This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/566ccf-04ee-4823-a7fc-3e6a14de2c47/1/uJQ3VOkjRai7qz2yvDbWGOXswOg.mft
File: uJQ3VOkjRai7qz2yvDbWGOXswOg.mft (raw, json)
Hash identifier: oR/XxaqFOxDlfPimZxgMPwxHE0y28Etf0lngz3517GM=
Subject key identifier: 98:EE:92:E2:4A:6A:35:FE:BB:99:3E:5C:DC:E2:83:B6:51:B6:78:BC
Authority key identifier: B8:94:37:54:E9:23:45:A8:BB:AB:3D:B2:BC:36:D6:18:E5:EC:C0:E8
Certificate issuer: /CN=b8943754e92345a8bbab3db2bc36d618e5ecc0e8
Certificate serial: 019BF98954499DA7358E3D244CC7F1A1AC3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uJQ3VOkjRai7qz2yvDbWGOXswOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/566ccf-04ee-4823-a7fc-3e6a14de2c47/1/uJQ3VOkjRai7qz2yvDbWGOXswOg.mft
Manifest number: 177E
Signing time: Mon 26 Jan 2026 09:01:25 +0000
Manifest this update: Mon 26 Jan 2026 09:01:25 +0000
Manifest next update: Tue 27 Jan 2026 09:01:25 +0000
Files and hashes: 1: uJQ3VOkjRai7qz2yvDbWGOXswOg.crl (hash: EOa2YxGAhDcAaH/7l/DAveYSflerBcslhewlu9YbluU=)
2: wFgOguyGf2k_urlg3TTD49UB-Bc.roa (hash: mmkwLxl45AUjDJ9WsNq5QpGXB2gTpDmmeU8A9ngZEvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/566ccf-04ee-4823-a7fc-3e6a14de2c47/1/uJQ3VOkjRai7qz2yvDbWGOXswOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/566ccf-04ee-4823-a7fc-3e6a14de2c47/1/uJQ3VOkjRai7qz2yvDbWGOXswOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/uJQ3VOkjRai7qz2yvDbWGOXswOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 09:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f9:89:54:49:9d:a7:35:8e:3d:24:4c:c7:f1:a1:ac:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8943754e92345a8bbab3db2bc36d618e5ecc0e8
Validity
Not Before: Jan 26 09:01:25 2026 GMT
Not After : Jan 27 09:01:25 2026 GMT
Subject: CN=98ee92e24a6a35febb993e5cdce283b651b678bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:89:0d:e8:d8:93:0f:63:df:53:87:3c:81:c1:
0a:02:26:75:78:d8:3d:98:a5:54:56:c8:bb:8f:6c:
01:f4:b3:b7:da:66:0b:f7:a6:c2:db:bb:06:0f:7f:
ca:dc:56:f5:7f:99:18:e8:b2:b4:b8:9e:5a:05:05:
90:c3:8b:50:09:d0:23:3e:ff:c6:8c:90:81:2e:d4:
b8:c7:3b:0a:85:f0:3a:b9:cb:93:32:a1:47:fe:f4:
27:eb:74:c3:20:2c:8b:d0:cd:3b:69:2d:62:99:2d:
2b:1e:7a:57:40:a8:5d:af:72:7a:a6:e3:da:2a:11:
c9:ac:b1:9d:8f:2c:b3:a3:c9:30:78:61:72:23:06:
0a:90:10:2c:8c:29:91:38:5b:b2:11:3b:9a:20:c9:
2d:0f:62:62:a3:aa:e5:43:65:cc:cd:f8:82:c7:0e:
49:4d:b3:79:65:30:cf:cc:fb:da:46:48:92:cb:47:
48:ec:ff:1c:57:d6:62:1d:ea:d1:ce:c4:94:f7:57:
61:c4:9b:77:99:01:7c:7d:40:73:86:05:29:e0:e1:
33:da:c7:8c:13:40:38:18:17:a4:e8:61:a7:de:92:
99:6a:26:40:fd:4b:32:b9:d6:b6:e4:5d:d7:1f:36:
7c:8e:33:91:6d:c3:31:3f:e3:70:a9:a2:a3:96:3a:
d1:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:EE:92:E2:4A:6A:35:FE:BB:99:3E:5C:DC:E2:83:B6:51:B6:78:BC
X509v3 Authority Key Identifier:
keyid:B8:94:37:54:E9:23:45:A8:BB:AB:3D:B2:BC:36:D6:18:E5:EC:C0:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uJQ3VOkjRai7qz2yvDbWGOXswOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/566ccf-04ee-4823-a7fc-3e6a14de2c47/1/uJQ3VOkjRai7qz2yvDbWGOXswOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/566ccf-04ee-4823-a7fc-3e6a14de2c47/1/uJQ3VOkjRai7qz2yvDbWGOXswOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:c8:be:d1:68:54:58:41:73:ac:75:f0:81:18:d5:cd:0f:42:
59:3d:2c:99:08:ca:12:03:82:62:11:e9:0c:b3:e1:8c:0f:32:
15:75:df:1e:71:ad:c5:25:9a:e4:27:23:50:87:d7:bf:6a:79:
2c:11:c0:7f:4a:65:42:10:98:6f:75:95:bd:b7:fc:d8:dc:ec:
08:fb:f9:76:a0:5e:d0:5e:81:1a:e5:70:0f:62:34:15:b4:6d:
cf:17:5e:86:2f:1a:fb:c3:ad:f7:ba:28:fb:a3:49:27:6a:68:
84:ba:95:77:3e:e6:4c:eb:2e:c7:41:d6:58:d6:f9:17:57:a9:
8f:c0:ef:6f:e8:af:29:17:15:88:23:91:a0:a2:54:cd:12:d8:
42:8b:28:34:1e:53:35:8c:ca:e4:93:63:10:85:6f:3d:68:3c:
a4:c6:80:ce:d2:b4:65:75:69:01:d4:14:7c:45:81:44:36:d9:
2a:7f:2b:70:2c:aa:16:f0:dd:d2:d6:8a:fc:27:66:c8:12:96:
60:7a:36:f6:6e:14:cf:35:21:c1:40:ec:98:05:8e:28:04:04:
5a:32:e8:57:33:04:65:ec:a7:e8:9b:83:ac:53:41:99:68:8c:
3f:21:be:7d:78:14:59:d8:86:44:40:54:23:bb:8d:ea:22:41:
cf:a9:1b:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv5iVRJnac1jj0kTMfxoaw+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4OTQzNzU0ZTkyMzQ1YThiYmFiM2RiMmJjMzZkNjE4ZTVl
Y2MwZTgwHhcNMjYwMTI2MDkwMTI1WhcNMjYwMTI3MDkwMTI1WjAzMTEwLwYDVQQD
Eyg5OGVlOTJlMjRhNmEzNWZlYmI5OTNlNWNkY2UyODNiNjUxYjY3OGJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3okN6NiTD2PfU4c8gcEKAiZ1eNg9
mKVUVsi7j2wB9LO32mYL96bC27sGD3/K3Fb1f5kY6LK0uJ5aBQWQw4tQCdAjPv/G
jJCBLtS4xzsKhfA6ucuTMqFH/vQn63TDICyL0M07aS1imS0rHnpXQKhdr3J6puPa
KhHJrLGdjyyzo8kweGFyIwYKkBAsjCmROFuyETuaIMktD2Jio6rlQ2XMzfiCxw5J
TbN5ZTDPzPvaRkiSy0dI7P8cV9ZiHerRzsSU91dhxJt3mQF8fUBzhgUp4OEz2seM
E0A4GBek6GGn3pKZaiZA/Usyuda25F3XHzZ8jjORbcMxP+NwqaKjljrRWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJjukuJKajX+u5k+XNzig7ZRtni8MB8GA1UdIwQY
MBaAFLiUN1TpI0Wou6s9srw21hjl7MDoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUpRM1ZPa2pSYWk3cXoyeXZEYldHT1hzd09nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi81NjZjY2YtMDRlZS00ODIzLWE3ZmMt
M2U2YTE0ZGUyYzQ3LzEvdUpRM1ZPa2pSYWk3cXoyeXZEYldHT1hzd09nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi81NjZjY2YtMDRlZS00ODIzLWE3ZmMtM2U2YTE0ZGUyYzQ3
LzEvdUpRM1ZPa2pSYWk3cXoyeXZEYldHT1hzd09nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJsi+0WhU
WEFzrHXwgRjVzQ9CWT0smQjKEgOCYhHpDLPhjA8yFXXfHnGtxSWa5CcjUIfXv2p5
LBHAf0plQhCYb3WVvbf82NzsCPv5dqBe0F6BGuVwD2I0FbRtzxdehi8a+8Ot97oo
+6NJJ2pohLqVdz7mTOsux0HWWNb5F1epj8Dvb+ivKRcViCORoKJUzRLYQosoNB5T
NYzK5JNjEIVvPWg8pMaAztK0ZXVpAdQUfEWBRDbZKn8rcCyqFvDd0taK/CdmyBKW
YHo29m4UzzUhwUDsmAWOKAQEWjLoVzMEZeyn6JuDrFNBmWiMPyG+fXgUWdiGREBU
I7uN6iJBz6kbrw==
-----END CERTIFICATE-----
Generated at Mon Jan 26 16:27:39 2026 by rpki-client