This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/7d0353-3a62-4c39-bd3a-c3a3521e8f70/1/UjiBmTzw22dOidtYFebxiabGDR8.mft
File: UjiBmTzw22dOidtYFebxiabGDR8.mft (raw, json)
Hash identifier: bBGopMpyEwbvpI75tiLa/Y8UdbvoUay2MzjbHc/v4Gk=
Subject key identifier: 07:16:72:6D:2B:77:95:33:E1:41:60:FB:54:97:CA:90:C6:C7:E5:78
Authority key identifier: 52:38:81:99:3C:F0:DB:67:4E:89:DB:58:15:E6:F1:89:A6:C6:0D:1F
Certificate issuer: /CN=523881993cf0db674e89db5815e6f189a6c60d1f
Certificate serial: 019C420F77488EBBF642C4DCB2C3CA7167BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UjiBmTzw22dOidtYFebxiabGDR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/7d0353-3a62-4c39-bd3a-c3a3521e8f70/1/UjiBmTzw22dOidtYFebxiabGDR8.mft
Manifest number: 0EE7
Signing time: Mon 09 Feb 2026 11:00:35 +0000
Manifest this update: Mon 09 Feb 2026 11:00:35 +0000
Manifest next update: Tue 10 Feb 2026 11:00:35 +0000
Files and hashes: 1: 7GrmvQQ-S1h02knSpYsk40B3pWM.roa (hash: w4yZJvXh/Y1tTd4zz3VfX2KscyL/TTELj8T0DWK32qw=)
2: UjiBmTzw22dOidtYFebxiabGDR8.crl (hash: 1UabfmfLbvz2vLZW3FggUASlQVVbUO0HcP+rHkY5mZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/7d0353-3a62-4c39-bd3a-c3a3521e8f70/1/UjiBmTzw22dOidtYFebxiabGDR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/7d0353-3a62-4c39-bd3a-c3a3521e8f70/1/UjiBmTzw22dOidtYFebxiabGDR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UjiBmTzw22dOidtYFebxiabGDR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:0f:77:48:8e:bb:f6:42:c4:dc:b2:c3:ca:71:67:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=523881993cf0db674e89db5815e6f189a6c60d1f
Validity
Not Before: Feb 9 11:00:35 2026 GMT
Not After : Feb 10 11:00:35 2026 GMT
Subject: CN=0716726d2b779533e14160fb5497ca90c6c7e578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ba:8c:43:72:07:b1:e3:15:33:7c:a0:11:17:
c8:10:00:77:76:86:a5:b4:e6:da:c8:60:45:cc:00:
33:89:3b:0f:eb:6f:0a:b5:6a:49:55:f2:d3:47:dc:
bf:6e:03:eb:21:8e:ab:70:84:85:02:eb:23:79:ec:
a9:bc:b5:7e:74:99:f9:8b:1f:ef:bb:9b:64:78:66:
40:e0:df:b8:1c:68:cd:22:d1:22:cd:71:04:22:76:
85:1c:ad:65:c6:23:7c:88:e2:18:67:69:fd:2d:e7:
54:ea:e7:34:de:63:36:00:3d:b7:92:67:fb:9d:07:
b9:63:ad:73:38:2a:49:97:58:df:29:2a:54:3a:16:
cd:c6:6f:dd:e8:ac:f8:83:f5:60:89:f0:5e:7f:df:
74:d0:04:2c:2e:15:1a:c0:e9:a5:27:4e:cc:f3:d9:
d8:2c:08:6b:3a:34:37:fb:7c:de:be:48:2d:e6:9c:
b2:93:67:05:f4:76:d1:81:c7:9e:b9:1e:5f:68:f6:
31:f3:2c:b2:b4:c9:8f:da:9f:da:1b:bf:a0:1d:d2:
12:0c:eb:06:97:e7:cd:92:6b:68:aa:af:6b:29:19:
33:5d:45:2a:d8:33:3e:4b:09:d4:f9:7b:0c:70:d0:
a7:bf:70:82:0e:ff:8b:a2:62:e6:e4:d3:8b:94:59:
b2:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:16:72:6D:2B:77:95:33:E1:41:60:FB:54:97:CA:90:C6:C7:E5:78
X509v3 Authority Key Identifier:
keyid:52:38:81:99:3C:F0:DB:67:4E:89:DB:58:15:E6:F1:89:A6:C6:0D:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UjiBmTzw22dOidtYFebxiabGDR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/7d0353-3a62-4c39-bd3a-c3a3521e8f70/1/UjiBmTzw22dOidtYFebxiabGDR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/7d0353-3a62-4c39-bd3a-c3a3521e8f70/1/UjiBmTzw22dOidtYFebxiabGDR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:bb:16:52:2e:07:8f:71:10:78:45:6f:63:be:5c:0d:85:28:
3e:ef:7d:21:f9:c0:94:85:33:ea:06:40:f4:a7:23:83:14:30:
29:4e:d9:83:58:14:d8:85:9a:89:98:80:0d:df:aa:3a:d1:84:
2b:b6:9e:8b:59:a1:5f:31:bd:35:24:0a:87:31:70:82:79:5d:
46:22:b8:2b:41:4e:19:2c:03:dd:17:aa:9e:49:f4:0f:3a:36:
b4:7a:74:e9:31:1b:a2:8e:1a:f5:83:66:da:e4:06:83:54:1c:
55:fb:df:f9:e2:6b:04:0f:19:e3:a7:02:bb:9c:ff:8c:ae:bd:
3f:92:1f:cb:47:82:0e:44:c4:6d:61:ed:64:a9:62:e0:14:58:
80:b3:ae:73:a3:b7:62:97:cc:fe:fa:09:7a:b2:90:80:cc:cd:
9d:79:d5:84:45:5a:22:d7:c0:15:30:e9:90:77:34:21:69:17:
e7:93:ee:d8:d1:48:c2:e6:78:ec:0f:7f:42:a0:58:e0:78:a9:
0b:f6:f3:3c:8f:99:2e:7f:0f:e4:12:84:b4:f5:e1:c2:70:49:
b0:b9:cc:50:3f:7e:d5:ed:65:80:ba:e2:01:26:af:5f:be:fb:
2f:18:f3:3f:7a:45:87:6f:46:b6:ef:ee:15:9e:ea:85:02:d6:
15:d3:ce:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:07:12 2026 by rpki-client