This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.mft
File: 1UuC1xkUQAIFHaD4jHaN5ECsIL0.mft (raw, json)
Hash identifier: 9hs1HK4GhDIA6C46mPTCLvb4NDldY3VOjZDUSvx5M1o=
Subject key identifier: 20:45:9F:63:FC:CD:D2:13:81:0A:D4:5C:38:39:E6:E3:00:57:D9:CC
Authority key identifier: D5:4B:82:D7:19:14:40:02:05:1D:A0:F8:8C:76:8D:E4:40:AC:20:BD
Certificate issuer: /CN=d54b82d719144002051da0f88c768de440ac20bd
Certificate serial: 019C438FCD507BC13F9199D7D7ABC70A536E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1UuC1xkUQAIFHaD4jHaN5ECsIL0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.mft
Manifest number: 180D
Signing time: Mon 09 Feb 2026 18:00:23 +0000
Manifest this update: Mon 09 Feb 2026 18:00:23 +0000
Manifest next update: Tue 10 Feb 2026 18:00:23 +0000
Files and hashes: 1: 1UuC1xkUQAIFHaD4jHaN5ECsIL0.crl (hash: 5pPgeHVW1PobYWZa7FHzbSi36M1RrOPee7g+kBsCDmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1UuC1xkUQAIFHaD4jHaN5ECsIL0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:8f:cd:50:7b:c1:3f:91:99:d7:d7:ab:c7:0a:53:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d54b82d719144002051da0f88c768de440ac20bd
Validity
Not Before: Feb 9 18:00:23 2026 GMT
Not After : Feb 10 18:00:23 2026 GMT
Subject: CN=20459f63fccdd213810ad45c3839e6e30057d9cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:49:b0:b9:11:b7:db:19:8b:13:ac:9a:43:27:
05:54:fe:9b:e4:7c:e5:d2:8c:8f:b8:89:f4:d7:92:
4b:3d:e2:15:00:24:6e:c1:6c:e4:f8:21:f3:3a:33:
dc:b8:f1:3a:cd:6a:6c:d3:62:1c:65:ad:a3:78:dc:
a6:4f:bb:ba:c0:23:4e:f8:d7:a9:b3:9f:ce:81:dd:
b4:28:26:3d:99:04:dd:57:6e:3b:a5:c1:d6:d1:3e:
19:7d:ac:d5:31:c9:44:e1:0a:08:de:24:3c:99:27:
44:fd:eb:69:86:71:c6:51:e1:61:53:12:bb:89:8c:
b1:46:2e:f5:ae:1e:e6:83:ed:76:d0:07:db:a2:8a:
a1:23:67:87:c9:be:91:82:3c:02:bc:14:09:4a:d1:
fe:03:33:3f:90:69:d1:7a:1f:14:3d:cf:43:49:8e:
e1:87:ac:11:3c:60:02:23:72:f0:8a:ee:22:60:97:
d7:87:2f:97:a5:b0:c3:60:96:8e:7e:08:17:f5:fd:
0b:20:77:4f:99:02:91:b6:8a:d6:c7:4b:fe:f2:c4:
3c:da:7a:9f:ba:6c:5a:29:a3:8d:27:36:29:3b:06:
54:f2:a7:bd:33:b0:2b:ce:64:b7:7a:21:1c:eb:4b:
ca:81:0b:94:10:31:c6:12:3d:4e:7e:1a:34:29:18:
6b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:45:9F:63:FC:CD:D2:13:81:0A:D4:5C:38:39:E6:E3:00:57:D9:CC
X509v3 Authority Key Identifier:
keyid:D5:4B:82:D7:19:14:40:02:05:1D:A0:F8:8C:76:8D:E4:40:AC:20:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1UuC1xkUQAIFHaD4jHaN5ECsIL0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:6e:e4:e0:60:1e:2e:f6:a4:02:37:0b:0e:ad:82:03:20:cf:
40:21:a8:18:a1:11:4f:23:7d:22:5f:90:e8:c2:d9:f6:15:cd:
15:9b:81:9f:04:2d:97:aa:bf:e4:b9:13:4c:4b:62:ad:39:e9:
2f:a5:3e:0f:e8:d7:75:8d:4f:1d:8e:d9:92:b8:ac:08:d3:48:
43:f7:07:58:c8:c1:f6:29:50:08:10:0c:d4:15:84:22:3e:d4:
7e:3b:30:3e:e2:9c:46:c6:14:35:58:dd:b1:8f:3f:0c:86:13:
c9:8e:25:41:82:34:14:7c:6f:36:77:a5:bc:7d:c8:a9:f4:fd:
d2:87:da:fc:a1:51:fc:e2:48:98:5d:87:7c:30:ba:cd:0d:15:
13:17:1a:94:08:a7:3b:ab:b1:94:59:c8:c0:36:55:0a:59:bc:
02:ff:9d:27:ba:03:65:2f:ea:99:48:2c:14:c8:d4:5f:70:34:
34:57:4e:91:27:0d:11:55:10:0a:37:5d:ec:97:21:e5:a8:47:
5b:03:fb:26:02:1b:d4:a3:ed:f5:02:68:a0:94:9e:ca:68:c7:
cd:26:fe:eb:f2:10:9b:bd:c2:5a:95:bc:3a:e9:c4:45:31:30:
d5:c8:39:1c:8d:35:1a:aa:bf:98:0b:cc:95:2f:3d:8b:b5:07:
1e:40:49:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:17:03 2026 by rpki-client