This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/df8d9a-8ddb-44b3-9ac0-cd572fd044ee/1/gUbejOwB0FJTbA8I3-eotT-arsI.mft
File: gUbejOwB0FJTbA8I3-eotT-arsI.mft (raw, json)
Hash identifier: drHZ8ntJ4+y02nVdTBn8j2NGlEn+IcpUpaqY+qahUIY=
Subject key identifier: DB:EB:98:54:0B:17:60:A3:C3:56:68:70:E3:D4:FA:75:F5:40:66:9A
Authority key identifier: 81:46:DE:8C:EC:01:D0:52:53:6C:0F:08:DF:E7:A8:B5:3F:9A:AE:C2
Certificate issuer: /CN=8146de8cec01d052536c0f08dfe7a8b53f9aaec2
Certificate serial: 019AF19AEB2062CB47E139966F9EB103FF33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gUbejOwB0FJTbA8I3-eotT-arsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/df8d9a-8ddb-44b3-9ac0-cd572fd044ee/1/gUbejOwB0FJTbA8I3-eotT-arsI.mft
Manifest number: 175F
Signing time: Sat 06 Dec 2025 03:00:53 +0000
Manifest this update: Sat 06 Dec 2025 03:00:53 +0000
Manifest next update: Sun 07 Dec 2025 03:00:53 +0000
Files and hashes: 1: A4PQ0gQ7q04XkXEWkOpsFcG55U0.roa (hash: BlIGTUdhWCkztoNKbN33qtlZGYIZKP+ZzvO3VxYHAQ8=)
2: S1ukHOQHwZ5FXTblgAJkMrxdPMo.roa (hash: nsbro8MsYnPkoUuF8RjKDn+GAEU45Dqsh1VzCFmduco=)
3: gUbejOwB0FJTbA8I3-eotT-arsI.crl (hash: b4rU1XAkw5P5xBZmRG1LWbjxRRd/3WIEi0AhfM4qT7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/df8d9a-8ddb-44b3-9ac0-cd572fd044ee/1/gUbejOwB0FJTbA8I3-eotT-arsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/df8d9a-8ddb-44b3-9ac0-cd572fd044ee/1/gUbejOwB0FJTbA8I3-eotT-arsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gUbejOwB0FJTbA8I3-eotT-arsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 03:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:9a:eb:20:62:cb:47:e1:39:96:6f:9e:b1:03:ff:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8146de8cec01d052536c0f08dfe7a8b53f9aaec2
Validity
Not Before: Dec 6 03:00:53 2025 GMT
Not After : Dec 7 03:00:53 2025 GMT
Subject: CN=dbeb98540b1760a3c3566870e3d4fa75f540669a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:28:e4:1d:e9:59:0b:58:32:78:a9:da:98:2f:
86:58:5f:aa:e4:35:3c:56:78:bb:5a:31:31:cf:d6:
ef:dd:09:44:b9:ce:ab:55:08:2b:a4:e8:72:f4:c3:
92:f5:82:64:37:c8:15:da:64:37:35:f8:91:b7:23:
02:e8:43:a0:88:e6:c4:58:35:c4:ce:23:05:e1:9b:
7e:76:e3:84:93:ff:e6:89:27:f0:7b:62:d5:8c:d8:
f1:35:c8:e5:e2:f5:05:2b:93:57:2f:04:69:7f:50:
e0:ac:4e:d6:85:12:fd:07:1a:94:02:ef:58:b9:61:
b0:3c:50:a7:c9:a5:7d:98:8e:f5:a4:d9:ed:ff:04:
89:6e:90:9c:8c:f6:94:90:9d:17:6e:3e:5d:92:bf:
3d:f1:01:cc:2d:45:77:e1:c3:0e:36:28:f1:19:76:
bb:41:dc:ed:d9:f9:98:19:29:33:ab:9e:f3:89:17:
9c:13:da:1c:54:f1:af:38:ac:b9:02:56:d8:49:da:
02:1e:ac:1b:34:b5:79:07:9b:0a:fd:4b:5a:e7:d6:
84:e4:b0:ff:08:d5:90:b6:6f:8c:c2:fd:f4:ec:27:
15:1c:e9:87:73:65:43:30:02:79:a5:95:e8:15:1f:
f3:55:c5:e8:56:07:ba:ce:a0:6c:6c:59:7a:d8:ba:
c0:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:EB:98:54:0B:17:60:A3:C3:56:68:70:E3:D4:FA:75:F5:40:66:9A
X509v3 Authority Key Identifier:
keyid:81:46:DE:8C:EC:01:D0:52:53:6C:0F:08:DF:E7:A8:B5:3F:9A:AE:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gUbejOwB0FJTbA8I3-eotT-arsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df8d9a-8ddb-44b3-9ac0-cd572fd044ee/1/gUbejOwB0FJTbA8I3-eotT-arsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df8d9a-8ddb-44b3-9ac0-cd572fd044ee/1/gUbejOwB0FJTbA8I3-eotT-arsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:7b:4a:44:a5:a7:c0:eb:cc:f6:a7:ce:a4:69:67:6e:ad:51:
43:03:68:dc:24:65:cd:6d:5d:c0:9d:cf:db:0f:af:bb:4d:d8:
0e:f7:61:27:f2:28:a2:9a:24:36:78:ae:ba:4d:22:73:ca:ff:
d0:98:2f:6e:af:1e:8a:d5:c7:28:c3:45:ae:37:70:18:27:ab:
a6:ff:a5:7d:50:0e:ea:67:ac:cf:7b:dd:f9:f2:7a:47:32:6f:
4f:39:7f:72:47:d8:37:1f:ad:e1:36:30:6d:2d:19:5e:b6:30:
87:be:e5:5c:2a:2a:ca:f2:77:b6:b4:32:04:ae:35:4c:2e:3d:
14:55:c8:17:be:a2:f1:bb:a2:da:88:f8:89:67:f5:35:28:5c:
8e:43:d2:1a:4d:d8:4c:f3:ed:fc:21:a1:37:00:d0:18:f6:4e:
a2:26:29:23:94:e8:5f:39:01:a1:28:91:31:92:3b:60:2c:f0:
7b:06:6e:27:5a:41:7b:25:54:2d:a4:ac:c3:06:46:d1:e8:22:
5f:df:2d:54:5a:6b:46:e0:ae:64:4d:be:3b:78:f1:bb:a5:58:
5b:60:24:95:75:c3:e8:e6:a7:ce:41:37:28:50:a0:02:71:3a:
4f:a4:2f:79:29:a9:fc:df:6f:c3:43:5b:4b:b9:b0:bf:21:02:
9d:05:71:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:06:19 2025 by rpki-client