This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/473702-b9e3-405f-96e2-ac6dfc92f585/1/UeY89ghzETR_MU8k4mlsf2zqbXI.mft
File: UeY89ghzETR_MU8k4mlsf2zqbXI.mft (raw, json)
Hash identifier: K7E/5vfKUjMf51Ak/Gq0onwLhsJMq34DC/g74jMoHtI=
Subject key identifier: FD:5D:95:58:2F:D0:FB:C5:1A:1E:D8:C6:63:CD:14:2B:EA:3A:F9:62
Authority key identifier: 51:E6:3C:F6:08:73:11:34:7F:31:4F:24:E2:69:6C:7F:6C:EA:6D:72
Certificate issuer: /CN=51e63cf6087311347f314f24e2696c7f6cea6d72
Certificate serial: 019C420FBB5ACE453A65073BFCA26B9FECEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UeY89ghzETR_MU8k4mlsf2zqbXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/473702-b9e3-405f-96e2-ac6dfc92f585/1/UeY89ghzETR_MU8k4mlsf2zqbXI.mft
Manifest number: BA
Signing time: Mon 09 Feb 2026 11:00:53 +0000
Manifest this update: Mon 09 Feb 2026 11:00:53 +0000
Manifest next update: Tue 10 Feb 2026 11:00:53 +0000
Files and hashes: 1: 64cOQxiZnrejgF_yLbuSNNh-5DY.asa (hash: /CmbqsnAzo+sIy4VN1xw/guWwGwOsWmQxl16cZjywCU=)
2: UeY89ghzETR_MU8k4mlsf2zqbXI.crl (hash: Ue4rWAq3LTy0LFPXL5U0SkfiOLaOJCRzQ3ZFdnynJC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/473702-b9e3-405f-96e2-ac6dfc92f585/1/UeY89ghzETR_MU8k4mlsf2zqbXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/473702-b9e3-405f-96e2-ac6dfc92f585/1/UeY89ghzETR_MU8k4mlsf2zqbXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/UeY89ghzETR_MU8k4mlsf2zqbXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:0f:bb:5a:ce:45:3a:65:07:3b:fc:a2:6b:9f:ec:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51e63cf6087311347f314f24e2696c7f6cea6d72
Validity
Not Before: Feb 9 11:00:53 2026 GMT
Not After : Feb 10 11:00:53 2026 GMT
Subject: CN=fd5d95582fd0fbc51a1ed8c663cd142bea3af962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:98:34:6f:97:15:32:d2:00:16:71:6e:54:6f:
8d:85:40:7d:97:93:e4:ba:7c:25:86:0e:0e:0c:b0:
3f:3b:13:4c:fe:76:33:d5:73:e1:96:f9:0f:d8:df:
25:57:a2:53:f5:7e:d1:92:b9:ca:cf:03:45:25:30:
7d:ab:30:82:4c:6f:f3:6a:00:19:5b:f6:0b:c2:5c:
3e:32:8a:4a:1d:ce:93:b9:83:f2:de:65:75:61:91:
85:17:6c:d7:9e:26:5c:48:7a:7f:13:df:d8:9e:04:
86:b2:8b:ec:8e:1b:60:ee:bd:67:89:66:31:42:65:
4d:26:c9:8c:60:f3:74:2a:0f:f6:d9:e9:5a:48:d6:
27:67:ea:88:9f:f1:9c:15:25:b1:37:46:70:d9:57:
e2:f1:38:fa:a0:47:55:2f:40:7b:77:a1:c0:4f:f2:
4f:b7:05:88:5d:9b:89:db:e1:35:9c:1a:93:3d:31:
fa:3d:78:e7:69:e7:30:e0:1e:34:a3:a4:16:66:0a:
35:c1:19:6e:46:d1:b5:97:a0:57:55:18:f0:0a:0d:
7f:50:ca:ed:b8:02:93:6e:f4:a6:e2:5c:4c:9c:90:
ea:2b:4c:57:b7:92:d6:49:c1:bc:a7:5b:4a:2d:87:
cc:b8:fa:21:dc:d4:a2:5b:ef:ed:f2:52:d8:59:1a:
9f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:5D:95:58:2F:D0:FB:C5:1A:1E:D8:C6:63:CD:14:2B:EA:3A:F9:62
X509v3 Authority Key Identifier:
keyid:51:E6:3C:F6:08:73:11:34:7F:31:4F:24:E2:69:6C:7F:6C:EA:6D:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeY89ghzETR_MU8k4mlsf2zqbXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/473702-b9e3-405f-96e2-ac6dfc92f585/1/UeY89ghzETR_MU8k4mlsf2zqbXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/473702-b9e3-405f-96e2-ac6dfc92f585/1/UeY89ghzETR_MU8k4mlsf2zqbXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:3f:5a:86:b4:04:43:a4:0b:a5:87:81:3b:e2:e3:79:66:6b:
97:92:75:00:ed:f7:c9:8c:8c:ca:36:54:b6:14:80:df:21:0e:
79:cb:f2:3e:ae:44:10:b7:43:a0:c2:50:dd:72:57:0c:62:62:
e7:7f:b2:ec:86:a5:8a:7f:44:9a:c2:7b:0d:ad:85:5a:d3:3f:
14:ee:a4:a8:3f:ce:2d:2b:60:b4:c7:1a:39:3a:63:60:a1:fd:
cc:25:16:4b:93:c2:94:36:7f:88:83:49:aa:af:ef:11:e0:f5:
a3:ee:2a:ce:0e:d1:4f:f5:4b:9f:49:51:d3:4b:94:53:3f:3a:
37:e5:58:b7:67:dd:cc:ec:0b:5b:7f:37:61:a9:a5:aa:48:86:
4d:1d:04:b1:35:e6:ee:20:3e:cc:a8:bb:0b:42:28:09:e9:8a:
a6:a5:ff:60:7b:8a:89:c7:d9:fb:c1:36:f9:2b:10:1f:0b:ba:
23:f9:1a:82:7a:31:02:d2:46:d4:e7:59:04:40:db:bc:d3:37:
32:9a:0e:3e:45:3c:52:63:01:2d:db:69:e5:05:94:9c:c6:93:
83:c3:16:e2:9b:8b:eb:0a:e4:16:1c:51:84:9d:6a:e4:22:17:
69:c7:29:7f:8b:82:51:e8:b4:e2:f2:5c:93:86:ca:5d:02:99:
7b:d2:ab:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:33:10 2026 by rpki-client