This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.mft
File: uCMtGd2B1FwlkjrrTZqWhYea76Y.mft (raw, json)
Hash identifier: BDquEsCZpjIOOL0ejM6GdqfWRiqseU0kacyIJpunzWg=
Subject key identifier: AF:A5:0A:8C:31:B9:9B:51:F2:52:C0:0D:AE:7F:CD:6F:4D:F4:88:D6
Authority key identifier: B8:23:2D:19:DD:81:D4:5C:25:92:3A:EB:4D:9A:96:85:87:9A:EF:A6
Certificate issuer: /CN=b8232d19dd81d45c25923aeb4d9a9685879aefa6
Certificate serial: 019C43FE693963931D11F40FC839FC36F2C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uCMtGd2B1FwlkjrrTZqWhYea76Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.mft
Manifest number: 17A3
Signing time: Mon 09 Feb 2026 20:01:12 +0000
Manifest this update: Mon 09 Feb 2026 20:01:12 +0000
Manifest next update: Tue 10 Feb 2026 20:01:12 +0000
Files and hashes: 1: 1_5h2ktiO2Us-d9_9EOFV58PYPA.roa (hash: sd6598E1QU/JTbPf14WQIor/gpE3yNeo7WtwXbLKg9Y=)
2: czO6xgkAci50_TFJzcGjRe13r4g.roa (hash: 4KOFcwWGmxy1wY3JZJawBiYSYLZnY9/QXxxiekf9mYM=)
3: uCMtGd2B1FwlkjrrTZqWhYea76Y.crl (hash: PAAPMe3Pfb++QliThj7//0xC1KrLR5qZpcvI8VdremQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/uCMtGd2B1FwlkjrrTZqWhYea76Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:fe:69:39:63:93:1d:11:f4:0f:c8:39:fc:36:f2:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8232d19dd81d45c25923aeb4d9a9685879aefa6
Validity
Not Before: Feb 9 20:01:12 2026 GMT
Not After : Feb 10 20:01:12 2026 GMT
Subject: CN=afa50a8c31b99b51f252c00dae7fcd6f4df488d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:99:e2:44:02:ac:ef:13:3e:e0:d4:52:ed:63:
23:22:68:72:39:de:59:b6:cd:f0:84:62:da:25:cd:
ad:56:6b:d2:b1:8a:18:5e:79:ba:5a:6a:36:ed:7e:
3d:6a:fd:b6:34:d1:f6:5a:1a:be:58:9e:98:05:ae:
b4:04:37:27:37:a7:2f:dd:dd:87:55:4f:58:f2:78:
d7:c9:b2:91:50:27:9c:1d:44:09:2f:55:42:36:4f:
8d:bc:b3:f7:c1:28:94:26:ff:4a:c1:c1:f7:2d:0e:
eb:a6:73:8d:e7:35:af:85:e3:f8:07:c2:fa:14:0e:
9a:ab:f2:03:a6:8d:01:81:be:39:16:26:c2:06:a0:
db:db:f4:3c:54:d1:4f:f6:3b:14:0a:b7:39:95:9e:
e7:8e:7f:ec:17:2a:b9:d7:b3:77:79:f4:09:0b:37:
c8:e6:74:bb:52:9e:ac:f5:ca:7f:96:83:b4:bb:30:
d0:82:41:dc:10:f1:7e:eb:af:af:88:b8:34:60:df:
d6:13:9d:5a:86:57:1d:1e:ee:94:c0:d5:c2:a6:e2:
93:5c:98:a5:76:da:f0:22:c8:ec:4d:04:44:db:84:
b7:61:ee:3e:e9:73:9c:72:d8:ee:38:1a:9e:d0:3c:
5a:f1:08:7a:6a:f9:50:77:14:38:24:87:be:62:71:
38:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:A5:0A:8C:31:B9:9B:51:F2:52:C0:0D:AE:7F:CD:6F:4D:F4:88:D6
X509v3 Authority Key Identifier:
keyid:B8:23:2D:19:DD:81:D4:5C:25:92:3A:EB:4D:9A:96:85:87:9A:EF:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uCMtGd2B1FwlkjrrTZqWhYea76Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:56:83:1e:9c:cc:ec:aa:64:c4:ee:71:c6:28:34:35:da:5a:
62:a4:2e:92:5b:c2:2c:14:2e:bb:da:e8:ce:e0:84:93:d0:9a:
11:e5:cb:73:2c:60:13:2d:54:46:d6:c8:59:fe:14:46:ff:56:
bd:64:f2:5f:cd:32:ab:02:45:73:f3:09:03:69:28:16:e6:9c:
85:2f:80:9c:b6:88:84:9a:5c:34:08:8e:c4:d3:15:6a:f7:e8:
71:e8:52:f4:a0:8f:28:2c:ca:14:a6:4b:83:97:14:46:e5:5a:
e1:00:c6:57:71:f0:76:9b:48:55:35:7d:d5:d6:c4:c7:e8:f1:
50:00:54:83:da:fb:05:0b:73:62:63:be:ad:86:63:0b:32:d1:
26:aa:ca:35:40:7e:0f:1d:70:30:ee:53:c7:e6:9e:29:d6:09:
7b:63:5a:7a:04:30:f0:0e:f4:cc:86:9e:f3:a7:17:35:3d:5f:
51:b1:3b:08:54:2c:24:78:14:bc:35:4b:82:5a:a3:62:90:d6:
d2:b3:16:5f:12:64:bb:07:11:df:66:94:fc:76:58:40:6a:66:
7a:c3:6b:a5:6e:9a:ef:2f:31:73:1c:ab:63:c4:2e:2b:c4:90:
33:d0:49:8b:ce:57:a7:0c:e7:8d:7f:00:8b:90:da:77:c5:e6:
d4:b4:9b:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:43:07 2026 by rpki-client