This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/1432ce-f5d2-4393-ab23-88a0d5fdcf9b/1/ubWqn-6wClEnSH80OEB3rnlw-Bo.mft
File: ubWqn-6wClEnSH80OEB3rnlw-Bo.mft (raw, json)
Hash identifier: QYaFq+ZqNNT0mcknajSKLL/0BkzMNZtdKO6UAuG0GSc=
Subject key identifier: 23:57:AC:0B:32:84:DC:2E:89:01:75:20:53:AE:84:92:20:95:BF:E8
Authority key identifier: B9:B5:AA:9F:EE:B0:0A:51:27:48:7F:34:38:40:77:AE:79:70:F8:1A
Certificate issuer: /CN=b9b5aa9feeb00a5127487f34384077ae7970f81a
Certificate serial: 019C42465755B4FEFECCBE20F137E5716BB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ubWqn-6wClEnSH80OEB3rnlw-Bo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/1432ce-f5d2-4393-ab23-88a0d5fdcf9b/1/ubWqn-6wClEnSH80OEB3rnlw-Bo.mft
Manifest number: 134B
Signing time: Mon 09 Feb 2026 12:00:31 +0000
Manifest this update: Mon 09 Feb 2026 12:00:31 +0000
Manifest next update: Tue 10 Feb 2026 12:00:31 +0000
Files and hashes: 1: sxmrXu9E-QMmpeBcwLRWCGaEZE4.roa (hash: jY/5S/c8G/l4I3WYZXOjvNoUctwx3/ZjUHeaUP4rQBU=)
2: ubWqn-6wClEnSH80OEB3rnlw-Bo.crl (hash: JYcs8OrDDvXUD5UD30+l9U+QqyqiA9nyBmwSGYFce+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/1432ce-f5d2-4393-ab23-88a0d5fdcf9b/1/ubWqn-6wClEnSH80OEB3rnlw-Bo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/1432ce-f5d2-4393-ab23-88a0d5fdcf9b/1/ubWqn-6wClEnSH80OEB3rnlw-Bo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ubWqn-6wClEnSH80OEB3rnlw-Bo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 12:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:46:57:55:b4:fe:fe:cc:be:20:f1:37:e5:71:6b:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9b5aa9feeb00a5127487f34384077ae7970f81a
Validity
Not Before: Feb 9 12:00:31 2026 GMT
Not After : Feb 10 12:00:31 2026 GMT
Subject: CN=2357ac0b3284dc2e8901752053ae84922095bfe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:0b:95:bc:b3:2c:a3:50:07:7d:d4:15:44:8e:
68:07:ab:fa:e6:ea:5e:d4:98:f0:d0:7c:64:29:3c:
0e:7b:6a:48:a9:20:d9:85:05:57:34:14:f7:51:b8:
84:f7:20:16:fb:25:4e:71:75:11:a0:c3:2b:50:4f:
23:0b:3e:61:4a:01:19:a0:8d:52:b6:ea:54:9b:16:
f5:eb:c6:49:45:35:d9:9a:9b:85:3f:17:68:d4:e0:
87:e6:a6:4d:a4:d9:10:8f:2d:b3:40:5d:72:67:92:
3d:b8:5e:1d:0d:a4:1c:c1:e3:1c:ef:79:8b:2a:f9:
12:c1:dd:dc:b3:33:95:48:66:3e:cc:c1:20:44:72:
7a:1a:9d:35:23:40:ea:db:2d:f0:fe:0f:4d:ce:e0:
8d:21:cc:e9:6b:8f:5f:08:fc:15:f5:a0:1c:76:37:
06:b8:df:85:91:03:b7:22:0d:07:a5:d3:91:8c:2e:
5c:1d:ac:b5:60:2b:4c:70:42:8f:5c:80:f6:01:e3:
ae:41:4e:20:ca:a2:23:5b:48:e6:8a:ad:27:53:70:
0c:8e:9c:c7:ff:5f:2d:7a:7d:04:5a:ed:aa:75:35:
8e:3e:37:45:d9:a2:41:05:f6:6f:dc:ec:77:79:db:
25:19:e8:87:fd:40:ef:24:56:17:a9:43:b0:51:c5:
99:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:57:AC:0B:32:84:DC:2E:89:01:75:20:53:AE:84:92:20:95:BF:E8
X509v3 Authority Key Identifier:
keyid:B9:B5:AA:9F:EE:B0:0A:51:27:48:7F:34:38:40:77:AE:79:70:F8:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubWqn-6wClEnSH80OEB3rnlw-Bo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/1432ce-f5d2-4393-ab23-88a0d5fdcf9b/1/ubWqn-6wClEnSH80OEB3rnlw-Bo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/1432ce-f5d2-4393-ab23-88a0d5fdcf9b/1/ubWqn-6wClEnSH80OEB3rnlw-Bo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:f9:7d:da:7b:c9:30:a3:b5:75:3a:b4:53:f4:d9:28:01:8e:
03:be:b4:65:bc:61:36:ad:25:31:73:73:d0:31:12:35:2e:08:
53:84:01:46:d0:c9:87:bd:a3:13:72:a3:46:e0:16:87:70:fe:
87:09:46:35:ee:c6:f6:a4:ef:ce:0e:ab:d8:c2:06:74:a4:1e:
c8:ff:07:f8:0e:c3:e2:b0:37:ea:1e:fd:df:fe:d5:a6:37:c3:
a4:ff:e3:cd:e9:a3:20:30:83:eb:b8:f5:8b:79:dd:df:d6:fd:
50:a2:f4:a1:78:a3:5e:04:35:8d:31:95:ab:20:da:68:b6:64:
9c:2c:55:7d:24:a8:b3:1e:03:df:3b:0e:c5:cd:51:80:40:b4:
b2:33:af:e0:b3:18:cc:85:1e:1e:8f:57:d2:0b:52:0c:34:a5:
4f:bd:e0:50:95:8f:7a:0d:c2:d8:3a:59:a6:30:f8:9e:41:41:
a3:8c:2a:33:bf:c2:9f:95:29:e6:d7:a3:68:af:9a:ed:2f:07:
02:24:f2:13:65:2c:0a:ab:20:62:76:4e:46:50:95:e8:ae:62:
6b:1b:6d:c2:e0:1f:59:92:25:93:93:3b:f4:c7:bb:fd:ca:b1:
37:77:5f:3b:5e:6d:eb:12:08:15:fe:b3:1f:f5:55:da:63:df:
5d:73:a4:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:01:55 2026 by rpki-client