This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft
File: ume_97rR64OEtYXfe-8SBvfxn34.mft (raw, json)
Hash identifier: JiAZGUiqzhVKzQtsZHBj/jBopjwdHK5wkCWO1166Y8E=
Subject key identifier: FB:BC:E1:78:64:3E:35:98:21:32:0F:63:54:68:5D:ED:7D:A0:D3:94
Authority key identifier: BA:67:BF:F7:BA:D1:EB:83:84:B5:85:DF:7B:EF:12:06:F7:F1:9F:7E
Certificate issuer: /CN=ba67bff7bad1eb8384b585df7bef1206f7f19f7e
Certificate serial: 019BF7D20E7E1205F047C28F98850C728E2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft
Manifest number: 0F96
Signing time: Mon 26 Jan 2026 01:01:37 +0000
Manifest this update: Mon 26 Jan 2026 01:01:37 +0000
Manifest next update: Tue 27 Jan 2026 01:01:37 +0000
Files and hashes: 1: EZ3QYuO1aqPZJjLHT0YYVGkNCoQ.roa (hash: VhRxVbInTPM1O+Ldm/7obKGqKOZ2+6LZ1EZrcIQqOtM=)
2: GTk4_xkEVcCortfUUwlKNErPXJ8.roa (hash: uEhgRh2xa40WAcBKwOTkS5sGlJsngCqmoIk1TCwsS1s=)
3: SM6e5UqBHogNbgt0o12BmkZX2DY.roa (hash: U4nFBrr+xudjO3gD5UENImDfwahddAJuHGHpyaSej5k=)
4: fMPPEhoc1eJ7TtYJwhoTEBEj3u0.roa (hash: TFEzfDo3Zwa4HL59NImWxFGsVixNQrbjisILgLkXLHY=)
5: h_2qOElNrBzAnf1LUZW2aWng-XM.roa (hash: rICSl+rZfnDOtpaXQ1fWuEhsduvsyeMqtvQvV1DpKH8=)
6: ume_97rR64OEtYXfe-8SBvfxn34.crl (hash: Ntb/NAz4Bm9iJUfuLwYx9Mf+UoBXu9T+YXV6CznOd00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft
rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f7:d2:0e:7e:12:05:f0:47:c2:8f:98:85:0c:72:8e:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba67bff7bad1eb8384b585df7bef1206f7f19f7e
Validity
Not Before: Jan 26 01:01:37 2026 GMT
Not After : Jan 27 01:01:37 2026 GMT
Subject: CN=fbbce178643e359821320f6354685ded7da0d394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:18:e0:de:9e:bc:43:6f:7d:c5:2c:f2:07:09:
17:84:ed:49:aa:8d:92:92:a9:95:06:4e:08:7a:bb:
24:a1:6a:dc:7b:9e:a8:09:6d:64:ea:f6:ee:9c:59:
3c:b0:81:f2:f9:c1:09:ad:72:c0:14:95:4f:cd:59:
d9:1e:96:6e:a7:6c:b3:2c:5d:6e:d2:a3:f1:34:fa:
c5:e7:d9:fb:71:b7:74:50:26:20:49:94:6c:f8:ec:
69:52:92:44:85:9c:6e:6b:5a:1f:7d:7f:47:d2:be:
39:de:30:55:13:52:52:4f:d8:8f:22:8b:04:ed:aa:
98:f7:0a:d9:46:16:12:af:d4:c0:55:2a:78:8c:8a:
2a:e8:f8:29:89:47:85:9e:a5:80:ea:ac:c2:2d:39:
36:21:16:79:69:f0:e7:0e:d1:85:25:72:74:a6:ff:
78:2d:03:bb:78:9c:e5:dd:83:73:4c:fc:7f:fc:77:
fa:77:64:f3:97:6c:43:9e:fa:70:ac:6f:21:5e:c0:
4f:dc:ea:08:88:31:87:00:70:9b:c7:f3:8e:56:26:
21:29:54:ba:bc:80:75:94:bd:e2:a4:5d:0e:a3:c3:
40:cb:98:8c:ec:92:c9:26:d8:a3:69:93:4c:dc:51:
e4:63:36:35:fa:66:f7:63:74:4d:f1:d1:94:2f:bc:
d9:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:BC:E1:78:64:3E:35:98:21:32:0F:63:54:68:5D:ED:7D:A0:D3:94
X509v3 Authority Key Identifier:
keyid:BA:67:BF:F7:BA:D1:EB:83:84:B5:85:DF:7B:EF:12:06:F7:F1:9F:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:c5:5e:21:5f:5b:e8:3d:16:dd:2d:1c:60:ca:4e:10:0f:3e:
88:c8:75:da:7d:79:b4:d9:0c:b8:ca:ef:97:6c:ba:55:3e:3f:
7b:26:ca:fe:20:3b:bd:39:fc:4e:b3:27:77:42:35:9e:7b:34:
30:a6:ae:ff:95:45:59:1b:b8:ef:4d:8d:00:80:67:f4:14:29:
4a:7d:03:66:d3:30:71:ad:9f:98:2e:1b:91:9a:be:e4:e9:7d:
33:06:0e:6a:7d:aa:9a:51:f1:94:1b:45:61:cd:fb:99:fd:d4:
10:9f:76:79:19:51:7b:9d:97:81:6d:94:f1:2b:1a:1f:db:9c:
98:4a:8d:58:c7:a2:c7:8d:b3:6f:91:b7:cc:55:31:be:29:bf:
a1:3c:38:23:b1:2c:d7:27:3c:c3:55:86:b2:da:7c:da:59:aa:
7f:16:db:b7:84:dd:5f:c3:e2:2a:69:fd:4f:66:1e:5c:a9:61:
90:6f:f5:74:09:54:e9:dd:96:32:7f:4e:13:6c:38:67:1e:71:
47:1a:8a:04:6e:65:a2:a9:24:6f:52:87:93:e3:06:7b:58:0e:
8a:f5:c2:33:99:19:6c:b7:3c:cb:88:c5:2e:8e:5d:31:32:ca:
9d:64:21:b7:b7:c1:33:3f:4d:e9:bb:9d:e8:da:75:83:0c:8d:
bd:57:16:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 08:42:25 2026 by rpki-client