This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.mft
File: UzahBs7N66kuC4Dl6aXHibp0xis.mft (raw, json)
Hash identifier: 4RNpMoTWlppER7NUCReiyargo4QdPWY6MalApNsa/tc=
Subject key identifier: DD:7E:8D:AE:D3:BA:F7:A5:6E:BD:E6:76:F5:65:90:1C:2E:01:2C:B1
Authority key identifier: 53:36:A1:06:CE:CD:EB:A9:2E:0B:80:E5:E9:A5:C7:89:BA:74:C6:2B
Certificate issuer: /CN=5336a106cecdeba92e0b80e5e9a5c789ba74c62b
Certificate serial: 019B40917B653706B130E6CD1036F7B3E593
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.mft
Manifest number: 0C34
Signing time: Sun 21 Dec 2025 11:00:34 +0000
Manifest this update: Sun 21 Dec 2025 11:00:34 +0000
Manifest next update: Mon 22 Dec 2025 11:00:34 +0000
Files and hashes: 1: 3XFZjvmipuYl3ZWlHwQH5J3zMBo.roa (hash: waCPVYUPagNA2C/8qUWA6TsWBhxDDZLgjh2zXP9UUxQ=)
2: 7k8l9jRcUvUU0PoFjWmWy5vQ4RU.roa (hash: EkvhsCktAS/aEN7qGD8m7gGA2WllZuGA03mFu0p4SxA=)
3: NQzxfbg6mUjToWYd761iH1Aj8M0.roa (hash: gTeoWCaUXq7PaCcs+yvz12eVkeAA0ArL5OPG5CvIUNQ=)
4: QDeglJ-kf-CPwjwijAyu-xuaRJQ.roa (hash: F1qjIGAjhb4CCD6+mprPcFrHYg12/ZjUkVJtYzNpI98=)
5: UzahBs7N66kuC4Dl6aXHibp0xis.crl (hash: Bi+KzrOiSGiPT2i94hNXbZLMlP1L2AxZtl1wXIxavYU=)
6: bjcT27Mkrmm6YUKTzHgcNPrjPBU.roa (hash: Yn0RgyPmmLSzCmXSFkvVjdwnmhf67ZsvVo3LY47XFQY=)
7: jegjWR7VprdJlP9Id7lnXfq_3BY.roa (hash: 3+QVUbiATKXjEawCpJp9FdwXwbHQPUAeJSJ9r2KyWeA=)
8: l5UHl_04bz9hmdByW-mS5aOLzVQ.roa (hash: 44oRNABvdxfx6PrHpOdx7KjJ3dNX5DY1G8L30+SPRh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.mft
rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 22 Dec 2025 11:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:40:91:7b:65:37:06:b1:30:e6:cd:10:36:f7:b3:e5:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5336a106cecdeba92e0b80e5e9a5c789ba74c62b
Validity
Not Before: Dec 21 11:00:34 2025 GMT
Not After : Dec 22 11:00:34 2025 GMT
Subject: CN=dd7e8daed3baf7a56ebde676f565901c2e012cb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b0:14:04:d4:25:e1:d8:57:63:3d:30:48:a6:
ed:f2:b2:b1:64:fe:52:21:91:e1:c0:0d:66:23:05:
4d:c1:e3:a3:52:f5:b5:ad:1b:6d:6c:5d:20:76:ed:
72:01:6a:ec:9c:09:46:8e:24:0b:df:76:a2:e8:e2:
7e:08:a2:d0:3b:08:44:3f:e9:a9:65:15:0b:5a:78:
9c:36:55:24:ca:95:16:f2:9b:8d:fb:31:93:44:79:
e3:f8:af:55:46:c3:7c:ae:be:44:4a:12:29:82:20:
b9:0f:3a:45:1a:54:c7:76:88:5a:99:5a:a8:9c:86:
98:aa:ca:22:62:68:a3:78:5c:64:fd:e2:ea:43:84:
d6:c9:e8:a9:b6:53:74:b0:4b:c8:8b:9d:9e:06:b0:
d9:5f:99:69:f2:bf:ae:66:27:2c:d7:43:2f:ca:56:
94:af:04:f3:34:36:c8:ea:74:2e:ed:37:2f:f7:e8:
22:41:3b:39:6b:56:7f:2c:ca:44:0f:92:1f:58:3d:
5a:a0:ee:35:59:10:0c:80:5c:83:94:2c:30:69:59:
e9:f9:cc:ac:59:6a:61:2f:cb:ac:26:14:5c:ff:7e:
a2:9e:d9:1a:19:a4:e2:de:4d:08:ce:a5:6e:2d:ac:
fa:6c:68:e1:10:54:e7:16:e1:6c:32:9e:46:1f:fc:
30:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:7E:8D:AE:D3:BA:F7:A5:6E:BD:E6:76:F5:65:90:1C:2E:01:2C:B1
X509v3 Authority Key Identifier:
keyid:53:36:A1:06:CE:CD:EB:A9:2E:0B:80:E5:E9:A5:C7:89:BA:74:C6:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:53:63:17:43:bc:61:b2:9a:fa:80:ca:3e:82:37:97:3a:ae:
7e:2f:33:9e:4f:cd:1b:c7:f8:a4:b4:43:63:24:ee:06:f2:3c:
14:89:0a:8d:c0:83:b3:65:a9:41:e6:5b:2f:86:7a:bb:bb:0f:
a2:8a:5e:06:56:42:f7:66:0b:bb:3c:d5:b5:13:f4:18:1e:4c:
27:d3:35:bd:ff:58:2c:80:bd:13:cd:97:8a:bc:7f:ad:84:b0:
5b:db:b9:c1:32:80:76:07:59:63:9d:aa:e7:aa:46:51:c2:e8:
57:79:d0:b0:f3:c2:d6:b7:77:68:19:d1:5c:a9:55:e6:ae:75:
ac:26:12:b4:65:dc:46:85:e8:37:a5:2e:6e:1e:dd:ac:41:22:
9d:ac:28:f5:70:a7:60:a7:67:dc:80:f2:5f:2a:d7:4c:06:65:
ca:79:b8:cc:c3:b2:28:99:e2:93:d1:7e:79:a0:0e:32:48:5a:
74:86:a7:2d:3a:c9:f6:b9:91:07:3e:ea:2d:3f:1f:dd:41:e8:
be:02:85:f6:7c:91:b8:09:d8:82:1f:d8:6a:b7:06:c3:2d:72:
ac:93:6f:61:e8:41:4e:ca:31:42:5f:16:e4:4a:9e:08:26:24:
e4:71:04:d0:6d:50:29:e1:08:3f:42:ad:9b:55:73:f9:40:c5:
23:00:1e:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZtAkXtlNwaxMObNEDb3s+WTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzMzZhMTA2Y2VjZGViYTkyZTBiODBlNWU5YTVjNzg5YmE3
NGM2MmIwHhcNMjUxMjIxMTEwMDM0WhcNMjUxMjIyMTEwMDM0WjAzMTEwLwYDVQQD
EyhkZDdlOGRhZWQzYmFmN2E1NmViZGU2NzZmNTY1OTAxYzJlMDEyY2IxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3LAUBNQl4dhXYz0wSKbt8rKxZP5S
IZHhwA1mIwVNweOjUvW1rRttbF0gdu1yAWrsnAlGjiQL33ai6OJ+CKLQOwhEP+mp
ZRULWnicNlUkypUW8puN+zGTRHnj+K9VRsN8rr5EShIpgiC5DzpFGlTHdohamVqo
nIaYqsoiYmijeFxk/eLqQ4TWyeiptlN0sEvIi52eBrDZX5lp8r+uZics10MvylaU
rwTzNDbI6nQu7Tcv9+giQTs5a1Z/LMpED5IfWD1aoO41WRAMgFyDlCwwaVnp+cys
WWphL8usJhRc/36intkaGaTi3k0IzqVuLaz6bGjhEFTnFuFsMp5GH/ww4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN1+ja7Tuvelbr3mdvVlkBwuASyxMB8GA1UdIwQY
MBaAFFM2oQbOzeupLguA5emlx4m6dMYrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXphaEJzN042Nmt1QzREbDZhWEhpYnAweGlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8yNjY5ZWUtNGJhNy00MTEwLTgzNzAt
ZGQ4MDNjNWI4NWRiLzEvVXphaEJzN042Nmt1QzREbDZhWEhpYnAweGlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC8yNjY5ZWUtNGJhNy00MTEwLTgzNzAtZGQ4MDNjNWI4NWRi
LzEvVXphaEJzN042Nmt1QzREbDZhWEhpYnAweGlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMVNjF0O8
YbKa+oDKPoI3lzqufi8znk/NG8f4pLRDYyTuBvI8FIkKjcCDs2WpQeZbL4Z6u7sP
oopeBlZC92YLuzzVtRP0GB5MJ9M1vf9YLIC9E82Xirx/rYSwW9u5wTKAdgdZY52q
56pGUcLoV3nQsPPC1rd3aBnRXKlV5q51rCYStGXcRoXoN6Uubh7drEEinawo9XCn
YKdn3IDyXyrXTAZlynm4zMOyKJnik9F+eaAOMkhadIanLTrJ9rmRBz7qLT8f3UHo
vgKF9nyRuAnYgh/YarcGwy1yrJNvYehBTsoxQl8W5EqeCCYk5HEE0G1QKeEIP0Kt
m1Vz+UDFIwAeVw==
-----END CERTIFICATE-----
Generated at Sun Dec 21 20:55:48 2025 by rpki-client