This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/794f36-9d2a-41bd-928c-94d1b1d16b85/1/UbLEAc5cnogc2aO-jv7GACLaDrY.mft
File: UbLEAc5cnogc2aO-jv7GACLaDrY.mft (raw, json)
Hash identifier: 58UTzUEvKwJOUz5rTZDGkkE3eVDrrWoB21aLUU6K4BE=
Subject key identifier: D9:C8:F9:70:05:8B:07:F7:06:CB:01:19:44:B0:F7:49:A1:50:6D:D3
Authority key identifier: 51:B2:C4:01:CE:5C:9E:88:1C:D9:A3:BE:8E:FE:C6:00:22:DA:0E:B6
Certificate issuer: /CN=51b2c401ce5c9e881cd9a3be8efec60022da0eb6
Certificate serial: 019AF20969F64B45228B45DBDCFCB6B7CF31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbLEAc5cnogc2aO-jv7GACLaDrY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/794f36-9d2a-41bd-928c-94d1b1d16b85/1/UbLEAc5cnogc2aO-jv7GACLaDrY.mft
Manifest number: 0207
Signing time: Sat 06 Dec 2025 05:01:34 +0000
Manifest this update: Sat 06 Dec 2025 05:01:34 +0000
Manifest next update: Sun 07 Dec 2025 05:01:34 +0000
Files and hashes: 1: HmBHMAAoUy9qKm5EF-apsYNvL-Y.roa (hash: l1nynbFOV66i2gHUQws1+HFlLSzuk9i9xbBDIJI0tVk=)
2: RJxr8FfYNXMH1JQVOwgGzONUVKU.roa (hash: DR8gGJ69xVF1vRltrSd3W6LpV3g9f3689+1YFT6WiyI=)
3: UbLEAc5cnogc2aO-jv7GACLaDrY.crl (hash: 9B2fW3NDfNoLhnhiePaVb3zEC2V92LACmYBlmc2ZBzU=)
4: VD-LSAHFyPqWUZ2Vjm-KKmr8eKM.roa (hash: rKVzKhQ4K6eAovmJ6rMHEI/c6Cx2HmuMrN4fBqn4Zxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/794f36-9d2a-41bd-928c-94d1b1d16b85/1/UbLEAc5cnogc2aO-jv7GACLaDrY.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/794f36-9d2a-41bd-928c-94d1b1d16b85/1/UbLEAc5cnogc2aO-jv7GACLaDrY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UbLEAc5cnogc2aO-jv7GACLaDrY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f2:09:69:f6:4b:45:22:8b:45:db:dc:fc:b6:b7:cf:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51b2c401ce5c9e881cd9a3be8efec60022da0eb6
Validity
Not Before: Dec 6 05:01:34 2025 GMT
Not After : Dec 7 05:01:34 2025 GMT
Subject: CN=d9c8f970058b07f706cb011944b0f749a1506dd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:69:0c:21:1e:61:89:b4:b9:45:8b:f9:23:00:
9e:e0:5e:8d:6b:66:a5:67:34:7b:be:28:34:07:91:
4e:58:3a:66:35:0f:e4:a9:7c:82:5c:b6:90:b2:71:
92:e8:13:50:64:8d:6e:f3:21:8c:be:e9:54:d0:41:
33:03:9f:02:13:ff:8b:a8:37:ad:93:95:43:fa:3f:
96:33:3b:db:d9:3f:f8:d5:1d:eb:bb:ae:0c:0f:ef:
75:08:4c:e5:ea:a0:9c:ea:67:1c:1a:08:37:3e:4f:
68:77:32:cc:d7:85:22:fc:9e:a4:50:dd:20:3f:62:
fe:03:b4:70:21:8d:cd:1c:65:5d:1c:09:2a:9b:af:
5e:c8:fb:6e:b9:74:27:29:84:22:6c:70:19:c2:07:
ba:67:3e:f8:f0:62:63:7b:f5:af:59:b3:74:c1:fa:
9b:2e:c5:4e:ec:50:51:5b:4e:85:16:1b:c8:6a:11:
9a:03:2d:61:b9:3d:1b:1a:61:1f:cc:e3:70:52:f0:
95:69:a8:7c:23:ae:c2:cd:10:6d:dc:21:f1:f0:2f:
a7:3f:18:d7:c1:bc:c6:1f:cb:1b:04:8c:de:5c:97:
0a:66:5f:3a:44:20:02:3e:a6:a5:c9:e7:6c:84:b8:
af:18:3b:1f:51:6f:2b:a9:09:c9:07:28:d7:5a:9a:
03:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:C8:F9:70:05:8B:07:F7:06:CB:01:19:44:B0:F7:49:A1:50:6D:D3
X509v3 Authority Key Identifier:
keyid:51:B2:C4:01:CE:5C:9E:88:1C:D9:A3:BE:8E:FE:C6:00:22:DA:0E:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbLEAc5cnogc2aO-jv7GACLaDrY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/794f36-9d2a-41bd-928c-94d1b1d16b85/1/UbLEAc5cnogc2aO-jv7GACLaDrY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/794f36-9d2a-41bd-928c-94d1b1d16b85/1/UbLEAc5cnogc2aO-jv7GACLaDrY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:d9:9d:08:bc:af:02:05:c0:51:a5:f4:d0:aa:dc:a6:80:b6:
08:d3:71:97:89:ac:8f:f9:0f:b1:5a:e9:92:4c:c7:80:d6:eb:
73:72:a3:89:6b:fc:8f:f7:ff:42:ec:1b:4c:1e:25:4d:78:01:
fa:7c:2e:2b:10:88:e5:78:64:46:8f:1d:30:6d:d1:5e:44:1a:
25:7c:2e:33:aa:fe:86:ee:15:44:96:4b:53:62:d9:1f:86:80:
6c:d1:ca:05:ad:66:44:97:13:94:b1:e3:a2:d9:37:49:04:54:
a1:48:a3:02:6d:bc:10:50:d2:57:ce:b7:8d:66:8e:a6:f2:11:
11:12:d8:c7:4d:c0:54:c0:0b:a9:af:4a:fb:19:f7:eb:1d:64:
d3:b9:1a:27:d7:7c:81:a7:11:93:42:29:5a:5c:e6:69:ab:8f:
41:80:e0:f3:db:9b:e6:49:71:60:2e:80:84:c1:56:ee:d7:5e:
55:d1:9c:11:db:35:23:b5:5e:a0:6d:98:19:9a:79:75:41:12:
c9:80:2f:84:80:09:de:08:55:d4:f3:7f:72:5b:91:fb:9b:3d:
ac:b1:b9:d4:55:ff:52:94:37:f3:74:35:5c:b3:a5:da:3e:0d:
93:e6:7e:b7:ae:91:83:15:e8:ae:69:97:e2:30:e2:f2:d5:a7:
b0:55:92:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:01:46 2025 by rpki-client