This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/303a43-a185-4973-86ab-7a3720d3cffc/1/Uo017K6KUozuxk3jvWO3P6QtX0o.mft
File: Uo017K6KUozuxk3jvWO3P6QtX0o.mft (raw, json)
Hash identifier: 3IwYyMff9l+Nr/gSfpdf4XY6J7ng0RT3wEs6jAxBfeI=
Subject key identifier: B1:6D:38:D9:E2:53:02:4F:FB:4B:54:57:8E:85:4E:60:E1:3C:1E:7C
Authority key identifier: 52:8D:35:EC:AE:8A:52:8C:EE:C6:4D:E3:BD:63:B7:3F:A4:2D:5F:4A
Certificate issuer: /CN=528d35ecae8a528ceec64de3bd63b73fa42d5f4a
Certificate serial: 019C420FC96098515706F03E8E97F859B224
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uo017K6KUozuxk3jvWO3P6QtX0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/303a43-a185-4973-86ab-7a3720d3cffc/1/Uo017K6KUozuxk3jvWO3P6QtX0o.mft
Manifest number: 0C3C
Signing time: Mon 09 Feb 2026 11:00:56 +0000
Manifest this update: Mon 09 Feb 2026 11:00:56 +0000
Manifest next update: Tue 10 Feb 2026 11:00:56 +0000
Files and hashes: 1: Uo017K6KUozuxk3jvWO3P6QtX0o.crl (hash: 5JjVMtpM/8aoVhcRNuBD9PO3uwkRaP6KQxCjp/nDrec=)
2: jmmeH3G-Gl7O7CxO9eM1m6xDfME.roa (hash: Wq2XWQbDU1erZ3uKJEqO1ZrsNU8Z2zdZsF7YP6SoAlU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/303a43-a185-4973-86ab-7a3720d3cffc/1/Uo017K6KUozuxk3jvWO3P6QtX0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/303a43-a185-4973-86ab-7a3720d3cffc/1/Uo017K6KUozuxk3jvWO3P6QtX0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uo017K6KUozuxk3jvWO3P6QtX0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:0f:c9:60:98:51:57:06:f0:3e:8e:97:f8:59:b2:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=528d35ecae8a528ceec64de3bd63b73fa42d5f4a
Validity
Not Before: Feb 9 11:00:56 2026 GMT
Not After : Feb 10 11:00:56 2026 GMT
Subject: CN=b16d38d9e253024ffb4b54578e854e60e13c1e7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:aa:30:d9:ad:cb:41:70:62:73:29:34:a1:fc:
a4:e7:4f:b0:4c:42:39:9c:54:12:39:9f:35:5b:62:
8c:04:b2:98:55:13:bb:0c:4c:96:ab:75:d4:e0:8b:
24:33:f4:d3:f4:ab:b3:be:62:3e:5d:87:8f:fe:12:
bd:55:ab:0e:bb:4a:3d:d9:cd:fc:c0:24:10:7a:ef:
5e:5b:13:04:a2:d8:24:d9:39:26:cb:16:7d:f1:d7:
f5:72:34:49:0d:2d:9e:b0:51:75:eb:c0:b4:58:78:
46:5d:98:ea:3e:c9:f3:6b:1a:e7:27:69:38:74:2f:
c4:bd:17:fc:2e:ee:5d:ae:32:6c:af:d5:8a:50:32:
ca:51:3c:22:95:c1:7c:b9:c1:04:6a:7c:55:0a:4d:
9a:64:f3:99:e5:9a:34:b0:4b:92:c2:00:df:bb:49:
42:4d:cb:8e:51:f4:5a:94:21:32:bf:3d:d4:3a:d4:
c4:e3:57:c5:0c:de:fe:b6:23:bc:be:72:b6:31:cc:
d9:e1:ee:9c:7f:a5:73:95:22:18:45:4b:70:6b:9f:
46:fa:1b:fa:14:c5:01:09:be:df:50:97:d8:c0:6c:
fc:06:95:bc:b3:e7:06:fb:3a:fe:57:ba:78:c6:59:
a1:e1:0b:62:53:29:83:7e:3a:b2:af:d7:d1:a5:5e:
93:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:6D:38:D9:E2:53:02:4F:FB:4B:54:57:8E:85:4E:60:E1:3C:1E:7C
X509v3 Authority Key Identifier:
keyid:52:8D:35:EC:AE:8A:52:8C:EE:C6:4D:E3:BD:63:B7:3F:A4:2D:5F:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uo017K6KUozuxk3jvWO3P6QtX0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/303a43-a185-4973-86ab-7a3720d3cffc/1/Uo017K6KUozuxk3jvWO3P6QtX0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/303a43-a185-4973-86ab-7a3720d3cffc/1/Uo017K6KUozuxk3jvWO3P6QtX0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:85:e4:dc:dd:d3:d4:97:67:bc:36:f7:64:ea:cf:ac:0f:7c:
db:bd:2d:52:f1:e9:3c:c3:c0:e5:a9:2a:ef:a0:9c:23:84:b3:
4a:56:d5:2d:b7:b9:a1:41:fa:ff:c5:b4:29:96:f8:bd:b3:17:
4b:32:55:0b:a1:3e:cb:c5:a6:db:fd:fb:c9:ee:8b:28:67:d2:
34:c9:0e:1a:8e:58:8f:bc:50:ca:f1:3e:87:1c:76:eb:b8:18:
7e:22:a2:b6:32:03:82:6f:d0:92:c0:a9:ac:cc:fb:3a:6b:f2:
29:fe:4e:d1:e9:4c:72:a2:4e:b2:ac:72:a6:ef:cd:76:4f:7b:
6f:72:0f:d5:15:64:5c:95:f1:4b:60:d1:42:f2:2f:64:ed:6f:
97:dd:c1:27:df:e4:12:79:bb:12:d3:22:57:e7:83:2f:85:c8:
a3:d5:09:6d:ad:7e:1c:96:52:30:d2:d6:fc:5d:57:29:e6:d2:
4b:cf:ea:e0:f3:c1:6e:ca:c5:75:98:80:26:d5:91:28:b1:cc:
e3:64:89:f8:23:65:fc:c2:a0:cf:f1:36:05:f7:f0:d5:5f:0e:
57:82:f4:30:0a:39:04:15:d5:ea:72:06:76:55:7c:d9:e0:94:
96:15:26:61:ea:08:ed:47:8b:90:05:cf:79:38:61:d0:f7:a3:
db:a5:ac:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:48:01 2026 by rpki-client