This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/8e4deb-317d-4977-8aa4-95bc640e3c56/1/u_E0smpfP3zNjK9dLGvnDKwPoks.mft
File: u_E0smpfP3zNjK9dLGvnDKwPoks.mft (raw, json)
Hash identifier: Xzu5i33VMVCIz+SIsAiT9F0o5uu0HV4tgydwUPbK5D8=
Subject key identifier: B8:07:A9:FF:E6:69:75:26:0B:05:E6:E7:B8:4A:7D:23:B8:2F:F8:DB
Authority key identifier: BB:F1:34:B2:6A:5F:3F:7C:CD:8C:AF:5D:2C:6B:E7:0C:AC:0F:A2:4B
Certificate issuer: /CN=bbf134b26a5f3f7ccd8caf5d2c6be70cac0fa24b
Certificate serial: 019C416B009C2FF4CEED61D797C139B11C09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_E0smpfP3zNjK9dLGvnDKwPoks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/8e4deb-317d-4977-8aa4-95bc640e3c56/1/u_E0smpfP3zNjK9dLGvnDKwPoks.mft
Manifest number: 0733
Signing time: Mon 09 Feb 2026 08:00:57 +0000
Manifest this update: Mon 09 Feb 2026 08:00:57 +0000
Manifest next update: Tue 10 Feb 2026 08:00:57 +0000
Files and hashes: 1: u_E0smpfP3zNjK9dLGvnDKwPoks.crl (hash: zM9rEr/zs+dZk0vGjYf8GsU6vcf0MFfRNOoquNGdMtY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/8e4deb-317d-4977-8aa4-95bc640e3c56/1/u_E0smpfP3zNjK9dLGvnDKwPoks.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/8e4deb-317d-4977-8aa4-95bc640e3c56/1/u_E0smpfP3zNjK9dLGvnDKwPoks.mft
rsync://rpki.ripe.net/repository/DEFAULT/u_E0smpfP3zNjK9dLGvnDKwPoks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 08:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:6b:00:9c:2f:f4:ce:ed:61:d7:97:c1:39:b1:1c:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbf134b26a5f3f7ccd8caf5d2c6be70cac0fa24b
Validity
Not Before: Feb 9 08:00:57 2026 GMT
Not After : Feb 10 08:00:57 2026 GMT
Subject: CN=b807a9ffe66975260b05e6e7b84a7d23b82ff8db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:60:78:97:69:12:9f:6e:d2:95:e4:ec:65:b5:
09:ff:23:c6:8e:42:9f:f6:1f:af:4f:26:00:49:af:
54:ff:12:5f:15:ad:36:71:f3:31:ce:14:fc:5d:ad:
92:ac:fd:cb:33:92:3d:66:e6:9f:15:b7:d6:c4:3f:
ec:57:5a:32:bd:59:30:7d:c7:b9:94:ed:0d:a2:6c:
92:b5:93:1a:00:a9:44:ca:60:98:2b:19:6f:14:ac:
03:3b:65:a3:15:ae:33:8e:22:fb:71:6c:f4:72:e9:
44:35:bd:db:5f:f5:3e:7d:0d:1e:ef:3c:01:50:a6:
10:2c:45:02:03:ab:54:c9:66:bb:07:bc:d5:7a:8a:
c3:a9:50:54:75:73:16:d4:4b:b6:43:45:c8:b5:00:
8b:4e:23:d9:47:47:3a:a5:3a:9f:48:e2:34:e9:fd:
d0:5b:dd:5d:3c:41:6e:a8:f4:f1:a8:b5:88:2f:f3:
a3:9a:09:f8:92:75:32:27:2f:e4:be:88:70:5f:a1:
b6:e0:38:0b:5d:96:65:80:c9:9d:13:71:0a:18:69:
3f:b7:86:a7:cb:69:92:03:68:a6:98:5d:5d:8e:9e:
27:94:09:e3:68:ac:73:bc:91:4c:3f:f5:14:f9:5d:
34:cb:c0:23:66:a1:fb:e0:3c:fa:72:99:ab:e0:90:
97:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:07:A9:FF:E6:69:75:26:0B:05:E6:E7:B8:4A:7D:23:B8:2F:F8:DB
X509v3 Authority Key Identifier:
keyid:BB:F1:34:B2:6A:5F:3F:7C:CD:8C:AF:5D:2C:6B:E7:0C:AC:0F:A2:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_E0smpfP3zNjK9dLGvnDKwPoks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8e4deb-317d-4977-8aa4-95bc640e3c56/1/u_E0smpfP3zNjK9dLGvnDKwPoks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8e4deb-317d-4977-8aa4-95bc640e3c56/1/u_E0smpfP3zNjK9dLGvnDKwPoks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:45:13:11:6d:3e:2e:1e:7f:31:64:ca:65:60:f1:e2:e5:33:
6b:33:2b:86:eb:79:b0:47:b6:15:9d:5f:bc:37:84:3b:c5:9d:
7a:9d:1e:f5:85:54:0d:86:e9:dd:25:f2:9f:53:c1:02:de:9f:
e8:cb:41:de:16:b8:32:7b:53:e4:c1:f9:ce:bb:44:26:c1:59:
3a:6a:0d:7e:23:a7:da:f0:82:cf:51:18:38:01:cc:a1:78:4f:
cd:1c:c3:31:e5:c7:23:d7:c8:45:fd:f8:f8:55:08:9d:b5:f5:
31:8e:5f:63:db:15:a2:21:f3:38:cd:85:ee:ea:82:54:eb:7c:
b7:1a:f9:ff:c7:2e:ea:2d:1e:f0:7d:9f:09:59:23:ad:24:b6:
b6:6d:9b:6b:d0:c2:15:ac:cc:6b:47:18:f4:f2:07:73:fc:66:
d8:2b:6c:b8:12:b6:6b:eb:cb:24:51:71:bf:c6:62:d7:0a:93:
6a:cc:7b:98:36:32:bc:89:c1:56:98:10:3a:04:12:bd:55:71:
46:74:eb:c2:7e:6f:e3:92:d3:ee:e5:2c:5e:1a:a3:de:c6:9c:
6d:8e:21:17:cb:2e:e2:75:d2:78:b0:90:1c:ca:94:c2:d7:59:
40:72:57:12:e5:8e:af:bc:59:f5:bd:1d:4a:46:8e:fa:24:41:
13:5c:72:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:00:32 2026 by rpki-client