This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft
File: ucNjOsv2PC7LECBbm5JYCrtOuH4.mft (raw, json)
Hash identifier: ws77TjXDte65zFa8XcCYvoSZ3elcYhjiSdC5Q1BEo7A=
Subject key identifier: 88:73:DB:72:11:33:A4:8E:13:25:16:56:64:FF:2F:82:0B:42:0C:9E
Authority key identifier: B9:C3:63:3A:CB:F6:3C:2E:CB:10:20:5B:9B:92:58:0A:BB:4E:B8:7E
Certificate issuer: /CN=b9c3633acbf63c2ecb10205b9b92580abb4eb87e
Certificate serial: 019AF16471B4485F755AC7A551ECAD717F10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ucNjOsv2PC7LECBbm5JYCrtOuH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft
Manifest number: 0FD6
Signing time: Sat 06 Dec 2025 02:01:23 +0000
Manifest this update: Sat 06 Dec 2025 02:01:23 +0000
Manifest next update: Sun 07 Dec 2025 02:01:23 +0000
Files and hashes: 1: SVqYet6gqafuP93fvR-cXcD_lZE.roa (hash: W9VR4dYgi4TiBeDzcyIekcyHyO1LO5e+JjlzGp7Zlac=)
2: jJL_UCt1xKDnehMaxOeWEPnn1w4.roa (hash: OUjyb/sGoJvyBaOSinwB5CR/YZjUj96cHrntVj6IrpM=)
3: ucNjOsv2PC7LECBbm5JYCrtOuH4.crl (hash: EQTwGdyEtV+bF2Ge3j9peRe2lG7VB9V1VkI9CqjBfMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ucNjOsv2PC7LECBbm5JYCrtOuH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:64:71:b4:48:5f:75:5a:c7:a5:51:ec:ad:71:7f:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9c3633acbf63c2ecb10205b9b92580abb4eb87e
Validity
Not Before: Dec 6 02:01:23 2025 GMT
Not After : Dec 7 02:01:23 2025 GMT
Subject: CN=8873db721133a48e1325165664ff2f820b420c9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0c:b8:7f:41:f4:a2:01:71:2d:40:a1:da:e7:
c7:2b:a3:d2:c2:e4:72:42:e2:ac:e2:9f:62:cb:31:
65:00:5f:38:ad:31:53:9f:3d:31:5e:99:03:90:e3:
a0:d7:b1:53:58:be:a3:a3:5a:4f:8d:52:0e:c4:57:
1f:21:45:48:cd:02:08:12:41:8d:08:18:c8:5b:7e:
99:ea:e3:62:67:27:b8:36:65:56:b6:fa:7f:33:96:
a4:a6:0e:99:1f:2d:8d:78:77:2c:4c:11:54:b5:eb:
26:07:3d:b1:1a:8a:1d:97:1a:8a:25:b9:9e:21:73:
2c:36:40:80:2f:3b:ed:6f:03:f6:b8:22:06:dd:da:
06:31:8e:0c:a9:e4:18:45:32:60:d4:8f:bc:4c:1c:
e5:5f:35:76:e0:17:02:07:0d:0f:61:38:5a:fe:87:
33:3f:e0:89:9e:28:3e:cb:40:6e:d3:4e:05:91:94:
1d:9b:28:68:91:ae:c1:62:d8:c5:5a:94:d8:8f:be:
81:97:80:8c:2e:ec:74:ac:27:98:a0:0f:36:7e:94:
2f:f1:8c:86:ff:78:f4:a0:c2:5d:b2:10:2e:58:2c:
5c:dd:c8:ef:29:43:a5:ed:f9:ef:e3:95:bf:11:48:
22:45:bd:15:84:e6:a2:f6:9c:54:f3:d2:c3:1b:f2:
8e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:73:DB:72:11:33:A4:8E:13:25:16:56:64:FF:2F:82:0B:42:0C:9E
X509v3 Authority Key Identifier:
keyid:B9:C3:63:3A:CB:F6:3C:2E:CB:10:20:5B:9B:92:58:0A:BB:4E:B8:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ucNjOsv2PC7LECBbm5JYCrtOuH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:1e:b1:5b:00:b1:b7:74:d6:a1:b9:ac:c4:0f:28:1f:e3:3a:
43:10:60:1b:b0:30:58:f4:05:02:4d:87:77:62:c4:11:d7:09:
28:b0:e6:84:50:97:4c:41:a9:db:6e:9b:ae:f7:0b:cb:ef:07:
9e:11:30:cf:b2:e3:20:28:2d:41:46:4c:54:de:91:58:a5:e4:
dc:22:f3:3e:ea:11:6c:4b:e6:8d:76:a5:6d:9f:9a:9d:66:97:
9c:ba:94:f0:e4:6b:17:8c:31:db:30:b2:9c:ca:35:3c:fc:b0:
0d:98:91:d5:42:c0:e9:51:dd:a6:77:bc:19:72:ab:a8:2a:f0:
ce:ef:57:3b:39:e6:59:2a:9e:ba:d2:3b:89:d5:81:da:a4:ea:
78:c6:e4:f4:09:42:cf:59:1f:15:61:4d:b2:be:f4:d9:10:62:
48:17:71:04:88:73:7e:50:ee:54:e8:59:bb:30:37:d1:ef:ea:
82:2b:67:26:25:d4:d9:0f:1b:9c:2d:b6:dd:77:79:62:66:09:
1f:1c:86:91:f9:64:19:05:d3:eb:81:b2:a7:e1:0f:32:7c:c9:
a9:18:ea:6e:fc:f8:86:81:02:8b:91:f5:8d:87:13:9a:52:7f:
1b:b1:2a:a6:e6:39:73:ed:65:5e:44:83:39:62:8e:f6:e3:6d:
41:95:37:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:45:52 2025 by rpki-client