This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/c0934b-1d1d-45c0-ba6f-ef9814cff2b8/1/UhX-g5SM_H0-AHKHDHA_oxNQLLw.mft
File: UhX-g5SM_H0-AHKHDHA_oxNQLLw.mft (raw, json)
Hash identifier: tZBhQ27w3JZyFsPF3UY3ZBUiLW46/yy59UtYV3aV++s=
Subject key identifier: 26:EB:FB:C6:79:8C:99:B2:61:78:40:D1:4A:7C:95:EF:C5:F4:32:1F
Authority key identifier: 52:15:FE:83:94:8C:FC:7D:3E:00:72:87:0C:70:3F:A3:13:50:2C:BC
Certificate issuer: /CN=5215fe83948cfc7d3e0072870c703fa313502cbc
Certificate serial: 019C427D531CE2D0D7F38DD0B7D6CA28F63E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UhX-g5SM_H0-AHKHDHA_oxNQLLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/c0934b-1d1d-45c0-ba6f-ef9814cff2b8/1/UhX-g5SM_H0-AHKHDHA_oxNQLLw.mft
Manifest number: 1811
Signing time: Mon 09 Feb 2026 13:00:35 +0000
Manifest this update: Mon 09 Feb 2026 13:00:35 +0000
Manifest next update: Tue 10 Feb 2026 13:00:35 +0000
Files and hashes: 1: UhX-g5SM_H0-AHKHDHA_oxNQLLw.crl (hash: 1df6y+EQk9GyovNqSQAQ7tzSMAoO/KGK8WzWLMH2QMs=)
2: ghAGIAHf2NUSuXtfAt8s6eabgvg.roa (hash: S/XY0H52dZPgXYBFOlUepYiuIVmvJAzUO0r3Q7zhLjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/c0934b-1d1d-45c0-ba6f-ef9814cff2b8/1/UhX-g5SM_H0-AHKHDHA_oxNQLLw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/c0934b-1d1d-45c0-ba6f-ef9814cff2b8/1/UhX-g5SM_H0-AHKHDHA_oxNQLLw.mft
rsync://rpki.ripe.net/repository/DEFAULT/UhX-g5SM_H0-AHKHDHA_oxNQLLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7d:53:1c:e2:d0:d7:f3:8d:d0:b7:d6:ca:28:f6:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5215fe83948cfc7d3e0072870c703fa313502cbc
Validity
Not Before: Feb 9 13:00:35 2026 GMT
Not After : Feb 10 13:00:35 2026 GMT
Subject: CN=26ebfbc6798c99b2617840d14a7c95efc5f4321f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:27:4b:d1:b4:b4:c9:ca:84:a2:6d:70:31:64:
2b:17:6a:20:da:4e:2c:42:52:63:93:0c:ec:1c:e1:
23:ce:b3:60:c8:34:0e:05:bd:c5:ca:0a:8e:05:43:
c4:c6:13:1f:37:63:15:ac:0a:67:fe:91:1d:c4:b4:
c4:03:47:31:c2:19:bb:d3:12:32:08:e9:d2:fa:71:
77:bc:50:c9:8a:5f:80:86:f9:e7:81:a1:cb:da:00:
4c:a6:be:d4:76:e3:ae:fa:a3:51:0b:8c:67:09:54:
1a:0e:c5:72:af:f1:14:cd:79:a3:7f:c2:0c:da:75:
10:74:03:13:ff:c7:72:49:53:e1:8e:65:db:23:a3:
d5:a9:0b:85:b1:4c:d3:f4:66:81:1b:ed:de:b5:16:
f1:d7:7a:e0:2f:fa:8c:9d:96:1e:73:7b:fa:b2:80:
05:c2:2b:47:15:36:b8:ab:b7:ac:6a:9c:31:3f:9e:
51:1f:a9:6b:b5:b6:70:b2:64:00:a2:a0:de:df:8a:
4c:55:17:1b:b9:cd:a1:ff:b8:1e:9d:da:30:e4:fb:
a5:e3:7c:75:32:de:c5:d0:bc:dd:85:96:eb:63:d3:
5a:1c:60:94:58:d9:89:03:bb:68:64:d7:ca:07:11:
a6:44:e9:7e:06:39:41:8f:43:19:3b:6d:b2:ed:a5:
9f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:EB:FB:C6:79:8C:99:B2:61:78:40:D1:4A:7C:95:EF:C5:F4:32:1F
X509v3 Authority Key Identifier:
keyid:52:15:FE:83:94:8C:FC:7D:3E:00:72:87:0C:70:3F:A3:13:50:2C:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UhX-g5SM_H0-AHKHDHA_oxNQLLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c0934b-1d1d-45c0-ba6f-ef9814cff2b8/1/UhX-g5SM_H0-AHKHDHA_oxNQLLw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c0934b-1d1d-45c0-ba6f-ef9814cff2b8/1/UhX-g5SM_H0-AHKHDHA_oxNQLLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:93:c5:11:62:0a:e1:0c:c2:61:3b:6e:4b:06:17:62:32:e2:
0d:e2:17:d2:5b:49:16:85:b2:62:ff:37:95:7a:5b:ff:66:33:
5f:55:48:9a:be:ca:66:0a:35:da:e1:98:9e:0a:75:21:e7:51:
52:e6:db:ce:b8:9c:2f:70:f0:74:e8:5e:c2:91:0a:61:2b:b8:
aa:85:ed:53:cc:bb:83:13:51:72:24:c5:a1:42:fb:94:21:4f:
e3:d6:6b:78:78:a5:27:e7:10:86:55:f3:f6:f4:b1:ed:9c:7c:
11:98:a3:e2:88:21:0b:dd:63:84:b5:4b:0b:50:49:55:13:54:
e6:90:74:0e:5d:8c:43:80:89:1e:10:24:73:df:a1:46:97:8f:
2d:71:76:48:39:36:46:b8:b5:2f:d3:1e:04:a5:78:94:89:7e:
1a:18:ac:db:e3:45:3c:17:41:6f:4d:8e:c6:a1:da:44:d6:ef:
f9:c1:e8:97:27:d0:c3:b4:1d:92:71:06:b6:cb:6c:3a:d6:79:
b1:a8:e5:43:6d:33:32:37:39:67:31:6b:0e:4c:f3:29:00:03:
d5:18:13:d2:76:ed:36:d3:89:94:38:5f:ea:d5:b8:6b:44:ad:
0f:55:5f:c8:b7:1c:99:c4:2e:f8:57:9d:6f:b3:6e:59:5a:9e:
9a:00:a6:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCfVMc4tDX843Qt9bKKPY+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyMTVmZTgzOTQ4Y2ZjN2QzZTAwNzI4NzBjNzAzZmEzMTM1
MDJjYmMwHhcNMjYwMjA5MTMwMDM1WhcNMjYwMjEwMTMwMDM1WjAzMTEwLwYDVQQD
EygyNmViZmJjNjc5OGM5OWIyNjE3ODQwZDE0YTdjOTVlZmM1ZjQzMjFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5idL0bS0ycqEom1wMWQrF2og2k4s
QlJjkwzsHOEjzrNgyDQOBb3FygqOBUPExhMfN2MVrApn/pEdxLTEA0cxwhm70xIy
COnS+nF3vFDJil+AhvnngaHL2gBMpr7UduOu+qNRC4xnCVQaDsVyr/EUzXmjf8IM
2nUQdAMT/8dySVPhjmXbI6PVqQuFsUzT9GaBG+3etRbx13rgL/qMnZYec3v6soAF
witHFTa4q7esapwxP55RH6lrtbZwsmQAoqDe34pMVRcbuc2h/7gendow5Pul43x1
Mt7F0LzdhZbrY9NaHGCUWNmJA7toZNfKBxGmROl+BjlBj0MZO22y7aWftwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCbr+8Z5jJmyYXhA0Up8le/F9DIfMB8GA1UdIwQY
MBaAFFIV/oOUjPx9PgByhwxwP6MTUCy8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWhYLWc1U01fSDAtQUhLSERIQV9veE5RTEx3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9jMDkzNGItMWQxZC00NWMwLWJhNmYt
ZWY5ODE0Y2ZmMmI4LzEvVWhYLWc1U01fSDAtQUhLSERIQV9veE5RTEx3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS9jMDkzNGItMWQxZC00NWMwLWJhNmYtZWY5ODE0Y2ZmMmI4
LzEvVWhYLWc1U01fSDAtQUhLSERIQV9veE5RTEx3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOJPFEWIK
4QzCYTtuSwYXYjLiDeIX0ltJFoWyYv83lXpb/2YzX1VImr7KZgo12uGYngp1IedR
UubbzricL3DwdOhewpEKYSu4qoXtU8y7gxNRciTFoUL7lCFP49ZreHilJ+cQhlXz
9vSx7Zx8EZij4oghC91jhLVLC1BJVRNU5pB0Dl2MQ4CJHhAkc9+hRpePLXF2SDk2
Rri1L9MeBKV4lIl+Ghis2+NFPBdBb02OxqHaRNbv+cHolyfQw7QdknEGtstsOtZ5
sajlQ20zMjc5ZzFrDkzzKQAD1RgT0nbtNtOJlDhf6tW4a0StD1VfyLccmcQu+Fed
b7NuWVqemgCmsw==
-----END CERTIFICATE-----
Generated at Mon Feb 9 21:06:46 2026 by rpki-client