This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft
File: kucgRlxc0NqcahO0T6DYb2SeUFU.mft (raw, json)
Hash identifier: iyisBnjfQNRVpGz/kPivv3dxy3p2Cw60RQteqPH0ABs=
Subject key identifier: A3:D7:B1:DE:3F:4D:C5:5F:8F:08:DF:75:CC:7E:EC:BA:7D:19:FC:E6
Authority key identifier: 92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55
Certificate issuer: /CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055
Certificate serial: 019AF19B6B3593C07E9A66B5602047FAAAA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft
Manifest number: 178B
Signing time: Sat 06 Dec 2025 03:01:25 +0000
Manifest this update: Sat 06 Dec 2025 03:01:25 +0000
Manifest next update: Sun 07 Dec 2025 03:01:25 +0000
Files and hashes: 1: 1Is4Dx2b4hAEbNi2pJoiESDUUOg.roa (hash: Iq8BDLkXu6DWvDv/qAdFA5wJ/wndBJHGHruYEfWId0I=)
2: 5SbiNIlOSo5rSNp1qoSW-dXTShg.roa (hash: uVc4NzR1mD0S0EgbWMAzbFbtAKv13hqUCRgnRLw7Bjw=)
3: Jds9VOdsrBFbfq4zn6-y356BGP4.roa (hash: HezTqg7qCIYcC14zyjNtznQH/Br2gzRPiHXceTw8UGg=)
4: Nc2fha0lLWlvc6xMAIxXT07_q2w.roa (hash: mO6BTT3XjIVWSygzqP8zo/wWNxMwAbGXuPNN6vNEhUE=)
5: W0wwe8SBgrorcIdIh1C6dywoblE.roa (hash: o7y7OudSu2OxvsqJQhdu7LZqt6SiNfP9ooVaizbrRo4=)
6: ZR5HRzEqKWtKpqmMzL4r6DgJHWw.roa (hash: VJyDWQzVLgkrKXE4tqLoSvO15wkiKpkLd3L7U2g60hg=)
7: ZSEuWCd4gz5EACBqGI7knKtFPDU.roa (hash: Lhv+eepu21/9g4OYQmyhCGNfB7JIPz2YX1sB52VBsGQ=)
8: kucgRlxc0NqcahO0T6DYb2SeUFU.crl (hash: vLvqOoQKx8Ra5ZhawEd0KAytVwu+KVKlojBA1nmheuc=)
9: qpIHRqhd7Nb3PZWHKXegTOoXNV4.roa (hash: Zo5QxFaHcYek6dzqi+zquJFUfLpMRdJYYo05MF+VngU=)
10: swmwnpHGQQ_MAJYmDfyapkyOrco.roa (hash: tPimhTpohNCgbw9pSvdpk8DZxmGSBfS96JkOf5fTibk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:9b:6b:35:93:c0:7e:9a:66:b5:60:20:47:fa:aa:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055
Validity
Not Before: Dec 6 03:01:25 2025 GMT
Not After : Dec 7 03:01:25 2025 GMT
Subject: CN=a3d7b1de3f4dc55f8f08df75cc7eecba7d19fce6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:65:fc:35:1e:b2:1f:0e:9b:d6:90:d9:a1:3a:
7c:0f:01:03:29:78:be:b8:95:e1:6c:05:e3:7b:fc:
c7:13:dc:d9:3c:74:d7:92:08:63:6b:5e:5c:40:bb:
1d:08:3b:e9:04:67:66:1b:6d:de:b9:79:cb:bd:94:
df:23:ad:58:11:c3:19:3b:50:99:f7:dd:4f:d1:84:
ae:d7:15:8f:e1:72:dc:18:ab:c1:d8:e5:d9:af:27:
0c:d5:68:80:e0:ec:b9:00:b3:44:c2:8c:2e:d1:9c:
c5:6c:d8:5c:d4:cf:3a:b3:e9:cf:71:5f:b8:a5:15:
37:30:0b:fb:94:15:5a:5a:bc:66:68:6c:09:42:f5:
0d:bb:4d:0d:3a:9e:91:1c:3e:05:90:23:aa:56:71:
bc:a6:db:a8:50:48:57:b6:1c:3a:23:e1:d3:1b:af:
1b:e3:52:a9:cb:51:9d:3a:90:9a:3d:5d:0c:ad:7e:
08:6b:d6:25:f6:8e:26:66:4a:c1:d0:e7:83:f2:90:
23:5d:38:e0:fc:e7:de:a2:01:33:c7:4e:2d:7a:c3:
94:14:29:ba:e1:54:6a:fe:73:0f:bf:e5:25:3e:2b:
b9:6c:7e:13:df:ff:fa:70:2f:f1:e0:c3:5c:7a:f9:
b2:6e:57:64:9b:1e:74:68:56:9e:c9:3f:f9:57:e6:
ff:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:D7:B1:DE:3F:4D:C5:5F:8F:08:DF:75:CC:7E:EC:BA:7D:19:FC:E6
X509v3 Authority Key Identifier:
keyid:92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:65:c9:f7:33:1c:a4:cc:9b:b9:6f:ef:8b:e5:33:37:c4:27:
7b:ed:1a:99:a3:60:15:2f:fc:f4:b9:16:7f:f9:83:88:9e:3a:
0f:15:3f:ae:54:3a:da:b6:85:cd:75:73:f3:f6:24:15:07:9a:
74:36:bb:05:71:3c:93:cc:5d:12:26:df:47:5a:62:57:2f:a1:
8b:9e:c5:70:dd:f5:73:60:7b:0f:1c:8d:7b:3f:5e:56:02:d8:
3c:7c:ee:05:70:b2:49:b2:bd:57:9a:ac:c2:5c:54:3e:f7:3f:
89:94:4c:0e:fc:74:df:cb:99:58:91:8d:c3:b0:b8:02:67:18:
46:c1:52:a7:a4:c7:78:72:0c:3d:4a:ba:67:05:29:b2:46:b6:
61:3c:fd:b5:b0:e0:c7:73:cf:39:9b:d1:d1:99:ea:c8:34:8c:
82:7f:d5:28:0c:48:48:f8:ff:e7:15:44:57:2b:34:d3:95:f6:
fc:c2:05:f9:dc:73:44:8f:c5:21:5f:2c:31:43:c3:a6:8d:be:
f4:4d:77:f1:60:25:85:2a:2d:9e:a1:d0:be:2f:06:a4:84:6a:
17:74:74:63:44:1a:7f:7d:37:93:1c:2e:9f:c9:f5:eb:38:a8:
2c:91:8e:f4:18:69:f7:e9:06:4d:69:5f:9f:ca:4d:01:90:63:
58:f2:45:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:55:23 2025 by rpki-client