This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/05db80-1baf-437a-a48f-d4d44bd91afe/1/U3YJ5EhhINufF7bT10v4VfJxV18.mft
File: U3YJ5EhhINufF7bT10v4VfJxV18.mft (raw, json)
Hash identifier: jr0NfxS1il+VW0S2HMw0lrYX8VBUM5iAd/odUlc4zFw=
Subject key identifier: 3F:06:4A:36:47:58:37:D6:A3:5D:D6:2E:6E:4B:C4:CA:7E:9A:CA:1A
Authority key identifier: 53:76:09:E4:48:61:20:DB:9F:17:B6:D3:D7:4B:F8:55:F2:71:57:5F
Certificate issuer: /CN=537609e4486120db9f17b6d3d74bf855f271575f
Certificate serial: 019C4510559F50ED3D9E926DC84C44C4962F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U3YJ5EhhINufF7bT10v4VfJxV18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/05db80-1baf-437a-a48f-d4d44bd91afe/1/U3YJ5EhhINufF7bT10v4VfJxV18.mft
Manifest number: 0E8F
Signing time: Tue 10 Feb 2026 01:00:24 +0000
Manifest this update: Tue 10 Feb 2026 01:00:24 +0000
Manifest next update: Wed 11 Feb 2026 01:00:24 +0000
Files and hashes: 1: U3YJ5EhhINufF7bT10v4VfJxV18.crl (hash: D/fNsn9vLFW+Cic7srHPw9WhNMgyFhNjR+vcz862GU0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/05db80-1baf-437a-a48f-d4d44bd91afe/1/U3YJ5EhhINufF7bT10v4VfJxV18.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/05db80-1baf-437a-a48f-d4d44bd91afe/1/U3YJ5EhhINufF7bT10v4VfJxV18.mft
rsync://rpki.ripe.net/repository/DEFAULT/U3YJ5EhhINufF7bT10v4VfJxV18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:45:10:55:9f:50:ed:3d:9e:92:6d:c8:4c:44:c4:96:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=537609e4486120db9f17b6d3d74bf855f271575f
Validity
Not Before: Feb 10 01:00:24 2026 GMT
Not After : Feb 11 01:00:24 2026 GMT
Subject: CN=3f064a36475837d6a35dd62e6e4bc4ca7e9aca1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c2:b4:b4:05:44:55:7c:91:b3:94:39:c4:e4:
fb:fc:37:78:93:d7:d7:cf:ff:36:7f:e6:75:cd:6c:
73:11:de:88:31:ed:3e:f8:ca:c8:70:87:78:bf:90:
09:fb:91:e2:e1:f3:ab:4c:01:95:2a:16:2f:b0:86:
0c:9c:03:27:ef:80:59:54:12:67:b4:49:6d:b5:72:
61:69:52:ee:70:f4:1a:12:22:e8:88:e0:1e:46:ce:
e6:53:16:5d:46:74:b3:dc:b3:64:e2:25:8b:7b:9d:
1f:15:5b:c8:d8:bd:d3:bd:9b:1b:76:7a:18:16:86:
00:76:30:89:6f:41:17:50:f5:6a:6f:b9:b5:e6:63:
11:0a:07:53:a5:b4:aa:3c:b6:89:ff:a2:f4:14:ff:
76:3a:19:5a:90:4b:a2:0f:03:1c:39:b9:41:37:9d:
df:cf:00:17:d5:d5:58:58:fa:e8:8e:d6:6e:b2:5e:
ec:91:94:4b:7c:b0:98:14:af:4c:b8:1c:03:a9:4d:
30:e2:d5:bf:f9:7a:ba:05:eb:9b:0e:40:29:ba:fd:
1d:8a:3f:13:e3:52:ad:76:99:e5:63:ab:f8:54:d8:
75:1f:ce:5a:1c:56:09:49:0a:58:09:a0:2b:b0:d5:
54:bf:87:66:8c:96:4e:8c:25:30:11:fa:e2:4f:88:
34:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:06:4A:36:47:58:37:D6:A3:5D:D6:2E:6E:4B:C4:CA:7E:9A:CA:1A
X509v3 Authority Key Identifier:
keyid:53:76:09:E4:48:61:20:DB:9F:17:B6:D3:D7:4B:F8:55:F2:71:57:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3YJ5EhhINufF7bT10v4VfJxV18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/05db80-1baf-437a-a48f-d4d44bd91afe/1/U3YJ5EhhINufF7bT10v4VfJxV18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/05db80-1baf-437a-a48f-d4d44bd91afe/1/U3YJ5EhhINufF7bT10v4VfJxV18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:bf:5f:bf:02:51:79:da:70:8a:ee:40:fe:45:69:83:d3:26:
9c:da:8a:4c:dd:90:de:cf:71:4f:47:e7:e2:47:51:26:3a:fd:
46:cc:05:c1:e4:cc:05:2c:35:91:cf:25:fc:7e:f4:b9:20:87:
b5:9a:2c:f8:bd:27:e8:1d:42:35:94:2b:6b:38:22:6d:ac:f0:
31:f9:be:ab:7c:dc:c1:3f:94:78:d6:1f:a2:f2:ad:6a:0b:1d:
fa:13:76:6b:44:0a:f0:b8:0b:c2:87:c1:94:e7:e8:18:5a:de:
f7:d5:6a:2f:4e:d7:c3:dd:f6:77:13:7a:e7:44:1a:47:35:1e:
09:09:4e:8d:fc:5b:82:d9:ec:91:05:7d:b1:50:79:91:cf:77:
be:a2:1d:e5:5c:bc:6d:1b:28:ec:e4:dc:30:b2:ec:29:fc:25:
9b:10:f2:b6:00:82:c5:b4:56:15:f9:40:dc:61:1c:2a:ad:ea:
97:99:b8:18:d1:dd:94:88:07:e9:3c:47:1b:37:43:18:ae:eb:
49:6a:37:39:59:0e:69:a6:67:92:0c:fa:8d:de:8f:a2:61:c4:
85:35:63:22:be:b9:47:6e:04:81:5c:50:d1:61:e0:14:00:4e:
c1:12:99:c3:6c:0e:54:e2:9d:3d:0c:34:83:88:55:ce:d3:80:
d9:bb:9c:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 02:51:26 2026 by rpki-client