This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/f6953b-d573-442d-8550-2c4ce888374a/1/uod-WyjQCydV1j3QxYHJ_klGBnU.mft
File: uod-WyjQCydV1j3QxYHJ_klGBnU.mft (raw, json)
Hash identifier: 1YUlHEGVxhK5X4IWHYd7gMQcSKhSPlM0+7mdguFbyjg=
Subject key identifier: 79:1A:80:40:D8:BE:F9:67:BB:00:4B:CA:97:3A:B3:B3:22:D6:7E:45
Authority key identifier: BA:87:7E:5B:28:D0:0B:27:55:D6:3D:D0:C5:81:C9:FE:49:46:06:75
Certificate issuer: /CN=ba877e5b28d00b2755d63dd0c581c9fe49460675
Certificate serial: 019AF12E191BAD40CC1E24E239345DBFB16D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uod-WyjQCydV1j3QxYHJ_klGBnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/f6953b-d573-442d-8550-2c4ce888374a/1/uod-WyjQCydV1j3QxYHJ_klGBnU.mft
Manifest number: 1543
Signing time: Sat 06 Dec 2025 01:02:01 +0000
Manifest this update: Sat 06 Dec 2025 01:02:01 +0000
Manifest next update: Sun 07 Dec 2025 01:02:01 +0000
Files and hashes: 1: 3Qx0-5a1Sut6s2uIaVr9xfw4XH0.roa (hash: 1GqCE7f/lxXaUMCcSfF7oAJQEmNwJn6ems4l4j09Bk8=)
2: uod-WyjQCydV1j3QxYHJ_klGBnU.crl (hash: iAaDDvmmF/W6uk3ysKYQG9/+IojiI1fONjpPDVPBIeI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/f6953b-d573-442d-8550-2c4ce888374a/1/uod-WyjQCydV1j3QxYHJ_klGBnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/f6953b-d573-442d-8550-2c4ce888374a/1/uod-WyjQCydV1j3QxYHJ_klGBnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/uod-WyjQCydV1j3QxYHJ_klGBnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 01:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:2e:19:1b:ad:40:cc:1e:24:e2:39:34:5d:bf:b1:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba877e5b28d00b2755d63dd0c581c9fe49460675
Validity
Not Before: Dec 6 01:02:01 2025 GMT
Not After : Dec 7 01:02:01 2025 GMT
Subject: CN=791a8040d8bef967bb004bca973ab3b322d67e45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b3:3c:84:fc:e9:7b:ed:4f:59:d3:da:fb:32:
cb:e9:4d:25:b3:e8:46:ed:ba:39:fa:c8:60:ad:c9:
de:4c:f6:53:4f:b7:29:3e:71:ba:a4:de:3c:fa:8b:
36:e4:b6:63:e3:b8:7f:73:ba:6a:c6:bd:f9:be:e3:
21:74:2d:52:7c:17:09:21:6d:d6:4a:27:18:d7:bc:
ad:bc:8a:80:64:f7:b1:21:b5:36:10:48:fa:37:f3:
fe:6a:7c:cf:9b:cf:38:e1:31:a0:59:ea:7a:fd:8b:
e6:62:d3:34:9a:79:53:7c:70:78:c3:46:7b:f6:d2:
a1:30:d1:b2:c3:47:3b:e3:7d:77:4e:eb:a6:04:c2:
42:a6:d9:f5:95:b0:75:60:57:91:ba:c7:d8:60:d9:
5c:26:50:ea:88:b7:8c:6e:06:56:43:ca:2a:01:5d:
95:32:f1:1f:1e:d9:c6:d8:3d:1b:17:74:93:f7:0b:
d9:c3:19:b1:6a:35:2b:30:dc:ea:7c:36:e4:7d:65:
dd:2b:69:be:bf:19:c6:df:1d:00:7b:49:3d:df:d1:
a8:01:7e:f2:07:44:e8:9b:b4:b2:67:c0:90:23:22:
3e:cb:5b:bb:81:74:f1:2d:c5:64:65:20:6d:ab:5a:
18:6a:1a:48:13:d7:61:df:dc:7d:a6:08:ad:29:53:
b8:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:1A:80:40:D8:BE:F9:67:BB:00:4B:CA:97:3A:B3:B3:22:D6:7E:45
X509v3 Authority Key Identifier:
keyid:BA:87:7E:5B:28:D0:0B:27:55:D6:3D:D0:C5:81:C9:FE:49:46:06:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uod-WyjQCydV1j3QxYHJ_klGBnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f6953b-d573-442d-8550-2c4ce888374a/1/uod-WyjQCydV1j3QxYHJ_klGBnU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f6953b-d573-442d-8550-2c4ce888374a/1/uod-WyjQCydV1j3QxYHJ_klGBnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:09:08:93:92:ef:fc:1d:5f:80:a2:01:09:30:cf:a1:cc:b1:
0b:f0:79:05:4f:97:2b:2b:4d:e3:a8:4f:39:a4:44:02:45:e2:
da:ba:18:c7:41:5f:2c:1c:bf:ff:a5:4b:5b:a3:37:56:3a:b9:
3b:50:47:3d:38:9f:83:5c:78:34:79:c9:9a:5c:90:14:98:2c:
da:b4:7c:ac:60:8f:e8:d6:56:44:eb:1c:5f:d2:b0:de:49:21:
86:7a:07:67:d9:87:36:51:47:78:9b:26:05:31:90:1c:30:c4:
3d:d9:ca:f9:06:4b:99:55:7e:69:ee:da:aa:d7:c1:da:3f:da:
f0:9e:03:36:3d:42:63:43:e1:6a:23:56:af:05:8a:5d:a3:69:
a1:21:6a:7a:2a:ba:9b:06:29:45:e3:99:a7:54:6a:69:95:a8:
e7:c9:d4:3f:4f:72:6f:3c:12:ad:5a:de:00:49:1a:6a:f4:6f:
c6:9a:bc:ea:63:85:76:33:cf:6d:c0:10:6c:0b:17:4c:a5:3c:
ce:73:87:e4:9c:a2:07:37:b8:e5:de:78:28:69:bf:4b:9c:02:
8f:91:79:54:69:41:fe:99:18:f4:d6:36:88:fb:5b:60:c4:c2:
92:98:ad:97:5f:a9:c7:78:80:c6:ba:2e:57:cd:66:c7:03:09:
e6:13:b3:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:29:52 2025 by rpki-client