This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.mft
File: UzgC5ill1FhOWY1Zt2qSi-Wv2XE.mft (raw, json)
Hash identifier: A2oIwi7T1MiOQkdHh905noMS5hrOZ6m2DS8Z22MWb8A=
Subject key identifier: 1B:74:5D:47:57:EC:FC:88:0B:EB:E8:7A:6B:49:1A:4D:D3:1A:3A:AB
Authority key identifier: 53:38:02:E6:29:65:D4:58:4E:59:8D:59:B7:6A:92:8B:E5:AF:D9:71
Certificate issuer: /CN=533802e62965d4584e598d59b76a928be5afd971
Certificate serial: 019B3A91607356D6191A3C7B6BA09D79D51B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.mft
Manifest number: 0329
Signing time: Sat 20 Dec 2025 07:02:44 +0000
Manifest this update: Sat 20 Dec 2025 07:02:44 +0000
Manifest next update: Sun 21 Dec 2025 07:02:44 +0000
Files and hashes: 1: AmqiC38rtSv0iE1wKrjS0J46Q88.roa (hash: UHlyMJ5+FWbMAOr2Ngcc+hElY0msx9uI+m00I3guqOI=)
2: L7mO7KFz85O9TLGHw1rnhJTk7S8.roa (hash: UMdz5rJ/zgMVHrBC+qmC+WQlQSXRf1HcpO0Un+UUydo=)
3: N50ILjI6vNp7A6N9HygvstrwChc.roa (hash: Dirg6q8LPU3d4GS5cdQfmRbClfRmgGiHcbmkwEYmVik=)
4: UzgC5ill1FhOWY1Zt2qSi-Wv2XE.crl (hash: gN14lfkYBlsxN0Ssfz76CkxT61JuTFqq/CDc0ZeFC7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 01:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:3a:91:60:73:56:d6:19:1a:3c:7b:6b:a0:9d:79:d5:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=533802e62965d4584e598d59b76a928be5afd971
Validity
Not Before: Dec 20 07:02:44 2025 GMT
Not After : Dec 21 07:02:44 2025 GMT
Subject: CN=1b745d4757ecfc880bebe87a6b491a4dd31a3aab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0c:13:fe:96:cb:a0:00:dc:87:c6:2a:f3:f8:
e7:9e:7f:58:8e:a6:6b:2c:dc:25:ba:9a:dc:03:31:
cf:74:36:1c:f4:f7:a9:bd:ae:30:11:e0:66:65:b1:
d8:d9:9b:e5:73:14:3a:b0:bb:d6:97:53:a6:df:39:
03:ce:9a:71:76:cf:fb:cf:d8:4d:6e:a5:c0:04:1c:
c6:6e:af:ff:bf:ed:61:2f:42:27:af:af:87:39:9f:
70:1b:55:58:54:1d:69:86:b4:56:c8:f4:13:1a:58:
46:72:ee:53:3b:74:37:8c:4f:80:ee:f0:b8:90:24:
c3:3e:d8:de:c0:fe:c1:af:38:3a:be:b7:23:aa:c4:
c7:ef:ce:74:03:61:f6:a8:2d:35:52:39:ae:2e:3b:
72:94:02:ad:a9:f5:56:22:16:e8:71:c5:46:b9:7e:
95:11:8d:2a:5d:a0:87:3d:da:51:d8:26:df:57:dd:
d4:fa:e1:73:14:a4:0e:23:d6:be:19:df:f0:b2:0d:
ca:48:fe:fd:30:c3:37:69:ee:cb:bb:0b:77:12:fe:
ee:04:28:88:85:eb:e1:52:aa:b4:ac:74:23:fe:fe:
94:18:15:f2:9b:1a:8a:05:00:c2:c7:d1:33:f3:40:
d6:2c:68:fd:db:a3:30:20:dd:a3:c4:0a:39:4f:6d:
2f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:74:5D:47:57:EC:FC:88:0B:EB:E8:7A:6B:49:1A:4D:D3:1A:3A:AB
X509v3 Authority Key Identifier:
keyid:53:38:02:E6:29:65:D4:58:4E:59:8D:59:B7:6A:92:8B:E5:AF:D9:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:74:fa:4d:e1:cd:90:19:53:c0:a7:52:40:a7:72:fb:a0:56:
e6:a4:3a:2c:ed:10:29:61:e6:31:17:83:ef:52:47:a6:b9:81:
e9:b0:de:96:e0:bb:06:c6:62:c5:8a:15:74:99:cc:66:ce:c3:
fb:42:bb:64:0e:9c:b3:75:5b:7f:b3:b9:5d:2a:00:b7:a4:40:
7a:44:37:3f:32:2f:d9:b7:3e:ad:6a:51:28:3d:56:17:ea:32:
b1:55:ea:f6:5e:77:1f:7b:da:b6:c6:d9:80:52:2b:8c:ea:96:
27:c4:2d:b7:99:14:2b:98:d1:55:70:37:ef:9f:d6:1f:8a:56:
bc:4c:db:41:b6:a0:73:f6:4d:44:fc:6e:19:bc:0f:36:d5:e3:
55:88:e9:25:5a:c1:64:a9:6c:54:4b:c7:50:06:7b:0e:bb:93:
94:f9:26:d8:71:0a:0d:78:9a:89:5f:39:a0:3d:97:39:67:92:
9d:57:08:c8:f7:8e:2a:a7:f9:59:1c:44:be:46:c7:a7:57:a5:
d7:7a:9a:76:f4:8e:96:8f:d4:fd:5d:37:89:01:e4:87:9d:bc:
48:e4:3f:7e:f3:8e:01:a1:68:ec:f5:9f:dc:db:4d:82:cc:50:
b7:7d:39:32:06:f4:c0:05:61:ee:5f:6e:72:da:80:09:09:6a:
a7:0d:6e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 09:02:19 2025 by rpki-client