This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/UFZxLM-od6u3YMt34nBBd0ywRzk.mft
File: UFZxLM-od6u3YMt34nBBd0ywRzk.mft (raw, json)
Hash identifier: hJ0SUiunF0tD1rzZzNf5BXWs2x7BGTgkSgEcOJma+Fc=
Subject key identifier: 00:81:75:68:61:07:E6:F5:B3:4A:39:FB:B5:4E:18:D0:5B:FF:A6:8A
Authority key identifier: 50:56:71:2C:CF:A8:77:AB:B7:60:CB:77:E2:70:41:77:4C:B0:47:39
Certificate issuer: /CN=5056712ccfa877abb760cb77e27041774cb04739
Certificate serial: 019B5F4111C3ADA12A4F7C8F9EA67D2C9FCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFZxLM-od6u3YMt34nBBd0ywRzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/UFZxLM-od6u3YMt34nBBd0ywRzk.mft
Manifest number: 179E
Signing time: Sat 27 Dec 2025 10:00:58 +0000
Manifest this update: Sat 27 Dec 2025 10:00:58 +0000
Manifest next update: Sun 28 Dec 2025 10:00:58 +0000
Files and hashes: 1: KkYiM3e0iOAnAg_yFBFSK_bjJl8.roa (hash: 5A5Vdre+g6oCjMH5zABiFnTSkWahsDuZjsJoxbwHMo0=)
2: UFZxLM-od6u3YMt34nBBd0ywRzk.crl (hash: iSks+Wyk+8lbPKrdDd5tgXs4APu754udwA3maUQctLc=)
3: _Q23PPlL8v2niGzmSooSDUdLWSk.roa (hash: 8JwVrSvS2kxaZsRD1vVjitt0fjw3hWWmjxqgx0yIUoc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/UFZxLM-od6u3YMt34nBBd0ywRzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/UFZxLM-od6u3YMt34nBBd0ywRzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFZxLM-od6u3YMt34nBBd0ywRzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Dec 2025 08:42:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:5f:41:11:c3:ad:a1:2a:4f:7c:8f:9e:a6:7d:2c:9f:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5056712ccfa877abb760cb77e27041774cb04739
Validity
Not Before: Dec 27 10:00:58 2025 GMT
Not After : Dec 28 10:00:58 2025 GMT
Subject: CN=008175686107e6f5b34a39fbb54e18d05bffa68a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:08:d0:9d:62:35:72:2c:44:d5:b9:d8:b2:33:
9f:bd:a5:42:13:86:07:d0:7b:93:63:cf:de:26:5e:
f6:88:97:8d:22:5c:3e:cf:f0:37:18:b7:4c:b4:cd:
bc:e5:a2:2d:28:fc:3f:13:78:c2:2c:f7:20:bf:77:
ba:94:95:c4:70:a0:59:51:92:18:25:bf:ba:7d:34:
b0:13:63:fd:4c:c7:11:6b:dd:9f:f3:f0:2a:d7:35:
be:cc:89:bd:c8:ff:e0:1e:9e:36:93:2b:b2:18:c7:
bb:b3:f7:83:aa:73:e4:ae:90:14:a8:fa:64:d0:b8:
c9:68:f6:5d:db:ab:5a:54:3d:5a:f6:96:19:d3:77:
f4:bf:f9:b3:0d:9d:e7:78:49:77:09:59:46:f5:1a:
c2:0e:e8:79:21:b5:91:1c:04:60:e8:0f:7b:2c:62:
ed:4b:db:83:f1:76:e0:47:09:a5:03:7e:87:06:21:
c9:9a:53:9f:d2:8a:f5:72:b0:df:a3:f9:b5:70:8f:
8f:47:c2:05:b9:25:06:58:aa:03:1d:9b:30:21:ce:
c9:2d:55:5f:f7:24:90:65:2b:0e:1a:54:ca:0c:e8:
92:f3:c2:c8:2f:af:2b:6b:93:66:3a:fe:13:dc:1b:
8f:65:3b:0f:e7:8b:53:2b:da:2e:20:2f:09:46:91:
c5:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:81:75:68:61:07:E6:F5:B3:4A:39:FB:B5:4E:18:D0:5B:FF:A6:8A
X509v3 Authority Key Identifier:
keyid:50:56:71:2C:CF:A8:77:AB:B7:60:CB:77:E2:70:41:77:4C:B0:47:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFZxLM-od6u3YMt34nBBd0ywRzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/UFZxLM-od6u3YMt34nBBd0ywRzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/UFZxLM-od6u3YMt34nBBd0ywRzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:54:46:2c:3f:4c:de:6e:ab:27:ba:c6:40:ce:c1:4b:19:e5:
4d:3b:1d:3e:9e:7f:ad:76:7d:78:bd:da:e5:4e:f2:0f:3c:db:
a2:ef:6d:24:d6:7d:bc:4d:60:8d:f6:74:78:c6:7e:4d:c3:f4:
69:82:1b:19:75:ac:b3:97:88:14:cb:4f:dc:cd:a3:9b:39:a5:
31:0c:11:55:08:fd:d9:25:e7:ca:fd:59:ae:9e:b1:07:1f:26:
0b:de:a0:80:ac:87:84:9e:54:82:5e:10:05:14:22:a1:cb:8f:
67:ab:a1:de:30:28:d0:1f:da:de:06:92:ec:c6:4b:34:2e:ab:
32:0e:f0:87:4f:cf:67:db:4b:5e:ba:49:6a:98:58:7c:c9:a7:
58:16:f2:cf:95:51:ec:98:12:05:4f:b0:82:78:94:f2:62:2e:
bc:a5:2b:a8:cf:15:9c:0c:f1:93:73:37:f4:c1:71:2b:6e:90:
07:b5:34:97:ba:6c:e0:41:8f:a4:bf:1e:83:5e:6d:d0:72:2c:
51:5d:8c:73:68:0b:9f:b2:db:64:f4:01:83:44:f7:e3:b5:12:
5d:69:c8:8e:b6:9a:64:71:0e:00:86:da:f3:bf:f6:56:d3:fe:
5a:ae:0a:ae:d7:25:81:d3:c0:f8:07:c1:6f:c4:9b:bc:2e:36:
67:9c:b1:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 16:02:15 2025 by rpki-client