This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.mft
File: UjC2XWEW1LYNNv33tsbV5blUY54.mft (raw, json)
Hash identifier: J7ICvc3SDBVcXPrlvKrC9noxPFMayh4l9p1MYFqhUzQ=
Subject key identifier: C7:0D:81:56:43:B8:5F:98:43:BC:33:16:C2:73:CE:8D:14:97:C3:26
Authority key identifier: 52:30:B6:5D:61:16:D4:B6:0D:36:FD:F7:B6:C6:D5:E5:B9:54:63:9E
Certificate issuer: /CN=5230b65d6116d4b60d36fdf7b6c6d5e5b954639e
Certificate serial: 019BAD5D2944102B2D2B33C14D8130B130D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UjC2XWEW1LYNNv33tsbV5blUY54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.mft
Manifest number: 17C6
Signing time: Sun 11 Jan 2026 14:02:02 +0000
Manifest this update: Sun 11 Jan 2026 14:02:02 +0000
Manifest next update: Mon 12 Jan 2026 14:02:02 +0000
Files and hashes: 1: UjC2XWEW1LYNNv33tsbV5blUY54.crl (hash: ksbStY4IWrW2clcxyDhY78lQpoGWwWb56qnh0IzTwg8=)
2: YDTabDi8KIiVn2g5g0ARZ4FOj6Y.roa (hash: 4uSS/xcfK9YISuyI1M3a8VYQt60GXuC8eBgPt3hFnMw=)
3: sLh8Z3ykKeKmTd5LP1t35ARuEh0.roa (hash: g77XM78yPqe/jsFF9utIzh8pLf0nSfOh1N48HUcncso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.mft
rsync://rpki.ripe.net/repository/DEFAULT/UjC2XWEW1LYNNv33tsbV5blUY54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Jan 2026 14:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:ad:5d:29:44:10:2b:2d:2b:33:c1:4d:81:30:b1:30:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5230b65d6116d4b60d36fdf7b6c6d5e5b954639e
Validity
Not Before: Jan 11 14:02:02 2026 GMT
Not After : Jan 12 14:02:02 2026 GMT
Subject: CN=c70d815643b85f9843bc3316c273ce8d1497c326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b7:b8:6a:f4:a5:07:62:b5:90:2c:12:af:42:
ba:68:8e:40:2f:f6:55:bb:1c:f5:e3:5f:27:07:c4:
f1:b9:05:d2:3c:da:0c:03:35:00:51:39:0c:56:13:
b6:72:9d:31:06:4a:24:14:47:94:87:73:eb:93:c2:
e9:cc:12:e1:a2:de:45:93:d8:07:11:8e:d4:c7:1c:
59:27:de:ff:3f:e1:74:1a:13:a4:2d:c5:62:57:2b:
0b:cf:39:4c:49:f2:63:60:b4:a2:e8:2e:62:a1:e5:
44:f0:aa:8f:c1:18:7f:22:c6:b7:6d:86:47:12:94:
db:68:ac:8b:be:41:d3:a5:2c:cf:f6:4f:20:6b:f2:
81:f2:6a:9a:fb:dd:8f:90:c4:50:10:c9:ae:ef:34:
75:34:17:ed:a7:35:ab:42:0b:dc:f1:d2:9e:24:3f:
08:2a:ef:8b:0c:db:f8:e1:20:4a:4b:00:dc:fb:a7:
87:95:a8:2f:a0:95:00:b9:db:05:29:d1:d4:af:7d:
58:a3:35:d0:7e:56:9c:92:fc:43:3d:01:90:0d:3b:
ce:a8:84:59:71:f1:58:ff:c5:7a:c9:29:69:70:2a:
58:55:23:53:b9:2b:6e:88:3e:24:92:e6:88:47:cd:
1a:c1:73:44:b1:da:7f:84:46:33:5c:70:ca:a0:f5:
5e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:0D:81:56:43:B8:5F:98:43:BC:33:16:C2:73:CE:8D:14:97:C3:26
X509v3 Authority Key Identifier:
keyid:52:30:B6:5D:61:16:D4:B6:0D:36:FD:F7:B6:C6:D5:E5:B9:54:63:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UjC2XWEW1LYNNv33tsbV5blUY54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:2e:eb:27:90:a5:57:38:ab:c3:af:f7:85:20:87:a4:e4:4a:
5d:c8:a9:f7:56:97:60:12:20:6c:73:04:fe:ed:ea:98:bd:e6:
07:56:6b:c0:2c:37:42:cd:89:c4:84:68:ef:f7:62:3f:a7:f4:
97:aa:a0:b9:4c:44:91:19:90:b1:ee:c9:58:4a:a6:57:ea:92:
61:66:67:51:49:97:45:88:91:1e:f6:e7:0a:26:6a:78:40:dd:
97:4d:1b:d9:ea:1d:49:47:1c:6a:c4:5a:9c:ca:5c:f4:2f:98:
4d:0f:83:bc:2b:55:e9:3f:f8:4d:63:2a:73:5d:41:b1:01:98:
7f:54:4b:bd:a1:f8:8c:6b:98:d2:bc:41:f1:d0:a0:f1:ce:7e:
64:3f:05:11:b7:28:72:bc:fa:fc:88:35:70:44:8c:16:14:f9:
06:91:9b:06:87:ae:b2:f2:d0:b9:19:9e:11:a1:46:b8:15:52:
38:da:fe:dc:d9:e0:38:ca:d5:5f:8e:73:81:63:d0:1f:09:8a:
d3:ab:78:e7:ef:0a:13:a9:b4:67:35:30:8c:c8:fe:44:b1:ed:
78:aa:fa:44:ad:2b:3a:53:14:08:31:3b:79:15:85:23:f5:11:
31:1f:07:6d:26:89:6a:f0:3a:d9:f1:bd:8d:9c:4f:e4:4e:4e:
6d:5e:60:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 23:40:03 2026 by rpki-client