This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/96297d-c627-466d-9eba-107890801213/1/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.mft
File: 9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.mft (raw, json)
Hash identifier: rtnxzU7BSmjmmI+IDO6oCQ6ZUZ1fBrRLABD9lJbnXtQ=
Subject key identifier: 38:6F:B8:09:62:F8:C6:20:4F:8E:99:B6:50:46:41:58:95:EB:90:BC
Authority key identifier: F6:E7:D8:11:95:49:93:A9:53:B7:94:8D:D0:67:65:CB:C0:90:DC:F7
Certificate issuer: /CN=f6e7d811954993a953b7948dd06765cbc090dcf7
Certificate serial: 019C41A247AB8672B4209C2EAC2DD54AF061
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/96297d-c627-466d-9eba-107890801213/1/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.mft
Manifest number: 0427
Signing time: Mon 09 Feb 2026 09:01:20 +0000
Manifest this update: Mon 09 Feb 2026 09:01:20 +0000
Manifest next update: Tue 10 Feb 2026 09:01:20 +0000
Files and hashes: 1: 9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.crl (hash: 4FFWhE64fk59bKaavIB0VvWtR4K3WLTwckQ9ST5wxDI=)
2: uNoepfaXDI1VoCnimpxHCf9Ihpc.roa (hash: Y1lvrGMwjV5DGLBf//Ugh3tArJ+z6zA+0q1mFnD1D78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/96297d-c627-466d-9eba-107890801213/1/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/96297d-c627-466d-9eba-107890801213/1/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 09:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:a2:47:ab:86:72:b4:20:9c:2e:ac:2d:d5:4a:f0:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6e7d811954993a953b7948dd06765cbc090dcf7
Validity
Not Before: Feb 9 09:01:20 2026 GMT
Not After : Feb 10 09:01:20 2026 GMT
Subject: CN=386fb80962f8c6204f8e99b65046415895eb90bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:dd:5b:3c:2a:e0:f2:30:4f:81:a8:74:38:80:
37:74:49:36:9a:8e:30:2f:6f:af:b4:c0:19:f2:a3:
d7:e7:65:b8:dd:0d:89:0e:c1:d4:89:f2:5f:14:87:
62:94:46:d7:30:4f:f1:e9:00:c5:f9:19:68:3d:3b:
29:b4:b9:d2:3b:19:e7:63:7c:7b:81:dc:54:74:e0:
8c:56:fc:c6:58:3a:07:e2:f9:c9:3f:86:f5:c5:93:
c9:25:fc:9f:ed:04:6a:91:ab:8a:a2:ba:d6:2e:44:
36:1c:25:1f:a2:4e:54:e0:61:57:e1:9f:00:b2:ea:
e8:81:49:5f:dd:68:be:1f:b5:00:cf:85:6a:e4:e6:
38:21:66:73:e0:ec:01:84:49:c9:53:c7:7e:9b:ab:
51:8b:6a:f5:2d:01:e4:86:ba:ba:6d:51:ce:03:ae:
88:5f:9d:f7:b1:d5:20:2b:2f:be:d0:30:59:5d:6d:
24:14:92:90:a3:14:02:14:66:24:37:98:d7:32:34:
9c:64:1e:37:92:cd:ca:7c:10:e9:7b:e9:ca:e6:55:
e1:a2:0c:9c:2c:24:fd:c6:e2:e6:cb:34:1e:58:c7:
3c:c0:28:7e:90:e9:09:aa:e4:9a:cf:2d:23:dd:47:
64:f5:99:97:6d:a5:47:5a:82:72:50:b5:78:32:70:
38:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:6F:B8:09:62:F8:C6:20:4F:8E:99:B6:50:46:41:58:95:EB:90:BC
X509v3 Authority Key Identifier:
keyid:F6:E7:D8:11:95:49:93:A9:53:B7:94:8D:D0:67:65:CB:C0:90:DC:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/96297d-c627-466d-9eba-107890801213/1/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/96297d-c627-466d-9eba-107890801213/1/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:57:1b:fb:d2:21:f0:de:11:54:22:3d:25:66:e2:a4:d1:a5:
98:e5:a5:86:98:a7:99:05:af:60:e7:d7:a7:01:22:75:bd:c9:
54:8f:0e:e8:ca:40:85:6a:1f:b4:f7:6f:da:6e:e4:94:c8:ae:
d2:cb:25:ef:d1:f9:29:ce:5f:a4:ce:6e:1a:8c:45:fe:70:24:
3b:0c:6c:54:6a:91:cc:b6:00:76:76:0a:1b:cf:57:04:f6:af:
24:47:a5:6a:d9:18:c8:08:bf:a6:07:1c:15:1f:cf:30:cf:56:
e7:b1:a8:98:55:b7:dc:fc:b0:c7:98:49:10:81:08:65:ea:87:
49:6c:47:72:ab:c2:8f:47:5b:dd:c3:fb:ab:84:3e:50:a8:39:
cb:d1:90:72:b1:d2:4e:6a:d1:e6:aa:fb:38:64:2e:3f:dd:25:
98:f2:9c:e1:8d:0f:c9:ba:a0:fa:a6:8e:3e:b8:8c:f0:48:9b:
b9:f1:6e:3d:8d:76:55:92:36:95:74:53:14:fe:53:1e:02:3b:
61:0b:7b:e6:25:e2:4a:a2:75:fe:cc:29:29:fd:5b:88:03:0e:
45:fd:1e:1d:5d:b6:dd:b6:a5:f4:ae:32:dd:60:ec:4c:c1:bc:
43:58:05:c9:82:eb:0f:fe:d9:1b:48:ba:64:52:95:06:4e:52:
31:1b:42:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:33:48 2026 by rpki-client