This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/8936da-f20b-45e7-9948-4fadcb182c5a/1/uGWF0IuX5nnwgovxAr6rUdza-oc.mft
File: uGWF0IuX5nnwgovxAr6rUdza-oc.mft (raw, json)
Hash identifier: dt1h0pGw+ZWXCFY9LM4Au1dDWmFhTEzEyQ7Av2X9gJY=
Subject key identifier: D4:9F:4C:02:B0:47:2B:6E:AF:06:54:5C:1F:06:75:41:A3:1E:8A:C6
Authority key identifier: B8:65:85:D0:8B:97:E6:79:F0:82:8B:F1:02:BE:AB:51:DC:DA:FA:87
Certificate issuer: /CN=b86585d08b97e679f0828bf102beab51dcdafa87
Certificate serial: 019AF27669D2E80E435EFC115F52F9386093
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uGWF0IuX5nnwgovxAr6rUdza-oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/8936da-f20b-45e7-9948-4fadcb182c5a/1/uGWF0IuX5nnwgovxAr6rUdza-oc.mft
Manifest number: 011C
Signing time: Sat 06 Dec 2025 07:00:37 +0000
Manifest this update: Sat 06 Dec 2025 07:00:37 +0000
Manifest next update: Sun 07 Dec 2025 07:00:37 +0000
Files and hashes: 1: 5GYWrzRu65AjS73_-IgwDSj8n-Q.roa (hash: YdE2CXn8HuPLnZ5nEOMoIyiMWMH03XMYxsoKuzVp7Lc=)
2: uGWF0IuX5nnwgovxAr6rUdza-oc.crl (hash: fl2Ut/wgfMk3AW4GAd3e/pq7aTbUUBFztfWY/a70nWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/8936da-f20b-45e7-9948-4fadcb182c5a/1/uGWF0IuX5nnwgovxAr6rUdza-oc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/8936da-f20b-45e7-9948-4fadcb182c5a/1/uGWF0IuX5nnwgovxAr6rUdza-oc.mft
rsync://rpki.ripe.net/repository/DEFAULT/uGWF0IuX5nnwgovxAr6rUdza-oc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 07:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f2:76:69:d2:e8:0e:43:5e:fc:11:5f:52:f9:38:60:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b86585d08b97e679f0828bf102beab51dcdafa87
Validity
Not Before: Dec 6 07:00:37 2025 GMT
Not After : Dec 7 07:00:37 2025 GMT
Subject: CN=d49f4c02b0472b6eaf06545c1f067541a31e8ac6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c6:b6:9b:df:1e:ed:df:5f:29:25:64:21:df:
b5:bd:92:bb:57:51:37:ad:d0:24:54:4c:2e:17:a1:
61:c0:f7:52:b7:93:a7:65:04:e9:3a:2a:2a:35:7f:
1b:04:5c:05:28:97:72:c3:09:27:b2:77:a5:61:0c:
f1:f7:3a:f2:99:10:77:59:39:80:ff:01:37:b1:59:
01:9e:52:f0:3b:94:47:8b:45:4e:b7:fd:a7:e6:37:
53:8d:53:c2:23:2f:8d:25:e7:d2:d6:7a:2c:c8:86:
8f:5c:ac:44:95:65:d6:3b:ad:33:4c:13:af:50:13:
7e:57:3b:31:7c:10:50:1d:20:c5:6d:d8:e9:70:9c:
34:37:74:8a:71:4c:c8:ba:8f:db:46:c2:49:f3:f7:
2b:5a:a3:b2:d3:60:99:bd:af:94:76:77:0a:49:59:
17:b9:20:5b:d7:8b:3b:d9:ed:89:a5:15:6f:50:27:
1c:a3:7c:a6:20:0c:68:fc:6b:41:be:17:41:ea:6f:
9d:47:cf:40:cb:72:49:e6:2c:2a:7c:49:bc:6d:5f:
62:ef:50:df:44:05:ca:c5:43:d2:1c:3e:6c:66:00:
bd:f3:e4:7d:bf:40:14:a0:77:34:11:08:b5:c0:12:
7e:3c:c0:a2:c8:ca:36:07:60:06:41:d4:47:4f:e2:
5b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:9F:4C:02:B0:47:2B:6E:AF:06:54:5C:1F:06:75:41:A3:1E:8A:C6
X509v3 Authority Key Identifier:
keyid:B8:65:85:D0:8B:97:E6:79:F0:82:8B:F1:02:BE:AB:51:DC:DA:FA:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uGWF0IuX5nnwgovxAr6rUdza-oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/8936da-f20b-45e7-9948-4fadcb182c5a/1/uGWF0IuX5nnwgovxAr6rUdza-oc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/8936da-f20b-45e7-9948-4fadcb182c5a/1/uGWF0IuX5nnwgovxAr6rUdza-oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:f0:40:fe:72:a6:52:f2:64:3f:44:01:12:70:be:a5:15:06:
e4:04:bd:29:3d:2b:66:1e:e5:b4:80:72:db:17:5e:ed:04:53:
c6:22:04:6b:9b:f9:32:4d:0a:30:05:0a:e6:01:60:89:70:3e:
f3:26:87:d4:82:e0:53:de:0e:dc:50:76:e2:1b:2e:4c:77:13:
1a:8d:e8:1e:63:44:89:95:97:61:31:38:a7:06:91:87:69:fa:
df:8e:4d:ae:72:10:6c:ca:0a:61:cd:67:84:7f:20:c2:7a:52:
dc:b1:2b:d9:a7:23:e7:37:3b:36:b0:6a:06:b0:fa:8b:3b:0a:
66:96:1a:b4:58:68:ba:1d:4e:3c:2d:89:ad:a3:69:eb:c5:67:
59:f4:d1:f0:1a:a3:77:82:a8:dd:b7:98:4a:2b:07:eb:59:93:
d7:61:05:7d:42:2d:4a:bd:37:dd:72:3c:dd:ed:fe:3b:dd:f4:
10:99:1c:9b:99:3b:9d:2d:00:36:f0:be:ab:64:92:2b:7f:03:
5b:95:b1:49:c0:26:a4:55:d8:06:b6:89:06:fc:8c:89:2e:7d:
12:56:3c:cc:b9:93:5e:f4:2e:0e:06:d3:3e:d4:f6:31:ac:6e:
85:71:86:54:a5:6c:21:48:92:fb:13:4c:7d:46:f5:9e:03:67:
27:25:8e:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:57:04 2025 by rpki-client