This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.mft
File: um1Gt2v9bUK71XXi8m_OE2ubam0.mft (raw, json)
Hash identifier: gFzbZLe3sdZeuMTM5W3AVGV8y4J3xKn0uR2jBxtYIFg=
Subject key identifier: 8C:F1:E6:1F:98:DF:FF:25:58:F8:6E:26:B4:C7:C1:0C:1D:B1:42:2C
Authority key identifier: BA:6D:46:B7:6B:FD:6D:42:BB:D5:75:E2:F2:6F:CE:13:6B:9B:6A:6D
Certificate issuer: /CN=ba6d46b76bfd6d42bbd575e2f26fce136b9b6a6d
Certificate serial: 019B41006680B2CF2BEE6C7A2049A2BEA215
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um1Gt2v9bUK71XXi8m_OE2ubam0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.mft
Manifest number: 178C
Signing time: Sun 21 Dec 2025 13:01:43 +0000
Manifest this update: Sun 21 Dec 2025 13:01:43 +0000
Manifest next update: Mon 22 Dec 2025 13:01:43 +0000
Files and hashes: 1: EtrP_0kTCR5Y3QaHgesqcI8qZFg.roa (hash: lv6k+R6R1gqgBt1ARniBlQxWo2X/ZK4cvTKtuDAns7o=)
2: HJSwnKLNgwsgkTsWAJGJbhRxrYg.roa (hash: k/1eexGDlUI1L69r6EcdCcQNtE5gQOhNhUm2uiosEaU=)
3: qY4Pn2rojeUbBpawT6zBM5pztdI.roa (hash: bdIYON38cjUERyQWKrGfXHpQNcizuWiDaFQ+QLNzEDg=)
4: uJnVKXAIy60auoGPJwESNrSmHkE.roa (hash: ebmKrJfXBBi07GAqHoc+u6RWZ0ztB7xPcVNK+Z+MDgQ=)
5: um1Gt2v9bUK71XXi8m_OE2ubam0.crl (hash: V78ItNrIIcGPYqlgN9tMvgYZjBlfK7fYsGpXsq8r5zg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.mft
rsync://rpki.ripe.net/repository/DEFAULT/um1Gt2v9bUK71XXi8m_OE2ubam0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 22 Dec 2025 13:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:41:00:66:80:b2:cf:2b:ee:6c:7a:20:49:a2:be:a2:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba6d46b76bfd6d42bbd575e2f26fce136b9b6a6d
Validity
Not Before: Dec 21 13:01:43 2025 GMT
Not After : Dec 22 13:01:43 2025 GMT
Subject: CN=8cf1e61f98dfff2558f86e26b4c7c10c1db1422c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4f:27:69:f7:d4:da:8d:39:33:17:31:ae:23:
28:08:72:28:3d:3d:d6:52:35:a2:76:a0:60:e1:d8:
d6:c2:fe:40:12:6d:13:dc:09:e8:82:be:11:30:cd:
c6:39:cf:52:86:33:30:6e:98:23:0a:b5:cc:dd:57:
62:f6:a1:ea:e6:fb:53:b3:c3:39:26:e3:f7:8a:f1:
d7:2f:23:6a:b1:ca:fd:ee:c4:fc:4b:c2:75:55:43:
53:70:1a:d6:0e:ec:fe:a0:da:49:75:ea:30:fb:2f:
3d:d2:43:0d:29:eb:d5:48:25:e1:73:61:25:6a:23:
6a:aa:ae:80:1f:52:13:40:a4:60:2a:c2:3c:85:90:
e8:4e:60:45:55:0e:0e:52:39:03:1c:c2:29:e4:85:
14:04:ec:16:ee:9c:f2:e5:d0:14:ce:72:3e:ff:39:
f6:f5:8c:0a:6f:62:dc:67:28:a8:06:4e:a1:81:52:
b4:d4:39:85:24:2f:38:6e:5f:d5:93:79:6c:89:f3:
a2:96:1f:92:4c:7b:88:20:62:31:20:05:ab:24:a4:
97:28:64:d5:26:60:43:07:c8:dd:47:45:56:cc:b2:
3b:24:49:c3:25:81:82:d5:a5:0b:b2:d9:13:f6:85:
52:3d:9d:88:67:5a:81:6e:75:32:fa:bc:86:df:b3:
54:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:F1:E6:1F:98:DF:FF:25:58:F8:6E:26:B4:C7:C1:0C:1D:B1:42:2C
X509v3 Authority Key Identifier:
keyid:BA:6D:46:B7:6B:FD:6D:42:BB:D5:75:E2:F2:6F:CE:13:6B:9B:6A:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um1Gt2v9bUK71XXi8m_OE2ubam0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:0b:60:13:f0:9a:13:3f:60:7f:48:d8:81:ba:11:23:34:35:
77:37:43:9b:b2:3b:ed:3c:45:8c:10:bd:bf:b9:15:f9:3a:7f:
2a:2d:5d:64:9a:9c:81:3d:af:ac:d4:a0:97:68:ee:39:1a:2f:
95:89:67:ac:81:c5:64:46:3a:18:d4:d4:94:31:26:3e:f4:b6:
70:02:e2:93:0e:5c:81:87:20:93:c2:98:2f:79:90:9b:06:88:
5f:1f:2d:be:22:f0:f7:34:af:fc:a0:89:20:d4:9a:91:a7:35:
cf:ff:89:aa:be:fc:be:93:d0:40:0e:d6:37:b9:94:c7:3d:5f:
0b:a7:5b:55:53:05:d9:ab:6b:b0:ae:54:43:f0:a9:cd:07:17:
56:e8:f1:0d:32:bf:fe:c2:08:09:6c:c2:a3:ec:dc:a5:eb:33:
0e:a7:32:38:30:54:7a:70:22:fc:d5:28:bb:53:c5:99:04:4a:
cc:eb:e6:f3:66:fe:ee:75:ef:94:61:52:4f:41:4c:00:68:65:
9d:56:a2:cc:85:80:10:ff:49:a3:cb:6e:e8:ac:d3:bc:fd:d3:
b4:3e:54:a2:7e:fd:60:a2:a5:0e:ca:32:f5:22:8f:e5:fe:5b:
f0:d9:37:a2:22:37:1f:f1:a2:72:51:2b:16:ed:15:1b:33:2a:
c0:c6:e0:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 15:55:25 2025 by rpki-client