This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.mft
File: UFkuaIlccGi0ZVUIkXrVu929Cl8.mft (raw, json)
Hash identifier: GJWUnYb5IS0MyRVSIvKEmMoEtDfNGvqquzof3lBO5qE=
Subject key identifier: A5:84:5F:DC:4C:21:51:3D:06:C4:36:A6:7F:20:DA:B6:F2:48:6B:F0
Authority key identifier: 50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F
Certificate issuer: /CN=50592e68895c7068b4655508917ad5bbddbd0a5f
Certificate serial: 019AF20904D5FDACFE0915976D40232BC05F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.mft
Manifest number: 179A
Signing time: Sat 06 Dec 2025 05:01:08 +0000
Manifest this update: Sat 06 Dec 2025 05:01:08 +0000
Manifest next update: Sun 07 Dec 2025 05:01:08 +0000
Files and hashes: 1: 7E6Yjtw4S5woPVdagJ7udCJl5RA.roa (hash: 39Gi/rZHLqlNm15z+oavTYHN+xuEGg13WlzRqzoNz+w=)
2: 8zCnIgh-ZctwaWW9UWnhk5D47-Y.roa (hash: MUHP885QC53KyVAwA3OVuIpjRfltCfNEkey65yD1E0A=)
3: AUbMBGW_Vy2G-7txtWUO8ctdP7s.roa (hash: 8hVhVqsbKGADU2c8IHCYOqECSdJOghmC2FEZohLEksw=)
4: JfBP6dS5I5N35c7vJqB7NgG5BpQ.roa (hash: mlxyZUvm8D4amiftjMjNylfXPIWgAcCSgND1WevSbxo=)
5: UFkuaIlccGi0ZVUIkXrVu929Cl8.crl (hash: RAmOoH6bvEBx4sZ2cxtgkr+/qRnH3ul6QhS7kk1Injs=)
6: V5gWviiZ2-U-bdUMZ6IiB-DFzpc.roa (hash: QCQZA5MTKnem3+fJ+k+YcmhfhWTERBGnKLkTrN+uSlA=)
7: W0tavrjJSSiPuQlULsDp4KDy2W4.roa (hash: t/YLBngwq/zvwgwACF50uiu831rnT/Xxzg6t8YeTWtM=)
8: Xg6n_X8FC0p56c7bhmVCAjx_LXM.roa (hash: bCKy9ray9aVGb5cuUoApuza4mHQIk6NOLCOgkU76NG8=)
9: dNnxl9eshyIT4nX_fYkG9f0tJfU.roa (hash: M4nzGQsVxbsKWipOFOtukrmX3AJDrEypgI6i1id8uus=)
10: dRFON_8KZhLV3A8FKdT60GP8fXU.roa (hash: vZFsSXY8KKaWJVwCaYPPKczwOc+ZUmysk+xkANhTrsk=)
11: fs4X3zJFq3DUP70BE5KHHq5PW6A.roa (hash: bGR4PpXG1RT4m3/7nflg7BgdcGbpPQ/v8739XylkQso=)
12: qrKrZlWqP1xYMoyEfKssy_MBOPc.roa (hash: 7HCvDFegj/Om6sM+U3B+gHYXUnQzqvdjd1JcBWwGFb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f2:09:04:d5:fd:ac:fe:09:15:97:6d:40:23:2b:c0:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50592e68895c7068b4655508917ad5bbddbd0a5f
Validity
Not Before: Dec 6 05:01:08 2025 GMT
Not After : Dec 7 05:01:08 2025 GMT
Subject: CN=a5845fdc4c21513d06c436a67f20dab6f2486bf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ef:78:36:fa:3c:89:87:72:9c:57:52:54:53:
50:cb:4d:88:29:c1:29:03:77:86:42:98:3a:b7:6f:
7b:1d:f4:a8:8e:10:03:5b:12:6f:fb:0f:05:59:46:
62:e2:d9:7b:4f:9c:e2:46:da:3a:ca:0a:b6:af:29:
d8:b3:6c:4e:25:2e:d1:9a:79:63:ab:04:ef:d2:6e:
aa:70:b8:7e:3b:f4:9e:b7:59:46:ad:ca:c2:ea:18:
79:ec:ae:37:af:43:d8:46:19:08:37:cf:47:61:20:
d3:cd:af:df:a2:32:7d:b4:20:3c:80:5c:a4:5f:5b:
5a:94:d7:18:da:ae:ac:30:a2:96:a4:12:67:2d:fe:
1a:30:34:a1:92:5a:65:34:9b:82:35:ec:b4:10:1f:
bf:d7:99:50:fb:de:a8:6d:bc:89:0c:06:5f:c5:2e:
85:ac:15:b5:47:53:6a:ce:7d:6f:4e:c2:0c:97:22:
5d:5a:4e:be:8e:4f:f6:72:ca:d6:a5:b1:7f:62:6a:
e0:ee:23:67:2e:b3:2b:e9:6f:2a:38:02:25:63:76:
57:f8:eb:d2:c8:7c:57:0a:6b:a7:d6:ab:09:4b:2e:
1e:fd:3e:b7:15:f3:bb:6f:98:b5:28:5e:f9:0e:41:
b5:9d:c0:ed:ec:92:db:d3:c8:c8:a0:b6:9c:55:0e:
6c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:84:5F:DC:4C:21:51:3D:06:C4:36:A6:7F:20:DA:B6:F2:48:6B:F0
X509v3 Authority Key Identifier:
keyid:50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:36:da:e0:b9:b8:92:43:f2:09:db:c6:5c:5a:61:a3:54:b0:
59:da:52:2c:84:4d:64:70:a1:08:0d:55:d9:81:37:51:07:8c:
d1:b3:1b:98:8d:09:89:2f:a4:f3:e9:cd:1d:d3:e6:53:4c:c2:
d8:e9:92:51:c0:66:26:5b:b5:24:2e:9f:6f:f5:53:c9:2a:f5:
eb:c4:d2:5d:f4:e8:75:d9:87:de:cf:0c:90:ea:85:9d:e9:26:
a6:5e:46:6c:b8:1e:f3:8b:a8:fb:ea:01:72:17:7f:4b:2b:5d:
f3:52:c9:4b:67:47:d6:cc:c3:14:25:ea:a9:0f:b4:0f:c0:b5:
5e:2c:4c:8d:48:be:68:c5:b2:0b:d9:87:39:a7:03:01:65:7f:
6b:30:73:02:f8:f1:af:0a:76:b2:de:bc:77:98:dd:64:a0:b4:
c7:1f:7b:31:9c:cb:d5:e7:6b:b8:b9:13:83:5a:a2:3f:1f:5e:
ea:92:ee:80:db:b0:88:02:d9:23:21:94:dd:a7:82:d8:81:fe:
7d:fb:ad:14:a5:17:84:0b:1f:e2:ef:50:3b:87:0d:d8:d8:16:
f4:fa:25:1d:d7:2b:f2:b0:64:85:4c:53:6f:bc:d5:6b:27:92:
81:6a:54:c4:8d:69:cc:5c:10:34:c0:ab:02:e3:7a:10:b5:ef:
61:c9:5e:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:19:57 2025 by rpki-client