This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/4a2604-66b6-4cb0-9d1e-1e167fa113b2/1/UAWWzmBz6O3txRBfgU7JcZG14dU.mft
File: UAWWzmBz6O3txRBfgU7JcZG14dU.mft (raw, json)
Hash identifier: q8HPhPOqsUSB3SS7EXjRuJIzYno9UvOVVrdoFALAp2s=
Subject key identifier: 96:A8:96:2E:55:CB:24:E9:F4:3D:69:07:DD:0E:52:96:6A:EC:2F:56
Authority key identifier: 50:05:96:CE:60:73:E8:ED:ED:C5:10:5F:81:4E:C9:71:91:B5:E1:D5
Certificate issuer: /CN=500596ce6073e8ededc5105f814ec97191b5e1d5
Certificate serial: 019B10130BB0BE0485701D26A034FD9D5DED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UAWWzmBz6O3txRBfgU7JcZG14dU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/4a2604-66b6-4cb0-9d1e-1e167fa113b2/1/UAWWzmBz6O3txRBfgU7JcZG14dU.mft
Manifest number: 109B
Signing time: Fri 12 Dec 2025 01:00:42 +0000
Manifest this update: Fri 12 Dec 2025 01:00:42 +0000
Manifest next update: Sat 13 Dec 2025 01:00:42 +0000
Files and hashes: 1: 2bzVPZyO8vistXfx3PCF3YdDowM.roa (hash: Hk0DUFVnHFZsNk7s3eyLbbXd7WWqibgXK7H6CcWmKmg=)
2: UAWWzmBz6O3txRBfgU7JcZG14dU.crl (hash: LtjtvDhQLuw+hKWb+0/gWic+Rt/flalm/AYDe5QL1bc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/4a2604-66b6-4cb0-9d1e-1e167fa113b2/1/UAWWzmBz6O3txRBfgU7JcZG14dU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/4a2604-66b6-4cb0-9d1e-1e167fa113b2/1/UAWWzmBz6O3txRBfgU7JcZG14dU.mft
rsync://rpki.ripe.net/repository/DEFAULT/UAWWzmBz6O3txRBfgU7JcZG14dU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Dec 2025 19:27:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:10:13:0b:b0:be:04:85:70:1d:26:a0:34:fd:9d:5d:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=500596ce6073e8ededc5105f814ec97191b5e1d5
Validity
Not Before: Dec 12 01:00:42 2025 GMT
Not After : Dec 13 01:00:42 2025 GMT
Subject: CN=96a8962e55cb24e9f43d6907dd0e52966aec2f56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d8:b7:1a:ef:c7:90:9b:d4:67:2c:73:a6:8e:
1c:f9:96:fe:fb:df:c5:e6:8f:3d:27:a8:05:75:ed:
90:e0:83:05:16:e4:99:16:a8:4f:84:8c:4c:80:35:
07:01:e7:6c:a5:42:59:8d:c5:48:46:ba:06:bf:dd:
42:c0:0b:fd:40:91:ec:cc:f2:88:56:87:4d:01:ee:
a2:6e:24:cb:67:74:a0:7a:5b:f7:1a:ba:8a:0d:b4:
fd:d7:57:6f:49:b3:8d:9c:a9:bf:29:58:9f:b8:f9:
a7:8d:0b:3a:2e:0a:01:4b:dc:42:14:54:16:87:ea:
f3:ac:b3:3a:41:08:33:f5:54:b5:74:6e:6b:2d:d4:
5e:5a:63:a7:fd:4d:f4:56:d5:04:c5:f3:c1:1c:1d:
6c:27:81:31:b1:83:40:cc:5a:d2:76:b7:f7:e4:89:
11:3f:fa:cd:a5:f4:38:99:09:42:95:54:19:ad:03:
3b:b6:be:cb:12:e7:d1:44:c8:cb:2f:45:46:a1:0a:
c9:f4:c2:d1:25:ee:be:2d:80:38:f3:1a:bd:f8:d3:
9b:a3:5c:51:64:38:1c:c7:70:79:5c:e6:2c:b0:3a:
45:8b:7f:57:bc:09:0c:16:34:19:7c:0f:4c:13:4c:
e4:60:11:c0:3b:07:3f:53:41:d2:af:4a:d0:cb:e3:
e2:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:A8:96:2E:55:CB:24:E9:F4:3D:69:07:DD:0E:52:96:6A:EC:2F:56
X509v3 Authority Key Identifier:
keyid:50:05:96:CE:60:73:E8:ED:ED:C5:10:5F:81:4E:C9:71:91:B5:E1:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UAWWzmBz6O3txRBfgU7JcZG14dU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4a2604-66b6-4cb0-9d1e-1e167fa113b2/1/UAWWzmBz6O3txRBfgU7JcZG14dU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4a2604-66b6-4cb0-9d1e-1e167fa113b2/1/UAWWzmBz6O3txRBfgU7JcZG14dU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:b6:43:fe:90:11:2c:36:b1:b4:37:d5:f9:1a:26:9c:fd:2c:
45:c4:ac:a1:9e:df:28:99:51:04:05:21:c5:35:21:80:e3:6d:
79:77:7b:f2:49:68:a8:42:d3:7f:e5:0b:1a:0f:b2:c6:02:b2:
f3:23:f6:3d:6d:22:e0:55:c3:4f:18:89:36:8c:50:47:d9:ec:
e2:78:75:7c:6c:11:13:47:68:93:23:34:31:fc:8f:36:a2:a7:
d4:07:61:2f:9b:e7:e9:fd:52:20:60:ef:4c:4d:fd:37:15:84:
ec:57:c1:03:ee:63:be:3f:20:b2:fd:f8:05:89:d3:dc:5a:99:
62:66:c8:5c:aa:13:24:f9:c9:5e:af:8a:55:6a:08:36:30:88:
8e:19:15:17:8d:86:1e:bc:41:82:dc:b6:05:4b:be:dd:09:96:
f9:9b:89:ee:71:03:73:2a:0e:50:8c:f4:de:25:e9:f7:a1:c5:
1b:0f:fb:ef:9d:8d:9a:64:b5:7f:1d:d7:5d:1e:9f:84:f5:b7:
14:1c:7d:a8:56:fb:70:fd:56:99:59:46:eb:e6:f4:cf:f4:2b:
ad:75:71:ea:cb:e0:bd:db:79:2f:6e:33:0c:3a:03:83:02:27:
34:dc:ea:87:3b:c7:44:28:3a:f7:e6:4a:02:5f:7e:db:43:78:
7e:f2:bb:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 02:51:38 2025 by rpki-client