This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/U7i0zqlMhn00wr_5rOdkC_9R0Gs.mft
File: U7i0zqlMhn00wr_5rOdkC_9R0Gs.mft (raw, json)
Hash identifier: 9gIRlLldaMqy04WK+p0Ef2hB5XwJY6Nv0H2giqazXxk=
Subject key identifier: 33:DC:B1:8D:FA:F1:DC:BF:D1:73:4A:D1:53:B4:75:68:66:4E:46:81
Authority key identifier: 53:B8:B4:CE:A9:4C:86:7D:34:C2:BF:F9:AC:E7:64:0B:FF:51:D0:6B
Certificate issuer: /CN=53b8b4cea94c867d34c2bff9ace7640bff51d06b
Certificate serial: 019C42EBA220232940CB41A7D40161CE60E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7i0zqlMhn00wr_5rOdkC_9R0Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/U7i0zqlMhn00wr_5rOdkC_9R0Gs.mft
Manifest number: 155E
Signing time: Mon 09 Feb 2026 15:01:04 +0000
Manifest this update: Mon 09 Feb 2026 15:01:04 +0000
Manifest next update: Tue 10 Feb 2026 15:01:04 +0000
Files and hashes: 1: U7i0zqlMhn00wr_5rOdkC_9R0Gs.crl (hash: 7RvEyiDKeWNnCmZuLxUVZgCHIXnrwQ5Pk+NXPErNqh8=)
2: Xn8q_66t7wzhb4v1l5kcWKBFQNs.roa (hash: 6vO+ulMoF82yem5grlAhBfA3FaHkdUHzR33O3qHwMWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/U7i0zqlMhn00wr_5rOdkC_9R0Gs.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/U7i0zqlMhn00wr_5rOdkC_9R0Gs.mft
rsync://rpki.ripe.net/repository/DEFAULT/U7i0zqlMhn00wr_5rOdkC_9R0Gs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:eb:a2:20:23:29:40:cb:41:a7:d4:01:61:ce:60:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53b8b4cea94c867d34c2bff9ace7640bff51d06b
Validity
Not Before: Feb 9 15:01:04 2026 GMT
Not After : Feb 10 15:01:04 2026 GMT
Subject: CN=33dcb18dfaf1dcbfd1734ad153b47568664e4681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ce:61:b1:94:c3:b0:18:47:35:d2:42:7a:15:
3d:76:fd:10:70:87:01:9b:04:98:05:50:f3:de:30:
32:65:9d:f5:ff:3a:6c:40:b1:1c:bc:bd:49:f7:9e:
ff:ea:b2:49:71:4c:99:22:29:8b:eb:6d:e7:69:2f:
50:94:3e:1e:f5:94:6e:b8:ab:f8:47:6e:4b:b2:06:
8f:93:41:87:3b:d2:d5:e6:2e:22:ad:f0:a5:9a:cf:
92:30:f3:8b:4a:09:7d:73:2d:29:21:9b:bb:4f:99:
fb:18:dc:46:ae:e0:a0:14:3e:c6:f1:a0:93:37:5d:
f1:ef:ae:72:f1:47:b6:ff:25:64:81:ce:9d:66:a2:
36:62:c7:dd:0b:76:01:90:a8:7a:ae:b9:67:03:f0:
f5:77:a2:06:2e:39:a1:09:53:1a:47:ad:2f:cb:b2:
e0:a5:6d:62:8b:d3:f5:aa:d5:b9:93:44:4f:6f:8e:
d5:4c:8c:16:ff:89:ba:d2:19:cc:06:0d:60:27:bd:
30:a1:cd:2d:05:ef:d2:c0:90:3e:a3:a3:37:2d:b6:
7b:0c:3b:1a:82:c7:38:b7:fe:45:b1:c4:aa:65:9b:
e2:47:a3:69:73:91:52:a9:94:73:4a:fd:50:b0:1d:
f2:10:5f:7f:48:9d:50:d0:76:f9:0d:8a:5d:32:65:
a5:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:DC:B1:8D:FA:F1:DC:BF:D1:73:4A:D1:53:B4:75:68:66:4E:46:81
X509v3 Authority Key Identifier:
keyid:53:B8:B4:CE:A9:4C:86:7D:34:C2:BF:F9:AC:E7:64:0B:FF:51:D0:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7i0zqlMhn00wr_5rOdkC_9R0Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/U7i0zqlMhn00wr_5rOdkC_9R0Gs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/U7i0zqlMhn00wr_5rOdkC_9R0Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:78:e2:3f:14:2e:bd:f6:78:a4:83:45:31:77:23:6a:04:f5:
12:df:f0:5c:a1:bc:17:73:e3:f2:11:f0:a6:b9:e5:e0:20:45:
56:69:80:15:a2:4c:b1:29:a6:f9:6f:2c:d5:31:7a:98:45:c1:
8f:da:fd:2a:51:0b:6f:b8:cc:c5:b9:2f:0d:63:ff:83:c9:3f:
5e:d0:cf:d0:1a:77:1a:59:e8:bc:a5:5d:85:4b:8c:8b:55:ac:
8a:c9:c5:23:c3:e6:45:00:cd:7a:9f:1a:a9:90:56:ef:58:3f:
51:b9:78:d4:69:bc:b5:77:4a:94:26:f3:3e:5d:f5:77:22:4f:
f0:2c:84:e7:c9:14:2a:5e:e2:11:c8:1b:c4:46:1a:35:9f:6d:
e2:88:08:d1:d0:f7:90:27:99:04:ac:e6:98:63:ae:44:b0:c3:
ee:40:2f:74:2e:aa:0d:2a:64:c4:01:44:4f:f4:79:90:5e:31:
75:3c:d4:ae:57:52:e6:f4:74:f2:82:96:8e:69:01:36:07:b2:
49:58:a3:c7:6d:da:91:85:5f:69:95:1a:15:cd:01:cc:06:5d:
d3:be:ac:58:37:20:0d:25:09:85:b8:89:75:15:50:7c:db:54:
81:49:94:f0:da:5f:49:4f:25:39:fb:3d:1d:99:6b:f1:16:d9:
e3:20:97:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxC66IgIylAy0Gn1AFhzmDkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzYjhiNGNlYTk0Yzg2N2QzNGMyYmZmOWFjZTc2NDBiZmY1
MWQwNmIwHhcNMjYwMjA5MTUwMTA0WhcNMjYwMjEwMTUwMTA0WjAzMTEwLwYDVQQD
EygzM2RjYjE4ZGZhZjFkY2JmZDE3MzRhZDE1M2I0NzU2ODY2NGU0NjgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi85hsZTDsBhHNdJCehU9dv0QcIcB
mwSYBVDz3jAyZZ31/zpsQLEcvL1J957/6rJJcUyZIimL623naS9QlD4e9ZRuuKv4
R25LsgaPk0GHO9LV5i4irfClms+SMPOLSgl9cy0pIZu7T5n7GNxGruCgFD7G8aCT
N13x765y8Ue2/yVkgc6dZqI2YsfdC3YBkKh6rrlnA/D1d6IGLjmhCVMaR60vy7Lg
pW1ii9P1qtW5k0RPb47VTIwW/4m60hnMBg1gJ70woc0tBe/SwJA+o6M3LbZ7DDsa
gsc4t/5FscSqZZviR6Npc5FSqZRzSv1QsB3yEF9/SJ1Q0Hb5DYpdMmWlJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDPcsY368dy/0XNK0VO0dWhmTkaBMB8GA1UdIwQY
MBaAFFO4tM6pTIZ9NMK/+aznZAv/UdBrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTdpMHpxbE1objAwd3JfNXJPZGtDXzlSMEdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9kZjk0ZmYtZGU5Yy00OGE4LTk3NmQt
OTY1ZjE3NjM3ODJjLzEvVTdpMHpxbE1objAwd3JfNXJPZGtDXzlSMEdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi9kZjk0ZmYtZGU5Yy00OGE4LTk3NmQtOTY1ZjE3NjM3ODJj
LzEvVTdpMHpxbE1objAwd3JfNXJPZGtDXzlSMEdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf3jiPxQu
vfZ4pINFMXcjagT1Et/wXKG8F3Pj8hHwprnl4CBFVmmAFaJMsSmm+W8s1TF6mEXB
j9r9KlELb7jMxbkvDWP/g8k/XtDP0Bp3GlnovKVdhUuMi1WsisnFI8PmRQDNep8a
qZBW71g/Ubl41Gm8tXdKlCbzPl31dyJP8CyE58kUKl7iEcgbxEYaNZ9t4ogI0dD3
kCeZBKzmmGOuRLDD7kAvdC6qDSpkxAFET/R5kF4xdTzUrldS5vR08oKWjmkBNgey
SVijx23akYVfaZUaFc0BzAZd076sWDcgDSUJhbiJdRVQfNtUgUmU8NpfSU8lOfs9
HZlr8RbZ4yCXUA==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:37:00 2026 by rpki-client