This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/700333-aa9c-4bd3-8204-48cd05eca736/1/uoGySm1gML8IjeowyaWTL-vcanw.mft
File: uoGySm1gML8IjeowyaWTL-vcanw.mft (raw, json)
Hash identifier: 1amPCF1y5QgHImsXimDD/AoBZ2f/dP+puz7OUAvIHKk=
Subject key identifier: 2D:A3:21:F2:08:DF:FA:19:7E:B8:36:A4:D4:DD:EA:48:88:A5:AF:79
Authority key identifier: BA:81:B2:4A:6D:60:30:BF:08:8D:EA:30:C9:A5:93:2F:EB:DC:6A:7C
Certificate issuer: /CN=ba81b24a6d6030bf088dea30c9a5932febdc6a7c
Certificate serial: 019C41D8B04821ABA1806FECE64003241DA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uoGySm1gML8IjeowyaWTL-vcanw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/700333-aa9c-4bd3-8204-48cd05eca736/1/uoGySm1gML8IjeowyaWTL-vcanw.mft
Manifest number: 02D7
Signing time: Mon 09 Feb 2026 10:00:45 +0000
Manifest this update: Mon 09 Feb 2026 10:00:45 +0000
Manifest next update: Tue 10 Feb 2026 10:00:45 +0000
Files and hashes: 1: uoGySm1gML8IjeowyaWTL-vcanw.crl (hash: pXzuVwuW028V0SDWCizZpOX+HOI9cp2RjXkFz8ysOgU=)
2: zl-n2q1Zb7EgYohA26XnxYXqdxE.roa (hash: BY/YVHNSQVEAmKd+rhuDTBW07jn5TB4TSJNB9lFmcSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/700333-aa9c-4bd3-8204-48cd05eca736/1/uoGySm1gML8IjeowyaWTL-vcanw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/700333-aa9c-4bd3-8204-48cd05eca736/1/uoGySm1gML8IjeowyaWTL-vcanw.mft
rsync://rpki.ripe.net/repository/DEFAULT/uoGySm1gML8IjeowyaWTL-vcanw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 10:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:d8:b0:48:21:ab:a1:80:6f:ec:e6:40:03:24:1d:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba81b24a6d6030bf088dea30c9a5932febdc6a7c
Validity
Not Before: Feb 9 10:00:45 2026 GMT
Not After : Feb 10 10:00:45 2026 GMT
Subject: CN=2da321f208dffa197eb836a4d4ddea4888a5af79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:19:db:88:0c:a5:1b:b0:dc:a0:c3:52:fc:6b:
86:a0:15:f6:52:c3:0e:52:58:14:21:54:c0:f4:aa:
42:06:ec:7c:a3:be:8b:5d:31:e3:83:e0:35:ed:4a:
03:18:60:65:20:c1:02:ba:bb:75:4c:81:77:ac:81:
1d:14:c2:d5:2c:6e:48:ab:3f:fe:a8:19:fb:e0:af:
92:f3:ce:f0:ed:ae:ae:c7:bd:39:45:96:ce:aa:b1:
d6:6e:63:ff:0b:65:65:8f:77:c8:4f:f3:fc:96:9e:
dd:b9:c0:d5:30:0d:2f:c1:b6:ce:6a:01:e0:1b:8e:
96:8f:fc:14:2a:d4:74:a0:f3:f5:60:92:e0:51:04:
16:7b:5e:61:3b:27:31:3a:23:38:63:0c:ca:36:7e:
78:7a:53:1a:96:6d:a4:3c:a4:c4:ec:53:f2:fb:ec:
5c:49:d8:d4:c3:fe:56:79:87:df:f3:69:73:b8:74:
77:5b:01:8f:21:91:f1:bb:ad:28:0d:6b:28:24:7b:
20:c5:78:88:8a:6b:6c:e2:1f:c7:54:50:ae:37:48:
1f:dd:70:a4:9c:38:fc:38:ef:60:c4:7c:69:75:d2:
67:c0:e5:73:63:b9:8e:cf:b4:40:0f:3c:e4:3e:e2:
41:bc:ea:01:30:bf:d6:3e:e1:8c:21:eb:4e:93:3e:
60:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:A3:21:F2:08:DF:FA:19:7E:B8:36:A4:D4:DD:EA:48:88:A5:AF:79
X509v3 Authority Key Identifier:
keyid:BA:81:B2:4A:6D:60:30:BF:08:8D:EA:30:C9:A5:93:2F:EB:DC:6A:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uoGySm1gML8IjeowyaWTL-vcanw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/700333-aa9c-4bd3-8204-48cd05eca736/1/uoGySm1gML8IjeowyaWTL-vcanw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/700333-aa9c-4bd3-8204-48cd05eca736/1/uoGySm1gML8IjeowyaWTL-vcanw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:b8:40:1d:89:a0:d1:cb:03:9d:d7:ba:3b:f2:29:cc:79:28:
4b:b9:1a:ce:6e:96:3e:7c:3c:b9:a8:e6:50:88:8f:01:4a:37:
7c:ab:25:7b:cc:58:d6:fc:57:76:82:37:49:9f:44:b9:92:96:
e4:e3:7f:3a:63:47:f1:0f:b7:78:3d:13:71:39:a8:f7:86:56:
63:0b:b6:39:89:48:2f:c2:99:de:47:68:60:70:fc:fb:5c:85:
99:48:45:17:f0:bb:96:a6:d8:9d:91:2a:50:73:fe:cd:4c:f6:
e0:c6:8b:bb:2d:75:70:93:d1:62:da:05:6f:b9:9b:0b:e2:46:
d0:b7:a8:cf:50:85:95:62:0b:e0:a1:ef:c6:be:0b:1e:6b:05:
42:b2:7a:78:35:33:fe:cb:ad:83:25:f0:23:02:03:ac:b8:7c:
01:94:4d:c9:03:f4:74:3d:0f:db:20:53:03:a2:52:12:8e:00:
b7:bb:fb:ac:58:eb:b3:93:62:fe:06:e5:59:71:5c:42:18:3e:
9a:25:db:80:ea:e6:a9:64:57:a5:8d:9b:02:9b:01:13:9f:64:
7e:bb:1b:c1:c6:9a:8d:e5:b9:7c:5c:9a:7c:53:f7:47:79:43:
d0:b4:f6:20:02:6f:82:e0:94:67:fc:dc:28:05:3f:ce:fc:e7:
ca:d6:bc:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:28:39 2026 by rpki-client