DxC09jQMLD
d3of6BpKihxeBU+3XCgeD/nkmqJ92bLVWCAv6gVnz7/tyf/9ciPNKiFKnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCiKz7lLgpEto1DluotDmIUUgXlPMB8GA1UdIwQY
MBaAFLlFCFmV88t8fb0F5Bd02mJLGvLpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVVVSVdaWHp5M3g5dlFYa0YzVGFZa3NhOHVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC8wNTdhNjktZTY4ZS00MDA0LTg2MjUt
OTE3N2IxNGVlNjMzLzEvdVVVSVdaWHp5M3g5dlFYa0YzVGFZa3NhOHVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC8wNTdhNjktZTY4ZS00MDA0LTg2MjUtOTE3N2IxNGVlNjMz
LzEvdVVVSVdaWHp5M3g5dlFYa0YzVGFZa3NhOHVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX+Li9Sg5
36De9Q8WexfkRRTuxrzU8DJW5imGOmSFjngoVN7HHaVASE6jXQCs0O8/AYw7IdTx
KA2VWo/BiJPZ6axOQ1kJcMUTOz1Qtdc0Nvq9jdtIsnU7V4J65jVw5nbtB3Ehf5dE
zYX1V+1dtysFjcnp7mKPm2ZCRI9UPxuylnbZ1Z6NzzlRKfM8WEGhZuRT/SqP174Z
TdQlhdkbCxkV3pQYgAPbPZeWMBmfZbkoVgsXn8HXcimCxQ2YnniRqyjeIf0sTJIR
A4BT/9C1vm9pRQEWuJczBSoZJHhY1ybe3giKo58LB+xpuAYw8S63ZrgAnQS56Q8P
fRvka9ISAGbrsQ==
-----END CERTIFICATE-----
Generated at Mon Feb 9 23:52:48 2026 by rpki-client