This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/fbd6c5-460e-44fc-b074-8bfdb969859c/1/UkE_LlWQcATFq2mJ3n7tFUNTWBE.mft
File: UkE_LlWQcATFq2mJ3n7tFUNTWBE.mft (raw, json)
Hash identifier: kpYBovUk7SuHPq9j6FlSMLqf50qB6diMNk+xQW53TkE=
Subject key identifier: 04:AC:AF:AE:E5:48:94:6B:10:DB:D4:50:00:B4:28:25:19:C2:D2:2B
Authority key identifier: 52:41:3F:2E:55:90:70:04:C5:AB:69:89:DE:7E:ED:15:43:53:58:11
Certificate issuer: /CN=52413f2e55907004c5ab6989de7eed1543535811
Certificate serial: 019C4246243E7CDF8ECAFCB1F70D7CACE4BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UkE_LlWQcATFq2mJ3n7tFUNTWBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/fbd6c5-460e-44fc-b074-8bfdb969859c/1/UkE_LlWQcATFq2mJ3n7tFUNTWBE.mft
Manifest number: 08B7
Signing time: Mon 09 Feb 2026 12:00:18 +0000
Manifest this update: Mon 09 Feb 2026 12:00:18 +0000
Manifest next update: Tue 10 Feb 2026 12:00:18 +0000
Files and hashes: 1: UkE_LlWQcATFq2mJ3n7tFUNTWBE.crl (hash: o2KsUYBNLKg/wI0/VJ4vpaFM6+W1WXQYsGN17qarmMI=)
2: zeTmjM1efMeaIVBsxyvvNq4AsaE.roa (hash: 59k70zw01dCfn2bvYSfvqkTPjOjJ1wFS22WS6baIDJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/fbd6c5-460e-44fc-b074-8bfdb969859c/1/UkE_LlWQcATFq2mJ3n7tFUNTWBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/fbd6c5-460e-44fc-b074-8bfdb969859c/1/UkE_LlWQcATFq2mJ3n7tFUNTWBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/UkE_LlWQcATFq2mJ3n7tFUNTWBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 12:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:46:24:3e:7c:df:8e:ca:fc:b1:f7:0d:7c:ac:e4:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52413f2e55907004c5ab6989de7eed1543535811
Validity
Not Before: Feb 9 12:00:18 2026 GMT
Not After : Feb 10 12:00:18 2026 GMT
Subject: CN=04acafaee548946b10dbd45000b4282519c2d22b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c3:fa:25:17:3c:5c:3e:db:55:20:b7:f4:41:
81:81:9c:fd:15:fa:85:01:84:dd:86:31:a8:db:7c:
9c:0d:f9:82:04:28:b1:1a:24:dd:a7:96:76:e2:31:
e6:0b:c8:76:68:24:4a:c1:c4:69:0b:6f:d0:d4:ef:
19:20:6e:0a:7c:4a:1c:a9:01:73:c0:fa:9c:79:ab:
a3:93:75:53:e6:fc:e4:66:cd:28:16:e1:2c:6a:66:
a0:3c:7d:4b:70:49:38:4c:6b:83:16:99:85:30:c4:
28:72:55:b1:cf:51:71:f3:4d:73:6d:ed:54:c8:07:
2d:fa:86:4f:2c:8d:d6:09:c3:bf:67:fe:7e:5c:56:
37:a2:a5:99:95:ad:9c:b6:f8:9a:bf:17:dc:3f:48:
b2:af:27:a0:a4:58:c9:3e:57:eb:32:eb:80:94:92:
92:bf:77:95:79:26:1a:b5:5f:bb:1c:4b:d7:da:38:
f7:b5:3e:9a:88:fb:2d:fc:0e:d7:38:6c:46:33:54:
3d:98:15:98:1e:12:b9:39:4d:5c:3c:dc:a6:48:29:
06:93:c1:46:60:ab:46:27:60:5a:c4:2f:78:2c:92:
a9:cd:6a:3c:e8:4c:72:66:bf:56:d7:4b:77:78:c5:
cf:21:2c:13:bf:04:5a:db:98:69:a8:71:13:52:50:
5d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:AC:AF:AE:E5:48:94:6B:10:DB:D4:50:00:B4:28:25:19:C2:D2:2B
X509v3 Authority Key Identifier:
keyid:52:41:3F:2E:55:90:70:04:C5:AB:69:89:DE:7E:ED:15:43:53:58:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UkE_LlWQcATFq2mJ3n7tFUNTWBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fbd6c5-460e-44fc-b074-8bfdb969859c/1/UkE_LlWQcATFq2mJ3n7tFUNTWBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fbd6c5-460e-44fc-b074-8bfdb969859c/1/UkE_LlWQcATFq2mJ3n7tFUNTWBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:f9:7f:0c:ea:6a:76:b0:21:6b:e7:4c:e2:8a:fe:41:74:10:
7b:26:55:b6:b0:de:51:92:ac:83:6b:f8:da:a8:ef:18:8e:e6:
c6:a1:5b:f0:f4:86:c1:f7:4e:85:b1:ad:c8:fb:13:87:8a:c3:
af:10:bd:03:ae:e6:ad:4f:2d:92:3a:86:3b:e5:f0:44:bc:96:
a9:ad:42:e8:23:44:bf:9e:1b:cc:a0:2e:6a:7a:92:3d:7d:06:
8f:f2:d1:94:20:dc:55:a2:06:05:25:97:a5:83:05:2f:b9:54:
17:ec:f0:f6:f1:a0:5a:be:b8:a4:f3:9c:13:51:63:93:f6:ba:
42:1e:39:e0:5e:ad:59:19:3f:0d:a2:42:e9:ee:5c:b3:6e:7a:
36:fc:74:04:8e:ef:fb:4d:4b:16:95:73:07:5b:39:a6:b5:c4:
04:80:a4:dd:f5:a3:71:ba:56:32:37:21:17:2d:57:4a:5f:19:
19:15:65:f5:c0:a1:17:f6:ec:b5:07:25:90:6c:48:b4:57:1d:
66:d6:bd:a7:93:8b:55:2a:54:ae:67:b7:bb:52:dc:47:8b:fe:
0c:76:de:72:d4:dd:2f:92:8a:99:3f:bb:14:bb:22:58:7c:70:
35:5a:38:86:0d:c0:43:a2:ab:0b:df:46:9d:05:64:1a:d9:b6:
85:10:1b:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:06:48 2026 by rpki-client