This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/uNJRxL_VJtoGLUzir1a25G6SURc.mft
File: uNJRxL_VJtoGLUzir1a25G6SURc.mft (raw, json)
Hash identifier: zKiRob8Lv+2JBPjelk8Gl2ek6Y0+n7ABsrvwgyDrJUY=
Subject key identifier: F8:3A:A8:34:30:04:69:8A:D8:C9:7A:EF:FA:4C:59:3C:40:F8:CC:72
Authority key identifier: B8:D2:51:C4:BF:D5:26:DA:06:2D:4C:E2:AF:56:B6:E4:6E:92:51:17
Certificate issuer: /CN=b8d251c4bfd526da062d4ce2af56b6e46e925117
Certificate serial: 019B33B1F1967A59490664A553069DE918F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uNJRxL_VJtoGLUzir1a25G6SURc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/uNJRxL_VJtoGLUzir1a25G6SURc.mft
Manifest number: 1786
Signing time: Thu 18 Dec 2025 23:00:58 +0000
Manifest this update: Thu 18 Dec 2025 23:00:58 +0000
Manifest next update: Fri 19 Dec 2025 23:00:58 +0000
Files and hashes: 1: 4NKq_KYwCh8_wTbK61NtPt76P8I.roa (hash: mmA3nOgLzhGsU/7y4XASj7EI9JkBDcrnGGIkqWDOAYQ=)
2: 5NknPZb2YFjtunQlHWI_QMzdlKY.roa (hash: MgsBbLyiXdRHwov9hAncLGKeKv45suA9La+rVSC/C8U=)
3: EcXVeLZGF2isDVGR_npcyvVHtis.roa (hash: 74ii2z9H6EyEbd8UKPQgliXQbUTkT7bMVv5HyoTjEoI=)
4: MLMSeUg0Tn5acuTuB6POUwHtMC4.roa (hash: xJIvGvJF+baBBCFPe1lEWA46OVhv1WXXfc/yQpkBx7I=)
5: uNJRxL_VJtoGLUzir1a25G6SURc.crl (hash: 3cTusSePwtmdh88IsnCc6ZWgGkPIqPU2DApo1ZgNt1o=)
6: vRCQ2oYv0pMSuRkskFBqpNokNQc.roa (hash: nfgafPbA1oV5746o00z5NyxG0STOqD8qAdDbAN/fIQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/uNJRxL_VJtoGLUzir1a25G6SURc.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/uNJRxL_VJtoGLUzir1a25G6SURc.mft
rsync://rpki.ripe.net/repository/DEFAULT/uNJRxL_VJtoGLUzir1a25G6SURc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Dec 2025 22:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:33:b1:f1:96:7a:59:49:06:64:a5:53:06:9d:e9:18:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8d251c4bfd526da062d4ce2af56b6e46e925117
Validity
Not Before: Dec 18 23:00:58 2025 GMT
Not After : Dec 19 23:00:58 2025 GMT
Subject: CN=f83aa8343004698ad8c97aeffa4c593c40f8cc72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3a:f8:fa:31:ee:8d:b7:a0:e1:01:19:4a:ec:
05:74:93:88:65:59:bf:81:e7:c2:8a:8e:8d:95:c0:
88:d1:82:ac:25:55:20:37:f7:bc:d4:bb:08:cd:13:
75:0c:b3:b4:50:c6:93:b6:ae:60:3e:34:95:0d:05:
a5:f8:df:6c:73:e8:83:f7:9c:f2:97:ac:12:ce:52:
95:8d:09:b0:65:03:4a:63:70:ba:85:56:74:b1:d2:
98:97:ca:6b:e8:03:85:2b:a7:f4:40:c1:65:fb:f3:
a8:8f:79:74:35:38:13:71:87:39:6e:2e:3f:12:4b:
20:86:22:62:01:02:ac:8c:97:7d:e0:66:14:a5:0f:
e1:8a:78:42:88:bb:0f:5d:2b:66:87:1a:12:44:07:
25:4c:bc:7b:ce:e5:d9:55:8a:05:45:77:7b:29:59:
40:ec:ac:fc:6d:fc:8c:63:e8:f7:57:f7:d0:9c:20:
79:0b:e0:61:99:c4:b4:44:38:37:37:3b:93:0b:1a:
3e:c8:05:b5:d9:d9:64:99:99:36:bb:6a:b8:4a:53:
8f:db:7b:df:a2:98:c6:b0:f7:5c:9e:1e:58:b1:9e:
44:eb:9c:bf:b1:ee:df:19:e3:eb:36:08:8d:f1:76:
29:52:6e:20:c0:1b:f0:6c:d8:d3:47:6c:ea:73:22:
59:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:3A:A8:34:30:04:69:8A:D8:C9:7A:EF:FA:4C:59:3C:40:F8:CC:72
X509v3 Authority Key Identifier:
keyid:B8:D2:51:C4:BF:D5:26:DA:06:2D:4C:E2:AF:56:B6:E4:6E:92:51:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNJRxL_VJtoGLUzir1a25G6SURc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/uNJRxL_VJtoGLUzir1a25G6SURc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/uNJRxL_VJtoGLUzir1a25G6SURc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:94:3a:82:d2:10:39:18:e0:ae:34:1b:d9:28:86:4f:9b:92:
76:ea:46:6f:36:4b:c3:c4:62:3f:80:bf:3f:b0:54:d9:60:9f:
e6:7d:3c:d0:b8:4a:a5:d3:5e:fc:7c:73:26:2c:18:43:6c:17:
a2:62:0c:32:76:d7:4a:17:37:a7:f1:3c:c7:82:4a:f0:d2:38:
7a:69:0f:47:3f:10:8d:82:bb:4e:11:6c:4a:82:f9:f0:a3:f4:
59:e1:9c:6a:50:ce:99:a2:b4:b4:ad:7e:c0:40:16:80:3b:a3:
fb:04:42:2e:06:3f:34:c8:7d:d8:30:26:6c:e6:63:87:95:74:
33:a8:60:37:9c:43:e3:bf:2b:ab:c6:14:7c:ba:11:c9:77:9d:
96:25:2a:64:71:50:b3:7c:d4:d9:07:3e:98:1d:cd:4d:9f:d8:
a7:d8:e2:ef:43:bc:47:dc:5a:81:3e:f9:0b:e4:5d:6f:35:e2:
b7:76:71:18:1f:50:bc:24:d0:b2:a4:1b:bc:d0:b3:b2:6e:a9:
57:00:42:d2:f1:d2:e3:40:82:7d:ee:99:d2:6f:24:bb:d5:d8:
08:12:4a:5d:a6:f0:60:d4:d5:ab:f9:51:32:c1:a6:a3:41:3e:
54:63:52:ea:58:05:97:77:f5:9f:db:db:f5:0c:39:fb:e5:cc:
07:44:ec:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 07:44:47 2025 by rpki-client