This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.mft
File: u5tW2NluvLX8-H3i7CtSwZTM-fk.mft (raw, json)
Hash identifier: nmut7TlFF11ZlON3FVH1YLRwQvr8aoIV5M+DxkO++7U=
Subject key identifier: DB:C1:D6:77:5F:1A:0B:FA:45:E3:4C:5A:7D:62:92:59:60:1F:6E:7D
Authority key identifier: BB:9B:56:D8:D9:6E:BC:B5:FC:F8:7D:E2:EC:2B:52:C1:94:CC:F9:F9
Certificate issuer: /CN=bb9b56d8d96ebcb5fcf87de2ec2b52c194ccf9f9
Certificate serial: 019B101442337CBB7B81A5CBA6881AC26D37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u5tW2NluvLX8-H3i7CtSwZTM-fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.mft
Manifest number: 1778
Signing time: Fri 12 Dec 2025 01:02:01 +0000
Manifest this update: Fri 12 Dec 2025 01:02:01 +0000
Manifest next update: Sat 13 Dec 2025 01:02:01 +0000
Files and hashes: 1: 6XCQPd-gBaWI9uUfOl9Oxd_9HlY.roa (hash: rYTYbZJWQOZnH0RagwK8UwoxwTXRP+nIxOLYvS6LJxg=)
2: Sz4cgZk58K5KT8c6QEb0Ql3mAiY.roa (hash: XD1k9LSsxBfImI/ORmlcMWAQZfP4H0hZi+Dr1QtMaAI=)
3: bvhxhmAqyDusWG8L2BubxFp6Byg.roa (hash: SHS3jK9UFMV78c0xUf6ZLaaMiJ9/VJhwk1oZbalxq7g=)
4: o9ILjFHyqHFBLmfa8iktUbEEHgc.roa (hash: AnlJF340Arx0CyHCuh9//rcp5JhktymE+WZs85nUSA4=)
5: u5tW2NluvLX8-H3i7CtSwZTM-fk.crl (hash: 6PvdiMwbHErOjx2ZyU2YQ3pe7mAulUitHf6+2o7GnJI=)
6: ymgfqUNrxCFxxzWRZDTsTHDQ5qI.roa (hash: PUzNIv/ioXbZZoJUJezcZ8P2QSpd1W55TTBz10BXkDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.mft
rsync://rpki.ripe.net/repository/DEFAULT/u5tW2NluvLX8-H3i7CtSwZTM-fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Dec 2025 23:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:10:14:42:33:7c:bb:7b:81:a5:cb:a6:88:1a:c2:6d:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb9b56d8d96ebcb5fcf87de2ec2b52c194ccf9f9
Validity
Not Before: Dec 12 01:02:01 2025 GMT
Not After : Dec 13 01:02:01 2025 GMT
Subject: CN=dbc1d6775f1a0bfa45e34c5a7d629259601f6e7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cf:72:38:79:5a:b0:3a:a7:f7:20:a5:04:a9:
74:f0:c3:d5:37:fc:07:1e:6f:34:40:bc:eb:0d:8f:
b2:d7:33:97:fe:68:78:ee:63:02:ff:3c:66:bf:17:
2a:6d:5e:3e:a0:f0:d7:62:65:6e:d6:f7:a2:9e:e4:
2f:6c:63:8c:ac:f1:be:80:8e:e6:d9:cc:18:0e:fd:
d3:52:67:14:e6:28:f3:2e:a6:f9:3d:3e:e6:3b:38:
71:f8:50:83:32:a2:fd:38:9c:db:cd:72:5b:22:d9:
f4:92:e8:98:a3:ee:7a:18:cc:f6:97:44:94:78:0a:
87:e4:90:8b:5c:fe:e8:c8:5e:f7:a6:32:04:bb:d2:
84:2c:02:0d:5a:ba:a2:54:50:62:6a:08:f1:70:12:
be:fd:8f:82:90:bc:83:28:9e:50:c1:06:d3:25:ec:
be:17:a0:37:08:16:5b:be:31:04:2a:6f:49:33:fb:
9c:63:36:8c:3f:76:12:bc:85:19:92:57:9e:bf:b4:
9b:7b:26:0c:12:49:9d:26:b3:2f:ab:de:48:ef:d3:
13:0d:1e:0c:e9:d5:47:8d:de:ed:5a:9d:26:2a:98:
72:30:f0:d0:ad:65:b2:a7:ae:68:8d:38:43:a6:94:
d4:95:81:89:22:86:46:9a:a2:44:7f:16:d2:65:38:
35:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:C1:D6:77:5F:1A:0B:FA:45:E3:4C:5A:7D:62:92:59:60:1F:6E:7D
X509v3 Authority Key Identifier:
keyid:BB:9B:56:D8:D9:6E:BC:B5:FC:F8:7D:E2:EC:2B:52:C1:94:CC:F9:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u5tW2NluvLX8-H3i7CtSwZTM-fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:88:25:35:a8:6e:39:e8:e2:e2:68:00:84:ae:bb:c4:a6:d3:
c9:57:38:ff:3a:af:62:23:ca:53:c2:aa:54:9a:3a:68:de:28:
60:4c:34:7d:35:01:17:bb:1f:6f:e0:da:b3:32:ef:dc:32:c2:
85:62:82:02:2c:36:aa:32:26:b3:4b:c5:0b:97:31:18:e4:29:
d8:90:57:61:db:bc:d1:07:16:37:9d:55:15:ee:17:c5:60:3a:
f0:1d:17:4a:59:59:20:b2:c7:bb:04:c1:4e:b8:7f:69:2f:fe:
70:db:fe:fa:b1:36:8c:35:22:a8:21:65:a2:b6:2b:fd:2e:50:
32:a8:3f:07:9c:5d:8c:a3:2e:af:43:1c:2b:17:d7:9d:96:15:
03:dd:d8:da:bc:5f:6a:3a:c7:9b:42:a9:d6:ad:34:0d:0e:fc:
bc:20:e8:8f:cd:6d:6c:cc:84:34:1d:95:40:5e:7e:f6:a9:a5:
3c:7d:75:f3:c7:0d:ca:8c:5c:c9:b4:bb:46:79:a6:29:e7:d9:
2c:10:76:9b:83:33:9d:d7:6d:fb:aa:75:32:b8:8b:b2:af:f7:
3d:fe:2e:0c:21:80:b6:c7:23:b2:5d:a0:85:60:e2:82:fd:5f:
5c:7d:90:74:47:ed:c0:14:37:3b:46:77:c6:d4:2b:5e:bf:fa:
1d:e8:a3:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 06:37:38 2025 by rpki-client