This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/8f7148-236d-4088-89e6-665995c62838/1/UxUwA3N9ePci25oo4iBD412Nhx4.mft
File: UxUwA3N9ePci25oo4iBD412Nhx4.mft (raw, json)
Hash identifier: C2GN+r6e/Y9x9qPqUEB4Bg0e5VXS1TBwSuVYrS4qsWw=
Subject key identifier: A1:A4:7E:EA:49:19:2A:EA:9D:C4:DF:A5:CF:D0:F1:E9:E4:00:6B:C0
Authority key identifier: 53:15:30:03:73:7D:78:F7:22:DB:9A:28:E2:20:43:E3:5D:8D:87:1E
Certificate issuer: /CN=53153003737d78f722db9a28e22043e35d8d871e
Certificate serial: 019BF6BF4977983C542035DB58EDE46ECE68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UxUwA3N9ePci25oo4iBD412Nhx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/8f7148-236d-4088-89e6-665995c62838/1/UxUwA3N9ePci25oo4iBD412Nhx4.mft
Manifest number: 17EA
Signing time: Sun 25 Jan 2026 20:01:29 +0000
Manifest this update: Sun 25 Jan 2026 20:01:29 +0000
Manifest next update: Mon 26 Jan 2026 20:01:29 +0000
Files and hashes: 1: 5I0HBHU6DFGjisjl0_HXu6MzkBc.roa (hash: J1zWeGNMh7+0ujc6n39n2VNnjxJR10bleZ2BiJvLPD8=)
2: UxUwA3N9ePci25oo4iBD412Nhx4.crl (hash: 5M6+Poi7dnCB6TDXK2TUXLEeuWpUJm4QFw7G4ljAt+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/8f7148-236d-4088-89e6-665995c62838/1/UxUwA3N9ePci25oo4iBD412Nhx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/8f7148-236d-4088-89e6-665995c62838/1/UxUwA3N9ePci25oo4iBD412Nhx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/UxUwA3N9ePci25oo4iBD412Nhx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 20:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f6:bf:49:77:98:3c:54:20:35:db:58:ed:e4:6e:ce:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53153003737d78f722db9a28e22043e35d8d871e
Validity
Not Before: Jan 25 20:01:29 2026 GMT
Not After : Jan 26 20:01:29 2026 GMT
Subject: CN=a1a47eea49192aea9dc4dfa5cfd0f1e9e4006bc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:75:17:51:ff:31:83:f7:d0:c5:7d:32:f7:77:
17:ae:a2:5b:a9:d4:4d:c2:10:85:9f:34:6b:d1:eb:
de:ee:26:c7:7d:a7:0a:3e:cd:18:d6:64:2d:38:04:
c6:5b:16:6d:4a:8f:ba:f3:f4:95:73:bd:af:a6:b0:
97:08:fe:e5:62:dc:5b:34:5d:76:35:ef:93:56:1b:
81:66:db:7b:e9:cf:72:f9:19:5d:2e:eb:47:f6:37:
c5:11:c1:32:d7:06:00:98:67:e7:21:96:cb:cb:1a:
1a:07:fd:c3:7c:bf:10:88:e0:b2:b5:89:26:22:39:
48:19:a7:16:aa:b1:e6:b1:5b:c2:18:d5:2a:15:2e:
93:67:0e:13:76:cf:20:f0:8d:b8:60:5d:9f:55:46:
51:47:f4:b3:d0:44:0a:dd:69:52:53:63:1d:54:01:
a1:90:aa:bf:0a:ea:fe:17:55:97:25:57:77:ce:5b:
0d:ab:bb:de:7f:33:82:38:25:83:fd:92:52:7b:0a:
db:38:ac:18:8b:31:ac:d1:41:b1:f0:9b:b5:73:9b:
0f:c4:8b:1c:02:72:6e:1b:4a:f9:27:93:3d:71:df:
1a:35:c9:4a:1d:b8:ae:75:a5:4f:f5:cb:9b:7b:4a:
95:a3:7b:85:3d:e3:b6:06:0a:26:a2:54:4a:f6:cc:
3a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:A4:7E:EA:49:19:2A:EA:9D:C4:DF:A5:CF:D0:F1:E9:E4:00:6B:C0
X509v3 Authority Key Identifier:
keyid:53:15:30:03:73:7D:78:F7:22:DB:9A:28:E2:20:43:E3:5D:8D:87:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxUwA3N9ePci25oo4iBD412Nhx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8f7148-236d-4088-89e6-665995c62838/1/UxUwA3N9ePci25oo4iBD412Nhx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8f7148-236d-4088-89e6-665995c62838/1/UxUwA3N9ePci25oo4iBD412Nhx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:5c:9e:e4:44:45:2d:f3:9a:14:06:25:51:d2:b7:19:17:67:
11:be:23:a8:e9:40:1f:53:29:f5:a8:66:35:9a:55:ee:a6:de:
92:fd:38:b0:96:7f:8e:f0:95:7d:92:12:a1:d4:b1:e3:6c:67:
45:80:24:c8:a1:6e:63:72:1c:56:cd:b8:3d:b4:e4:03:18:87:
57:3d:23:c9:45:74:28:96:53:60:ec:c3:17:a7:20:28:7b:fb:
51:c0:f5:41:04:53:92:2c:08:9d:ed:00:a6:6f:02:4c:11:9d:
27:13:97:e6:ea:cf:d7:e0:15:c5:0b:04:8a:a9:e5:b1:fc:51:
f5:89:8e:a7:ee:b6:74:d0:ac:2b:cc:4d:4f:ec:6b:59:8e:77:
d9:6e:7b:00:07:61:72:dd:20:1d:03:b4:1b:13:c3:bf:5b:c4:
11:91:d3:86:eb:6f:49:ae:db:de:f3:64:fe:8d:ff:0f:46:85:
cd:58:6c:c1:1d:2c:99:6f:89:1e:7b:65:da:42:c3:c1:fd:2b:
d5:f7:44:89:dd:55:c7:a2:8c:20:83:ed:c0:2a:e0:ea:86:c1:
a0:ab:51:95:f4:f9:e3:73:18:c2:66:fa:74:cd:24:13:71:3d:
22:ee:dc:5e:04:28:e2:c2:a3:05:02:43:81:d3:ad:0b:96:51:
e3:c5:ce:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:58:05 2026 by rpki-client