This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/UNpYj16aHCr1a-CPfmosmYGrYCY.mft
File: UNpYj16aHCr1a-CPfmosmYGrYCY.mft (raw, json)
Hash identifier: HJBjTwkUifhMY4OIq98JSZh7Fo2zvWXiYs9hQR/Q14c=
Subject key identifier: 10:87:D9:E5:6C:61:60:F1:10:3C:E5:09:62:BE:79:4E:8F:51:F5:19
Authority key identifier: 50:DA:58:8F:5E:9A:1C:2A:F5:6B:E0:8F:7E:6A:2C:99:81:AB:60:26
Certificate issuer: /CN=50da588f5e9a1c2af56be08f7e6a2c9981ab6026
Certificate serial: 019AF23FCD7885FC3FE1A716705796899EAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UNpYj16aHCr1a-CPfmosmYGrYCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/UNpYj16aHCr1a-CPfmosmYGrYCY.mft
Manifest number: 0BCE
Signing time: Sat 06 Dec 2025 06:00:58 +0000
Manifest this update: Sat 06 Dec 2025 06:00:58 +0000
Manifest next update: Sun 07 Dec 2025 06:00:58 +0000
Files and hashes: 1: UNpYj16aHCr1a-CPfmosmYGrYCY.crl (hash: 1YN4Az0MWJ76ym5IFnmUXrl9FG/C2fOKfCK7XcQHB5o=)
2: VwHu0AZouyhVLQY99VO0Hkcb7pw.roa (hash: cQhVJXl3GQeuBM9kWPoYpEUpa83WUtjFGDqVTGex39s=)
3: g5Vn880XXpeU5DJfsGcy-Urcv2M.roa (hash: OCJJ4xo5f+mpBB7aa28MDI5Ug57SbY/lCFK1ZpNzZKw=)
4: tqTqorxuukrl9uDDia_5nmx2f7s.roa (hash: Jv1dDJLLdh6QR2z0ABpF4hZs9+OaRufEEerM9P1Rxzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/UNpYj16aHCr1a-CPfmosmYGrYCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/UNpYj16aHCr1a-CPfmosmYGrYCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UNpYj16aHCr1a-CPfmosmYGrYCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f2:3f:cd:78:85:fc:3f:e1:a7:16:70:57:96:89:9e:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50da588f5e9a1c2af56be08f7e6a2c9981ab6026
Validity
Not Before: Dec 6 06:00:58 2025 GMT
Not After : Dec 7 06:00:58 2025 GMT
Subject: CN=1087d9e56c6160f1103ce50962be794e8f51f519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:53:34:b7:36:7b:c7:d1:83:bf:c4:2d:4a:43:
cb:64:49:19:8d:21:57:dd:1e:86:4f:5a:97:8b:f5:
e6:30:8a:a2:b5:be:8b:49:ca:5e:ce:4a:cd:00:73:
73:31:2e:dc:ee:79:d8:3a:b4:97:61:02:9c:08:e0:
5c:6a:e7:10:ec:fd:49:f2:f4:0b:57:ac:e7:d3:3a:
9d:62:ae:8c:b2:9a:42:2b:f8:a6:56:ae:69:d0:ca:
99:a2:85:15:7a:30:49:ff:f3:7d:b9:5a:76:b4:32:
31:34:a3:e9:93:f2:c0:58:5f:c0:2e:10:42:af:ac:
95:ef:b1:de:ee:bc:19:52:c3:ef:bd:95:bb:9a:27:
c0:c0:a0:e0:68:40:5d:b7:1e:8a:92:7f:01:28:c9:
07:e1:aa:e8:d0:df:7d:30:b3:04:46:59:9e:c0:6b:
05:cc:6d:ff:05:72:0d:a9:f9:f9:cc:59:7f:fa:87:
f5:fa:c1:d6:98:56:cf:25:16:4c:e4:4c:45:de:eb:
fa:68:92:da:e3:8d:24:ad:7e:0f:6e:61:90:66:b6:
46:b1:33:28:48:73:2f:c5:3b:cd:39:97:ba:c5:9c:
e7:31:13:0b:76:58:a6:03:89:ed:0d:42:aa:76:52:
5d:d0:67:d7:e5:9d:e9:cb:3e:71:93:01:07:a7:24:
c5:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:87:D9:E5:6C:61:60:F1:10:3C:E5:09:62:BE:79:4E:8F:51:F5:19
X509v3 Authority Key Identifier:
keyid:50:DA:58:8F:5E:9A:1C:2A:F5:6B:E0:8F:7E:6A:2C:99:81:AB:60:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UNpYj16aHCr1a-CPfmosmYGrYCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/UNpYj16aHCr1a-CPfmosmYGrYCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/UNpYj16aHCr1a-CPfmosmYGrYCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:0d:3d:7a:9b:02:0c:10:6f:8c:66:9f:85:06:8e:90:9a:47:
38:dd:da:e9:74:e8:10:35:5c:3c:03:b7:bd:78:9e:b4:9f:19:
02:74:3f:ea:71:f6:69:c6:b5:3c:95:20:5f:a5:e0:af:34:2c:
11:70:9c:bb:05:e0:8d:8c:1f:3c:0e:5a:73:61:e0:ab:28:e9:
4b:39:28:d4:c8:ac:14:06:36:d3:32:54:49:d3:31:e1:02:24:
a7:88:8a:b7:61:2e:40:e9:6b:99:3f:5c:65:2d:fb:5e:e6:48:
f2:6a:f8:3e:ab:22:ad:e4:6c:a2:3b:36:cc:d0:07:3a:ef:2f:
6b:63:43:c1:ab:5f:a5:2b:8f:f3:c3:99:71:9e:ff:c8:8a:7d:
d7:a7:be:e5:bf:cc:e3:ba:ea:65:59:ce:2a:c2:ad:96:7d:67:
3f:1c:48:6b:d0:56:d2:b6:38:48:57:1e:1e:e3:1c:77:f1:49:
97:f5:17:ce:8b:84:9a:ad:30:0f:f2:08:79:ec:da:2f:09:0b:
49:87:03:77:49:0d:db:ed:f0:e2:fe:5d:b6:1e:10:43:48:e7:
cb:6f:63:17:07:dc:35:bf:04:d5:dc:01:1e:0b:f6:3b:97:e5:
77:c1:b2:b7:46:bd:1d:4f:ba:e1:ae:c3:d6:9d:40:03:9e:32:
50:47:7c:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:40:20 2025 by rpki-client