This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/uNWz03nSEWLitSLEOAH7lgOYgkU.mft
File: uNWz03nSEWLitSLEOAH7lgOYgkU.mft (raw, json)
Hash identifier: xY1umfNmIMobZEj1VTtTEdBq1N0VP6KPzDRXgfRl1Hc=
Subject key identifier: 5A:08:A0:A1:DC:EE:8F:03:CD:79:C1:6E:7D:3C:F6:DA:CB:35:B4:B6
Authority key identifier: B8:D5:B3:D3:79:D2:11:62:E2:B5:22:C4:38:01:FB:96:03:98:82:45
Certificate issuer: /CN=b8d5b3d379d21162e2b522c43801fb9603988245
Certificate serial: 019BF5073EFC0937C2C776633B3681F48863
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uNWz03nSEWLitSLEOAH7lgOYgkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/uNWz03nSEWLitSLEOAH7lgOYgkU.mft
Manifest number: 0F1E
Signing time: Sun 25 Jan 2026 12:00:51 +0000
Manifest this update: Sun 25 Jan 2026 12:00:51 +0000
Manifest next update: Mon 26 Jan 2026 12:00:51 +0000
Files and hashes: 1: 1-f_gAb-UQuyps_IPI3M8vQhRtGo.roa (hash: NsL25xCV1UtSE0/W9VwZvUIiaucE1NUxNcTSiDnaYao=)
2: ditshtsYxKYvOT3dCWLRDUMEGJ0.roa (hash: o6hcseRZVR0gI7jc0jlgzutuSsEvFXNX+MVW1GVHnBQ=)
3: eS8NOcR5VsM5X-FoIr-qZi-nfSQ.roa (hash: oTJIYUc5ybeC7DTGSDxwOuEroX+3xhqZe6zX/QEBvRI=)
4: uNWz03nSEWLitSLEOAH7lgOYgkU.crl (hash: 1OAonpl2Q6AQs5PEUXTBfy5OzNlkhzx8m9wvus6+pSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/uNWz03nSEWLitSLEOAH7lgOYgkU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/uNWz03nSEWLitSLEOAH7lgOYgkU.mft
rsync://rpki.ripe.net/repository/DEFAULT/uNWz03nSEWLitSLEOAH7lgOYgkU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f5:07:3e:fc:09:37:c2:c7:76:63:3b:36:81:f4:88:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8d5b3d379d21162e2b522c43801fb9603988245
Validity
Not Before: Jan 25 12:00:51 2026 GMT
Not After : Jan 26 12:00:51 2026 GMT
Subject: CN=5a08a0a1dcee8f03cd79c16e7d3cf6dacb35b4b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a9:a7:ef:1f:e3:76:3d:99:ba:53:8b:03:30:
d1:e7:c4:3e:80:fa:1c:af:83:63:ab:52:98:8f:18:
97:cd:3d:ab:6b:4a:78:28:38:0c:4c:82:dc:b0:d6:
2c:9d:92:86:06:b9:13:3e:a4:18:4c:cf:60:4f:f5:
a7:ca:7e:6f:09:01:65:1c:d2:8a:4d:02:10:d6:df:
08:3c:53:b4:85:ee:29:ad:9a:f9:76:82:2e:fc:8d:
44:83:58:a8:84:71:b1:3d:c2:4f:41:77:96:ab:ba:
ec:63:ae:31:7e:d9:2f:1c:86:49:fd:d9:1e:ef:96:
b9:b9:58:60:25:fe:c1:0b:a0:5b:f2:90:48:2e:ef:
e9:d6:91:c6:84:7c:e1:43:a8:da:9a:8d:08:d6:91:
b1:c9:14:36:b5:5a:fb:94:e1:3e:94:bb:4e:2c:11:
56:11:1c:ac:c4:7d:92:4e:bc:82:da:2e:86:f2:5f:
91:2c:9a:09:98:e9:17:49:50:4b:39:fc:6d:e1:31:
aa:e8:5d:ac:8d:f6:2d:60:93:42:26:86:72:0e:6f:
c1:2e:48:e3:a4:6e:aa:8b:95:ec:86:f4:09:d7:00:
3b:73:7c:25:54:89:25:7c:9d:01:4c:f7:bd:57:64:
e9:41:9c:fb:a3:7e:38:77:03:c2:ae:3d:e3:72:ef:
90:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:08:A0:A1:DC:EE:8F:03:CD:79:C1:6E:7D:3C:F6:DA:CB:35:B4:B6
X509v3 Authority Key Identifier:
keyid:B8:D5:B3:D3:79:D2:11:62:E2:B5:22:C4:38:01:FB:96:03:98:82:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNWz03nSEWLitSLEOAH7lgOYgkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/uNWz03nSEWLitSLEOAH7lgOYgkU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/uNWz03nSEWLitSLEOAH7lgOYgkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:66:ed:25:43:21:a6:86:ab:d2:38:53:eb:03:a9:b1:bd:72:
07:34:29:58:ba:e1:cf:a7:19:a4:d2:33:17:8c:c1:fe:75:9e:
41:e9:67:c0:05:6f:12:5f:b9:21:18:51:8c:77:89:81:40:1f:
d8:6e:2b:c8:e5:14:82:f6:ad:64:dc:5c:0c:9d:94:d6:5a:b7:
1d:43:ef:23:47:5d:56:ab:59:a6:fd:fe:cf:29:bd:20:1f:72:
24:8c:5f:e7:d3:db:1d:de:c5:2d:fb:c5:c5:ff:2c:2d:14:91:
cf:fe:1d:81:4e:94:2c:fc:72:4a:15:14:21:64:9d:51:40:24:
c2:54:39:a4:76:1a:ef:00:21:0a:a3:a4:0d:30:db:04:38:de:
d3:73:d7:16:67:a4:bf:42:79:ca:24:d3:52:06:bf:57:d0:ac:
10:97:57:6e:e0:46:f3:56:72:3b:5a:0f:de:cf:4e:d5:19:20:
02:ed:5b:d0:86:a5:02:ce:6a:c0:36:08:41:ed:9f:a4:f1:48:
a9:c6:77:e0:ca:a1:57:43:4d:3c:60:73:ee:65:1c:c1:e5:48:
e5:91:89:32:77:17:33:6f:29:99:8f:c1:3b:00:eb:f6:cb:13:
de:6a:ab:9c:7b:8d:93:69:9c:28:76:ba:b7:d0:d5:70:7c:6f:
74:7e:51:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:02:03 2026 by rpki-client