This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/8f7148-236d-4088-89e6-665995c62838/1/UxUwA3N9ePci25oo4iBD412Nhx4.mft
File: UxUwA3N9ePci25oo4iBD412Nhx4.mft (raw, json)
Hash identifier: MNSGNVyPlr6CKvxdb/zYFPaweYnJjzLclL7Tuq1L0WQ=
Subject key identifier: 0D:03:CF:BD:70:F9:D6:FF:CA:48:B8:20:9A:DD:99:64:EB:6C:C1:2F
Authority key identifier: 53:15:30:03:73:7D:78:F7:22:DB:9A:28:E2:20:43:E3:5D:8D:87:1E
Certificate issuer: /CN=53153003737d78f722db9a28e22043e35d8d871e
Certificate serial: 019BF8AD6B020715294C2C8ABF46F1484047
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UxUwA3N9ePci25oo4iBD412Nhx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/8f7148-236d-4088-89e6-665995c62838/1/UxUwA3N9ePci25oo4iBD412Nhx4.mft
Manifest number: 17EB
Signing time: Mon 26 Jan 2026 05:01:13 +0000
Manifest this update: Mon 26 Jan 2026 05:01:13 +0000
Manifest next update: Tue 27 Jan 2026 05:01:13 +0000
Files and hashes: 1: 5I0HBHU6DFGjisjl0_HXu6MzkBc.roa (hash: J1zWeGNMh7+0ujc6n39n2VNnjxJR10bleZ2BiJvLPD8=)
2: UxUwA3N9ePci25oo4iBD412Nhx4.crl (hash: MJfupo5+o5kQ/CnS+GfO7fZ0nV9iIzcmgKvgy5R2FJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/8f7148-236d-4088-89e6-665995c62838/1/UxUwA3N9ePci25oo4iBD412Nhx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/8f7148-236d-4088-89e6-665995c62838/1/UxUwA3N9ePci25oo4iBD412Nhx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/UxUwA3N9ePci25oo4iBD412Nhx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f8:ad:6b:02:07:15:29:4c:2c:8a:bf:46:f1:48:40:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53153003737d78f722db9a28e22043e35d8d871e
Validity
Not Before: Jan 26 05:01:13 2026 GMT
Not After : Jan 27 05:01:13 2026 GMT
Subject: CN=0d03cfbd70f9d6ffca48b8209add9964eb6cc12f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:dd:07:35:45:56:cd:48:86:7b:d6:16:76:f4:
a3:66:42:10:e9:1d:5e:30:24:e5:ec:93:fa:0b:41:
02:42:e8:56:fb:9b:12:5f:f6:b8:8c:e2:95:c8:91:
b9:be:b4:f0:36:74:8f:c5:a1:7e:35:bf:fd:b1:a9:
81:d0:7d:e7:f8:4b:d2:a9:59:6f:cb:1a:9c:af:62:
29:47:af:c9:54:01:f9:56:a7:2d:54:dc:e6:29:23:
74:99:b4:bd:e7:40:fd:b4:50:ac:42:81:53:42:01:
55:a1:14:5a:81:5b:0d:f6:4b:f9:b1:78:08:bc:5a:
dd:05:65:e3:83:27:12:70:0c:7a:43:0f:60:62:c7:
0e:8e:f2:81:92:f7:5d:6d:b8:ed:7c:4c:98:57:fc:
57:1a:a7:1a:e6:e3:54:17:20:89:9e:29:e2:29:3e:
2e:69:06:67:89:f2:78:4c:a2:1d:9d:3e:b7:61:17:
86:9b:14:68:1d:64:7b:8f:c5:f3:24:ac:89:c4:50:
67:25:01:08:81:da:a2:65:77:e8:09:16:92:3a:b5:
64:b9:1a:fe:b9:07:91:b5:82:c1:74:85:0c:9a:0a:
23:7d:86:80:55:ad:88:57:9c:81:bc:90:36:ff:6e:
f2:9b:65:8e:93:1d:6d:ca:dd:47:72:99:19:9b:32:
8c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:03:CF:BD:70:F9:D6:FF:CA:48:B8:20:9A:DD:99:64:EB:6C:C1:2F
X509v3 Authority Key Identifier:
keyid:53:15:30:03:73:7D:78:F7:22:DB:9A:28:E2:20:43:E3:5D:8D:87:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxUwA3N9ePci25oo4iBD412Nhx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8f7148-236d-4088-89e6-665995c62838/1/UxUwA3N9ePci25oo4iBD412Nhx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8f7148-236d-4088-89e6-665995c62838/1/UxUwA3N9ePci25oo4iBD412Nhx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:ae:1f:64:04:f3:c3:0a:e5:62:73:dd:05:b4:30:43:6d:4c:
e1:f7:09:07:e4:3b:e2:a1:9b:fd:94:6f:8d:ed:62:4a:28:26:
b4:d3:df:ce:64:b7:09:49:68:57:5a:b0:22:29:de:0d:07:ae:
87:6f:b4:9c:e9:ea:07:86:a0:f3:9d:39:ba:80:e2:f8:86:68:
0e:dd:4a:bb:be:af:b6:1b:ce:a3:09:1a:2a:c1:63:20:67:a6:
97:b4:48:69:ac:37:ed:37:70:4a:b0:34:3c:05:44:23:b3:1a:
b6:6c:04:57:87:0c:62:e7:3a:af:f4:a5:0c:53:9e:a5:4a:7e:
ca:9f:0e:41:1d:82:06:47:63:57:63:df:3b:4f:4e:1f:d8:7e:
c1:c6:9e:c6:a2:e2:a4:23:70:f7:84:1c:95:f1:c9:47:d3:81:
04:b9:f4:b7:a3:3a:bf:89:3c:3e:43:12:8c:d9:ec:8e:22:a2:
21:2c:e9:d5:1f:dc:2d:95:8f:64:bc:84:3d:20:e8:39:9d:74:
be:7e:f5:64:8e:e7:1e:fd:b5:a9:53:a4:02:45:0d:34:5a:54:
55:47:85:7f:06:2a:87:53:c0:be:56:2a:e2:1e:6d:26:67:17:
3f:c5:1e:92:f2:9b:af:aa:a8:51:cf:a8:94:c7:08:ff:c6:ac:
8c:91:e4:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 06:24:09 2026 by rpki-client