This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/6f99d2-ad05-4cfc-9a5e-9cbedcec86d6/1/ueLcI0DFMJtj66I8--fu0Rt0r0c.mft
File: ueLcI0DFMJtj66I8--fu0Rt0r0c.mft (raw, json)
Hash identifier: MkZJ2n0QIh69B6tMLIIQtqwM6fa/SBVFLHrAOfvBCZU=
Subject key identifier: 23:D5:35:DC:D3:FD:65:D2:00:5D:1E:FD:A1:51:C5:06:A0:38:7F:38
Authority key identifier: B9:E2:DC:23:40:C5:30:9B:63:EB:A2:3C:FB:E7:EE:D1:1B:74:AF:47
Certificate issuer: /CN=b9e2dc2340c5309b63eba23cfbe7eed11b74af47
Certificate serial: 019AF1640F2B21564A8F4F369362CB6736E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ueLcI0DFMJtj66I8--fu0Rt0r0c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/6f99d2-ad05-4cfc-9a5e-9cbedcec86d6/1/ueLcI0DFMJtj66I8--fu0Rt0r0c.mft
Manifest number: 1065
Signing time: Sat 06 Dec 2025 02:00:57 +0000
Manifest this update: Sat 06 Dec 2025 02:00:57 +0000
Manifest next update: Sun 07 Dec 2025 02:00:57 +0000
Files and hashes: 1: B_TjvpIb0yLFS65mk6ISqfofzjA.roa (hash: q5/nXiQuX9jf7AxyuDuG4cnRKI4OPuttYtvlaMLZtB8=)
2: EeH5wT6Wd2uRWfhKCYRFmXtYUyE.roa (hash: 1z7kJSxRufE+Rr3Vk/FEsQraw1poJT+1o6mmpJ+VP7o=)
3: ueLcI0DFMJtj66I8--fu0Rt0r0c.crl (hash: DQTpBzFJwk9o7LZbuVGUL9HJHqoaYfysMReFcipnwFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/6f99d2-ad05-4cfc-9a5e-9cbedcec86d6/1/ueLcI0DFMJtj66I8--fu0Rt0r0c.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/6f99d2-ad05-4cfc-9a5e-9cbedcec86d6/1/ueLcI0DFMJtj66I8--fu0Rt0r0c.mft
rsync://rpki.ripe.net/repository/DEFAULT/ueLcI0DFMJtj66I8--fu0Rt0r0c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:64:0f:2b:21:56:4a:8f:4f:36:93:62:cb:67:36:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9e2dc2340c5309b63eba23cfbe7eed11b74af47
Validity
Not Before: Dec 6 02:00:57 2025 GMT
Not After : Dec 7 02:00:57 2025 GMT
Subject: CN=23d535dcd3fd65d2005d1efda151c506a0387f38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:bd:ef:ce:2c:a7:cf:a5:ac:17:5d:ce:90:2e:
94:21:69:8d:b7:7a:a4:37:2f:f9:7d:11:d7:65:b6:
ea:19:10:5f:4a:b4:8f:1a:aa:b0:25:f9:17:f1:93:
f9:c1:35:2a:c5:54:05:30:ec:68:3b:6f:28:6b:c4:
1b:0b:4c:6e:7a:ed:95:1d:6a:94:31:73:97:e5:32:
00:cb:38:6a:27:20:2f:bf:ea:bb:23:89:79:c2:ce:
d0:c7:05:d3:66:7a:3d:5f:bf:e6:52:06:e5:ba:d0:
2b:75:e6:fa:16:92:cc:33:a7:75:2c:a9:58:69:83:
2b:bd:11:7e:91:2f:9e:ca:3a:08:d8:9a:b3:10:d7:
ea:d4:9a:30:8a:91:9f:d7:8a:bf:ca:13:c6:d9:4f:
02:6a:16:3a:2e:43:a1:b1:0d:7e:66:87:e4:65:f0:
0d:08:23:a2:4c:f7:4d:c1:91:99:22:77:0c:e9:81:
74:f2:ae:2b:35:67:6d:dd:3d:bd:d1:7b:7c:bf:f6:
7e:38:75:4c:72:14:3a:9a:07:0f:96:a4:8a:ec:3a:
5e:9d:d9:32:ae:b8:af:8d:55:9c:df:33:43:a4:e7:
92:a9:3d:05:79:f5:56:73:33:ee:b0:79:e3:69:76:
9a:7e:c8:0b:95:43:a3:b1:89:09:90:26:39:32:47:
c7:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:D5:35:DC:D3:FD:65:D2:00:5D:1E:FD:A1:51:C5:06:A0:38:7F:38
X509v3 Authority Key Identifier:
keyid:B9:E2:DC:23:40:C5:30:9B:63:EB:A2:3C:FB:E7:EE:D1:1B:74:AF:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueLcI0DFMJtj66I8--fu0Rt0r0c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/6f99d2-ad05-4cfc-9a5e-9cbedcec86d6/1/ueLcI0DFMJtj66I8--fu0Rt0r0c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/6f99d2-ad05-4cfc-9a5e-9cbedcec86d6/1/ueLcI0DFMJtj66I8--fu0Rt0r0c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:40:ea:81:b4:29:62:96:fe:88:92:d1:ec:4b:15:67:92:f1:
c4:2b:fa:38:fe:31:ed:e2:f8:f3:71:62:de:76:c3:c4:db:42:
33:93:76:62:bc:09:db:93:a6:b2:6b:57:0a:9e:17:f6:fd:49:
6f:40:da:d3:44:15:0b:c5:19:11:f1:31:9f:c2:ef:d4:c0:13:
3f:26:e9:b8:5e:7a:6e:cc:ef:ba:5a:ac:42:04:c3:e3:e7:b6:
8c:66:13:75:22:48:49:10:eb:94:78:96:99:a6:7c:1d:e8:84:
89:bc:bb:95:2b:ce:87:c8:df:f2:db:9b:56:ed:f1:14:96:fe:
22:0d:d1:54:35:80:28:38:44:cd:f0:e9:3e:67:31:34:65:8d:
cc:c1:8d:57:b8:7b:ae:9d:40:9e:91:8d:77:6f:e8:e7:45:e4:
8a:ac:82:38:34:fc:49:dc:4b:dd:a4:c6:5e:35:58:13:a0:a5:
5d:86:62:3b:3d:d1:17:03:bb:90:76:d2:a2:08:2d:d1:8e:29:
78:26:21:d0:7f:a4:83:c1:6e:f6:0a:0b:1a:fa:e4:33:56:a4:
87:4e:f5:0e:75:24:3f:f4:e4:29:b3:b6:46:61:f7:e8:6b:ae:
94:e1:2e:d3:bf:f7:66:3e:0a:9c:fa:43:a1:4c:88:3b:26:38:
73:b5:67:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrxZA8rIVZKj082k2LLZzblMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5ZTJkYzIzNDBjNTMwOWI2M2ViYTIzY2ZiZTdlZWQxMWI3
NGFmNDcwHhcNMjUxMjA2MDIwMDU3WhcNMjUxMjA3MDIwMDU3WjAzMTEwLwYDVQQD
EygyM2Q1MzVkY2QzZmQ2NWQyMDA1ZDFlZmRhMTUxYzUwNmEwMzg3ZjM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoL3vziynz6WsF13OkC6UIWmNt3qk
Ny/5fRHXZbbqGRBfSrSPGqqwJfkX8ZP5wTUqxVQFMOxoO28oa8QbC0xueu2VHWqU
MXOX5TIAyzhqJyAvv+q7I4l5ws7QxwXTZno9X7/mUgblutArdeb6FpLMM6d1LKlY
aYMrvRF+kS+eyjoI2JqzENfq1JowipGf14q/yhPG2U8CahY6LkOhsQ1+ZofkZfAN
CCOiTPdNwZGZIncM6YF08q4rNWdt3T290Xt8v/Z+OHVMchQ6mgcPlqSK7Dpendky
rrivjVWc3zNDpOeSqT0FefVWczPusHnjaXaafsgLlUOjsYkJkCY5MkfHPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCPVNdzT/WXSAF0e/aFRxQagOH84MB8GA1UdIwQY
MBaAFLni3CNAxTCbY+uiPPvn7tEbdK9HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWVMY0kwREZNSnRqNjZJOC0tZnUwUnQwcjBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny82Zjk5ZDItYWQwNS00Y2ZjLTlhNWUt
OWNiZWRjZWM4NmQ2LzEvdWVMY0kwREZNSnRqNjZJOC0tZnUwUnQwcjBjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny82Zjk5ZDItYWQwNS00Y2ZjLTlhNWUtOWNiZWRjZWM4NmQ2
LzEvdWVMY0kwREZNSnRqNjZJOC0tZnUwUnQwcjBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFUDqgbQp
Ypb+iJLR7EsVZ5LxxCv6OP4x7eL483Fi3nbDxNtCM5N2YrwJ25OmsmtXCp4X9v1J
b0Da00QVC8UZEfExn8Lv1MATPybpuF56bszvulqsQgTD4+e2jGYTdSJISRDrlHiW
maZ8HeiEiby7lSvOh8jf8tubVu3xFJb+Ig3RVDWAKDhEzfDpPmcxNGWNzMGNV7h7
rp1AnpGNd2/o50XkiqyCODT8SdxL3aTGXjVYE6ClXYZiOz3RFwO7kHbSoggt0Y4p
eCYh0H+kg8Fu9goLGvrkM1akh071DnUkP/TkKbO2RmH36GuulOEu07/3Zj4KnPpD
oUyIOyY4c7VnSw==
-----END CERTIFICATE-----
Generated at Sat Dec 6 08:27:30 2025 by rpki-client