This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/UfKdGEvMUP5lTd70AV3hfSRv0qM.mft
File: UfKdGEvMUP5lTd70AV3hfSRv0qM.mft (raw, json)
Hash identifier: PYaI9e1N7V3aWabW8upgy4uQAEQEK3YyHbe0IvbeaxY=
Subject key identifier: DB:A4:4B:D4:8F:77:E0:A2:47:89:80:BF:07:73:7D:82:05:30:D9:1E
Authority key identifier: 51:F2:9D:18:4B:CC:50:FE:65:4D:DE:F4:01:5D:E1:7D:24:6F:D2:A3
Certificate issuer: /CN=51f29d184bcc50fe654ddef4015de17d246fd2a3
Certificate serial: 019C5A4E666EC914785FE37B8C3A9C3034E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UfKdGEvMUP5lTd70AV3hfSRv0qM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/UfKdGEvMUP5lTd70AV3hfSRv0qM.mft
Manifest number: 0213
Signing time: Sat 14 Feb 2026 04:00:13 +0000
Manifest this update: Sat 14 Feb 2026 04:00:13 +0000
Manifest next update: Sun 15 Feb 2026 04:00:13 +0000
Files and hashes: 1: LH2PXydQzSuepDdoUQdoR47rCyM.asa (hash: l6vxwAT+mjE8hg/FgROSMXiuGe3hVbBF986r/HMD6bc=)
2: UfKdGEvMUP5lTd70AV3hfSRv0qM.crl (hash: oBoyuXxfMI4F2S0NOhfYrlIH1/bLqSA6bvAt+ms939I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/UfKdGEvMUP5lTd70AV3hfSRv0qM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/UfKdGEvMUP5lTd70AV3hfSRv0qM.mft
rsync://rpki.ripe.net/repository/DEFAULT/UfKdGEvMUP5lTd70AV3hfSRv0qM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Feb 2026 04:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:5a:4e:66:6e:c9:14:78:5f:e3:7b:8c:3a:9c:30:34:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51f29d184bcc50fe654ddef4015de17d246fd2a3
Validity
Not Before: Feb 14 04:00:13 2026 GMT
Not After : Feb 15 04:00:13 2026 GMT
Subject: CN=dba44bd48f77e0a2478980bf07737d820530d91e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:67:5f:1e:ad:f9:e1:81:c2:00:61:7e:76:d4:
c0:38:93:da:91:28:cf:fc:20:a2:50:5a:45:f3:ae:
44:2f:f2:ce:86:6a:79:cf:0e:27:3c:8b:be:2a:3a:
53:8d:6b:c9:72:28:19:e1:79:f2:70:87:16:5a:51:
9b:f9:b5:be:ad:1d:d3:4c:00:ae:35:d7:98:aa:39:
a5:3f:1c:bf:1b:23:b1:5c:51:39:c6:91:24:83:f9:
45:01:57:52:76:f5:e0:6e:95:5a:ad:79:be:e3:ce:
0d:1d:e3:33:59:5c:2a:e2:55:4c:c6:a3:47:0d:56:
c7:02:b2:fa:f1:b8:54:47:d6:d0:9f:97:74:60:86:
17:ea:8f:cc:28:b9:a4:ad:3d:ba:14:d8:0f:83:3a:
47:4c:96:bf:ea:64:2e:f1:7d:d5:3e:85:92:34:7d:
e9:21:eb:6a:36:0c:f9:06:74:e7:43:63:8b:32:a9:
ab:5b:26:87:7b:2c:51:88:24:31:18:d5:0e:9e:97:
57:be:e4:61:38:73:c0:d6:69:4d:d9:29:cc:4f:61:
3c:9f:df:75:fb:c3:c8:9b:87:32:de:6b:d5:e5:67:
64:a3:b8:7a:67:cd:09:90:89:72:00:79:01:73:af:
98:6e:a0:e8:67:56:6a:93:65:93:b8:24:79:08:03:
b9:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:A4:4B:D4:8F:77:E0:A2:47:89:80:BF:07:73:7D:82:05:30:D9:1E
X509v3 Authority Key Identifier:
keyid:51:F2:9D:18:4B:CC:50:FE:65:4D:DE:F4:01:5D:E1:7D:24:6F:D2:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UfKdGEvMUP5lTd70AV3hfSRv0qM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/UfKdGEvMUP5lTd70AV3hfSRv0qM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3b50c8-678b-4c72-bc0c-b33a1f7d9c26/1/UfKdGEvMUP5lTd70AV3hfSRv0qM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:db:7e:e4:f0:d9:6a:7e:b4:19:c4:8c:97:b2:13:06:79:4b:
1f:dd:f8:7c:60:b8:25:18:06:a2:20:5f:33:df:0b:d3:60:50:
fa:b5:25:c2:9c:b7:d8:02:66:a4:f4:a0:33:3c:e2:91:57:f4:
68:63:2a:83:2a:58:93:0d:63:c7:89:65:d9:23:01:46:ff:64:
6d:04:32:18:db:01:80:c1:66:b2:c1:dc:09:df:8e:46:5b:b1:
b4:9d:ac:92:9b:6a:43:ac:c3:b8:a1:b9:b7:87:51:5b:4d:54:
22:6c:2d:a4:f7:9a:79:29:1f:50:10:d0:97:f8:f9:e1:63:7f:
48:4b:97:3b:9f:2c:d8:ec:6d:f0:bd:7a:3b:c8:9d:eb:f0:dd:
1b:02:45:5c:91:a6:bc:8d:73:e4:59:37:cc:e8:eb:df:d7:e4:
36:e1:5c:64:06:0e:d7:68:b7:2d:c7:2f:0f:be:e3:aa:fe:91:
55:84:12:ec:bd:6d:3b:f8:d1:7d:5d:74:23:44:e5:3b:f8:d0:
ab:e5:dd:de:93:79:b8:c2:d2:be:e0:ef:0d:2e:2e:0e:ea:17:
07:92:d7:01:1c:12:e8:9a:b9:39:c9:34:19:27:37:b4:63:89:
42:46:84:2c:0f:7c:f4:12:72:5c:21:e5:5a:59:25:72:24:84:
09:29:43:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxaTmZuyRR4X+N7jDqcMDTpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxZjI5ZDE4NGJjYzUwZmU2NTRkZGVmNDAxNWRlMTdkMjQ2
ZmQyYTMwHhcNMjYwMjE0MDQwMDEzWhcNMjYwMjE1MDQwMDEzWjAzMTEwLwYDVQQD
EyhkYmE0NGJkNDhmNzdlMGEyNDc4OTgwYmYwNzczN2Q4MjA1MzBkOTFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2dfHq354YHCAGF+dtTAOJPakSjP
/CCiUFpF865EL/LOhmp5zw4nPIu+KjpTjWvJcigZ4XnycIcWWlGb+bW+rR3TTACu
NdeYqjmlPxy/GyOxXFE5xpEkg/lFAVdSdvXgbpVarXm+484NHeMzWVwq4lVMxqNH
DVbHArL68bhUR9bQn5d0YIYX6o/MKLmkrT26FNgPgzpHTJa/6mQu8X3VPoWSNH3p
IetqNgz5BnTnQ2OLMqmrWyaHeyxRiCQxGNUOnpdXvuRhOHPA1mlN2SnMT2E8n991
+8PIm4cy3mvV5Wdko7h6Z80JkIlyAHkBc6+YbqDoZ1Zqk2WTuCR5CAO50QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNukS9SPd+CiR4mAvwdzfYIFMNkeMB8GA1UdIwQY
MBaAFFHynRhLzFD+ZU3e9AFd4X0kb9KjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWZLZEdFdk1VUDVsVGQ3MEFWM2hmU1J2MHFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8zYjUwYzgtNjc4Yi00YzcyLWJjMGMt
YjMzYTFmN2Q5YzI2LzEvVWZLZEdFdk1VUDVsVGQ3MEFWM2hmU1J2MHFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi8zYjUwYzgtNjc4Yi00YzcyLWJjMGMtYjMzYTFmN2Q5YzI2
LzEvVWZLZEdFdk1VUDVsVGQ3MEFWM2hmU1J2MHFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa9t+5PDZ
an60GcSMl7ITBnlLH934fGC4JRgGoiBfM98L02BQ+rUlwpy32AJmpPSgMzzikVf0
aGMqgypYkw1jx4ll2SMBRv9kbQQyGNsBgMFmssHcCd+ORluxtJ2skptqQ6zDuKG5
t4dRW01UImwtpPeaeSkfUBDQl/j54WN/SEuXO58s2Oxt8L16O8id6/DdGwJFXJGm
vI1z5Fk3zOjr39fkNuFcZAYO12i3LccvD77jqv6RVYQS7L1tO/jRfV10I0TlO/jQ
q+Xd3pN5uMLSvuDvDS4uDuoXB5LXARwS6Jq5Ock0GSc3tGOJQkaELA989BJyXCHl
WlklciSECSlDNw==
-----END CERTIFICATE-----
Generated at Sat Feb 14 12:39:38 2026 by rpki-client