This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft
File: uqDyWO70sr9LuqhDDB5YyowYjqc.mft (raw, json)
Hash identifier: zYuaZa9zHo5pW5MkFgVAZ47VdYwN9MhuNppJwUTyV8I=
Subject key identifier: 96:77:BC:B5:73:5C:10:9A:64:E6:BC:AB:C3:E2:71:1C:EA:F3:3F:ED
Authority key identifier: BA:A0:F2:58:EE:F4:B2:BF:4B:BA:A8:43:0C:1E:58:CA:8C:18:8E:A7
Certificate issuer: /CN=baa0f258eef4b2bf4bbaa8430c1e58ca8c188ea7
Certificate serial: 019BF72CC671F40033FB636CEB1E9F2E5752
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft
Manifest number: 0322
Signing time: Sun 25 Jan 2026 22:01:05 +0000
Manifest this update: Sun 25 Jan 2026 22:01:05 +0000
Manifest next update: Mon 26 Jan 2026 22:01:05 +0000
Files and hashes: 1: 6WDkbHlgSXxNJbB0drss0reruS8.roa (hash: oFDNB9590aZJb3RqzjukoKFlQp5/LXVYXoZGCKhDyHQ=)
2: 8K0KdrfhqUloGiC916NzfAFxh-c.roa (hash: drOaS31gZWGo628/BltbevehLEyrF74VNJF1nPIwijA=)
3: CHm4uxJXlMUd0r5QClzcF966Ijw.roa (hash: s8FUQD2MuDH7rbiip50DyRQrMult5B8vV44+OSbORFQ=)
4: Dx-Vy-swUiVNsZKUlolPXBZOZMI.roa (hash: 5aft0BRUbiVKXn588IybsdkKIbt9YKxjDesbktvL34g=)
5: Ke-GAW7E6yplbOZiIO0l5zT0Fic.roa (hash: soIv2LC8f5IdezvuoAAVJw8fZgLBnWGjy9O5qvDQ/+M=)
6: QFgVTa_d7QcMY8-5_IuqXoD8tZI.roa (hash: jeGiUlHqHgGFamo7VLOuJ0n17v7Q86jD8/H1xHylsKA=)
7: RwhCBNFrzcUzyEWsFVoiT8IdNVo.roa (hash: r7grjzieZGND+TLUxKczhr2oesywsPmZIS/b0+pyM6k=)
8: WskagO6bCwTQcwB7d_fzf3cdeI0.roa (hash: uVNMY6xrkiM26LXeGtpPm7fSn/FV5Pa+qtC9Vr6WBRk=)
9: YuYmQaJNtuOBq3fPKH-8v6Xr9Qk.roa (hash: U5rEQ3u5XOjHhPmf1nGbyQ/BjTbyBdisgzm75iFjhvQ=)
10: ZvzZunjDlBYEEo5tXrgzyLt_dGg.roa (hash: UPsyzhi87SZnZ58kTtKE+18tmkXvGwl7y+zmR4Y6hbw=)
11: pVK-BRQ98HDM69ZQ63Bm0uZRCXs.roa (hash: jvRqREvNlJK1CxR23zptuMNPkMy0b8MVlSlIgEiP7u0=)
12: s2DbXwViqvH_t7XGoYjUHT_R1ZQ.roa (hash: OmXK2hMqfTiOv63cfpCHEUHp32DpOlQUjEVCGC0CAvA=)
13: uqDyWO70sr9LuqhDDB5YyowYjqc.crl (hash: KB268LssdtEhmM6mMJSofwuhUB60qs87K4Q6r6zJ9Aw=)
14: zBKsN_Z6ioe9fqLCU_PChTHrs6A.roa (hash: CJ84WrCESQrejSbSiz0bPJ4g2Cfe/qkxFBCMR3bVRlE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f7:2c:c6:71:f4:00:33:fb:63:6c:eb:1e:9f:2e:57:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baa0f258eef4b2bf4bbaa8430c1e58ca8c188ea7
Validity
Not Before: Jan 25 22:01:05 2026 GMT
Not After : Jan 26 22:01:05 2026 GMT
Subject: CN=9677bcb5735c109a64e6bcabc3e2711ceaf33fed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:05:f8:2f:4c:9c:78:14:d5:e0:4a:14:5e:65:
ab:5a:74:8b:ac:9c:ee:bf:dc:15:39:8d:a9:51:18:
c8:c2:42:29:dd:22:6f:c1:1d:bc:d6:52:52:a0:eb:
81:8d:a3:4a:cd:0a:22:07:ad:86:08:12:21:fb:7b:
5d:d3:80:02:b8:fd:90:60:d5:77:69:5b:7a:ac:50:
38:51:99:4a:e3:eb:77:6b:7e:e2:ba:e1:ba:f8:7d:
ac:fd:2f:2d:cc:0f:ad:66:33:60:4a:58:a1:cf:d5:
11:20:8f:cf:31:a4:1b:c1:cf:d4:1d:3e:45:be:25:
ab:ce:62:d9:39:1c:18:4f:7a:67:94:84:0b:17:b9:
f2:d7:ef:80:13:2a:7e:99:4c:dc:3e:68:b8:97:2c:
a1:9b:55:bf:39:da:b2:ea:3e:e3:6a:a7:0e:a8:73:
65:a1:1b:40:3f:37:63:4d:d2:cd:b7:da:f5:67:e4:
23:2c:88:a5:0e:a6:a8:00:b1:8c:1f:f4:01:c5:02:
ce:10:69:08:73:80:8f:f3:f1:f1:2b:dc:49:56:11:
c5:00:62:75:38:64:8c:a5:10:44:cd:5b:86:b5:f4:
a8:0f:34:d7:02:dc:fa:92:d8:b9:11:33:27:5c:f1:
89:40:35:09:e0:09:3b:40:2c:d1:92:b0:a1:24:00:
2c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:77:BC:B5:73:5C:10:9A:64:E6:BC:AB:C3:E2:71:1C:EA:F3:3F:ED
X509v3 Authority Key Identifier:
keyid:BA:A0:F2:58:EE:F4:B2:BF:4B:BA:A8:43:0C:1E:58:CA:8C:18:8E:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:f2:6f:62:69:95:31:bc:9b:11:d5:1e:61:a0:bc:f9:89:5f:
de:ba:03:1b:c1:ff:57:02:27:c9:07:72:84:28:d1:b9:dd:b2:
b1:9f:87:79:7d:7b:16:d0:af:f5:e0:07:c3:1d:e2:c7:6c:48:
e7:ba:40:ce:09:82:bd:82:55:b3:42:a4:74:7d:72:c6:00:e4:
d6:0b:18:ce:e4:e8:5b:cb:93:ac:9d:1e:a3:75:21:93:0c:43:
66:f9:b0:e0:3e:23:ca:50:c7:90:e9:68:96:04:a2:29:75:a4:
79:e3:26:f5:bf:01:96:76:a5:45:42:28:dd:5d:32:2a:5d:c3:
ee:03:44:fe:a1:2a:6f:b5:94:6a:39:ef:93:10:90:44:6c:51:
dd:8e:a5:fb:ac:1e:83:1b:35:b9:e0:1b:c3:f2:a1:cf:57:fc:
16:09:e0:30:3d:6d:96:74:4a:92:0e:2d:98:b7:0f:9a:06:13:
4a:ca:3e:f6:a2:72:fe:2a:25:db:98:63:79:24:58:0e:24:a4:
35:ad:cc:83:d8:de:b5:e7:15:36:86:d2:b0:02:59:39:87:c0:
0c:9c:54:0c:90:00:a8:39:aa:74:9a:2e:25:93:ec:e1:07:f1:
82:a9:9b:88:85:60:64:55:86:77:45:ca:13:72:b8:76:7b:21:
2f:d6:0c:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 07:46:56 2026 by rpki-client