This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
File: u0cxiEug9XP6YYtuetUDoSyWWvM.mft (raw, json)
Hash identifier: dQs0MwjACmk7ykOCrqVOIrsY68EDoq5mBwTZvnTeRJ0=
Subject key identifier: 3C:0F:10:37:6E:6C:F1:36:AF:7C:52:3F:51:3F:16:AF:81:D0:9A:C4
Authority key identifier: BB:47:31:88:4B:A0:F5:73:FA:61:8B:6E:7A:D5:03:A1:2C:96:5A:F3
Certificate issuer: /CN=bb4731884ba0f573fa618b6e7ad503a12c965af3
Certificate serial: 019AF5781D61FAC4344BEA3381B7F759F888
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u0cxiEug9XP6YYtuetUDoSyWWvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
Manifest number: 0EF2
Signing time: Sat 06 Dec 2025 21:01:20 +0000
Manifest this update: Sat 06 Dec 2025 21:01:20 +0000
Manifest next update: Sun 07 Dec 2025 21:01:20 +0000
Files and hashes: 1: J2J2124S8bl0D8F_rprl_YIDy9g.roa (hash: EwSuszD8kbzr8hDPn6y6v2FnpMpKvYRTbCp+B6KwMRQ=)
2: TgyKwJa2KkbDi0Hpkc1sfLVSKbY.roa (hash: PBkxa8WbS+Zs7wyVcsYo6bQBjySTnxQqvA/GU7hJEfs=)
3: u0cxiEug9XP6YYtuetUDoSyWWvM.crl (hash: PFKxmTUUuL7/Y+Td3tWSdo+V70uHUrbgYNW6GmriYxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/u0cxiEug9XP6YYtuetUDoSyWWvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 21:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f5:78:1d:61:fa:c4:34:4b:ea:33:81:b7:f7:59:f8:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb4731884ba0f573fa618b6e7ad503a12c965af3
Validity
Not Before: Dec 6 21:01:20 2025 GMT
Not After : Dec 7 21:01:20 2025 GMT
Subject: CN=3c0f10376e6cf136af7c523f513f16af81d09ac4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:88:1b:1e:53:8e:e4:ea:b1:a8:64:a7:e8:ac:
65:bc:5a:8f:7c:5c:c6:3f:6c:93:80:51:69:b1:5f:
a3:bc:34:43:47:2e:96:e2:a3:1a:73:ad:ae:b2:0f:
65:64:34:41:06:74:ed:d3:32:9c:48:29:04:d5:38:
ec:9b:43:20:7d:3c:e3:af:0f:e0:20:85:fe:47:41:
af:b9:9d:12:ca:20:3e:15:40:88:9f:5d:c5:fc:30:
94:7b:85:d3:51:eb:95:91:f0:30:0e:95:01:26:1e:
bb:fb:47:f4:54:a2:98:b1:17:1b:98:07:46:0d:e8:
8b:17:b7:b1:25:1f:48:cf:6a:fb:25:c7:34:46:2b:
8e:6f:84:0b:b1:90:6c:f0:9d:67:85:17:ee:1b:09:
5c:4b:82:00:af:e5:6f:8e:ff:7a:a5:b0:b2:e2:00:
fa:6a:33:60:0e:da:41:4a:d7:48:0c:07:69:8a:31:
63:2d:1c:f0:03:e8:17:62:b2:95:86:bb:83:45:aa:
8b:e7:c3:13:48:8c:b5:c4:e0:1f:76:91:88:60:5f:
19:a6:3d:1b:b1:ba:58:4e:f6:97:1a:8e:ee:2f:02:
bd:8a:1a:e7:37:57:82:8b:33:3b:a7:73:a2:32:bb:
ac:9f:26:cb:e8:14:35:fd:cb:1e:2d:f9:11:6f:9c:
35:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:0F:10:37:6E:6C:F1:36:AF:7C:52:3F:51:3F:16:AF:81:D0:9A:C4
X509v3 Authority Key Identifier:
keyid:BB:47:31:88:4B:A0:F5:73:FA:61:8B:6E:7A:D5:03:A1:2C:96:5A:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0cxiEug9XP6YYtuetUDoSyWWvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:f8:65:70:89:56:30:c0:75:32:dc:79:b2:c9:b1:fa:e9:7e:
45:f1:ae:4d:c9:c5:71:bc:93:e8:ff:b2:89:56:ef:57:46:fe:
38:9e:78:98:bf:0d:0c:6d:4e:bf:27:b8:88:12:9d:3d:f6:c7:
15:b5:6b:7f:77:26:15:7d:74:72:9a:17:0b:a1:2f:91:0e:25:
51:34:88:8b:80:33:24:1b:d6:56:19:8e:ad:2b:38:f7:ee:78:
c6:f5:55:e4:43:30:81:28:0b:5e:6c:06:1b:5f:6f:60:ac:87:
50:1c:2d:42:6e:b6:c0:fa:7f:b2:7a:0a:54:09:c3:12:01:1a:
5e:1a:93:92:95:5a:c2:7e:fe:89:c3:85:59:bc:3c:0e:0d:f0:
dc:db:9c:ce:f1:81:05:ec:17:6c:f1:9a:04:99:55:13:b7:4f:
79:68:67:9f:77:28:08:27:8f:6b:76:fc:eb:2e:14:cb:d9:4f:
9f:78:42:d4:b1:37:30:2e:9c:94:fd:97:5d:09:90:5b:22:a5:
aa:75:b0:19:b4:ca:72:cc:d5:a7:f6:eb:bb:b6:ef:cd:79:0b:
79:01:b1:a1:ae:da:34:80:61:d0:54:7c:72:d2:c3:55:60:75:
6f:97:45:47:c6:1f:c0:1e:b8:62:09:16:32:e6:fc:9e:59:df:
85:66:71:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:36:21 2025 by rpki-client