This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.mft
File: U8kSoEEbsBdFBwktDKNaka15kFw.mft (raw, json)
Hash identifier: r71ktdvVNov/caYu+PBSsi6vywqATqDdm/jlEigdI0k=
Subject key identifier: 93:BC:F8:28:FB:E3:A6:A9:35:ED:78:D3:A3:C3:96:88:66:1C:30:BC
Authority key identifier: 53:C9:12:A0:41:1B:B0:17:45:07:09:2D:0C:A3:5A:91:AD:79:90:5C
Certificate issuer: /CN=53c912a0411bb0174507092d0ca35a91ad79905c
Certificate serial: 019AF23FE5223E8C37DA4F3C34E22B7CF5FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8kSoEEbsBdFBwktDKNaka15kFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.mft
Manifest number: 1768
Signing time: Sat 06 Dec 2025 06:01:04 +0000
Manifest this update: Sat 06 Dec 2025 06:01:04 +0000
Manifest next update: Sun 07 Dec 2025 06:01:04 +0000
Files and hashes: 1: 4bEGcfHd_w1hv-Zgrf8mtzNQOF8.roa (hash: Yz5lhUK8jG4fxty/HMD7XY7daqUIEiCINpgWbEB+eSk=)
2: U8kSoEEbsBdFBwktDKNaka15kFw.crl (hash: OpHPagHnDnV0l+eH5l0mdBy/SD2QzM1NjEdmT3kvnVM=)
3: V2UHD8Ezb4do1e1amF_9bhIjwm0.roa (hash: y2BL9g++y9jPkFQqtQIhZUhynDTSuho7DqIRo/6vN6o=)
4: Xx5AoKMFPro34EMu91UFlynTj2s.roa (hash: NlxbkxLq2MDyD2nlPITsFETHKzu5cELRgwcKIcBnH7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/U8kSoEEbsBdFBwktDKNaka15kFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f2:3f:e5:22:3e:8c:37:da:4f:3c:34:e2:2b:7c:f5:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53c912a0411bb0174507092d0ca35a91ad79905c
Validity
Not Before: Dec 6 06:01:04 2025 GMT
Not After : Dec 7 06:01:04 2025 GMT
Subject: CN=93bcf828fbe3a6a935ed78d3a3c39688661c30bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:62:ec:a8:44:04:35:38:ba:49:28:73:90:6f:
be:c7:60:4f:3c:c6:46:44:b4:6d:ba:f5:0e:86:4e:
ab:e4:d9:ae:99:7e:ef:8c:20:4d:e5:67:c1:50:3c:
9b:b2:90:a7:e6:dc:aa:04:a8:56:99:69:8d:c4:31:
ca:e4:90:e7:9c:ed:7a:46:cd:1f:9d:a0:60:17:f2:
1d:ab:be:6f:ec:8a:00:ec:5c:76:09:01:93:e5:f6:
dc:57:54:50:47:9b:4d:98:66:b4:bd:c3:f6:42:35:
2a:83:81:c5:72:b9:9a:20:12:d4:01:16:ae:26:93:
fc:8b:16:cc:16:6d:57:61:20:7d:80:c4:f6:31:b4:
4b:f6:05:2b:00:9a:34:70:c0:5f:90:e2:03:78:5f:
b5:cd:94:09:da:9c:0c:7b:c4:35:2b:2a:c3:fe:15:
71:3f:c1:a5:3b:17:67:22:0e:94:ea:8a:6d:0b:d4:
2f:59:62:e0:54:ca:04:de:02:29:09:ce:0b:d3:31:
ee:f1:a0:3a:9c:d2:a3:11:15:6a:8b:06:cc:28:7d:
7f:2a:2b:56:26:05:38:83:e5:2d:8e:2e:96:5f:2a:
6e:8a:3c:7f:68:8f:f5:bc:2e:83:6f:61:a7:09:0e:
d1:89:b0:ba:86:23:a2:07:d5:16:9f:73:bb:6f:bc:
ec:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:BC:F8:28:FB:E3:A6:A9:35:ED:78:D3:A3:C3:96:88:66:1C:30:BC
X509v3 Authority Key Identifier:
keyid:53:C9:12:A0:41:1B:B0:17:45:07:09:2D:0C:A3:5A:91:AD:79:90:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8kSoEEbsBdFBwktDKNaka15kFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:b1:4b:1d:a9:0d:ce:28:77:d5:5b:e0:e4:92:f9:9f:b5:72:
05:a8:a3:47:42:52:fa:eb:e4:7e:d4:1f:4c:89:44:ea:fd:a5:
71:e3:9d:60:6a:48:2a:35:df:a8:4b:90:e6:55:ad:44:56:52:
9a:7c:7a:33:9b:a6:88:f9:0c:3f:f8:c4:f0:6b:e1:7f:29:90:
95:6e:03:9e:38:7b:d1:d2:15:5b:3d:0f:90:b7:5a:5f:ff:85:
b7:ad:af:e0:6a:2d:35:f5:69:33:40:2d:c9:7e:12:3a:20:b0:
fe:70:f0:da:a1:00:57:03:e4:e5:91:ab:69:4a:64:a0:7f:51:
4a:2b:f0:3a:47:91:55:de:36:d2:9d:d8:89:0f:96:8e:d0:4f:
9e:00:14:3b:6d:5c:ce:07:9a:df:48:2a:dd:90:60:47:8e:f6:
d9:50:e7:f0:11:67:86:62:f8:df:04:63:a9:74:75:1b:83:35:
a0:fd:7b:95:46:a2:ff:50:ea:fc:51:ec:cc:0d:cb:f2:60:06:
9e:31:2d:a1:04:53:fa:e1:68:60:6e:c6:3f:e1:14:e6:96:ab:
a3:0d:a3:2e:6b:2a:2c:00:c9:61:10:55:45:ce:b9:07:d7:ac:
8b:83:3b:15:72:c6:d6:6a:53:a6:87:46:4d:c6:59:31:23:dd:
b4:52:bb:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:32:42 2025 by rpki-client