This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/uUTKLZktd4WAC91VJNPhE4PZ8d4.mft
File: uUTKLZktd4WAC91VJNPhE4PZ8d4.mft (raw, json)
Hash identifier: xRN331m5bj7sfx3NUEoRJd8qrjw9izzMcOBJ2umZ6r4=
Subject key identifier: 55:A9:D9:27:D6:AE:37:A0:0E:3A:38:6A:FB:8A:7E:90:7F:F0:00:86
Authority key identifier: B9:44:CA:2D:99:2D:77:85:80:0B:DD:55:24:D3:E1:13:83:D9:F1:DE
Certificate issuer: /CN=b944ca2d992d7785800bdd5524d3e11383d9f1de
Certificate serial: 019C42EB138B09C011F9214FF43D01CFCE0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUTKLZktd4WAC91VJNPhE4PZ8d4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/uUTKLZktd4WAC91VJNPhE4PZ8d4.mft
Manifest number: 1445
Signing time: Mon 09 Feb 2026 15:00:28 +0000
Manifest this update: Mon 09 Feb 2026 15:00:28 +0000
Manifest next update: Tue 10 Feb 2026 15:00:28 +0000
Files and hashes: 1: UhAbETd73I_RNmPinYlIjwaxS5A.roa (hash: 72Y1aXwOgGGk1TvFfLXba73tNjzJqcFFrwUxU2i0lEg=)
2: uUTKLZktd4WAC91VJNPhE4PZ8d4.crl (hash: awr2kdjNOL+B56VbximyE9lCptmeA7oSwfYOLGbwBWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/uUTKLZktd4WAC91VJNPhE4PZ8d4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/uUTKLZktd4WAC91VJNPhE4PZ8d4.mft
rsync://rpki.ripe.net/repository/DEFAULT/uUTKLZktd4WAC91VJNPhE4PZ8d4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:eb:13:8b:09:c0:11:f9:21:4f:f4:3d:01:cf:ce:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b944ca2d992d7785800bdd5524d3e11383d9f1de
Validity
Not Before: Feb 9 15:00:28 2026 GMT
Not After : Feb 10 15:00:28 2026 GMT
Subject: CN=55a9d927d6ae37a00e3a386afb8a7e907ff00086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e8:7c:e2:52:ab:39:6f:30:48:cf:51:20:81:
f3:f9:e9:01:03:86:7f:c6:fd:e4:cf:c6:d6:42:dd:
d0:38:c6:74:e8:87:1a:eb:97:5b:c7:f2:71:2c:92:
14:36:9d:b4:f6:e1:cd:07:81:7d:1e:04:14:b2:5e:
bc:cb:99:22:a5:db:1b:32:3f:46:7e:8c:ff:60:c6:
10:f1:99:7b:05:a8:9e:99:d3:49:40:65:fb:a5:12:
47:9c:1c:13:d0:b8:4c:e5:b6:77:59:1e:b0:08:fa:
24:0e:fc:1b:1c:40:e3:ee:44:d2:7f:81:92:c8:2c:
ad:b1:6b:27:bc:21:e5:59:33:e5:f2:05:8d:d2:d7:
37:e0:35:5b:02:44:79:52:39:c0:9f:39:36:53:e4:
34:ed:32:7c:5d:0a:9c:78:50:56:a0:c2:01:11:f1:
07:61:56:c2:d2:df:9d:08:55:a9:d7:ef:40:d8:84:
83:43:bd:64:17:7a:2d:ad:9a:cd:af:91:69:21:67:
74:5e:02:97:cf:0e:8e:59:81:07:54:c6:d5:ec:5c:
14:23:b3:0a:22:77:d1:c8:ed:60:cc:e4:3d:10:05:
16:45:b4:bc:8f:b8:d0:e1:4b:6c:16:66:18:28:f1:
eb:69:79:12:6a:bf:3d:56:82:62:9b:74:02:cc:37:
26:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:A9:D9:27:D6:AE:37:A0:0E:3A:38:6A:FB:8A:7E:90:7F:F0:00:86
X509v3 Authority Key Identifier:
keyid:B9:44:CA:2D:99:2D:77:85:80:0B:DD:55:24:D3:E1:13:83:D9:F1:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUTKLZktd4WAC91VJNPhE4PZ8d4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/uUTKLZktd4WAC91VJNPhE4PZ8d4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/uUTKLZktd4WAC91VJNPhE4PZ8d4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:e1:01:17:af:44:49:db:a8:a3:82:11:83:ca:97:72:d4:a0:
87:de:c5:57:9f:75:99:83:3e:a4:39:d7:cf:ac:9b:09:6f:a2:
17:30:ba:a7:6c:24:1c:76:47:bb:6a:1c:10:c3:1c:1c:a5:66:
a8:17:db:7b:4a:f2:fe:02:ff:cb:0a:38:1a:30:0a:ae:b2:4c:
06:25:57:af:9d:71:2b:b7:8a:8b:5b:79:47:43:35:aa:bc:3d:
e6:53:be:3b:2b:f5:02:d9:da:9c:75:75:e7:53:dd:38:cd:1e:
47:5f:8e:5a:2b:f1:53:36:18:c6:d7:76:eb:b5:9d:ef:1a:bd:
a2:31:97:a8:0e:ff:42:9b:a1:76:2b:d6:71:74:37:ed:26:dd:
c5:da:28:fe:a4:57:2b:61:a6:55:ea:a1:27:47:f2:de:2f:d2:
eb:e7:78:12:23:fb:cf:dc:06:95:f9:6f:f9:12:d4:47:5e:71:
ea:b8:05:d5:29:53:d1:b5:a9:c7:73:c6:52:75:37:b0:e4:1c:
67:49:f7:62:f8:6d:06:e3:67:cf:d5:62:61:7a:1b:83:7e:d9:
9b:bf:40:78:ca:35:23:cf:9b:ba:8e:8a:6a:06:a2:02:2a:94:
9c:a5:7e:c1:66:31:aa:de:b4:bc:81:08:91:8a:23:ec:29:f9:
c0:79:a6:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxC6xOLCcAR+SFP9D0Bz84MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5NDRjYTJkOTkyZDc3ODU4MDBiZGQ1NTI0ZDNlMTEzODNk
OWYxZGUwHhcNMjYwMjA5MTUwMDI4WhcNMjYwMjEwMTUwMDI4WjAzMTEwLwYDVQQD
Eyg1NWE5ZDkyN2Q2YWUzN2EwMGUzYTM4NmFmYjhhN2U5MDdmZjAwMDg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+h84lKrOW8wSM9RIIHz+ekBA4Z/
xv3kz8bWQt3QOMZ06Ica65dbx/JxLJIUNp209uHNB4F9HgQUsl68y5kipdsbMj9G
foz/YMYQ8Zl7BaiemdNJQGX7pRJHnBwT0LhM5bZ3WR6wCPokDvwbHEDj7kTSf4GS
yCytsWsnvCHlWTPl8gWN0tc34DVbAkR5UjnAnzk2U+Q07TJ8XQqceFBWoMIBEfEH
YVbC0t+dCFWp1+9A2ISDQ71kF3otrZrNr5FpIWd0XgKXzw6OWYEHVMbV7FwUI7MK
InfRyO1gzOQ9EAUWRbS8j7jQ4UtsFmYYKPHraXkSar89VoJim3QCzDcm6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFWp2SfWrjegDjo4avuKfpB/8ACGMB8GA1UdIwQY
MBaAFLlEyi2ZLXeFgAvdVSTT4ROD2fHeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVVUS0xaa3RkNFdBQzkxVkpOUGhFNFBaOGQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9iMzRhMzMtMDYyYi00YjcwLWJhNTEt
MDJhMTJiODYxODBkLzEvdVVUS0xaa3RkNFdBQzkxVkpOUGhFNFBaOGQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9iMzRhMzMtMDYyYi00YjcwLWJhNTEtMDJhMTJiODYxODBk
LzEvdVVUS0xaa3RkNFdBQzkxVkpOUGhFNFBaOGQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANuEBF69E
Sduoo4IRg8qXctSgh97FV591mYM+pDnXz6ybCW+iFzC6p2wkHHZHu2ocEMMcHKVm
qBfbe0ry/gL/ywo4GjAKrrJMBiVXr51xK7eKi1t5R0M1qrw95lO+Oyv1AtnanHV1
51PdOM0eR1+OWivxUzYYxtd267Wd7xq9ojGXqA7/QpuhdivWcXQ37Sbdxdoo/qRX
K2GmVeqhJ0fy3i/S6+d4EiP7z9wGlflv+RLUR15x6rgF1SlT0bWpx3PGUnU3sOQc
Z0n3YvhtBuNnz9ViYXobg37Zm79AeMo1I8+buo6KagaiAiqUnKV+wWYxqt60vIEI
kYoj7Cn5wHmm5A==
-----END CERTIFICATE-----
Generated at Mon Feb 9 19:49:16 2026 by rpki-client