This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/UNpYj16aHCr1a-CPfmosmYGrYCY.mft
File: UNpYj16aHCr1a-CPfmosmYGrYCY.mft (raw, json)
Hash identifier: a4yS/Y+c/GO7fg+Fif5CtYHJIsZtJwUgT9uO+0GxvgQ=
Subject key identifier: 71:93:E2:9F:DE:30:3C:E1:C5:AD:E5:71:D6:41:34:20:83:CB:95:BA
Authority key identifier: 50:DA:58:8F:5E:9A:1C:2A:F5:6B:E0:8F:7E:6A:2C:99:81:AB:60:26
Certificate issuer: /CN=50da588f5e9a1c2af56be08f7e6a2c9981ab6026
Certificate serial: 019B1ACDDD7F5429E3D4D752FF6718638230
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UNpYj16aHCr1a-CPfmosmYGrYCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/UNpYj16aHCr1a-CPfmosmYGrYCY.mft
Manifest number: 0BE3
Signing time: Sun 14 Dec 2025 03:00:57 +0000
Manifest this update: Sun 14 Dec 2025 03:00:57 +0000
Manifest next update: Mon 15 Dec 2025 03:00:57 +0000
Files and hashes: 1: UNpYj16aHCr1a-CPfmosmYGrYCY.crl (hash: ykmghDdgER1BqFJ2s5gyr65HTOYFjFO7OQ1KUD1CHeg=)
2: VwHu0AZouyhVLQY99VO0Hkcb7pw.roa (hash: cQhVJXl3GQeuBM9kWPoYpEUpa83WUtjFGDqVTGex39s=)
3: g5Vn880XXpeU5DJfsGcy-Urcv2M.roa (hash: OCJJ4xo5f+mpBB7aa28MDI5Ug57SbY/lCFK1ZpNzZKw=)
4: tqTqorxuukrl9uDDia_5nmx2f7s.roa (hash: Jv1dDJLLdh6QR2z0ABpF4hZs9+OaRufEEerM9P1Rxzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/UNpYj16aHCr1a-CPfmosmYGrYCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/UNpYj16aHCr1a-CPfmosmYGrYCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UNpYj16aHCr1a-CPfmosmYGrYCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Dec 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:1a:cd:dd:7f:54:29:e3:d4:d7:52:ff:67:18:63:82:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50da588f5e9a1c2af56be08f7e6a2c9981ab6026
Validity
Not Before: Dec 14 03:00:57 2025 GMT
Not After : Dec 15 03:00:57 2025 GMT
Subject: CN=7193e29fde303ce1c5ade571d641342083cb95ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1b:2b:29:cc:5e:c3:be:58:89:4b:14:11:40:
03:11:3d:bd:de:1d:27:7b:f9:04:aa:e5:80:9f:6b:
95:c3:08:0a:cb:1e:4c:dc:e5:38:54:69:88:7f:d8:
2c:79:08:04:31:d4:10:30:55:0c:ff:18:47:d4:42:
47:77:70:e7:4f:9f:84:5c:df:ca:e5:7f:35:90:05:
d3:28:76:f9:58:79:71:0b:59:30:93:1d:d0:25:8e:
5a:71:6c:22:0b:a4:e0:49:6d:57:a9:5f:1c:6d:e3:
50:26:9f:3b:68:44:fe:ae:fa:5f:25:40:ff:a5:bc:
26:f7:32:c2:11:22:70:a7:b3:7b:f6:29:25:6a:fd:
89:83:fc:c4:da:77:f1:cc:3b:93:00:67:dc:a7:03:
8a:99:e3:82:d7:83:22:6e:77:9e:f1:b6:a3:26:79:
06:26:f9:26:09:d0:38:d7:0c:87:7b:c1:92:73:f9:
b8:df:bb:6d:0c:9f:7f:07:a1:2c:65:25:15:78:ef:
cb:70:03:27:6b:dc:55:42:5a:f8:f2:0e:dd:03:59:
9c:63:de:1e:3f:f5:7f:25:03:bf:ea:01:a0:a9:65:
94:f7:17:aa:c5:ee:9d:79:c0:ae:5b:66:40:85:7c:
62:d2:de:e4:c0:bc:ad:b8:37:45:92:37:3d:ba:ae:
1a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:93:E2:9F:DE:30:3C:E1:C5:AD:E5:71:D6:41:34:20:83:CB:95:BA
X509v3 Authority Key Identifier:
keyid:50:DA:58:8F:5E:9A:1C:2A:F5:6B:E0:8F:7E:6A:2C:99:81:AB:60:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UNpYj16aHCr1a-CPfmosmYGrYCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/UNpYj16aHCr1a-CPfmosmYGrYCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/UNpYj16aHCr1a-CPfmosmYGrYCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:93:e9:c9:82:ba:f3:d8:7b:f4:0a:37:10:d4:94:29:5c:bc:
d9:d1:87:20:e2:ff:67:cf:e6:05:ca:73:e3:4f:83:e6:38:37:
c7:30:15:f3:79:62:85:e4:0c:a9:8b:15:c5:e4:ed:59:27:99:
ed:70:58:a8:1e:75:60:eb:ce:50:30:06:de:2a:12:32:b0:e9:
d5:0d:af:46:8d:97:01:44:02:11:fd:b7:54:e7:7c:3f:c9:5f:
c9:1f:9d:c4:88:cb:dd:89:ab:79:ef:d7:64:fb:1a:e1:d2:e1:
94:2d:0e:b4:50:1e:36:a6:ba:9e:43:2f:a0:df:4a:26:90:60:
69:c2:d2:93:87:19:10:4e:00:f0:bf:9a:22:d7:6c:6e:73:7e:
41:59:d3:52:54:c2:c8:cd:ca:12:1f:20:9b:2c:73:e2:c4:be:
1a:db:1b:64:2b:e6:af:30:d5:19:69:76:80:d0:1d:f5:41:4f:
6e:f5:e7:cb:2c:34:6b:b7:05:3b:81:78:1f:7d:7f:41:0a:9d:
14:fd:9e:70:f8:c8:97:a5:38:77:a6:61:5e:4d:66:9c:62:77:
de:29:67:54:a4:f9:19:e8:89:9b:0b:a1:a1:4c:05:13:6d:7d:
ba:9f:ad:94:3c:8c:78:8d:e6:36:fc:df:e7:c7:75:02:10:bd:
35:34:ab:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 06:27:06 2025 by rpki-client