This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.mft
File: UzahBs7N66kuC4Dl6aXHibp0xis.mft (raw, json)
Hash identifier: SCXMOVAVWmU+Rr1yLh2x+cID+3CUg4iG5bDkjoFwAwo=
Subject key identifier: 03:5A:77:AC:F6:40:36:F0:0F:F6:BE:63:F0:90:0C:AC:D3:48:34:A2
Authority key identifier: 53:36:A1:06:CE:CD:EB:A9:2E:0B:80:E5:E9:A5:C7:89:BA:74:C6:2B
Certificate issuer: /CN=5336a106cecdeba92e0b80e5e9a5c789ba74c62b
Certificate serial: 019AF540744E0D3FBA0D4B6487D814FEA66D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.mft
Manifest number: 0C0D
Signing time: Sat 06 Dec 2025 20:00:33 +0000
Manifest this update: Sat 06 Dec 2025 20:00:33 +0000
Manifest next update: Sun 07 Dec 2025 20:00:33 +0000
Files and hashes: 1: 3XFZjvmipuYl3ZWlHwQH5J3zMBo.roa (hash: waCPVYUPagNA2C/8qUWA6TsWBhxDDZLgjh2zXP9UUxQ=)
2: 7k8l9jRcUvUU0PoFjWmWy5vQ4RU.roa (hash: EkvhsCktAS/aEN7qGD8m7gGA2WllZuGA03mFu0p4SxA=)
3: NQzxfbg6mUjToWYd761iH1Aj8M0.roa (hash: gTeoWCaUXq7PaCcs+yvz12eVkeAA0ArL5OPG5CvIUNQ=)
4: QDeglJ-kf-CPwjwijAyu-xuaRJQ.roa (hash: F1qjIGAjhb4CCD6+mprPcFrHYg12/ZjUkVJtYzNpI98=)
5: UzahBs7N66kuC4Dl6aXHibp0xis.crl (hash: 8R4kNsXFBnBKJq7H2WUB9GZlNF3cv5Q2v/W0sJWrcdk=)
6: bjcT27Mkrmm6YUKTzHgcNPrjPBU.roa (hash: Yn0RgyPmmLSzCmXSFkvVjdwnmhf67ZsvVo3LY47XFQY=)
7: jegjWR7VprdJlP9Id7lnXfq_3BY.roa (hash: 3+QVUbiATKXjEawCpJp9FdwXwbHQPUAeJSJ9r2KyWeA=)
8: l5UHl_04bz9hmdByW-mS5aOLzVQ.roa (hash: 44oRNABvdxfx6PrHpOdx7KjJ3dNX5DY1G8L30+SPRh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.mft
rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 20:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f5:40:74:4e:0d:3f:ba:0d:4b:64:87:d8:14:fe:a6:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5336a106cecdeba92e0b80e5e9a5c789ba74c62b
Validity
Not Before: Dec 6 20:00:33 2025 GMT
Not After : Dec 7 20:00:33 2025 GMT
Subject: CN=035a77acf64036f00ff6be63f0900cacd34834a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:7b:1d:25:1c:b7:71:aa:13:eb:90:5a:aa:0c:
2b:b1:96:6f:6c:b4:2a:e8:b1:de:0f:2c:fc:2f:15:
38:d8:c4:df:15:e2:0c:52:35:92:14:44:83:5c:df:
30:63:f4:33:ac:75:34:94:5a:e2:72:4d:47:4f:45:
32:c0:54:11:ba:ea:44:59:e2:3d:2a:4b:a3:64:ee:
ac:b1:5c:a3:9c:b2:f4:8d:3d:dd:5f:ce:22:a6:7f:
be:d1:ae:9f:54:f6:ea:15:80:59:ee:6c:48:dd:6a:
4d:0f:cc:26:38:25:8f:17:cd:7c:2d:97:8e:f6:d8:
14:f5:bf:43:76:6b:a1:40:78:56:1f:38:3e:15:39:
fc:d4:d9:c5:fd:58:7d:de:5c:90:b0:20:9f:69:a3:
3f:45:67:8c:70:3a:ce:64:ff:ed:b2:94:3d:1f:50:
26:6f:f3:95:08:a7:8d:b0:42:99:39:a5:49:f5:cc:
36:b4:c3:24:6d:85:2a:06:0d:c8:8b:e7:0b:88:dc:
14:6c:38:f1:a3:18:18:e5:78:56:9e:f0:60:e8:7f:
51:18:31:4c:6a:93:f1:6a:32:13:3b:88:ff:cf:47:
6e:96:e9:fc:b0:58:fb:cb:86:e5:75:34:a5:9b:64:
8a:b7:98:69:44:d1:b3:67:8e:ab:c4:a0:a5:43:23:
3a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:5A:77:AC:F6:40:36:F0:0F:F6:BE:63:F0:90:0C:AC:D3:48:34:A2
X509v3 Authority Key Identifier:
keyid:53:36:A1:06:CE:CD:EB:A9:2E:0B:80:E5:E9:A5:C7:89:BA:74:C6:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:05:c4:f9:e6:c9:28:2a:db:f2:02:9e:ee:41:12:06:b5:bd:
aa:e1:60:35:ed:36:f6:45:a6:04:26:12:1f:cb:6e:6a:58:28:
40:c3:11:cc:b3:35:1f:4c:20:6f:83:87:7a:64:48:1f:d7:9c:
86:3c:d9:06:ff:5d:be:96:6a:03:2d:2c:67:1a:8d:e3:4b:71:
2b:32:43:da:aa:0e:6a:30:32:32:77:77:b5:58:60:cc:a2:db:
1e:79:74:f7:29:12:d0:dd:20:a1:54:29:5d:44:c4:c8:88:c7:
6b:3c:82:4f:33:4f:db:90:c9:8c:8a:10:b9:ad:6b:20:a8:42:
00:24:7e:e7:3d:13:e2:c4:a3:71:ec:a3:2f:59:e7:95:6c:74:
b8:41:d8:01:3c:7a:e9:40:bd:87:5e:e1:08:c7:72:bf:10:2f:
02:ef:43:43:4d:1a:99:50:47:92:9c:6f:28:23:e4:0c:37:65:
1b:a4:dd:01:d0:73:7b:49:95:c3:3e:da:ae:cf:2e:c3:77:38:
00:6c:03:d7:97:f7:fa:3e:8b:5c:b1:37:a6:fb:ee:c7:0e:b6:
b6:6c:be:05:1d:3b:a3:8f:87:65:3b:c3:00:60:cb:de:a1:47:
67:d9:fb:60:d6:ef:a0:96:f1:e6:3c:d6:95:f0:70:48:b4:4b:
09:cb:ad:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:54:29 2025 by rpki-client