This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft
File: up0w5gNb6Lg4YGHycUgccH4Ezis.mft (raw, json)
Hash identifier: AGyGjSmzJ5H2jQm2y8+KR9czMfV7JefhrAOQ4KKF0ho=
Subject key identifier: A2:55:C4:24:AC:BC:6D:31:D5:87:E8:9C:13:75:90:3C:DB:88:5E:28
Authority key identifier: BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B
Certificate issuer: /CN=ba9d30e6035be8b8386061f271481c707e04ce2b
Certificate serial: 019BF65095A06100162445729AE3BC8B2E5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft
Manifest number: 17F7
Signing time: Sun 25 Jan 2026 18:00:34 +0000
Manifest this update: Sun 25 Jan 2026 18:00:34 +0000
Manifest next update: Mon 26 Jan 2026 18:00:34 +0000
Files and hashes: 1: 0MNXCFdih4d9FwCAX6PPnVOHOIQ.roa (hash: VbJf/zpJU+nEIQciqPz/B0PK4md21WWEaGREZ1xeby8=)
2: 1KgfC-hxOio5W-Z9Sgg63Nt5rkY.roa (hash: EoOuCir1JdYOzVmD9C+0aCRnn0E0kdYzw6esRGPxmMQ=)
3: 53-Empt8fqhopJ7cOY61y1UNXLc.roa (hash: YjL+5qe2020D+DOQyVjhX1FTLXsdUT9QvCPVPeb6WkY=)
4: 6fl2PyZRjLFdwSBx3r61hkXya8k.roa (hash: D61QyHJ6S5T1IxCuN2yRBjSfJTg/+aLEQXnYgmdlUDs=)
5: ANtitpMQT-uK7LHD0X0IbBsKjWM.roa (hash: 5c2CNK7pBthzGV4Sg561qpwP1GJzRFFkA4PDWmW+aSg=)
6: Df8h7qloFeTHYGavNQ4pJHpP5CU.roa (hash: 3kk9LrOCm1NH+leIgX8QEU4SIoLjtl1E1AbkJm7CLGc=)
7: IDuIILf-M7RgIDs4AJSYtPxrGic.roa (hash: Nv2s82WUeiBOVGtaFJF3rHfW4CDw9k2CQ7WS0TmM93s=)
8: ITKErq6hul380zQefCl7nGu5iiw.roa (hash: ThIKSMsSMV9/7c4Wu+9DRro9qpNPtMCBXl8IA6+T3z0=)
9: R-8E5zauBsFTDGfod6Tef2eLm4M.roa (hash: ClvLXgh4oJn2dvcbOHZrF6o7ap5IhqsfDX14XxeUfO0=)
10: a149HuY71oYMfosTA9HCL8g-pdI.roa (hash: FHyu/0R9GDUP3gmfU9JfTLPTviTJTT8eGmQ8uq/ZlfA=)
11: bTookxgPSxSd_gnM8XNiIJ3mpr8.roa (hash: qaTVa3H72kXabxQBE9N2TN7e2tyXH6RWDJSNci8VjEs=)
12: blYq_pKFV_IJYUCGIJ3ZWpeEWIs.roa (hash: aV35UJJhFzqPJKc16YBKA5F2EyafDubx6D6p0nLFPAk=)
13: ehRbssTu-uCbiOQmcMxAxNH82GI.roa (hash: aYjSWmwkop/Ic11eCu/RIPvn387xQFE72I0LsyWzzf0=)
14: fD0zMeFpTdbjlyII0WXNlsdWjwg.roa (hash: 1nJ8LKFZY40ZGZ9fyCE9tTFmLCEjP6khJLvEfhwNXts=)
15: hYygt2D_2n1pYi_NTrG2nkmeaiI.roa (hash: dQrBwFPxwSf58rNos8WFJkrSXg3GQyoC4p0wWkx0CkU=)
16: khIatClzzDAzsXKofHk3CzFjNwQ.roa (hash: VqTvtGjsJjhyzOsm3Z+fa0f8w1YFBA58VD7S9gC+DFg=)
17: ky1PLfC5Niqk_rOOzNBr8Wiq3Ls.roa (hash: O3k8tfSgOWL0eFoLFOr80zr8e1hwzB6oN6psmB5jVbw=)
18: l_ZD8sSGfJ3_8TqaLtRsvJOov9Q.roa (hash: 0ZLcxVq4SbMJb/Tzs+R0ez5dGHPb27PKXrdMSol7/iI=)
19: o2CtVQw5GkFX89PhUjlW0skEA5w.roa (hash: m4/K5u0ohrJNEPA+u5iCk/BUETlDCODb4D0JMGKGkg4=)
20: oy53UV29ZxGHyA7mlLseXZBnge8.roa (hash: zmREFQtkqLZ8wJLGEuvGnLyo+ZygeKXKKyJIbyBcMM4=)
21: qSnbVpCUTBo3CbEFeEaAeBg12KU.roa (hash: lUFBwmvXAt5o1tXZm7PlCC3E71TOjkaQgtMQg6Erswc=)
22: uhWP65iIcvZTsGSiBTIcefinHZQ.roa (hash: RDsU+on83wZCchaROnKt/rVWQYfzxwy4j90xxJ6pfyg=)
23: up0w5gNb6Lg4YGHycUgccH4Ezis.crl (hash: UeeWNSR4TE40dFzpdC06/9zMMsrCyxH3TZJ/orCV260=)
24: utXncXuA_OVYenBHTUcefIlVlqw.roa (hash: vacBCvxALxMx+lWF0rrJZIqXaveVzsDK01rv6TdYQgM=)
25: vuod5WTfo-bMzWgcehLtUNsV8iQ.roa (hash: S3lLxKRzTk1ObgBCNRSt9Y3FAylgCuMuERfb8CAqXtY=)
26: xSEYJ36rS-kznLQUl3DFtM3R1jM.roa (hash: 3mFKbERmZQc21I9KRtXeu1S3oH9xaIQQ0cmDzkgXhUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft
rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f6:50:95:a0:61:00:16:24:45:72:9a:e3:bc:8b:2e:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba9d30e6035be8b8386061f271481c707e04ce2b
Validity
Not Before: Jan 25 18:00:34 2026 GMT
Not After : Jan 26 18:00:34 2026 GMT
Subject: CN=a255c424acbc6d31d587e89c1375903cdb885e28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f2:6b:8c:a1:80:1c:bc:9a:de:a4:ad:69:b7:
4a:bd:0a:07:15:b8:95:13:12:b7:26:30:68:f4:78:
bb:57:7c:2a:34:31:78:a0:6e:9b:4c:8a:8a:a5:e5:
ee:c0:83:d4:fb:33:2f:67:bf:e6:3e:da:1a:32:88:
e8:d6:5e:ec:09:21:a7:fe:18:57:b1:53:1c:a2:01:
3e:82:80:b4:80:a2:af:ed:c8:23:92:84:99:33:0a:
02:1d:ff:e3:16:83:f0:42:c8:0c:5b:76:54:c1:86:
e4:d9:6e:ef:fe:50:8a:7d:2c:5d:65:4a:6a:f1:a0:
c5:19:38:48:f7:ac:87:68:bc:1f:a0:6c:ae:34:c0:
1d:32:62:e5:19:87:a6:3f:ab:b0:dd:0f:26:5d:b0:
34:f1:61:da:ec:cc:ae:a1:bb:22:49:2d:6b:a6:01:
c2:9e:b0:54:b2:aa:a1:9a:02:d7:89:6b:27:a8:3f:
95:a9:2f:ca:47:22:07:8b:09:7a:a5:31:34:5c:2d:
0c:cc:9c:a5:e6:38:bb:3d:97:30:4f:35:87:cf:5d:
f5:8d:1c:83:b7:9f:1f:6d:48:83:77:bb:c0:94:ac:
bc:ca:cc:45:9c:9b:1e:66:65:5b:63:59:05:50:07:
40:13:cd:12:76:de:26:53:7e:40:0a:35:a9:96:65:
db:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:55:C4:24:AC:BC:6D:31:D5:87:E8:9C:13:75:90:3C:DB:88:5E:28
X509v3 Authority Key Identifier:
keyid:BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:07:76:70:19:60:81:7e:ea:b6:fb:8f:60:30:92:a4:95:ba:
79:7f:7a:95:f5:67:43:6f:1b:ff:dd:4c:2f:df:25:7f:2d:5f:
65:8c:08:d4:a9:44:15:d5:49:4c:0a:68:76:5c:27:fc:2a:f8:
34:35:4f:4a:45:2e:09:b6:d7:f7:8b:28:ad:f8:36:06:a1:57:
86:77:dc:c0:14:13:2a:21:fe:a6:4e:0d:aa:76:c7:85:d6:61:
cf:95:b5:3c:e6:54:be:70:0a:4b:e2:c3:73:38:c0:5c:b4:4b:
9c:ce:4e:19:a5:b5:0c:cd:60:bf:54:f4:fc:48:3c:0f:db:02:
8f:91:74:af:a7:8c:fe:06:8f:23:d1:62:55:87:56:e8:a3:95:
00:62:ac:f8:88:ca:3c:41:89:b1:78:b1:46:90:2a:89:c5:66:
69:08:ff:ef:27:0b:83:a1:ca:e4:b1:f8:5e:bb:97:ee:bb:9e:
dc:da:cc:92:21:d8:d4:f5:66:a8:64:c2:5b:c5:32:54:f6:c7:
af:a5:13:e7:d9:10:95:d2:ba:0d:59:72:2c:a9:0e:8e:b7:c6:
75:af:1b:dc:11:74:a9:ce:8e:73:eb:85:f4:5c:8c:e5:c6:96:
c2:75:92:56:4b:af:45:ee:04:52:12:7a:5a:75:31:34:92:35:
b1:08:51:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:43:57 2026 by rpki-client