This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft
File: up0w5gNb6Lg4YGHycUgccH4Ezis.mft (raw, json)
Hash identifier: KRRagFlWZ9x8V7uUASdRHM2AUs1nRl9vcyqNJxOBJ/o=
Subject key identifier: 66:2B:EF:EA:A2:B1:59:AE:5B:E1:68:8D:3F:49:F4:70:3F:99:EB:6C
Authority key identifier: BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B
Certificate issuer: /CN=ba9d30e6035be8b8386061f271481c707e04ce2b
Certificate serial: 019B2C2F88EB2A44BCF34AF55BC432661019
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft
Manifest number: 178E
Signing time: Wed 17 Dec 2025 12:01:11 +0000
Manifest this update: Wed 17 Dec 2025 12:01:11 +0000
Manifest next update: Thu 18 Dec 2025 12:01:11 +0000
Files and hashes: 1: 400_RzqZ2Zkj4RgRtQM0ieiw_70.roa (hash: cWGkkjGCyiI5yIlZYg8oK4kWIOo/BCALf4PQ/6MHr2Y=)
2: 4Wfz_EQvo6SYko68k4TSfAN47sU.roa (hash: ox9v/ftMGhy9fG8TSa40dOcstxMI1IJ6bYGEOLCjJzU=)
3: 6_4Hwc6tzBdm4l-R8mlGWEV4N9s.roa (hash: UHiP2cXYQ7lCrtkLIonRIJ0zFlvgCt2dpLZRN8ietd0=)
4: AJ6fmQiDz0GXs7lMqGohkie4ct4.roa (hash: r9hxOjQfXyLSDYE4VLoR0q1v13yTVS1W/Vgz5ZPmFVM=)
5: ATThoTvJNJF4N5lVg-wyxhidePQ.roa (hash: 8ezRICXjiYRUY5WiWzKJgIUwL+aryWeybUmLAWnMagE=)
6: FFOy7JzcrItrCcqIMOBP12gCuvA.roa (hash: 4feRGc55ccbj4QRPLSWi7NCE31nGpgj09ILORHtqr7E=)
7: IJorGzUf120CRI-mpVXAgOI_TJQ.roa (hash: DW42FlDi+SRpZXtqB1CINfiZYcz4yxFQLUYN4vDCN7c=)
8: OoklI3kvpUu2QON6vzr_znMlb4o.roa (hash: RZHqfGmBHtCF9GP4Ad5GiS/4m5qbDE50y9ANbpznwhg=)
9: QEvUN67KDbFaOfZj9g3vC9rUQm8.roa (hash: zUZsUbWINgqv3RegkdqlIa9Hhl7pusc0/yFVE36iNwo=)
10: QKPU8lHD1Ls8ijbvjjabsAgLzUg.roa (hash: /fSYXi8WIkq4YrB09WT2QnZLo4NqtBeyd9xE217JYvw=)
11: R2PawQq0aEUNn_27xWpTtnBVRIM.roa (hash: wgajC5DOyIsq57Qvm++dcs3T7mB2PJ+qFxFBFbbVsAw=)
12: RDOul7gyH90sNWuWnbwP87u8wBY.roa (hash: o6ZEueWl1RLQaWWUlM9zZ0WWrPg/eDS24KItGKwAdKc=)
13: SGqQT2BA7nvZeypVaggMahgg5Ag.roa (hash: rpRHSpS91VJQoigSTO7lxay+A/xm/jPFJyoswIPhH6c=)
14: UHKWf0IFUDq4891IQbRTHXY2rfo.roa (hash: khzJ2vmoGD7A0nhnzsOiCPmcx8Ixl6GoeAYAbQaOA34=)
15: VrGGCYFwhGi4BPeG9vQveoaFfLM.roa (hash: edTPl3MGZDPIQA5qIWNLHzc/W7A7u7n891N+syJZyK8=)
16: XOgRPDn4EAwuDOtKWrXwVLKxYbQ.roa (hash: 49AORPQzSmZAZLgFWXR4a6bM5aE+rKu1rS5QrLIREg4=)
17: f22Rg9MgZynKKLpI74qpWeFqUQg.roa (hash: nzoA/aYd6ivHr6t+Z/FKBabLT0D3aCpU8WEfvxU6+0Q=)
18: fYISzZWRzG7_wtxIDhjyXHPM4P4.roa (hash: G+ywPlLAl4RvDHTdYmvn2UIgfVxBZaWwGMa191aRbWk=)
19: gR6HPRWa_I93ATF_6lEGpZdtVD0.roa (hash: akW6B3OCvdeceBU9Nhi1NU2MjvgHwNjLQ7OLUdvvzL4=)
20: mAo26VPj0zSn83SBRVoaCRdhIg4.roa (hash: C7ffNHQiA5Pk5uSBOSpDLGUyZWz38AAFh4I1f40dGgU=)
21: oWrtd0aFvC95N4Z6gxyZZ1SWrJs.roa (hash: AlvH9oYmiwAzp0Z4dOdOt5RLv8lOGK9l5kvoT65TGlA=)
22: qvRavzCJNzlbWaxfB4-Csl1ipM8.roa (hash: TD2WbwBpamsZuvWzJKbhtgXUy7eDy6Fj193ZH7DB3bY=)
23: s8dlGwwG7APZ3e9v5u6lvgLO1LA.roa (hash: 8xnfXfiigbDRlP2kATr1I4JuafJveXZL4+MTG5Nb4O0=)
24: up0w5gNb6Lg4YGHycUgccH4Ezis.crl (hash: pTvUUDK2s83cPMXSoCBQsnzqryiXKCka91d4X5dR6Dw=)
25: xGjAXSy-rPa7gZ2kCW6E-VgMqD8.roa (hash: AKtFMHlOVM+NFVSI2WpJP3l3MsXbWpJgiU4DhcCI8gQ=)
26: xqd3xWJCW96sJcN2e73CvA4BAEA.roa (hash: laL7IIKjO1uC6O19XqLmeRI4pdgH1HSkOUvvYu+TK5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft
rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Dec 2025 10:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:2c:2f:88:eb:2a:44:bc:f3:4a:f5:5b:c4:32:66:10:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba9d30e6035be8b8386061f271481c707e04ce2b
Validity
Not Before: Dec 17 12:01:11 2025 GMT
Not After : Dec 18 12:01:11 2025 GMT
Subject: CN=662befeaa2b159ae5be1688d3f49f4703f99eb6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:45:18:e9:66:d4:03:bb:d2:b6:9a:ca:69:fd:
0b:e0:e8:7b:e2:e0:16:c4:05:f8:20:fe:57:27:76:
8f:de:c8:8a:25:bc:f9:0a:14:4f:fe:d5:73:fa:c5:
e7:ea:75:70:cb:b7:37:eb:cc:30:c0:4c:8c:07:ca:
7f:01:63:f9:d7:d3:f7:47:4f:d4:13:af:52:8a:9d:
b2:12:05:d7:a0:6b:01:7e:a9:76:32:47:1e:4a:7d:
22:22:65:90:e3:35:ca:c8:23:05:0e:ce:65:d4:97:
a4:82:49:93:f0:94:d3:a2:bc:4f:e2:a8:91:4f:e2:
15:68:3c:f6:c3:0f:c3:b1:a5:92:b7:a7:50:65:24:
a6:70:09:79:73:bf:7a:c0:7e:13:c8:a6:c6:a6:43:
fa:a3:34:9b:f3:a0:29:38:e5:4c:e7:af:c8:8a:5a:
c7:81:98:0c:36:aa:4a:8e:16:a9:f7:53:e1:bf:aa:
fb:3f:2d:45:34:35:46:f3:d2:8d:81:02:b8:64:5e:
c1:1a:3d:3b:78:c4:ff:e6:43:8f:cc:8f:30:92:ea:
7b:4d:48:da:a3:6a:0d:07:89:90:e6:32:a5:f1:56:
87:56:85:9f:ea:da:da:11:2d:23:29:88:54:c0:9d:
44:d3:59:f0:9e:45:36:da:17:99:52:84:6d:17:c2:
51:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:2B:EF:EA:A2:B1:59:AE:5B:E1:68:8D:3F:49:F4:70:3F:99:EB:6C
X509v3 Authority Key Identifier:
keyid:BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:c2:73:75:48:ef:60:ec:58:26:4f:47:14:49:17:8e:6a:37:
9f:4f:76:86:99:13:ce:84:b2:8a:09:fa:20:1a:7e:4f:7d:43:
b7:c0:70:17:2b:47:b2:ce:82:57:30:a4:92:af:ac:7d:76:0a:
78:97:b0:3b:84:17:72:9d:f6:ef:39:40:22:6e:3c:81:bb:80:
93:96:d7:57:11:83:41:ef:3e:e1:79:43:40:41:b5:02:87:eb:
a1:ab:a8:82:17:78:9c:d3:fd:fa:26:68:73:e3:b0:84:4d:c5:
6b:38:7f:dd:e0:72:9d:2d:18:74:ad:97:96:78:42:7a:fe:37:
db:26:01:e1:c3:27:14:8c:fe:87:1e:97:8f:af:c5:61:05:0e:
71:8b:c0:a1:9f:cc:45:45:42:b9:21:a7:d3:1e:67:c9:35:8d:
43:af:63:c1:53:1e:b6:94:e6:9e:ba:1d:52:b9:40:b8:07:44:
ff:68:76:77:bc:c1:45:f5:29:a1:60:54:46:1c:ed:2f:81:42:
1f:3a:24:94:b2:67:74:09:1c:da:77:2f:a3:23:49:e4:dc:78:
7e:2e:5c:9d:fd:ff:cf:80:6a:d1:a6:de:24:82:25:4a:5d:3f:
3b:4d:22:69:be:af:e2:65:d1:0e:b4:e5:8c:a1:c9:a0:43:ff:
70:79:44:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 15:26:53 2025 by rpki-client