This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.mft
File: UBRZwCeobhpVcJ-GCTf-L4GzEvA.mft (raw, json)
Hash identifier: FTBG9MoqBv3wMRwQe7/rfAa2oMgo41UWa6kNSSkqNzk=
Subject key identifier: 8C:A0:AF:28:5F:6A:5D:B0:D8:CE:E2:5C:23:47:68:17:50:14:20:42
Authority key identifier: 50:14:59:C0:27:A8:6E:1A:55:70:9F:86:09:37:FE:2F:81:B3:12:F0
Certificate issuer: /CN=501459c027a86e1a55709f860937fe2f81b312f0
Certificate serial: 019AF3F76D7A185946F90B1867FDF6542ADE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UBRZwCeobhpVcJ-GCTf-L4GzEvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.mft
Manifest number: 16F5
Signing time: Sat 06 Dec 2025 14:01:10 +0000
Manifest this update: Sat 06 Dec 2025 14:01:10 +0000
Manifest next update: Sun 07 Dec 2025 14:01:10 +0000
Files and hashes: 1: UBRZwCeobhpVcJ-GCTf-L4GzEvA.crl (hash: LBYHWbkJtGfN0ttYuyt4yMCs/0upHiFYY7p4ASSNP7M=)
2: cDqRgVZUzcG8C6S6sy9XaY7R8i4.roa (hash: dXQReZhWlMp7R/f0KCpgMs+DeDxAbD08ZpRugIlwk3I=)
3: fn4qBfRUR0OB50vceznCHU7Je0c.roa (hash: YF9zXgr+C6MTpEPUuY8+DvVCvD+pUWLKC0NueJccgh8=)
4: u67ic7YzK78QcUkHm1snD1e9720.roa (hash: csRqjLRtzYYjHQDBckYWBc6iGrmSXKNq8hQ9btgA+2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/UBRZwCeobhpVcJ-GCTf-L4GzEvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 13:09:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f3:f7:6d:7a:18:59:46:f9:0b:18:67:fd:f6:54:2a:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=501459c027a86e1a55709f860937fe2f81b312f0
Validity
Not Before: Dec 6 14:01:10 2025 GMT
Not After : Dec 7 14:01:10 2025 GMT
Subject: CN=8ca0af285f6a5db0d8cee25c2347681750142042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:de:64:e1:3d:3a:bc:b6:39:b0:c9:b3:d5:90:
a1:84:e0:55:b1:82:fd:15:dc:f9:2f:ce:b9:a4:1c:
26:f9:c5:1f:94:89:a9:33:3d:56:a7:13:2c:09:25:
84:f0:51:d8:46:59:0c:82:5b:c9:b6:0c:3f:41:81:
a3:fb:df:84:91:6b:9a:cb:ce:5f:09:b9:27:57:86:
cb:ce:a9:a3:e4:bb:45:69:50:dd:f9:53:1b:5e:4f:
b1:fb:ea:6c:ff:4e:0d:e5:3f:29:3b:6b:10:01:63:
79:b5:cd:51:54:42:9d:d9:3d:25:29:0b:29:15:1e:
c2:b1:50:17:af:e9:1f:30:57:62:8e:75:81:9c:19:
84:ff:61:13:b0:2c:b3:13:91:be:a9:0d:e9:86:2f:
69:26:8d:f4:2c:bb:a6:c5:c8:6a:5c:11:c1:62:e2:
6d:7f:2a:ab:4a:ec:1a:22:ac:e1:13:5e:c4:00:d7:
46:67:6a:3d:06:01:1b:07:d7:3a:1c:58:17:66:4f:
d7:ce:dc:85:68:e4:88:cd:b2:5b:bf:8c:c3:c2:42:
d0:98:03:83:d7:0a:48:aa:cb:66:ab:56:44:ea:e8:
5f:a4:e0:f5:45:cb:7c:fe:40:96:6a:98:d9:e8:2d:
2d:4e:44:32:03:44:85:5b:f1:5e:a6:b9:e7:2d:c3:
ef:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:A0:AF:28:5F:6A:5D:B0:D8:CE:E2:5C:23:47:68:17:50:14:20:42
X509v3 Authority Key Identifier:
keyid:50:14:59:C0:27:A8:6E:1A:55:70:9F:86:09:37:FE:2F:81:B3:12:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBRZwCeobhpVcJ-GCTf-L4GzEvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9ede92-a838-40bc-a266-162b02bb15bd/1/UBRZwCeobhpVcJ-GCTf-L4GzEvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:2b:02:d9:7b:25:43:c1:a2:f8:1e:41:20:a0:e5:d5:28:f8:
87:36:28:77:7f:1a:e5:3d:62:90:32:0f:de:ef:9f:34:bf:3d:
25:77:65:1a:14:6b:75:70:e6:ee:96:b4:2d:a9:23:94:5d:8c:
b6:06:80:85:5f:41:6b:9a:85:4d:d8:f4:99:4f:e1:e9:ae:17:
d1:39:01:46:e1:f3:25:de:ca:f2:8d:c5:10:43:df:e6:88:10:
90:44:94:7d:62:9f:93:38:f6:bc:79:14:f9:a2:5d:a7:48:61:
ce:4e:07:2a:05:b7:ef:dc:54:80:d8:72:58:22:5f:e4:0f:67:
78:83:12:b0:0a:5d:52:92:c4:bf:bb:83:e6:16:66:d7:41:a3:
43:ad:1c:74:d1:f4:ff:93:75:7e:71:dc:f4:83:2f:cb:64:22:
88:a4:a7:18:3f:5f:21:b6:da:ba:ac:32:93:2b:72:df:a5:68:
da:b6:00:bd:d6:3b:19:5c:be:1a:4b:19:67:4a:db:04:ad:b4:
99:1c:b5:ea:d4:e7:69:e6:ce:a4:0a:c5:6c:cb:37:b9:c8:24:
c3:63:81:dd:3b:e6:12:83:42:da:68:c1:ca:af:8f:9b:7f:0d:
c2:47:ff:9f:7e:ce:34:99:e4:cb:4b:c9:ca:a2:ba:8a:35:44:
33:b2:81:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:07:19 2025 by rpki-client