This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.mft
File: UFbHUIQP5cAQOn9RAix87qj-lps.mft (raw, json)
Hash identifier: VCpR04riH7Naq+FJnT0gNoJh1cb/hx7HS09jzqUIkYw=
Subject key identifier: B5:20:C4:12:F0:12:EB:00:BC:49:4F:6E:CA:F5:A4:4E:62:CC:69:A4
Authority key identifier: 50:56:C7:50:84:0F:E5:C0:10:3A:7F:51:02:2C:7C:EE:A8:FE:96:9B
Certificate issuer: /CN=5056c750840fe5c0103a7f51022c7ceea8fe969b
Certificate serial: 019AF50B403C29136AFE88BB340678EED3D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFbHUIQP5cAQOn9RAix87qj-lps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.mft
Manifest number: 1762
Signing time: Sat 06 Dec 2025 19:02:26 +0000
Manifest this update: Sat 06 Dec 2025 19:02:26 +0000
Manifest next update: Sun 07 Dec 2025 19:02:26 +0000
Files and hashes: 1: Jv9Nh0xOPBNwvCj4qQsYimYMUWo.roa (hash: 8AwiF+JbJZD/dD5pedRyRTuhxKXhlfELIIZ2EaE0IKM=)
2: UFbHUIQP5cAQOn9RAix87qj-lps.crl (hash: 9XrTTdwejPtfMH/kpELGv5+WoiuwLdlJI9Pgzh827Ko=)
3: yXOU2r32sucGxB9-Z9ZhjZOhedM.roa (hash: vAVSTyHryWSEFu+zHv/t5/KHUJutcYo2/piybcJJ41A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFbHUIQP5cAQOn9RAix87qj-lps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 13:09:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f5:0b:40:3c:29:13:6a:fe:88:bb:34:06:78:ee:d3:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5056c750840fe5c0103a7f51022c7ceea8fe969b
Validity
Not Before: Dec 6 19:02:26 2025 GMT
Not After : Dec 7 19:02:26 2025 GMT
Subject: CN=b520c412f012eb00bc494f6ecaf5a44e62cc69a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c9:96:94:10:9f:ff:35:d2:77:b6:ba:38:bd:
fe:8f:e8:20:5f:5a:25:b8:71:3e:fa:48:54:4c:55:
07:38:60:26:16:4d:05:26:6e:21:4f:02:8c:87:60:
79:39:a3:d9:fb:e1:e1:35:70:21:a7:9c:b8:30:5a:
f6:f0:72:0b:a4:b4:68:da:e7:68:ee:30:fc:98:36:
26:44:3e:3e:97:60:f5:38:f0:93:57:8f:2c:ae:af:
9f:c4:c1:df:36:b2:6b:72:a9:e8:07:2c:13:03:77:
47:15:78:39:40:bb:e3:ea:36:99:d6:e2:c8:20:a7:
a1:8c:b4:75:79:b6:01:21:1e:15:dc:3e:b1:c8:b3:
cb:70:c0:2e:90:f4:1d:d1:94:f0:4b:ac:53:b4:1e:
19:08:d5:f7:b5:0d:a3:09:51:44:61:f3:4f:57:cd:
a7:b6:c4:42:58:53:64:e6:f4:4c:1a:c4:9d:ed:f1:
32:7e:fb:60:38:05:d1:e4:ed:69:c2:19:4b:95:52:
ec:7d:3b:c1:92:fc:22:b7:35:d6:58:1c:fa:29:d6:
bd:bf:d6:9a:b7:9a:c1:30:c4:ef:d9:32:20:34:ca:
41:25:67:1f:22:1a:1f:93:52:89:17:c5:1e:88:f1:
8f:96:7d:0b:f7:53:de:38:62:b6:a6:72:19:19:81:
6f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:20:C4:12:F0:12:EB:00:BC:49:4F:6E:CA:F5:A4:4E:62:CC:69:A4
X509v3 Authority Key Identifier:
keyid:50:56:C7:50:84:0F:E5:C0:10:3A:7F:51:02:2C:7C:EE:A8:FE:96:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFbHUIQP5cAQOn9RAix87qj-lps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:04:1c:bb:9a:59:a7:7f:84:44:d0:c9:f0:43:eb:8a:a2:06:
0b:04:8d:d1:d9:46:9d:e9:51:ce:49:be:58:aa:eb:d9:e9:ea:
8e:23:80:69:14:45:8e:2d:6b:fc:f3:8b:22:a8:40:58:76:5f:
07:3d:78:6b:75:c5:fc:a5:5f:17:c1:13:72:6a:cd:6d:b4:55:
d7:ed:35:fd:cc:db:d4:03:85:a2:f6:8a:53:93:17:05:03:3b:
e2:7c:b7:12:80:7b:99:2a:0f:c7:d5:b3:50:98:fb:8c:52:c9:
e2:3e:15:89:e8:48:92:b2:4e:52:64:f1:e3:63:a0:2d:90:1b:
d8:8c:65:49:7f:6f:0c:3f:f5:9f:ed:71:b6:46:75:21:23:39:
82:c9:8d:94:5b:70:0a:51:98:21:4d:21:8a:c8:ea:a8:4a:0b:
e8:95:71:fe:36:c7:fb:72:d8:e8:81:93:99:ef:82:df:61:50:
9e:03:52:96:fa:84:ed:d3:74:20:67:00:f1:c6:d4:d1:8c:d1:
a6:a4:7c:34:f2:b1:5f:7e:13:8f:bd:d4:d7:5a:ad:4e:00:46:
22:90:4d:a5:ec:f0:62:61:f1:56:2d:ef:fa:82:d6:21:32:be:
5b:4e:6d:05:a0:63:1b:57:89:70:d1:6c:2a:7b:13:e6:42:ff:
7b:2f:39:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:28:59 2025 by rpki-client