This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/244958-aa2d-478c-b0ff-69efad6c3a80/1/UHeXmaO44PDx48dJjAWjP4X7u80.mft
File: UHeXmaO44PDx48dJjAWjP4X7u80.mft (raw, json)
Hash identifier: p5ZHnnub1yFoO5iVABVlQOtyERHpEWVXrq+dc63eiZ4=
Subject key identifier: 80:C1:11:83:1C:B9:5B:1D:AD:52:FD:8F:81:CC:74:34:A7:CC:C5:C9
Authority key identifier: 50:77:97:99:A3:B8:E0:F0:F1:E3:C7:49:8C:05:A3:3F:85:FB:BB:CD
Certificate issuer: /CN=50779799a3b8e0f0f1e3c7498c05a33f85fbbbcd
Certificate serial: 019C41D8B4A27AFED3A478640F6360BD68E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UHeXmaO44PDx48dJjAWjP4X7u80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/244958-aa2d-478c-b0ff-69efad6c3a80/1/UHeXmaO44PDx48dJjAWjP4X7u80.mft
Manifest number: 16D6
Signing time: Mon 09 Feb 2026 10:00:46 +0000
Manifest this update: Mon 09 Feb 2026 10:00:46 +0000
Manifest next update: Tue 10 Feb 2026 10:00:46 +0000
Files and hashes: 1: UHeXmaO44PDx48dJjAWjP4X7u80.crl (hash: DwaYNjzGolyGH0DcxoqvUHOuoh/ypBcewyw00/eLzMk=)
2: dR9tL359Jq4PTUxldPAbPoPg-fw.roa (hash: PUxcMJ2MZAwjyZvVJuJQ3lwg6WIyZODgR7GlmoRaalc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/244958-aa2d-478c-b0ff-69efad6c3a80/1/UHeXmaO44PDx48dJjAWjP4X7u80.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/244958-aa2d-478c-b0ff-69efad6c3a80/1/UHeXmaO44PDx48dJjAWjP4X7u80.mft
rsync://rpki.ripe.net/repository/DEFAULT/UHeXmaO44PDx48dJjAWjP4X7u80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 10:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:d8:b4:a2:7a:fe:d3:a4:78:64:0f:63:60:bd:68:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50779799a3b8e0f0f1e3c7498c05a33f85fbbbcd
Validity
Not Before: Feb 9 10:00:46 2026 GMT
Not After : Feb 10 10:00:46 2026 GMT
Subject: CN=80c111831cb95b1dad52fd8f81cc7434a7ccc5c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:55:7c:9e:d8:ba:73:64:ad:87:13:9b:05:66:
cc:73:bd:ce:2c:86:9f:34:63:23:35:0d:57:ad:b2:
95:cc:fc:f6:50:27:9c:3e:41:bf:e8:1f:16:47:c0:
a4:f1:ea:8f:f8:d4:4b:06:79:e2:97:b0:05:61:ef:
d9:9b:d7:60:01:45:8a:1f:72:34:16:d3:a7:1b:c0:
94:ed:7f:85:ee:3a:7e:74:24:53:7a:f4:7e:86:94:
58:3f:4c:ce:56:1c:96:88:7e:41:92:a0:63:e0:70:
88:07:73:7a:b3:a3:16:e1:75:d2:f2:f0:52:69:ae:
5d:8d:37:b1:36:77:af:47:39:cc:25:5b:b2:d0:c0:
18:29:3f:d2:3b:99:32:d9:e0:34:c7:19:5c:b8:e4:
18:62:33:98:3f:40:c2:2e:16:93:e2:90:b9:4f:a1:
c3:55:dc:1c:29:4f:06:0d:74:0d:ad:a3:77:54:53:
d4:38:d9:c5:33:8f:44:ac:03:a0:73:c9:bf:d6:11:
2a:56:95:e4:c0:38:97:dd:ff:44:bf:7c:91:da:1d:
5d:9c:28:2d:7f:cc:cd:be:1a:12:d0:e3:b9:c0:5c:
25:39:af:0e:b0:4c:81:28:21:d1:4b:e9:66:b1:86:
6c:b6:0a:48:b2:52:21:04:12:f1:11:2f:b9:ec:db:
9f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:C1:11:83:1C:B9:5B:1D:AD:52:FD:8F:81:CC:74:34:A7:CC:C5:C9
X509v3 Authority Key Identifier:
keyid:50:77:97:99:A3:B8:E0:F0:F1:E3:C7:49:8C:05:A3:3F:85:FB:BB:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UHeXmaO44PDx48dJjAWjP4X7u80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/244958-aa2d-478c-b0ff-69efad6c3a80/1/UHeXmaO44PDx48dJjAWjP4X7u80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/244958-aa2d-478c-b0ff-69efad6c3a80/1/UHeXmaO44PDx48dJjAWjP4X7u80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:b9:36:02:c0:87:94:a9:e7:37:d4:b3:b3:3b:ea:e7:a2:13:
5f:40:7c:9c:ae:ed:1c:c9:3d:52:66:4f:d9:c8:45:86:20:42:
04:24:78:57:af:02:26:fa:5b:e6:88:75:7c:8d:20:14:92:42:
a0:8f:bf:35:d1:f6:55:2b:7d:91:af:9a:99:ab:e8:3c:f4:a5:
90:e9:46:f5:81:a5:c0:05:e9:d0:4f:a2:4d:11:1c:cd:67:05:
c7:ad:98:ca:99:35:b4:1f:a5:78:fc:e1:c2:18:04:b8:3c:0f:
fa:fd:27:54:04:0c:49:af:2b:34:f4:07:07:f6:84:62:58:b3:
4d:fd:f6:d9:fe:f3:67:ee:25:20:92:2f:34:c5:ec:af:66:23:
7a:d9:0e:5a:76:ca:f1:03:ea:f3:33:77:4e:4e:1e:e1:18:78:
1e:f9:c3:1c:1b:37:3b:f2:92:cd:5a:c4:57:b5:ec:2c:09:25:
22:a6:62:de:bd:93:ce:1c:5f:33:e9:e8:6c:ed:2b:fa:27:bb:
ea:81:21:54:25:9a:e2:f4:71:0e:b8:2a:97:56:1b:57:21:fd:
13:0d:52:9c:86:b3:12:42:37:5c:99:b1:47:21:a1:5a:de:a2:
26:c6:60:a3:7c:ad:6c:18:ac:29:14:92:f9:42:f7:59:cf:ee:
96:99:d9:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:28:40 2026 by rpki-client