This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.mft
File: sUYBAoOoIC7qo_7zJTTj6X4EB54.mft (raw, json)
Hash identifier: qD4VKxLZGS+i6/Xy18aMesNqDkNFZySArNhp5dDWOM4=
Subject key identifier: 39:2C:EC:48:30:43:7B:98:67:D9:57:75:31:1B:C7:C8:87:AD:40:BD
Authority key identifier: B1:46:01:02:83:A8:20:2E:EA:A3:FE:F3:25:34:E3:E9:7E:04:07:9E
Certificate issuer: /CN=b146010283a8202eeaa3fef32534e3e97e04079e
Certificate serial: 019B1B054F0CACDDD964149CA4F9BA9CC126
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUYBAoOoIC7qo_7zJTTj6X4EB54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.mft
Manifest number: 1774
Signing time: Sun 14 Dec 2025 04:01:31 +0000
Manifest this update: Sun 14 Dec 2025 04:01:31 +0000
Manifest next update: Mon 15 Dec 2025 04:01:31 +0000
Files and hashes: 1: dvBncm1ioxMkZxfIwj8AHN_pV2o.roa (hash: trXkcGGpz9kCkLdcS7m7ANXF3QdwZlrIN5sw/IjjJ50=)
2: nDV5NLlAJlV7IXdCNRKuwhY8yIg.roa (hash: JCJGHbTjCnTmjbxULu8XX2HvkQESoAg0lhsxs56Srpg=)
3: sUYBAoOoIC7qo_7zJTTj6X4EB54.crl (hash: pMxNabMAo2T8b1MFnzThS+a1Woq8Bdm5Q/I5/C8rI9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.mft
rsync://rpki.ripe.net/repository/DEFAULT/sUYBAoOoIC7qo_7zJTTj6X4EB54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Dec 2025 04:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:1b:05:4f:0c:ac:dd:d9:64:14:9c:a4:f9:ba:9c:c1:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b146010283a8202eeaa3fef32534e3e97e04079e
Validity
Not Before: Dec 14 04:01:31 2025 GMT
Not After : Dec 15 04:01:31 2025 GMT
Subject: CN=392cec4830437b9867d95775311bc7c887ad40bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:eb:3e:c3:fb:c3:25:bd:af:cc:27:51:fd:65:
de:99:36:59:6c:f3:65:56:8a:8a:55:d1:e5:7d:30:
8f:cf:e4:1a:c0:f6:55:6c:fe:b0:a1:fd:a3:18:50:
6d:b7:c5:01:cb:52:35:fe:b1:01:a7:78:aa:d6:c9:
4a:bb:66:cc:9a:9e:6e:cf:68:45:ee:89:26:c4:14:
4e:c6:18:39:8d:b0:82:ff:d1:52:a8:c1:93:86:36:
fd:9f:e9:7e:84:09:65:56:97:ca:e4:8b:ca:06:e2:
93:4a:f3:42:41:2b:ce:5a:d0:71:ce:e1:34:7d:4e:
55:56:5c:18:01:13:f2:8e:a1:a0:f6:ac:91:9e:cc:
f8:0f:48:b8:e6:08:38:83:6a:27:56:9b:4b:4a:d3:
05:35:14:3c:3a:ae:9d:10:c0:ee:2e:26:9d:11:ac:
1d:9c:80:a9:10:79:26:7a:6d:34:99:b2:9c:3d:1b:
a5:8c:b1:d4:d3:56:5b:e6:af:94:bc:4e:c1:d7:c8:
4a:02:f1:63:69:0e:d0:60:7c:1b:05:e2:5e:42:31:
84:ac:c5:9b:15:bf:4f:8b:5c:6c:c6:3a:1f:83:d7:
fe:d0:af:b8:ba:40:3f:89:63:4f:36:d7:ca:5a:47:
d2:69:24:96:44:e8:c4:d8:ca:d0:d4:62:5c:f8:e2:
07:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:2C:EC:48:30:43:7B:98:67:D9:57:75:31:1B:C7:C8:87:AD:40:BD
X509v3 Authority Key Identifier:
keyid:B1:46:01:02:83:A8:20:2E:EA:A3:FE:F3:25:34:E3:E9:7E:04:07:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUYBAoOoIC7qo_7zJTTj6X4EB54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:c7:f0:28:b2:4e:2c:5e:e3:ea:e7:38:52:7a:38:0f:df:0b:
74:b3:2c:4d:89:f5:1f:74:f6:00:1b:e8:18:30:b4:b3:2e:ce:
03:d2:8f:ec:18:c7:5a:ff:56:53:12:13:1e:46:bd:d7:61:a3:
70:9a:05:dd:5c:5d:f1:fd:09:cb:c2:4a:d0:37:56:f9:1e:2a:
59:f8:3f:d3:2c:d9:4b:04:0d:2d:80:02:87:45:2b:26:d3:d0:
f9:a6:53:33:30:0f:90:8a:d2:1a:51:87:77:d9:06:8d:2f:0a:
99:14:bf:5d:39:7e:eb:d1:2c:d5:b2:09:a6:43:80:91:52:a2:
72:4a:66:41:28:c5:6f:cc:57:92:35:80:c1:8c:20:8c:2f:64:
2c:8a:34:65:fb:fa:af:2c:9c:2f:aa:36:8d:01:f2:59:ae:99:
4c:fe:ec:3b:26:d3:ac:89:9d:8b:a3:15:42:bb:70:10:2c:0b:
48:a6:e2:1d:dc:09:08:ad:c9:2d:70:18:40:bf:01:35:fd:bc:
d6:4d:f4:02:a6:57:69:dc:4a:12:60:d3:fc:4b:2d:7c:40:30:
fe:a3:bf:83:37:6a:4c:a9:ec:e2:26:13:8d:ef:71:b8:09:a6:
b7:bc:51:94:74:57:f8:4e:87:08:2e:f0:c0:91:6d:2b:85:cb:
d9:32:6e:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsbBU8MrN3ZZBScpPm6nMEmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNDYwMTAyODNhODIwMmVlYWEzZmVmMzI1MzRlM2U5N2Uw
NDA3OWUwHhcNMjUxMjE0MDQwMTMxWhcNMjUxMjE1MDQwMTMxWjAzMTEwLwYDVQQD
EygzOTJjZWM0ODMwNDM3Yjk4NjdkOTU3NzUzMTFiYzdjODg3YWQ0MGJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtus+w/vDJb2vzCdR/WXemTZZbPNl
VoqKVdHlfTCPz+QawPZVbP6wof2jGFBtt8UBy1I1/rEBp3iq1slKu2bMmp5uz2hF
7okmxBROxhg5jbCC/9FSqMGThjb9n+l+hAllVpfK5IvKBuKTSvNCQSvOWtBxzuE0
fU5VVlwYARPyjqGg9qyRnsz4D0i45gg4g2onVptLStMFNRQ8Oq6dEMDuLiadEawd
nICpEHkmem00mbKcPRuljLHU01Zb5q+UvE7B18hKAvFjaQ7QYHwbBeJeQjGErMWb
Fb9Pi1xsxjofg9f+0K+4ukA/iWNPNtfKWkfSaSSWROjE2MrQ1GJc+OIHUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDks7EgwQ3uYZ9lXdTEbx8iHrUC9MB8GA1UdIwQY
MBaAFLFGAQKDqCAu6qP+8yU04+l+BAeeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1VZQkFvT29JQzdxb183ekpUVGo2WDRFQjU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9iYWMwYjktYzk5Zi00OWJiLTkwNWIt
YzAzMDdiMGY2MmRjLzEvc1VZQkFvT29JQzdxb183ekpUVGo2WDRFQjU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS9iYWMwYjktYzk5Zi00OWJiLTkwNWItYzAzMDdiMGY2MmRj
LzEvc1VZQkFvT29JQzdxb183ekpUVGo2WDRFQjU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfcfwKLJO
LF7j6uc4Uno4D98LdLMsTYn1H3T2ABvoGDC0sy7OA9KP7BjHWv9WUxITHka912Gj
cJoF3Vxd8f0Jy8JK0DdW+R4qWfg/0yzZSwQNLYACh0UrJtPQ+aZTMzAPkIrSGlGH
d9kGjS8KmRS/XTl+69Es1bIJpkOAkVKickpmQSjFb8xXkjWAwYwgjC9kLIo0Zfv6
ryycL6o2jQHyWa6ZTP7sOybTrImdi6MVQrtwECwLSKbiHdwJCK3JLXAYQL8BNf28
1k30AqZXadxKEmDT/EstfEAw/qO/gzdqTKns4iYTje9xuAmmt7xRlHRX+E6HCC7w
wJFtK4XL2TJulQ==
-----END CERTIFICATE-----
Generated at Sun Dec 14 14:21:26 2025 by rpki-client