This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft
File: uas2E5RoPk8kOXz8jyPqssaCjeo.mft (raw, json)
Hash identifier: xZpmq3VoSeQja4inEQGFVfwGWzYIlZstLEKy0huquhg=
Subject key identifier: 08:27:82:FE:7F:77:D4:BD:8F:C9:0B:DA:D5:8B:F2:9D:C9:F4:29:7B
Authority key identifier: B9:AB:36:13:94:68:3E:4F:24:39:7C:FC:8F:23:EA:B2:C6:82:8D:EA
Certificate issuer: /CN=b9ab361394683e4f24397cfc8f23eab2c6828dea
Certificate serial: 019AF49BC07EF98FA2381C55452A906F3957
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uas2E5RoPk8kOXz8jyPqssaCjeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft
Manifest number: 0DB2
Signing time: Sat 06 Dec 2025 17:00:39 +0000
Manifest this update: Sat 06 Dec 2025 17:00:39 +0000
Manifest next update: Sun 07 Dec 2025 17:00:39 +0000
Files and hashes: 1: ACKE5m4AhVASTJNcm4VTbtA6kdI.roa (hash: +hhyUiJYozW/jQNJrsdrV+fUd6uIWqN4Ua7y2mknaNU=)
2: nBeQB2Y8xUPw-3swsy1_kLM7Es4.roa (hash: /D6LUGVQYGSE8+TaS0MmXKU2c7huCXgV7UKacZf5IA8=)
3: uas2E5RoPk8kOXz8jyPqssaCjeo.crl (hash: ewfT+Hwtsa8x1fOskgy/ht7Djpx+m1hv4/gdJj+YgyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/uas2E5RoPk8kOXz8jyPqssaCjeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 13:09:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f4:9b:c0:7e:f9:8f:a2:38:1c:55:45:2a:90:6f:39:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9ab361394683e4f24397cfc8f23eab2c6828dea
Validity
Not Before: Dec 6 17:00:39 2025 GMT
Not After : Dec 7 17:00:39 2025 GMT
Subject: CN=082782fe7f77d4bd8fc90bdad58bf29dc9f4297b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:de:bd:c1:99:d9:4f:a3:5f:cb:41:51:23:42:
42:d3:13:be:e4:36:3f:ea:b2:3f:91:c0:8d:28:ee:
09:85:fc:7f:17:55:59:c7:d9:ce:f2:c8:3f:d0:38:
ac:81:02:31:26:49:ab:44:75:3c:d9:2f:3b:c4:ff:
a7:24:6d:c2:f1:3c:bd:ab:15:ac:8e:bd:9f:cf:4a:
c6:80:c0:01:5f:e7:e1:99:f4:4b:31:57:d3:2c:f3:
29:de:78:d3:b2:32:2a:12:04:b2:0f:61:98:10:06:
20:9c:c9:80:12:a5:a8:80:2b:9f:d9:36:9b:85:df:
09:91:74:91:c1:ea:aa:19:a0:e5:4c:e8:16:9f:46:
96:3d:f1:f3:41:4d:b4:7c:18:72:59:07:9f:af:54:
36:2a:e4:f4:0e:5e:17:36:7c:ef:28:28:e2:93:30:
60:26:73:ab:80:de:dd:14:75:16:41:3e:85:be:e2:
5e:6d:a6:8f:fb:71:11:93:44:e7:d5:d8:6d:09:02:
52:cd:51:a5:fc:80:31:8c:a1:94:d9:cc:8a:21:cd:
5c:84:f6:6d:ca:7b:7f:61:8f:d6:75:ed:85:d5:73:
5a:7b:d3:0f:e5:d3:5e:33:5d:cb:6a:8e:da:55:ef:
89:61:8e:22:cd:e3:b7:3c:1d:00:13:b0:fe:e9:5d:
6d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:27:82:FE:7F:77:D4:BD:8F:C9:0B:DA:D5:8B:F2:9D:C9:F4:29:7B
X509v3 Authority Key Identifier:
keyid:B9:AB:36:13:94:68:3E:4F:24:39:7C:FC:8F:23:EA:B2:C6:82:8D:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uas2E5RoPk8kOXz8jyPqssaCjeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:cb:3c:23:c0:90:f6:49:49:38:26:81:11:d0:65:98:3f:32:
92:da:59:6a:c9:75:5c:a6:9f:b1:c7:35:d2:1a:9a:49:60:df:
d8:ac:7a:f7:8d:91:6e:4a:83:75:63:d7:32:d4:be:54:23:a8:
ba:bb:88:76:89:8d:30:30:4a:40:2b:86:a8:d3:2e:a6:53:15:
69:78:05:64:cb:54:b4:df:98:b8:4b:48:c8:53:02:06:35:97:
07:4f:7e:d4:c1:58:2a:b4:e6:4c:8e:c8:ec:9f:a2:59:71:66:
72:cb:67:c1:5a:b2:77:ac:e7:be:2e:3e:c2:8e:0d:dc:96:15:
99:9e:0e:2d:eb:6a:26:35:ff:46:70:9a:e2:4b:10:3f:bf:b7:
c8:f9:f1:39:6e:be:cf:12:32:85:03:df:3a:77:dd:04:28:5c:
ec:81:e8:11:55:e1:f1:cf:74:5f:8e:2e:99:3d:96:9f:f7:60:
4d:48:fe:86:d4:4d:d3:0b:db:0b:70:86:cd:3e:44:4c:7f:32:
b5:b5:36:7a:d1:5b:84:c1:fe:27:b7:ed:9f:d0:eb:46:fb:bc:
39:9b:87:c7:ed:f1:42:b7:5b:4c:d9:42:35:a2:9f:a0:45:7a:
71:6f:74:1f:21:f4:3f:8d:2d:e2:53:04:11:0f:b4:d8:2c:ef:
b0:7c:49:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:01:46 2025 by rpki-client