This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.mft
File: uqp7TAHpKcOJI5gatRyXJ6H58H4.mft (raw, json)
Hash identifier: L0QW4lFQM85S6Gr9VAQrI62MB5SxSpNIKdwHj5mAS/w=
Subject key identifier: F8:2A:0F:45:DD:9E:D6:ED:10:0B:A2:66:C2:10:D3:04:9C:84:ED:89
Authority key identifier: BA:AA:7B:4C:01:E9:29:C3:89:23:98:1A:B5:1C:97:27:A1:F9:F0:7E
Certificate issuer: /CN=baaa7b4c01e929c38923981ab51c9727a1f9f07e
Certificate serial: 019B5117A06921B0AC48DB27AD8DD4749EB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.mft
Manifest number: 1010
Signing time: Wed 24 Dec 2025 16:01:01 +0000
Manifest this update: Wed 24 Dec 2025 16:01:01 +0000
Manifest next update: Thu 25 Dec 2025 16:01:01 +0000
Files and hashes: 1: 7McO252I-2XmB-n1NnBeB1r5CWE.roa (hash: 24OjT44qRE3dHEPo0tp7gh6oq8ab7wOoKSNtPKZcaBc=)
2: Bec3FuivOBDOqgjzPfv4d13m2lM.roa (hash: owG94wKPWPllEhJt14j/A1tpXG3GUHNv4s01kzZtAnY=)
3: HrLnTFOPuXGJZKS7rlmaWMaB12U.roa (hash: jcuLWaH/rcaC8v9EK0xYWQuHABbf0+s0Obyth7vsFT0=)
4: JSR7L8D9xzMVHTQmxCxocupUPs8.roa (hash: sFWVvlE7717fYPfXWHO2rnVLWNcg9ik7geNB96fmazw=)
5: JnCqxhyvDDTFwlQwcYA45oqNsts.roa (hash: X2ViL15etoBaQT1ZtUkjo76AgO/tgVupvfM/YNVslSw=)
6: McMBr1hsxhXrROzf0sr3mjGRuDc.roa (hash: Fvo8oGCRkNBeNpNWcCOxOgEGI6vuaFHxjYVbWtFIey0=)
7: Sh525ZOQJJbH9YDhZrYpqPsIxfs.roa (hash: PGMXYMk9j2WkhNa5b+RRTezsJs7pRowlF2ax1MZi69A=)
8: cIDWJL9g_fa8H__ObMHRE-i2WwY.roa (hash: WZfhhX//aYpvYb55NKq8Rk6SJoX28Rmvm2m76EVMcvc=)
9: uqp7TAHpKcOJI5gatRyXJ6H58H4.crl (hash: hvgQnpcL4WOJxSRBp+9jDqi4/Fal/jj8hijZFI9pk1U=)
10: z7Zbfv6Q5DvvTSZX25hLRJ36zu8.roa (hash: uQ11jkD+2MzIqFlHgr0jlAF+ezlOM9wpcUkZ5cI8xPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.mft
rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Dec 2025 16:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:51:17:a0:69:21:b0:ac:48:db:27:ad:8d:d4:74:9e:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baaa7b4c01e929c38923981ab51c9727a1f9f07e
Validity
Not Before: Dec 24 16:01:01 2025 GMT
Not After : Dec 25 16:01:01 2025 GMT
Subject: CN=f82a0f45dd9ed6ed100ba266c210d3049c84ed89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:02:a2:0e:9b:3c:3f:5e:a4:c8:79:13:77:78:
9c:35:cd:4f:20:f9:de:4c:6d:96:32:e5:a4:ef:4a:
87:a7:65:5f:5e:2d:b3:25:b7:81:5a:47:04:f1:15:
41:e5:ef:0b:0d:33:f7:a3:a6:2a:7e:89:8b:2d:66:
75:a8:4d:e9:02:8f:06:2b:fb:43:e3:c4:1a:6e:4a:
35:60:3d:03:bc:55:d1:99:7d:0a:9a:86:34:a7:0e:
58:35:69:6e:fa:13:2d:90:8b:76:bf:e2:96:c3:1a:
1e:48:d3:56:80:b9:9d:a4:9f:df:13:0b:88:58:03:
df:ce:16:b4:00:e8:55:5e:c1:2e:ee:eb:6f:47:14:
ce:d5:40:bc:13:5b:e7:98:20:34:59:a0:06:27:92:
f1:ba:c6:d3:56:32:85:c9:67:4c:94:6a:44:8e:9b:
ac:0d:c5:84:3c:42:05:06:14:11:56:dd:7d:21:0a:
bc:66:7a:f0:2a:29:40:53:72:68:c1:c7:9b:98:66:
2a:b4:b4:77:43:3c:3e:93:b1:c9:5b:5f:f8:98:e7:
83:ac:93:78:e6:fb:62:52:f4:96:8e:9c:d3:4b:26:
ee:e2:74:ef:02:00:c9:eb:67:08:89:ac:65:fd:4c:
0a:da:23:7e:ed:0c:c4:6d:5f:01:6a:a7:ef:e5:3b:
75:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:2A:0F:45:DD:9E:D6:ED:10:0B:A2:66:C2:10:D3:04:9C:84:ED:89
X509v3 Authority Key Identifier:
keyid:BA:AA:7B:4C:01:E9:29:C3:89:23:98:1A:B5:1C:97:27:A1:F9:F0:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:62:a1:c4:dc:96:69:6a:2d:d6:3b:a7:a1:f6:08:79:b9:bf:
ce:3c:b5:29:4c:2c:20:06:b1:76:76:41:70:82:4b:54:f8:5c:
5e:4a:51:97:8b:a5:fd:fe:7a:cf:ce:27:f7:58:6f:32:28:57:
55:c7:42:a2:fa:7b:07:67:61:0e:85:40:6e:a8:70:93:88:f2:
5b:d8:1b:ee:50:c1:5e:6c:ee:13:39:73:28:ee:3c:0c:79:59:
d2:1a:5b:16:52:00:81:2d:e3:46:f6:23:1f:af:82:55:96:b9:
de:c7:4e:dc:06:e8:6a:24:4a:3a:c4:52:e1:d6:0a:3c:e1:ca:
ca:48:86:4a:3c:ed:6e:e6:f7:94:99:71:55:97:5a:10:61:39:
dd:d2:4d:a5:07:62:b2:f2:3d:b2:0d:e0:cb:d8:c2:e9:b8:05:
d0:03:6c:2f:41:dc:03:4f:5c:f4:3a:98:6a:8d:cf:d8:94:a5:
3e:6b:58:94:c8:3b:17:94:56:51:09:a4:e3:f0:e6:37:8a:0c:
fb:f3:80:af:d3:55:15:1e:77:d6:18:b0:bf:4b:80:ab:d2:cf:
b3:3e:a0:dc:a1:27:08:11:dc:03:d3:e9:e6:54:72:97:85:e6:
db:ad:f5:cb:fb:d0:a7:87:0d:28:b7:7e:f8:47:b1:54:69:5b:
cf:25:10:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 01:21:54 2025 by rpki-client