This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/3abe20-1e75-4abe-9e89-6ac35370fd73/1/UeDfyTcalJHKqFhwD9lFI2bZ7dw.mft
File: UeDfyTcalJHKqFhwD9lFI2bZ7dw.mft (raw, json)
Hash identifier: kNXcapRViNmOu5fKJ8FQHQar3qyITH+XxWU5Q9l2tZE=
Subject key identifier: E2:CB:2F:43:0D:3F:06:AB:12:E0:32:3E:12:F1:A3:60:F4:1F:95:40
Authority key identifier: 51:E0:DF:C9:37:1A:94:91:CA:A8:58:70:0F:D9:45:23:66:D9:ED:DC
Certificate issuer: /CN=51e0dfc9371a9491caa858700fd9452366d9eddc
Certificate serial: 019B71EC411E12270F50F444432CCC0B8E01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UeDfyTcalJHKqFhwD9lFI2bZ7dw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/3abe20-1e75-4abe-9e89-6ac35370fd73/1/UeDfyTcalJHKqFhwD9lFI2bZ7dw.mft
Manifest number: 035D
Signing time: Wed 31 Dec 2025 01:01:07 +0000
Manifest this update: Wed 31 Dec 2025 01:01:07 +0000
Manifest next update: Thu 01 Jan 2026 01:01:07 +0000
Files and hashes: 1: UeDfyTcalJHKqFhwD9lFI2bZ7dw.crl (hash: eFm7J9Du1VSj23qsqXBvKJa50QGIEvTMWuN8MzyYkGE=)
2: nmBuzHJtZ8Dl8WdiCnqlxf6RBwE.roa (hash: 5lO2yokCGdZ3wXh+anWEIpykoRp00iS8dYyJESAicQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/3abe20-1e75-4abe-9e89-6ac35370fd73/1/UeDfyTcalJHKqFhwD9lFI2bZ7dw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/3abe20-1e75-4abe-9e89-6ac35370fd73/1/UeDfyTcalJHKqFhwD9lFI2bZ7dw.mft
rsync://rpki.ripe.net/repository/DEFAULT/UeDfyTcalJHKqFhwD9lFI2bZ7dw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 31 Dec 2025 23:41:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:71:ec:41:1e:12:27:0f:50:f4:44:43:2c:cc:0b:8e:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51e0dfc9371a9491caa858700fd9452366d9eddc
Validity
Not Before: Dec 31 01:01:07 2025 GMT
Not After : Jan 1 01:01:07 2026 GMT
Subject: CN=e2cb2f430d3f06ab12e0323e12f1a360f41f9540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0e:01:4c:81:1f:f2:ca:e5:38:5c:69:d5:27:
18:0c:f5:de:8f:b8:fa:7c:84:a8:9b:32:49:62:ea:
09:67:93:cd:bf:d5:06:7a:0c:bb:a1:f4:4d:5d:2b:
f6:bb:5e:9b:f3:91:70:a3:02:c5:9f:38:66:83:6f:
97:33:31:00:92:db:9a:aa:e0:19:a4:ce:3c:7e:7e:
44:6e:af:31:28:ea:3b:e8:0e:e9:53:56:14:5b:ec:
7e:1b:55:d2:5d:dd:43:0b:8d:7c:77:e3:df:47:d6:
54:44:f5:4b:ba:44:93:76:25:af:7b:ca:3f:9b:64:
08:0e:9f:c6:83:9a:5c:5b:ee:a9:84:4d:2c:eb:19:
b7:af:5b:5f:44:f6:5d:e5:d9:29:86:84:f1:3c:38:
b1:68:03:ec:7e:4f:06:6b:14:05:97:1f:0b:f0:2b:
cb:8b:7d:b7:14:17:89:59:48:f1:6f:c5:02:4d:a5:
9c:fe:aa:a2:0f:be:b1:77:f5:e7:92:ee:cd:6c:4a:
68:59:78:7a:63:f8:7b:63:80:1b:e5:c4:db:32:b6:
09:d6:80:45:e0:17:26:f8:c5:4b:46:e3:c2:92:27:
76:d5:9e:91:e0:ed:de:3b:1c:0d:c6:7d:9e:94:f1:
e3:84:b5:d0:16:88:08:76:2b:41:ca:8c:6c:d4:fa:
d6:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:CB:2F:43:0D:3F:06:AB:12:E0:32:3E:12:F1:A3:60:F4:1F:95:40
X509v3 Authority Key Identifier:
keyid:51:E0:DF:C9:37:1A:94:91:CA:A8:58:70:0F:D9:45:23:66:D9:ED:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeDfyTcalJHKqFhwD9lFI2bZ7dw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3abe20-1e75-4abe-9e89-6ac35370fd73/1/UeDfyTcalJHKqFhwD9lFI2bZ7dw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3abe20-1e75-4abe-9e89-6ac35370fd73/1/UeDfyTcalJHKqFhwD9lFI2bZ7dw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:1d:7b:81:3c:58:08:18:0e:76:84:fb:72:5c:42:67:5d:e5:
2a:70:f2:9d:04:3c:a2:7c:7c:ec:4e:97:c7:fb:70:e6:d8:41:
1e:34:ec:d5:d1:b7:11:23:7c:87:56:7b:b1:fd:9c:a6:4d:41:
5d:35:05:ce:89:2a:a5:cd:ce:d5:2d:63:aa:b2:85:2f:fe:e4:
61:ed:21:cd:b7:70:8c:87:0a:36:2f:2b:d7:d6:28:20:4a:41:
37:54:a0:e9:95:43:5f:77:27:18:1b:cb:3c:92:7d:52:52:5a:
1c:10:9e:0a:be:2c:a4:b5:f4:9b:be:8b:7b:80:82:97:92:61:
da:0d:b5:2d:50:1f:e9:d9:32:3a:b8:1f:82:46:1e:00:98:b0:
f3:7e:76:0d:dd:1a:79:6f:bf:41:57:1a:75:5a:d0:a5:6d:fa:
a3:e1:dc:b7:7e:d7:58:b6:72:26:d8:42:47:29:b5:00:be:9d:
94:80:cf:0b:af:15:a1:eb:74:93:16:f0:f9:36:a1:9f:77:73:
bb:0d:55:95:82:a5:9b:18:bc:ce:67:df:a8:af:58:b7:b2:06:
eb:ab:48:65:69:0a:93:18:41:98:f6:88:6c:3d:88:92:70:84:
39:b8:30:dc:4a:2c:bb:1a:0f:1d:ed:53:82:e6:ec:ef:fe:1e:
e4:30:fa:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 05:57:28 2025 by rpki-client