This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7a526c-2dc7-4069-9e32-04edbdbcec37/1/uMDd44urYli1oClOwTT2ysFdNm4.mft
File: uMDd44urYli1oClOwTT2ysFdNm4.mft (raw, json)
Hash identifier: dTESw+SgZob2p3sTbcUFcQbxCRwSbYnsDhV5YYXpLPM=
Subject key identifier: E0:B2:8E:7E:74:FB:41:41:CB:1D:08:E6:8F:B0:8D:8C:AA:FD:63:A4
Authority key identifier: B8:C0:DD:E3:8B:AB:62:58:B5:A0:29:4E:C1:34:F6:CA:C1:5D:36:6E
Certificate issuer: /CN=b8c0dde38bab6258b5a0294ec134f6cac15d366e
Certificate serial: 019C41D860429BB36311943D7A5227F67F71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uMDd44urYli1oClOwTT2ysFdNm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7a526c-2dc7-4069-9e32-04edbdbcec37/1/uMDd44urYli1oClOwTT2ysFdNm4.mft
Manifest number: 07A2
Signing time: Mon 09 Feb 2026 10:00:25 +0000
Manifest this update: Mon 09 Feb 2026 10:00:25 +0000
Manifest next update: Tue 10 Feb 2026 10:00:25 +0000
Files and hashes: 1: fi4yA0xzPM7GYQgxbxmYjezn86E.roa (hash: G/nw7pbKmX3E/jluA4P6MIqyVk+aVk5yMtozD6WiDB4=)
2: uMDd44urYli1oClOwTT2ysFdNm4.crl (hash: XB7SCDeNTkEFOXWT7WvhmLJc61aZK+TqC+wktpQZj3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7a526c-2dc7-4069-9e32-04edbdbcec37/1/uMDd44urYli1oClOwTT2ysFdNm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/7a526c-2dc7-4069-9e32-04edbdbcec37/1/uMDd44urYli1oClOwTT2ysFdNm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/uMDd44urYli1oClOwTT2ysFdNm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 10:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:d8:60:42:9b:b3:63:11:94:3d:7a:52:27:f6:7f:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8c0dde38bab6258b5a0294ec134f6cac15d366e
Validity
Not Before: Feb 9 10:00:25 2026 GMT
Not After : Feb 10 10:00:25 2026 GMT
Subject: CN=e0b28e7e74fb4141cb1d08e68fb08d8caafd63a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8b:72:ae:19:e4:f7:40:ed:35:6e:00:36:ec:
05:67:74:b9:c2:29:b8:74:90:3f:01:59:8f:ef:c6:
8f:dc:de:bb:d3:b6:93:77:de:56:7e:f8:97:4b:5f:
4f:49:cf:95:23:46:ac:fe:cb:50:6b:76:ca:c3:40:
91:57:76:00:1f:e6:ef:8b:4a:ea:8b:b6:da:e6:c1:
c7:e8:c3:65:37:38:0a:40:e1:e0:ae:96:1a:4e:c0:
e5:31:d7:7f:ae:d1:37:3e:05:d5:ac:0e:d9:fe:cd:
d0:ec:c7:7c:16:d3:2e:e6:ee:93:8a:7b:e2:b8:a4:
d8:ab:79:ee:5c:b3:f8:54:09:c0:71:ba:43:0b:71:
7c:88:9a:44:31:a6:6b:1b:00:2a:b7:e5:1c:2a:16:
49:1a:12:94:5d:16:02:dc:da:a4:ea:4d:57:5f:a6:
6b:b8:af:9a:44:f9:c2:1b:3d:3c:7c:96:f9:d4:56:
2b:f2:1e:78:c8:05:a5:fa:cc:d0:61:7b:20:de:77:
37:1a:1d:f7:b1:00:82:79:54:f4:8c:4f:fa:4c:1d:
b5:d8:b4:3b:d3:e7:ae:75:9f:6c:66:6c:25:67:e4:
c8:35:77:0f:86:85:ad:e5:2f:e6:e8:a0:5b:47:36:
f2:7d:10:45:d3:61:7a:63:6a:51:3c:5b:e4:b3:d1:
fe:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:B2:8E:7E:74:FB:41:41:CB:1D:08:E6:8F:B0:8D:8C:AA:FD:63:A4
X509v3 Authority Key Identifier:
keyid:B8:C0:DD:E3:8B:AB:62:58:B5:A0:29:4E:C1:34:F6:CA:C1:5D:36:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMDd44urYli1oClOwTT2ysFdNm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7a526c-2dc7-4069-9e32-04edbdbcec37/1/uMDd44urYli1oClOwTT2ysFdNm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7a526c-2dc7-4069-9e32-04edbdbcec37/1/uMDd44urYli1oClOwTT2ysFdNm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:8c:93:1f:72:f1:23:34:d9:60:a9:69:e5:b6:92:85:62:24:
37:12:4c:10:08:37:40:4e:fd:f0:15:41:28:3a:39:41:d4:cb:
47:34:b9:59:ce:b8:23:eb:24:30:a6:63:46:69:a5:2c:51:cd:
3d:f9:59:80:b7:39:52:24:2b:71:e1:73:c2:fd:63:5a:24:5c:
e3:f9:e1:87:e8:48:61:43:22:a6:26:c9:06:ee:14:c5:4d:e5:
46:b0:e3:41:92:81:dd:51:98:b0:59:ef:e4:ec:bc:73:91:78:
bd:8f:27:5d:84:c1:04:be:01:46:87:d1:8d:0a:32:32:a2:a9:
89:b8:02:cb:4e:78:df:6b:79:a0:71:22:6c:35:b8:f2:58:78:
d5:3c:42:47:8b:07:dd:cd:bd:7d:93:e4:2e:64:d1:86:bf:3c:
37:a4:a0:b0:b5:21:8d:1b:66:1d:e2:db:90:ae:4e:0e:e5:13:
01:ea:9d:c6:16:f9:21:8c:9c:f7:81:f2:d4:da:48:fa:de:e5:
13:40:20:8c:b6:f8:c1:fe:6d:4a:28:5b:f5:98:7a:69:c6:ed:
cd:18:0b:e3:7d:22:23:ac:d7:15:b6:34:99:de:14:de:8b:9a:
b4:7e:3f:d5:16:13:8b:1e:a2:22:41:ba:95:bc:1f:19:df:94:
37:82:e9:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:54:28 2026 by rpki-client