This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/c26a7c-2bef-4abc-a225-f1d11413e18a/1/u_5CyzDD1Jb5bxHtk890NhcIx-E.mft
File: u_5CyzDD1Jb5bxHtk890NhcIx-E.mft (raw, json)
Hash identifier: bV15jif3NP3QBapqFPBmhhtEZA/pAWzqW5j8/5wvbE4=
Subject key identifier: 8A:E0:94:AE:B7:22:86:85:33:72:F4:6D:B6:45:A0:56:FF:68:25:9F
Authority key identifier: BB:FE:42:CB:30:C3:D4:96:F9:6F:11:ED:93:CF:74:36:17:08:C7:E1
Certificate issuer: /CN=bbfe42cb30c3d496f96f11ed93cf74361708c7e1
Certificate serial: 019C424635510E6FE451ECF1993C8F3E4CD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_5CyzDD1Jb5bxHtk890NhcIx-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/c26a7c-2bef-4abc-a225-f1d11413e18a/1/u_5CyzDD1Jb5bxHtk890NhcIx-E.mft
Manifest number: 08A7
Signing time: Mon 09 Feb 2026 12:00:23 +0000
Manifest this update: Mon 09 Feb 2026 12:00:23 +0000
Manifest next update: Tue 10 Feb 2026 12:00:23 +0000
Files and hashes: 1: iUvtRGtEdXyBoro2Kl3Jgw2lwf0.roa (hash: 0GjE/GSpKOrR5lJaIX0JhjgnY5INn+Q+Cz2beD9Wkrc=)
2: u_5CyzDD1Jb5bxHtk890NhcIx-E.crl (hash: 8pDBpVFpe+8sQpsUphKyHVXtmN6LHFgOrIXhsso9eos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/c26a7c-2bef-4abc-a225-f1d11413e18a/1/u_5CyzDD1Jb5bxHtk890NhcIx-E.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/c26a7c-2bef-4abc-a225-f1d11413e18a/1/u_5CyzDD1Jb5bxHtk890NhcIx-E.mft
rsync://rpki.ripe.net/repository/DEFAULT/u_5CyzDD1Jb5bxHtk890NhcIx-E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 12:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:46:35:51:0e:6f:e4:51:ec:f1:99:3c:8f:3e:4c:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbfe42cb30c3d496f96f11ed93cf74361708c7e1
Validity
Not Before: Feb 9 12:00:23 2026 GMT
Not After : Feb 10 12:00:23 2026 GMT
Subject: CN=8ae094aeb72286853372f46db645a056ff68259f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e6:e5:41:89:ed:03:e3:b1:9b:6b:67:e5:ed:
f5:3d:0d:0d:90:a7:2d:88:f6:ad:e3:b1:9a:94:85:
25:e9:29:e9:c5:87:df:e0:19:f9:2c:28:31:e8:0d:
1b:5f:c8:dc:88:70:69:0b:ed:62:7b:8d:ef:a2:b9:
f8:eb:6c:26:63:6b:89:85:46:05:67:7a:6d:63:93:
d1:33:d2:5c:06:72:13:d3:a6:03:6a:8a:df:79:70:
b5:bf:0f:0f:77:2c:d3:de:41:22:80:c5:e4:75:20:
e0:86:75:e4:ad:ec:6c:b8:5b:af:53:27:ee:90:65:
46:3d:14:ba:53:6e:8b:13:68:67:d4:67:d5:bf:72:
aa:57:3c:c4:c6:5e:16:bf:cb:26:da:78:e4:d8:22:
9f:fc:06:69:aa:63:9b:1a:70:84:36:2d:cd:fc:a2:
bf:56:12:04:f7:89:5d:62:9b:5c:20:b3:bc:95:88:
7b:0f:31:eb:ff:97:b1:eb:af:de:7e:9f:37:8d:05:
0b:fc:3b:38:0f:2b:15:06:c6:83:83:14:16:a1:99:
6a:24:bf:e7:d7:62:70:a2:fb:6b:90:a2:3c:d3:25:
42:f5:c9:63:8d:8f:34:75:ca:e0:21:c9:4a:d2:67:
1f:dc:7e:1c:08:3e:b3:de:44:5f:94:cc:74:13:07:
f4:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:E0:94:AE:B7:22:86:85:33:72:F4:6D:B6:45:A0:56:FF:68:25:9F
X509v3 Authority Key Identifier:
keyid:BB:FE:42:CB:30:C3:D4:96:F9:6F:11:ED:93:CF:74:36:17:08:C7:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_5CyzDD1Jb5bxHtk890NhcIx-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c26a7c-2bef-4abc-a225-f1d11413e18a/1/u_5CyzDD1Jb5bxHtk890NhcIx-E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c26a7c-2bef-4abc-a225-f1d11413e18a/1/u_5CyzDD1Jb5bxHtk890NhcIx-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:a0:3e:0b:27:ed:6e:b9:23:61:d5:6a:f9:08:37:2f:16:f9:
5a:49:1d:c5:21:af:dc:a9:7c:19:00:14:e1:40:5e:fa:4e:ad:
53:2b:05:65:6b:0e:07:d8:12:78:c6:a3:e1:bf:72:99:b6:ad:
c4:7d:45:9b:e1:ce:43:a9:ba:de:16:e6:dd:1f:05:97:e5:04:
30:f7:32:9c:fb:4b:33:8e:f2:29:c0:e9:c1:0c:ea:34:ed:ba:
d7:5b:a1:ba:24:95:85:17:df:a1:4f:28:66:52:2a:2c:4d:37:
b2:9a:cc:62:11:c8:14:28:50:e9:e4:20:ca:54:a5:87:a3:3b:
72:35:ae:51:fe:be:d4:9c:e5:4f:69:95:4b:31:b7:46:15:02:
64:3e:a6:df:08:6b:18:7c:75:74:65:10:ef:53:33:23:fe:6b:
f6:db:c5:a5:9c:c5:df:73:5e:b1:47:2d:62:71:1c:22:10:72:
fa:cd:0d:0b:7f:30:68:cd:c9:e0:5f:4f:9c:44:86:93:ac:67:
11:a3:e8:a8:11:98:6a:db:33:77:1f:70:dc:30:6a:c3:81:3d:
c6:8b:b1:f7:c0:52:d8:05:79:2f:48:32:b8:be:d4:c0:90:51:
59:3f:82:14:9c:0b:e8:ee:53:de:fd:b6:1f:44:79:c4:94:a4:
f3:59:0f:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCRjVRDm/kUezxmTyPPkzYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiZmU0MmNiMzBjM2Q0OTZmOTZmMTFlZDkzY2Y3NDM2MTcw
OGM3ZTEwHhcNMjYwMjA5MTIwMDIzWhcNMjYwMjEwMTIwMDIzWjAzMTEwLwYDVQQD
Eyg4YWUwOTRhZWI3MjI4Njg1MzM3MmY0NmRiNjQ1YTA1NmZmNjgyNTlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoeblQYntA+Oxm2tn5e31PQ0NkKct
iPat47GalIUl6SnpxYff4Bn5LCgx6A0bX8jciHBpC+1ie43vorn462wmY2uJhUYF
Z3ptY5PRM9JcBnIT06YDaorfeXC1vw8PdyzT3kEigMXkdSDghnXkrexsuFuvUyfu
kGVGPRS6U26LE2hn1GfVv3KqVzzExl4Wv8sm2njk2CKf/AZpqmObGnCENi3N/KK/
VhIE94ldYptcILO8lYh7DzHr/5ex66/efp83jQUL/Ds4DysVBsaDgxQWoZlqJL/n
12JwovtrkKI80yVC9cljjY80dcrgIclK0mcf3H4cCD6z3kRflMx0Ewf05QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIrglK63IoaFM3L0bbZFoFb/aCWfMB8GA1UdIwQY
MBaAFLv+Qssww9SW+W8R7ZPPdDYXCMfhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdV81Q3l6REQxSmI1YnhIdGs4OTBOaGNJeC1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9jMjZhN2MtMmJlZi00YWJjLWEyMjUt
ZjFkMTE0MTNlMThhLzEvdV81Q3l6REQxSmI1YnhIdGs4OTBOaGNJeC1FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny9jMjZhN2MtMmJlZi00YWJjLWEyMjUtZjFkMTE0MTNlMThh
LzEvdV81Q3l6REQxSmI1YnhIdGs4OTBOaGNJeC1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiqA+Cyft
brkjYdVq+Qg3Lxb5WkkdxSGv3Kl8GQAU4UBe+k6tUysFZWsOB9gSeMaj4b9ymbat
xH1Fm+HOQ6m63hbm3R8Fl+UEMPcynPtLM47yKcDpwQzqNO2611uhuiSVhRffoU8o
ZlIqLE03sprMYhHIFChQ6eQgylSlh6M7cjWuUf6+1JzlT2mVSzG3RhUCZD6m3whr
GHx1dGUQ71MzI/5r9tvFpZzF33NesUctYnEcIhBy+s0NC38waM3J4F9PnESGk6xn
EaPoqBGYatszdx9w3DBqw4E9xoux98BS2AV5L0gyuL7UwJBRWT+CFJwL6O5T3v22
H0R5xJSk81kPqQ==
-----END CERTIFICATE-----
Generated at Mon Feb 9 19:53:31 2026 by rpki-client