This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.mft
File: uRRkdndz8SObZGu2a9z09_sSBs4.mft (raw, json)
Hash identifier: 7pADwqcbbcTzZcRO5BgF/xjDeOcLFYr0b0V3+GMXfrw=
Subject key identifier: 71:8A:19:E8:39:41:FB:BB:51:A2:64:33:80:37:1B:C8:42:55:E1:61
Authority key identifier: B9:14:64:76:77:73:F1:23:9B:64:6B:B6:6B:DC:F4:F7:FB:12:06:CE
Certificate issuer: /CN=b91464767773f1239b646bb66bdcf4f7fb1206ce
Certificate serial: 019B36B418555E08338B7D71114673FB2515
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRRkdndz8SObZGu2a9z09_sSBs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.mft
Manifest number: 1788
Signing time: Fri 19 Dec 2025 13:02:10 +0000
Manifest this update: Fri 19 Dec 2025 13:02:10 +0000
Manifest next update: Sat 20 Dec 2025 13:02:10 +0000
Files and hashes: 1: 1-AcXeTA5R7gYGPtZ3gkf2ipBN2M.roa (hash: syfRSFLN+gZv89g2Ds4rYCyprKu1ku8ZpDXFlN//U/c=)
2: Ixqalt-Rml7moJF_qLgPEv_CKDE.roa (hash: 8vHrURSoPUts04KrgFouPfg+sk8VVh+3jNReNV/XClg=)
3: LMrTy1U78s34V_By7mkdllSngYk.roa (hash: DnzapAdGCUWUI5N77eZXLv+nB72Npiqq7Jm9ZcIMDUQ=)
4: uRRkdndz8SObZGu2a9z09_sSBs4.crl (hash: 29h4twg3yLKLZvqYy/i8jPk31w2CgZLDiSWp37ieEck=)
5: xEUB8ohtFlAsaOyr7vE8oOV2o0c.roa (hash: +nvKnk5IXRqxRWm6Ex+8ay7coqES5SK3vevz1ZhdX74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRRkdndz8SObZGu2a9z09_sSBs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Dec 2025 13:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:36:b4:18:55:5e:08:33:8b:7d:71:11:46:73:fb:25:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b91464767773f1239b646bb66bdcf4f7fb1206ce
Validity
Not Before: Dec 19 13:02:10 2025 GMT
Not After : Dec 20 13:02:10 2025 GMT
Subject: CN=718a19e83941fbbb51a2643380371bc84255e161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f7:bb:5e:2c:ec:e3:c5:c5:34:3e:bf:e6:31:
3a:71:c0:06:3c:38:82:c4:01:60:bd:17:d7:b5:2d:
82:0e:cd:21:18:6a:57:8e:45:d9:50:e3:1b:1a:9a:
a8:8a:f5:38:48:4c:3b:d3:55:90:a4:76:6c:da:94:
a7:21:15:4c:72:f7:21:82:01:44:ae:47:37:ff:8a:
89:42:f0:f4:b4:d7:5d:44:8a:ee:89:84:79:49:af:
2a:92:9f:76:dc:94:7f:e8:a8:3b:06:77:a1:44:ef:
73:53:cd:20:40:90:33:4b:5c:34:b3:5c:c8:85:fa:
8e:da:9d:d0:24:48:8c:1a:90:c6:96:97:38:f0:dd:
dc:0d:e4:39:f6:e9:6a:f3:d7:3d:f5:f1:43:f7:87:
47:ec:55:b7:d6:ad:c6:c8:94:73:e8:3e:f6:e0:2e:
83:78:54:a0:ea:0d:bb:f9:20:c6:30:50:2f:59:2c:
fe:fb:bc:b9:72:cc:ce:2a:07:4f:25:87:ca:e8:24:
d4:ff:9d:00:6e:a9:75:8a:60:b4:cb:cf:6f:02:fb:
e1:54:8a:e1:b5:dc:cb:a6:d8:2d:f6:73:86:0d:92:
dc:2f:de:eb:cc:b9:a1:fd:3c:b6:73:99:6c:4a:3e:
d3:83:ec:71:80:a0:91:45:b6:27:72:ec:cd:c9:20:
b3:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:8A:19:E8:39:41:FB:BB:51:A2:64:33:80:37:1B:C8:42:55:E1:61
X509v3 Authority Key Identifier:
keyid:B9:14:64:76:77:73:F1:23:9B:64:6B:B6:6B:DC:F4:F7:FB:12:06:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRRkdndz8SObZGu2a9z09_sSBs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e5:8c:20:5b:4f:69:f4:54:77:98:df:27:61:7c:df:d5:37:cd:
be:e4:a1:01:59:75:d1:c8:62:5a:df:1f:f0:8d:40:ed:d7:02:
a9:34:3e:4f:74:1b:4c:d7:d0:99:b2:b1:6e:13:c3:38:72:af:
89:93:79:98:7b:52:c8:9f:52:0d:2e:b0:7d:e5:74:4f:73:0b:
e3:de:13:91:02:7f:c5:d5:1e:19:88:30:83:70:3a:12:ab:25:
8d:a7:20:e3:9b:32:61:6f:9b:6c:3a:f5:be:e4:ff:c1:b4:3a:
6a:94:f7:f3:f8:dc:fb:5d:c0:f5:00:78:18:5a:d4:fb:b9:9a:
94:d4:11:a0:93:ee:df:0a:e0:fc:1b:4f:0c:d8:d3:0e:e8:6f:
2a:8e:86:2c:22:2e:ae:e3:59:09:8c:e1:ef:6b:fd:cc:6b:d2:
8c:54:3e:db:e4:4a:65:fd:12:e5:3a:64:96:e4:f7:1e:22:75:
9c:4b:e7:0f:dc:18:b4:9c:ee:e9:4f:63:3f:f5:72:08:ad:4f:
6d:bd:33:1e:b0:9f:4a:91:c1:3c:19:10:b8:21:fa:72:18:1f:
fb:ab:15:84:ae:91:76:1b:ff:f1:2f:be:6c:3c:eb:bb:c8:7b:
f0:18:ae:e1:c5:cd:40:1a:2d:69:65:0d:d4:5b:b2:2f:d4:e0:
98:a9:4e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 20:14:31 2025 by rpki-client