This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
File: Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft (raw, json)
Hash identifier: X1baX3T2Jc3fAtgEZeU5m/EMRx8d+vuYKokvfDZukWM=
Subject key identifier: 76:AB:CF:8D:D0:DD:8E:1E:73:1D:CD:8B:95:85:B7:30:09:A9:EB:99
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 019C43C6D00F8AC3D36DB7B9D148672BE221
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
Manifest number: A4
Signing time: Mon 09 Feb 2026 19:00:28 +0000
Manifest this update: Mon 09 Feb 2026 19:00:28 +0000
Manifest next update: Tue 10 Feb 2026 19:00:28 +0000
Files and hashes: 1: Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl (hash: aA0gz/mSuMvhCwyZx6rLiXxdjzPsxGT6t4mX1NHtQac=)
2: yb5tB73Np2D1lNGtzmycYpeEJ3M.roa (hash: R8cB18o3wipqodyDiw0A9Cbd4ddNmYwVxpX/xGXqoV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:c6:d0:0f:8a:c3:d3:6d:b7:b9:d1:48:67:2b:e2:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Feb 9 19:00:28 2026 GMT
Not After : Feb 10 19:00:28 2026 GMT
Subject: CN=76abcf8dd0dd8e1e731dcd8b9585b73009a9eb99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1f:fb:e0:9f:f7:cc:b1:af:44:fd:da:ed:f4:
23:6b:51:cf:39:0f:6c:b7:8a:77:54:8c:fa:68:c2:
ee:e1:0b:4f:db:04:de:d3:ad:ed:27:d3:f5:07:c6:
e5:22:fa:b1:fb:9c:56:22:1a:ba:f2:90:a8:64:f1:
15:1c:a8:fb:c3:a2:c1:c2:3d:60:1e:ba:5b:a4:cf:
d3:34:be:40:ad:fa:d4:3b:ca:ab:e7:26:2a:27:a4:
8b:ef:07:20:b0:87:cb:b3:88:e3:55:70:8c:b4:af:
15:0f:8c:a3:0e:ea:c4:1a:e7:7b:b8:a9:a2:62:7c:
28:7f:03:d0:10:e6:86:b4:ed:82:61:a6:e7:45:63:
ad:f6:20:c5:a8:ff:ee:ff:ac:fb:79:f9:2b:86:d3:
3e:60:82:69:a7:01:61:95:6f:33:18:45:28:64:50:
de:b1:2f:22:e7:52:53:25:de:15:ee:b2:1a:44:e1:
e7:37:b2:04:6f:cf:f2:74:5a:b7:1f:05:28:97:5e:
ff:95:dd:42:22:2c:25:ce:83:31:40:0d:ea:e3:4a:
c1:60:1f:d6:95:e5:37:88:d3:3c:44:d1:dc:d2:34:
d0:07:81:bd:41:4b:3e:69:02:06:4d:14:9a:0d:b3:
15:27:b1:e8:ff:51:1c:6f:21:d3:e1:98:40:e4:b7:
e3:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:AB:CF:8D:D0:DD:8E:1E:73:1D:CD:8B:95:85:B7:30:09:A9:EB:99
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:38:36:ff:ea:9a:6b:2b:04:5f:26:02:03:bc:73:45:60:f7:
7b:11:bc:4d:8c:73:bb:df:dd:29:39:28:99:67:20:09:fb:84:
70:79:48:41:33:8b:9e:fb:83:69:55:c5:dc:3a:38:00:84:50:
ef:63:d4:cb:49:40:54:92:9b:31:25:b6:43:a2:f8:35:43:c2:
a5:a0:f2:c9:4f:31:cb:78:65:a1:22:4e:4e:a9:2b:b6:6b:d2:
38:3e:cc:fe:ee:37:69:d4:4e:a6:ab:e9:c1:5e:ad:c7:80:a4:
66:59:a1:da:f9:34:62:f4:dd:6f:5b:2a:3b:9b:77:16:6f:a1:
f8:e6:0b:c5:ce:a2:b7:76:b6:0c:93:ec:3b:75:11:12:78:94:
1c:8d:6b:43:94:6b:cd:24:a2:19:21:50:94:93:dd:7e:75:52:
10:ee:9b:4b:29:30:8a:a3:2c:6b:ca:06:18:00:55:4d:07:ac:
08:0c:4e:3f:2a:09:a4:f1:1e:cb:01:67:76:5a:a5:5d:63:3c:
06:00:35:a0:ac:9e:3e:75:04:a5:29:fa:74:10:d6:d8:96:7b:
97:a7:b8:11:b3:76:b1:55:97:4e:c4:d3:6e:8e:63:31:22:af:
71:7e:3f:9a:c7:62:c6:15:0c:03:17:ea:93:29:6d:8d:48:54:
dd:a6:8c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:54:18 2026 by rpki-client