This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/285850-7551-4229-87b6-3a4468c4dfdf/1/uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.mft
File: uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.mft (raw, json)
Hash identifier: 2tXJRBCl1XejQ+szmK6TvtskvF2aDyg361chDVoQhns=
Subject key identifier: 59:FE:85:B9:50:B2:D5:27:7A:C4:B1:0D:B6:C7:B2:03:73:7A:78:37
Authority key identifier: B9:86:02:8C:9F:EB:6F:14:2B:3F:EC:B6:46:67:F4:88:74:BA:9C:37
Certificate issuer: /CN=b986028c9feb6f142b3fecb64667f48874ba9c37
Certificate serial: 019B38D85CEF38D4F59CB004AE799B6C3A9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/285850-7551-4229-87b6-3a4468c4dfdf/1/uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.mft
Manifest number: 1786
Signing time: Fri 19 Dec 2025 23:01:02 +0000
Manifest this update: Fri 19 Dec 2025 23:01:02 +0000
Manifest next update: Sat 20 Dec 2025 23:01:02 +0000
Files and hashes: 1: 8zI-HN-JYFyfgILvr9zfTCbs0ds.roa (hash: 1sTx3tescRJTi+8dNgjbNQgEYulQVlIWJfqn2hjKmvE=)
2: Ck8KWAOp0OiApi8sM8DlwNi2iNw.roa (hash: AtNRUIXDWlWkvPw9HA278DuXcNcCmUIBAWFIiOSvpUQ=)
3: q-ihxTx20OUAnVHNFFcYB5dSVFg.roa (hash: E2e3aiYkFxz102ztqUxfhjzNFXG410Fy4awppSQ4du4=)
4: uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.crl (hash: th9x64J1/KaIUmqIIIVe3Zr+CjvMuGf2feGjAQlsWzA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/285850-7551-4229-87b6-3a4468c4dfdf/1/uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/285850-7551-4229-87b6-3a4468c4dfdf/1/uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.mft
rsync://rpki.ripe.net/repository/DEFAULT/uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Dec 2025 16:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:38:d8:5c:ef:38:d4:f5:9c:b0:04:ae:79:9b:6c:3a:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b986028c9feb6f142b3fecb64667f48874ba9c37
Validity
Not Before: Dec 19 23:01:02 2025 GMT
Not After : Dec 20 23:01:02 2025 GMT
Subject: CN=59fe85b950b2d5277ac4b10db6c7b203737a7837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c7:64:1e:b8:1d:7c:d2:8b:cf:c9:2a:d2:e3:
e4:2d:2d:67:fa:a4:fb:e6:3c:9e:65:dd:38:2c:20:
64:47:38:7e:bd:12:07:ad:54:c2:b3:d6:12:8a:17:
2c:02:6f:89:13:22:57:a9:ee:cc:f8:35:f1:b7:66:
b7:a7:5b:c5:05:50:13:42:a8:1f:b5:1a:b8:c9:9e:
20:aa:5b:7f:0b:30:8e:c0:11:bc:d0:24:a0:ab:76:
01:02:79:e4:17:17:d8:c8:e5:44:c0:84:91:9f:95:
6d:a6:62:28:d8:02:51:11:d8:e7:f0:b6:4f:b8:01:
a1:70:03:2f:36:e5:45:94:96:f9:4a:7d:75:bc:7c:
39:fd:17:42:54:4e:ae:60:19:b0:ef:6f:39:e1:32:
d2:88:6f:67:70:07:d2:4c:d2:e2:a8:c8:5c:24:06:
09:c9:07:dc:c9:03:22:5f:e7:04:97:8e:6f:54:b5:
bf:92:fe:d9:da:b0:e5:d7:5f:cc:fa:81:00:94:71:
ff:ee:3c:19:c5:4d:a3:e5:ab:e3:09:94:c0:ea:78:
49:ae:ca:bd:9b:ee:c5:7f:7b:f6:fe:a5:cf:f8:48:
1f:cc:3c:0e:b2:e7:d6:1e:a0:be:87:70:bd:cb:9a:
85:c8:95:66:bc:69:60:33:6c:17:de:cf:a6:48:f2:
e9:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:FE:85:B9:50:B2:D5:27:7A:C4:B1:0D:B6:C7:B2:03:73:7A:78:37
X509v3 Authority Key Identifier:
keyid:B9:86:02:8C:9F:EB:6F:14:2B:3F:EC:B6:46:67:F4:88:74:BA:9C:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/285850-7551-4229-87b6-3a4468c4dfdf/1/uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/285850-7551-4229-87b6-3a4468c4dfdf/1/uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:b8:dd:51:fa:b5:1f:a6:6b:dc:3a:4a:14:7d:da:08:e0:14:
35:5a:d6:1c:bc:61:f4:06:b0:a5:0c:52:db:c4:2d:a4:ee:7c:
46:6e:f5:8c:cb:bc:cc:4b:e7:60:55:4f:97:45:a0:b9:27:a8:
7e:6f:50:f3:31:40:f2:b7:e0:8c:b8:04:bf:d7:b3:86:89:dc:
58:90:36:f4:81:dd:cf:55:2c:f8:e3:66:35:fa:f2:5a:4c:17:
4d:fa:36:fc:96:c6:81:fe:7b:14:3b:8d:c3:4c:39:c8:1a:d9:
ed:d0:35:b3:32:3b:7a:ad:12:9b:a1:b7:d6:76:37:61:49:25:
40:08:d1:e1:dc:21:4c:17:e7:ed:5b:cd:ed:1f:d2:bf:2b:b2:
82:43:cb:86:7f:c3:66:88:43:4f:7e:1e:f0:e1:ee:49:4d:2a:
27:64:e5:d1:ec:0b:cd:12:10:25:53:6e:0f:aa:0a:b2:36:b4:
0b:d2:7e:44:77:b6:ed:ad:5d:34:31:92:a2:f2:e0:91:a9:cb:
b0:ee:a4:8c:31:4e:7d:01:95:db:bc:10:d6:47:f8:17:bd:32:
62:ea:8e:cd:05:1c:dd:55:22:be:e9:51:56:d6:6a:e2:f9:8d:
e4:87:5b:da:72:2d:18:c1:36:b4:3e:35:d6:26:64:6a:a9:f6:
18:74:7e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 00:16:24 2025 by rpki-client