This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/a75da3-d81e-4bbf-8cc6-49868d7ce9a1/1/U0OOy3Xh1es-gP26waaw-vg_c-E.mft
File: U0OOy3Xh1es-gP26waaw-vg_c-E.mft (raw, json)
Hash identifier: MX1pzDN9gRHACcciKL2/af6gNoHn6Y3EnpgTj3Q/Z5M=
Subject key identifier: CC:88:E6:6F:07:AE:88:C7:B3:38:9F:97:D6:82:52:17:BF:6E:C8:FB
Authority key identifier: 53:43:8E:CB:75:E1:D5:EB:3E:80:FD:BA:C1:A6:B0:FA:F8:3F:73:E1
Certificate issuer: /CN=53438ecb75e1d5eb3e80fdbac1a6b0faf83f73e1
Certificate serial: 019C41D907335CC0361BE6EC074B583C47BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U0OOy3Xh1es-gP26waaw-vg_c-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/a75da3-d81e-4bbf-8cc6-49868d7ce9a1/1/U0OOy3Xh1es-gP26waaw-vg_c-E.mft
Manifest number: 14
Signing time: Mon 09 Feb 2026 10:01:08 +0000
Manifest this update: Mon 09 Feb 2026 10:01:08 +0000
Manifest next update: Tue 10 Feb 2026 10:01:08 +0000
Files and hashes: 1: U0OOy3Xh1es-gP26waaw-vg_c-E.crl (hash: QbzkxI8/Sk+Qy/hNc+GFDJbh8UUD4o4AQcmuRZzsB4M=)
2: WosD3hO75NeEA5i1pYu4jjBvKZk.roa (hash: OY0wCbzw4br81Lxlh7tGimlRcQLzd5IIOnNVOlypPYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/a75da3-d81e-4bbf-8cc6-49868d7ce9a1/1/U0OOy3Xh1es-gP26waaw-vg_c-E.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/a75da3-d81e-4bbf-8cc6-49868d7ce9a1/1/U0OOy3Xh1es-gP26waaw-vg_c-E.mft
rsync://rpki.ripe.net/repository/DEFAULT/U0OOy3Xh1es-gP26waaw-vg_c-E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 10:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:d9:07:33:5c:c0:36:1b:e6:ec:07:4b:58:3c:47:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53438ecb75e1d5eb3e80fdbac1a6b0faf83f73e1
Validity
Not Before: Feb 9 10:01:08 2026 GMT
Not After : Feb 10 10:01:08 2026 GMT
Subject: CN=cc88e66f07ae88c7b3389f97d6825217bf6ec8fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:1b:64:58:0c:c2:16:2c:a8:90:55:7c:33:98:
e3:03:6c:8b:a8:e1:82:bc:ad:39:85:6d:fd:4a:82:
db:3c:ac:6f:1f:9c:b4:89:f4:97:d2:1d:5b:22:34:
d6:31:57:46:ae:04:07:88:40:73:fc:7f:0e:e0:fe:
34:43:45:48:2f:58:c5:fb:89:e9:56:44:bf:1a:ad:
db:27:c7:da:9d:92:1a:55:c7:bf:8c:57:e7:d4:c6:
62:e4:a6:3d:a1:47:a3:90:a5:c0:d6:04:f3:03:79:
d1:18:10:15:6f:7e:62:63:5e:73:54:40:fa:a2:62:
01:4f:8a:e4:58:c6:fd:8e:c9:25:39:d8:3d:2e:13:
0f:9f:b3:0a:b5:ca:eb:69:72:d2:c7:bf:81:8d:e2:
b9:52:3f:07:a0:0c:a9:b5:39:f0:bb:93:95:e6:a4:
38:67:5e:90:f3:f7:fd:44:1c:6c:0a:3f:4a:65:97:
f1:82:9b:b0:ce:02:a4:6e:5d:ab:d5:b3:60:fa:7b:
02:0b:4b:d2:28:ba:29:0f:9e:d6:b6:3c:4a:6a:c7:
2e:bf:2e:03:a3:1a:55:c6:7a:4d:58:21:46:dd:b5:
65:16:59:08:12:f4:d4:2c:6d:eb:ae:37:4d:e4:71:
ca:d3:ce:95:79:3b:ce:c9:93:5d:55:57:69:42:1c:
33:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:88:E6:6F:07:AE:88:C7:B3:38:9F:97:D6:82:52:17:BF:6E:C8:FB
X509v3 Authority Key Identifier:
keyid:53:43:8E:CB:75:E1:D5:EB:3E:80:FD:BA:C1:A6:B0:FA:F8:3F:73:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U0OOy3Xh1es-gP26waaw-vg_c-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a75da3-d81e-4bbf-8cc6-49868d7ce9a1/1/U0OOy3Xh1es-gP26waaw-vg_c-E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a75da3-d81e-4bbf-8cc6-49868d7ce9a1/1/U0OOy3Xh1es-gP26waaw-vg_c-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:55:85:de:c8:8d:30:d4:aa:39:bd:91:ed:e0:c9:df:bb:8f:
62:92:53:49:e1:9f:35:7d:5a:b5:2c:e6:05:af:ba:eb:d3:1b:
20:84:c6:2d:1d:1c:4e:70:9c:94:1d:c4:66:9a:06:5b:e7:34:
57:14:75:66:64:52:90:21:ff:bb:e1:92:5a:76:93:37:07:c1:
96:47:20:ac:3c:7b:92:c8:c3:7e:c8:a4:10:c0:d6:91:c8:9c:
2f:46:1a:6a:0d:bd:69:0a:0d:9f:04:93:43:e7:3c:9f:46:99:
17:07:f0:95:11:2f:3d:e1:ca:6d:e3:b6:49:05:15:f2:dc:04:
30:c0:28:61:4f:39:26:f2:d6:2b:e9:15:39:e8:ec:59:98:11:
ec:3d:98:4c:ed:bc:c9:e0:dc:33:24:bf:1a:17:87:b3:c8:a6:
f3:28:13:2b:fc:b5:3a:4d:0e:d6:56:8a:5f:12:58:48:b3:ae:
36:ac:3d:fa:e8:f6:5f:ae:51:74:9f:96:62:58:bb:db:4a:8b:
e9:20:d1:c8:16:5d:8c:36:8e:78:26:4f:0d:86:ef:6e:3c:a3:
a5:f4:a5:4f:0e:33:2b:32:23:d2:8c:06:dd:c1:05:3d:8f:c2:
b1:8a:da:39:29:24:f7:02:2d:34:52:12:b0:e4:ed:d2:58:94:
cf:f4:da:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:48:07 2026 by rpki-client