This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/uqp0i6FKduXYpu2stUJggqVvXj0.mft
File: uqp0i6FKduXYpu2stUJggqVvXj0.mft (raw, json)
Hash identifier: bDbFOqvyFgy/QxjqS/ef87Ji7VRDO1YeXRPPE05r27E=
Subject key identifier: C0:E2:19:64:43:AD:A6:9B:29:8B:DB:0E:F4:2F:01:5D:C1:8B:AF:55
Authority key identifier: BA:AA:74:8B:A1:4A:76:E5:D8:A6:ED:AC:B5:42:60:82:A5:6F:5E:3D
Certificate issuer: /CN=baaa748ba14a76e5d8a6edacb5426082a56f5e3d
Certificate serial: 019BF42BC6C6B795C3B96ED3D9CC006BA7A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqp0i6FKduXYpu2stUJggqVvXj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/uqp0i6FKduXYpu2stUJggqVvXj0.mft
Manifest number: 091E
Signing time: Sun 25 Jan 2026 08:01:08 +0000
Manifest this update: Sun 25 Jan 2026 08:01:08 +0000
Manifest next update: Mon 26 Jan 2026 08:01:08 +0000
Files and hashes: 1: 8lFiF1wAdPJ2hAxovfgzct_NPm4.roa (hash: Ym4lP51eot+4QlKi10WZ3Du5yp0u/4cXY/HYDj8vrhg=)
2: PQBF4mCa3EW8hiGZFACvo7VeAB0.roa (hash: 3SzioKnDZBjphhsMENR4RFeejxxcRYepmgMK0cqKv/c=)
3: RVqYqDFmLejp9z4p1E-tMkToPRs.roa (hash: r6z1fF1ZfXzZ4I9UfejqbJBDfNW9+C1iyzRk4WH7X5A=)
4: _PZxNVK3ihOQkmmWbE5y4TLIF2A.roa (hash: /xcnI68M7th+zMKJZ1ErNPWPaooK8PDshecxHkOyACQ=)
5: kXDi6qKHYQmt9htj9gX1rGIvybE.roa (hash: BHmjuxB6GlGS1nMnX38rPfHra7EH7TtxG/dDB/NIFmE=)
6: p4qnaEPq_svZSkXF-klfpg0p65s.roa (hash: tQNh+Gvsr0x1n4TN4e64P96eE9wuPHIZl8JmB3MbPK8=)
7: tP-BnXsZN6NQdPQ-Vw8Twys00WM.roa (hash: DBCyB76gWKM0oz1E9E5WPf89Ch3ozcREuCeQGSM5Iw4=)
8: uBrITHEVEeAf7k48uJiUJ6Kad4Q.roa (hash: SKB6ihyC1p2ZsFPesOzaFpazYcPyR0Cg//z7zQtbDxA=)
9: uqp0i6FKduXYpu2stUJggqVvXj0.crl (hash: lbvfyfYyCatzcYlbeR2IukXL8KtxdFHSkt9qUB5ZhSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/uqp0i6FKduXYpu2stUJggqVvXj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/uqp0i6FKduXYpu2stUJggqVvXj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/uqp0i6FKduXYpu2stUJggqVvXj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f4:2b:c6:c6:b7:95:c3:b9:6e:d3:d9:cc:00:6b:a7:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baaa748ba14a76e5d8a6edacb5426082a56f5e3d
Validity
Not Before: Jan 25 08:01:08 2026 GMT
Not After : Jan 26 08:01:08 2026 GMT
Subject: CN=c0e2196443ada69b298bdb0ef42f015dc18baf55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:33:5c:31:8f:24:e6:fd:5c:b2:f9:67:68:e8:
26:41:8f:81:4a:21:6a:23:cf:40:21:04:39:22:ee:
ae:46:30:47:f8:5e:68:ef:a8:25:02:7d:9b:86:04:
83:83:9f:12:c6:14:67:d5:03:8b:45:1e:40:08:e4:
24:9a:42:2d:2e:ce:46:a3:d6:f7:08:dd:39:d4:7d:
2d:a0:a8:e6:78:26:38:2e:6d:6a:f3:d2:cb:54:6c:
ca:ba:3c:37:16:80:ee:42:e3:58:f3:d3:bd:01:02:
7a:bf:21:d4:36:7c:64:59:fa:9d:48:99:f1:46:4c:
34:61:f6:65:8f:f3:e6:58:1c:64:6c:12:18:e3:e6:
b4:44:70:7d:13:f8:98:17:5d:b2:f7:02:c9:7c:f4:
27:32:86:6e:14:bd:92:a1:a5:3c:58:c8:34:63:34:
06:c2:1a:27:3a:cf:e1:7e:d9:93:4a:a8:75:34:bd:
0a:6e:ed:a8:bc:de:dc:de:33:26:11:f3:c0:5d:39:
7f:f5:bc:f8:11:c5:97:62:66:24:eb:83:33:7a:c9:
33:a8:cd:ae:51:b6:fb:b1:21:b0:99:21:63:24:25:
a2:42:db:ea:2f:e7:fe:a7:a8:91:3e:8d:bf:96:81:
b4:8c:fb:2f:17:c8:88:54:0f:0c:28:0d:dc:2e:5b:
d6:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:E2:19:64:43:AD:A6:9B:29:8B:DB:0E:F4:2F:01:5D:C1:8B:AF:55
X509v3 Authority Key Identifier:
keyid:BA:AA:74:8B:A1:4A:76:E5:D8:A6:ED:AC:B5:42:60:82:A5:6F:5E:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqp0i6FKduXYpu2stUJggqVvXj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/uqp0i6FKduXYpu2stUJggqVvXj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/uqp0i6FKduXYpu2stUJggqVvXj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:d5:19:58:da:87:e5:82:1c:fe:f0:6c:e3:d1:33:6b:44:d8:
ee:9e:2b:8c:58:e2:7d:a8:da:4f:2e:e2:cb:30:86:76:30:62:
fa:16:f4:69:ad:05:40:35:9a:f2:92:d5:7c:02:db:f2:17:4c:
e8:cb:9b:2c:6b:8e:f7:d3:69:90:e5:56:91:8e:0c:de:c2:47:
94:91:6e:35:05:7c:d6:34:86:28:f6:b9:bd:58:be:80:07:f4:
ed:b1:91:4c:da:49:0e:bb:d8:40:75:02:fb:e0:9d:f6:ae:2d:
69:28:95:3e:a5:ba:9f:bb:81:34:e5:91:e9:56:54:cc:28:85:
f1:38:e7:92:8e:eb:74:e9:89:fb:19:18:01:11:e6:7d:8a:80:
a3:ed:57:a7:d6:3c:fc:34:fc:1c:3a:3b:d7:d9:fe:db:22:03:
45:d5:c4:7e:20:c6:0b:a2:f0:b5:58:00:01:8e:a9:31:77:3c:
c0:81:56:c6:5d:5a:6b:b0:7f:fa:d5:f2:d0:22:0f:a7:4c:f4:
a9:5d:56:c0:9f:28:9e:0c:4f:d4:d3:6d:12:5f:0e:98:a8:d2:
c6:d9:bc:5f:3e:6b:a0:c5:d4:0c:2e:04:0c:34:a5:93:9d:be:
9e:38:f8:ca:b8:7a:11:20:f8:4f:1e:21:fa:7b:82:f9:cc:a3:
51:c2:f4:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:52:58 2026 by rpki-client