This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/bd6f18-ea7d-43c4-9c85-87a3f3b31150/1/UTJvq7Elb6Aid-XuA0t5kf8xhaU.mft
File: UTJvq7Elb6Aid-XuA0t5kf8xhaU.mft (raw, json)
Hash identifier: K1eT48Eh4VHkD7g4ONbNRlWHYTJp02TbuZrrPkfyJBQ=
Subject key identifier: 79:C5:6D:D0:39:38:A6:73:9F:B3:43:CA:0C:A9:16:BE:D7:88:29:92
Authority key identifier: 51:32:6F:AB:B1:25:6F:A0:22:77:E5:EE:03:4B:79:91:FF:31:85:A5
Certificate issuer: /CN=51326fabb1256fa02277e5ee034b7991ff3185a5
Certificate serial: 019B59AC99FE64869E64D1AE4C1255DD0C08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UTJvq7Elb6Aid-XuA0t5kf8xhaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/bd6f18-ea7d-43c4-9c85-87a3f3b31150/1/UTJvq7Elb6Aid-XuA0t5kf8xhaU.mft
Manifest number: 0EFD
Signing time: Fri 26 Dec 2025 08:00:42 +0000
Manifest this update: Fri 26 Dec 2025 08:00:42 +0000
Manifest next update: Sat 27 Dec 2025 08:00:42 +0000
Files and hashes: 1: SQfm3QwC2tHmk2VBtPYJeKQFTeY.roa (hash: frBtQ30uw1pKksB5hSNObJ1YjWSC5Q2+axgbgM633UM=)
2: UTJvq7Elb6Aid-XuA0t5kf8xhaU.crl (hash: aE/3GmQ+BdYcPfcDPV9oOoCU3x4ljOHEFN815Fi4WQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/bd6f18-ea7d-43c4-9c85-87a3f3b31150/1/UTJvq7Elb6Aid-XuA0t5kf8xhaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/bd6f18-ea7d-43c4-9c85-87a3f3b31150/1/UTJvq7Elb6Aid-XuA0t5kf8xhaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/UTJvq7Elb6Aid-XuA0t5kf8xhaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Dec 2025 06:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:59:ac:99:fe:64:86:9e:64:d1:ae:4c:12:55:dd:0c:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51326fabb1256fa02277e5ee034b7991ff3185a5
Validity
Not Before: Dec 26 08:00:42 2025 GMT
Not After : Dec 27 08:00:42 2025 GMT
Subject: CN=79c56dd03938a6739fb343ca0ca916bed7882992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c6:a4:fb:a0:67:5e:6f:bc:4f:a5:9c:da:c2:
4a:92:64:00:9e:df:d7:ca:2e:75:38:10:8b:57:1f:
a3:ce:c3:89:fc:99:ef:86:ad:7a:f7:c0:a3:6c:df:
e5:17:a3:e6:88:02:8f:da:0f:f1:34:ef:64:e8:72:
b8:3a:e6:9b:53:92:20:ee:05:68:8e:4f:8f:65:00:
0c:09:9e:96:8e:d3:a3:cf:b8:8a:91:11:b6:d0:d2:
94:25:98:55:41:b9:4d:97:44:98:53:a3:81:11:b6:
89:64:6b:b7:2e:eb:d2:86:ca:3f:6b:07:51:a0:19:
1a:49:22:6e:01:8e:c8:13:1f:00:5a:be:e4:40:52:
71:b2:47:71:e5:ed:e6:06:0e:69:81:7d:c9:77:3e:
4b:4c:d0:fe:07:0e:a6:e8:a2:0e:92:2d:e5:40:e1:
b7:c1:10:0d:d7:85:13:73:3b:8d:bc:15:dd:2b:62:
0f:a8:23:cc:6f:84:ff:8a:ca:1d:d7:e7:af:74:e0:
ec:3e:0c:78:fb:ae:64:39:c1:c6:c8:bf:4c:6d:ad:
55:32:59:73:a3:1d:36:3e:61:9a:e2:96:52:7d:f5:
f7:21:6a:d0:26:7a:f6:9d:cd:25:b9:16:c6:cb:98:
7e:56:7d:dc:b4:b5:ba:ba:77:1e:9a:79:cc:76:d5:
c7:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:C5:6D:D0:39:38:A6:73:9F:B3:43:CA:0C:A9:16:BE:D7:88:29:92
X509v3 Authority Key Identifier:
keyid:51:32:6F:AB:B1:25:6F:A0:22:77:E5:EE:03:4B:79:91:FF:31:85:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UTJvq7Elb6Aid-XuA0t5kf8xhaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/bd6f18-ea7d-43c4-9c85-87a3f3b31150/1/UTJvq7Elb6Aid-XuA0t5kf8xhaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/bd6f18-ea7d-43c4-9c85-87a3f3b31150/1/UTJvq7Elb6Aid-XuA0t5kf8xhaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:57:11:cc:ff:dc:a6:36:b8:f4:3d:ca:00:12:ed:97:8a:60:
82:ff:39:7d:dd:0e:1c:f9:1d:45:d1:36:22:92:3e:7f:82:c5:
c7:09:49:5c:b3:c9:50:f4:e5:9f:82:59:5d:70:8f:6c:10:f0:
6f:01:70:21:8b:e3:0f:f7:bb:ec:91:a3:e6:df:19:ef:3d:2a:
e0:4d:a6:a4:2d:37:7b:c3:99:8f:b9:26:85:ee:76:1e:4a:74:
3d:de:5a:3f:e6:ce:9e:5b:29:07:90:ab:09:6a:00:5c:12:05:
57:7f:cd:92:17:0e:6f:b7:98:34:5b:fb:b7:4b:b7:a9:45:ec:
0c:85:87:96:ab:f1:f1:50:fe:17:6c:0e:7d:74:f8:e2:d9:65:
e5:db:b5:73:81:89:7e:f5:5d:ec:9d:e4:61:a6:f6:03:a0:54:
5e:ed:27:ab:66:85:30:e4:6f:c7:52:4f:77:f5:a7:e7:2a:8d:
26:0d:03:be:58:a6:98:5d:d6:d0:8f:f1:73:72:d2:40:59:44:
c3:29:80:6d:1c:c1:2f:87:a6:6b:11:ec:17:d1:06:16:7d:bd:
3f:88:26:cd:86:3c:fd:10:dc:87:9d:68:b1:08:8e:70:eb:7b:
6d:2d:b0:f4:b7:fb:5a:c6:e5:cf:11:5e:45:39:6c:9f:bb:71:
c5:57:a8:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 16:00:59 2025 by rpki-client