This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/0d3f51-af73-4045-a0f1-eab828eca45b/1/A-uwAVKCgXNL9clLxL729umaN34.mft
File: A-uwAVKCgXNL9clLxL729umaN34.mft (raw, json)
Hash identifier: /yOu9do06oJ1zXchbEJpLe3LGe25NVwO8ybOZDtu05Q=
Subject key identifier: 2E:61:CF:54:45:09:69:1F:27:D1:52:19:63:A1:52:13:D3:40:F9:CC
Authority key identifier: 03:EB:B0:01:52:82:81:73:4B:F5:C9:4B:C4:BE:F6:F6:E9:9A:37:7E
Certificate issuer: /CN=03ebb001528281734bf5c94bc4bef6f6e99a377e
Certificate serial: 019B4FCF1D659E49E2808B127D679894F116
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A-uwAVKCgXNL9clLxL729umaN34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/0d3f51-af73-4045-a0f1-eab828eca45b/1/A-uwAVKCgXNL9clLxL729umaN34.mft
Manifest number: 0F15
Signing time: Wed 24 Dec 2025 10:02:12 +0000
Manifest this update: Wed 24 Dec 2025 10:02:12 +0000
Manifest next update: Thu 25 Dec 2025 10:02:12 +0000
Files and hashes: 1: A-uwAVKCgXNL9clLxL729umaN34.crl (hash: nRpfZVnV9VyxbdW1rDK2GTSzmIp0EriQjANMqsWGiqM=)
2: wb2OCWtGLle_xoyfZiBAYXNRWQs.roa (hash: jJCn7p2i4Vby2gq7zMJi72HG/QhIugyd+as1pSv/rmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/0d3f51-af73-4045-a0f1-eab828eca45b/1/A-uwAVKCgXNL9clLxL729umaN34.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/0d3f51-af73-4045-a0f1-eab828eca45b/1/A-uwAVKCgXNL9clLxL729umaN34.mft
rsync://rpki.ripe.net/repository/DEFAULT/A-uwAVKCgXNL9clLxL729umaN34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Dec 2025 09:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:4f:cf:1d:65:9e:49:e2:80:8b:12:7d:67:98:94:f1:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03ebb001528281734bf5c94bc4bef6f6e99a377e
Validity
Not Before: Dec 24 10:02:12 2025 GMT
Not After : Dec 25 10:02:12 2025 GMT
Subject: CN=2e61cf544509691f27d1521963a15213d340f9cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:77:2e:d9:e5:62:b3:1e:7c:7b:47:45:6e:37:
49:c7:0a:15:94:3a:b2:56:e1:13:e0:df:e4:ce:a3:
39:d7:32:49:f3:79:d8:08:6c:eb:4f:3e:9a:4f:a7:
57:d1:d2:63:61:92:f0:f5:c2:a4:c4:c0:01:95:0d:
b2:a7:1d:6c:a7:b8:90:10:90:38:db:8e:ee:3c:01:
5d:91:8d:44:1c:79:39:c8:49:72:a5:2f:d0:0a:df:
57:82:27:dc:c5:dc:99:1b:9f:04:05:4e:47:d7:4c:
1d:01:60:98:6c:11:67:a4:bd:78:75:95:1c:62:63:
e0:c8:cf:ab:dd:54:14:49:d7:8d:05:5d:d5:d1:87:
14:bb:7d:d7:6c:4d:eb:20:11:7b:2e:8b:7c:9f:0c:
2a:e4:32:92:62:37:fc:32:dc:23:a1:f7:a8:af:2b:
5c:8d:cc:c3:ec:66:59:1c:2a:b7:5f:05:a8:13:0e:
f4:c6:36:40:25:eb:f7:66:e1:bc:14:ca:2b:8d:a4:
df:62:a0:83:0b:98:ec:cb:e4:ba:4f:42:e2:32:5b:
bf:b4:4e:44:8b:c1:48:78:47:17:a7:ed:9a:74:d4:
0e:7b:77:61:dc:f2:cc:51:c7:5c:ac:b9:25:36:27:
7c:f3:84:55:14:2c:ad:af:93:43:b4:51:22:a9:f6:
29:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:61:CF:54:45:09:69:1F:27:D1:52:19:63:A1:52:13:D3:40:F9:CC
X509v3 Authority Key Identifier:
keyid:03:EB:B0:01:52:82:81:73:4B:F5:C9:4B:C4:BE:F6:F6:E9:9A:37:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-uwAVKCgXNL9clLxL729umaN34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0d3f51-af73-4045-a0f1-eab828eca45b/1/A-uwAVKCgXNL9clLxL729umaN34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0d3f51-af73-4045-a0f1-eab828eca45b/1/A-uwAVKCgXNL9clLxL729umaN34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:d0:d7:4f:00:45:c3:b4:96:e1:1a:b8:e0:92:83:a6:33:7b:
13:9b:e0:b9:d6:16:ac:c2:eb:ec:b5:17:e2:34:fd:a0:a3:ef:
8e:f6:6a:18:b1:55:82:66:cf:37:3a:44:b4:24:30:96:5b:d0:
24:b4:e7:33:95:41:84:70:5d:c9:18:66:b6:85:09:10:a2:41:
4f:da:ca:80:61:97:8a:24:3a:ad:89:df:17:2e:eb:bd:be:e7:
dd:e9:ef:72:9a:7f:6f:b0:ba:a6:1b:9a:c4:06:3c:6e:e6:33:
2b:45:1c:2e:b4:09:b3:77:92:34:72:53:28:03:c5:bb:62:cc:
56:69:73:a5:a2:fe:82:56:cb:18:d1:42:c5:b9:74:20:90:3e:
1c:0e:ca:88:d2:81:04:22:5f:64:1d:df:4e:7b:1d:47:7f:e6:
a2:9d:b6:ed:e3:d9:1c:dc:f5:ae:34:fc:d5:b0:11:af:b3:80:
5f:50:c6:68:7d:27:64:e1:3c:f5:07:79:84:af:2c:c7:f1:bc:
d0:37:91:32:f7:34:46:29:56:f7:04:65:12:09:fa:a3:cc:6f:
5e:5e:6a:9c:3b:81:a8:63:7d:06:ea:77:8e:c0:98:77:9b:7c:
6e:0b:1d:a9:88:71:32:cf:19:53:7d:b4:0c:ce:f8:67:68:9f:
7a:d2:1f:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 13:38:30 2025 by rpki-client