This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft
File: uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft (raw, json)
Hash identifier: lLXCQobkKdQ2dXgjZYXKXJr26kAYLDIQPObItbrepXM=
Subject key identifier: 7E:18:7B:87:9B:0E:78:81:9E:10:0A:B6:1D:44:C4:86:70:60:5E:65
Authority key identifier: BA:83:8F:1C:A8:BD:CD:81:C0:4B:6B:67:8E:79:BE:61:4E:51:B1:11
Certificate issuer: /CN=ba838f1ca8bdcd81c04b6b678e79be614e51b111
Certificate serial: 019BFBE57D30384F015F93F2B8723C79D275
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uoOPHKi9zYHAS2tnjnm-YU5RsRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft
Manifest number: 0F30
Signing time: Mon 26 Jan 2026 20:01:19 +0000
Manifest this update: Mon 26 Jan 2026 20:01:19 +0000
Manifest next update: Tue 27 Jan 2026 20:01:19 +0000
Files and hashes: 1: 1-hqgVSQBF_UvAinXCtYpxtppbVY.roa (hash: MeKegUTuGCWzFw8KT6nzeyZf5iVq1ADUyVCv+0PDLZ0=)
2: RgWpzavVVfS1b_1UHTxSsoDVFDI.roa (hash: eoIqVrp2QP0CPLWKfdOhEUrB73wKmzs7Euo9X382JX8=)
3: uoOPHKi9zYHAS2tnjnm-YU5RsRE.crl (hash: NELgy/QB8n6KfHTXez7qq9ZdnqrDeMUQXn8Pkzrw5kk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/uoOPHKi9zYHAS2tnjnm-YU5RsRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 15:35:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:fb:e5:7d:30:38:4f:01:5f:93:f2:b8:72:3c:79:d2:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba838f1ca8bdcd81c04b6b678e79be614e51b111
Validity
Not Before: Jan 26 20:01:19 2026 GMT
Not After : Jan 27 20:01:19 2026 GMT
Subject: CN=7e187b879b0e78819e100ab61d44c48670605e65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:6d:46:f1:5d:3b:31:81:e5:6e:be:ff:15:09:
00:86:76:a0:43:70:e1:3d:f3:28:44:fb:11:1c:37:
dd:6b:29:7c:fc:68:6e:e1:bb:92:f6:f2:8c:f6:3a:
e5:39:37:f2:06:9d:fc:40:58:ab:00:56:18:de:b4:
45:c5:44:7e:0c:a6:0d:18:a2:3d:01:22:50:56:0d:
b3:96:55:d2:21:02:47:75:fb:fd:0c:25:83:41:61:
68:a5:a7:9f:7c:60:0e:66:25:16:8c:00:9d:cf:a2:
8a:f5:a2:e0:19:d6:9b:7c:0e:60:6b:95:4d:2e:08:
5e:bc:7e:80:c5:86:c7:08:b7:ab:8b:54:1b:03:1f:
21:c6:7d:15:01:e0:93:f9:b7:ed:d3:60:b2:d8:6c:
36:ae:d3:26:e2:7b:df:d5:a9:30:3f:1f:02:f8:b1:
4c:0c:0d:14:69:e5:db:e9:62:92:88:64:e1:ea:ba:
ef:b3:7a:46:64:99:a8:63:e0:7a:aa:70:4d:ec:f7:
2e:db:82:00:14:ee:51:4a:f0:63:4d:65:6c:0b:e9:
c0:ab:ff:2a:c7:70:fc:51:3f:7a:a7:68:70:12:92:
7c:02:df:0f:c1:b5:b9:94:c8:2a:32:f4:b3:3c:81:
aa:3f:8d:e4:c3:07:94:f6:18:fe:d3:15:f2:3a:5e:
29:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:18:7B:87:9B:0E:78:81:9E:10:0A:B6:1D:44:C4:86:70:60:5E:65
X509v3 Authority Key Identifier:
keyid:BA:83:8F:1C:A8:BD:CD:81:C0:4B:6B:67:8E:79:BE:61:4E:51:B1:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uoOPHKi9zYHAS2tnjnm-YU5RsRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:a6:7f:9e:95:94:5e:09:ac:c9:ef:d9:b8:d7:56:25:df:74:
b8:fc:9c:0d:35:56:4c:c5:e7:37:4d:88:7d:b9:6f:d3:75:3a:
19:5b:8a:25:00:07:53:68:00:4d:be:e1:46:b1:1d:d4:7c:82:
1d:fd:96:cf:e3:a5:43:6e:9f:5c:17:01:2c:5b:da:87:c6:45:
dc:49:dd:7a:a2:af:25:3d:77:44:06:ba:5a:2e:ff:16:76:85:
73:92:26:07:b7:cf:07:02:90:c1:84:65:ab:dc:8f:96:19:02:
da:5b:72:b1:28:f5:91:c4:70:c8:a5:44:58:17:f5:b5:40:85:
72:b9:04:b0:0f:00:40:fc:c9:38:1b:b0:8f:17:98:35:a2:cd:
9b:3c:77:f6:42:a0:cf:49:55:b2:63:4e:53:f4:e4:35:e3:75:
b2:c9:8b:ba:00:53:04:5a:e8:bb:a4:64:9c:03:41:4f:16:94:
9d:5f:82:6f:1f:cc:37:b8:42:76:23:43:ad:36:a8:37:02:2b:
d6:b6:4b:64:14:0e:09:95:a6:c1:78:85:72:a8:1d:c8:d6:e5:
ba:82:00:2f:fd:5f:67:ce:d6:db:3a:48:19:9d:6c:b6:25:24:
40:59:cf:57:d8:63:68:50:49:c3:86:a5:99:bc:1b:6a:cc:93:
e2:1f:dd:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 23:27:16 2026 by rpki-client