This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.mft
File: uRil9IFVJuHpJRDTZI69oM27wqw.mft (raw, json)
Hash identifier: fusujLxi6Fnul1rrkfEe61vxNQ2ev6YJ9BbaCKzApEM=
Subject key identifier: 50:F8:45:B6:18:A5:CE:8C:D3:93:23:14:DA:72:6D:79:E6:26:51:D1
Authority key identifier: B9:18:A5:F4:81:55:26:E1:E9:25:10:D3:64:8E:BD:A0:CD:BB:C2:AC
Certificate issuer: /CN=b918a5f4815526e1e92510d3648ebda0cdbbc2ac
Certificate serial: 019AF0BF140ECF725360C4EB613B8C871F09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRil9IFVJuHpJRDTZI69oM27wqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.mft
Manifest number: 096C
Signing time: Fri 05 Dec 2025 23:00:45 +0000
Manifest this update: Fri 05 Dec 2025 23:00:45 +0000
Manifest next update: Sat 06 Dec 2025 23:00:45 +0000
Files and hashes: 1: NQ1K-9XIHqQJwtN4074dlf3XMz8.roa (hash: vM/pIxk1nyw8ZAVigG02xXVdjyCX5kUlIgX1S1etmX8=)
2: uRil9IFVJuHpJRDTZI69oM27wqw.crl (hash: 2oZKCLPhcWYIFjYZGjFpvPTFSmg0ekFIMpf7yk/bdQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRil9IFVJuHpJRDTZI69oM27wqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Dec 2025 23:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f0:bf:14:0e:cf:72:53:60:c4:eb:61:3b:8c:87:1f:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b918a5f4815526e1e92510d3648ebda0cdbbc2ac
Validity
Not Before: Dec 5 23:00:45 2025 GMT
Not After : Dec 6 23:00:45 2025 GMT
Subject: CN=50f845b618a5ce8cd3932314da726d79e62651d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ab:fd:3c:54:c6:22:59:d5:3a:ca:bb:b1:27:
8f:97:a7:07:b5:f4:4f:8a:11:62:0c:f8:21:93:ab:
bb:06:0f:f6:4e:61:b4:91:73:e6:ea:27:bf:70:0e:
1f:f5:4e:35:ad:e9:86:84:79:a4:8d:14:70:e8:70:
bb:8b:3d:09:fe:ec:4c:32:dc:85:77:87:2e:28:e4:
e7:c6:84:83:39:89:16:fc:f8:5f:4a:8d:fb:54:06:
ad:64:f8:3c:1c:5a:4b:00:bb:1d:04:ab:86:62:88:
e2:57:f5:7b:5c:55:2b:98:aa:2f:02:99:9e:7f:9b:
c0:be:04:66:9f:20:a2:0f:cc:76:a3:33:6b:58:d0:
ac:95:86:ca:13:b6:9b:d0:0a:03:49:98:fe:04:b6:
96:d7:08:f0:4b:2e:bf:b9:18:10:fb:32:2d:89:a4:
b0:0a:e9:9e:f4:ae:e1:b7:a0:48:2d:d4:d6:b1:89:
a0:41:d9:a1:e2:32:95:0f:f3:ff:88:63:84:c9:b7:
14:8c:b8:9c:b6:65:97:40:52:c1:aa:ec:03:2b:a5:
19:3c:10:af:38:99:e4:1b:4a:46:bb:2b:53:21:36:
a8:f0:c1:9d:60:c5:dd:40:54:fe:28:8b:b1:6a:34:
aa:c3:e7:b8:6a:0a:fb:db:00:c0:4a:a1:b3:b4:66:
64:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:F8:45:B6:18:A5:CE:8C:D3:93:23:14:DA:72:6D:79:E6:26:51:D1
X509v3 Authority Key Identifier:
keyid:B9:18:A5:F4:81:55:26:E1:E9:25:10:D3:64:8E:BD:A0:CD:BB:C2:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRil9IFVJuHpJRDTZI69oM27wqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:24:fb:72:f1:ed:51:29:48:c8:b9:49:d3:38:b7:33:e8:ac:
f7:39:d3:9d:9b:54:50:38:80:fa:38:d3:c2:56:8a:73:11:a8:
6d:a3:c6:79:85:27:76:40:d7:5d:9a:52:0e:0f:8e:e1:f7:78:
ac:2f:9c:e8:85:ec:08:99:17:0a:9c:a3:47:45:93:28:2a:c2:
c8:8d:d0:13:a9:d3:ee:27:82:a6:f5:7a:d2:79:93:6d:62:8e:
ad:ed:be:8a:59:b5:25:a1:a5:4a:42:a9:31:f6:3d:cd:9c:ba:
e1:88:ea:51:8c:07:92:ca:12:07:46:b4:12:25:ce:d9:9f:15:
ea:6b:87:e6:9c:eb:29:a8:52:e2:58:c7:18:01:66:a6:5a:1d:
80:84:ee:60:a1:64:52:95:4b:2c:2e:52:6c:ac:02:63:21:1b:
af:f3:21:8a:12:bf:c6:50:1e:f5:6e:ad:f2:cf:f2:57:5a:7f:
4f:66:0f:2e:24:ab:7c:3d:9a:f9:72:06:89:71:8b:69:67:9f:
38:fb:eb:26:5d:a0:98:82:a1:a7:87:bd:d8:d5:4f:b3:97:f7:
cd:a8:f8:c7:eb:01:74:3c:ff:3b:09:6a:bd:3f:ca:91:c7:20:
8c:82:1c:0a:89:92:41:20:e1:d0:ec:16:b7:c2:f3:9c:e8:8d:
84:5a:53:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:08:59 2025 by rpki-client