This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/9d3f15-47d0-4069-b596-51a0f6bde4f6/1/UVWFrKQjaXxiI24rX5G0Hkvnrlg.mft
File: UVWFrKQjaXxiI24rX5G0Hkvnrlg.mft (raw, json)
Hash identifier: byo+0c0LL8x35pVTYnCh6/xoQnCPuKhOKGQSgan3dKY=
Subject key identifier: 84:52:41:EF:3E:86:3E:71:69:AD:9C:2E:26:AE:94:58:05:CE:BB:C9
Authority key identifier: 51:55:85:AC:A4:23:69:7C:62:23:6E:2B:5F:91:B4:1E:4B:E7:AE:58
Certificate issuer: /CN=515585aca423697c62236e2b5f91b41e4be7ae58
Certificate serial: 019B2F6761BB08FEF6745FEA80B1119847E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UVWFrKQjaXxiI24rX5G0Hkvnrlg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/9d3f15-47d0-4069-b596-51a0f6bde4f6/1/UVWFrKQjaXxiI24rX5G0Hkvnrlg.mft
Manifest number: 10B5
Signing time: Thu 18 Dec 2025 03:01:02 +0000
Manifest this update: Thu 18 Dec 2025 03:01:02 +0000
Manifest next update: Fri 19 Dec 2025 03:01:02 +0000
Files and hashes: 1: EmZGnE3cUctL2ReH5qcX6e_cHZA.roa (hash: /paSeXdGSN8xOjhTUDVjgnMls/gfanO98AsFxJF7eNA=)
2: UVWFrKQjaXxiI24rX5G0Hkvnrlg.crl (hash: nQioqEy7zLG49K2l58Z2NRKSxkOVk8wHRPhG1si7dbY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/9d3f15-47d0-4069-b596-51a0f6bde4f6/1/UVWFrKQjaXxiI24rX5G0Hkvnrlg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/9d3f15-47d0-4069-b596-51a0f6bde4f6/1/UVWFrKQjaXxiI24rX5G0Hkvnrlg.mft
rsync://rpki.ripe.net/repository/DEFAULT/UVWFrKQjaXxiI24rX5G0Hkvnrlg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Dec 2025 03:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:2f:67:61:bb:08:fe:f6:74:5f:ea:80:b1:11:98:47:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=515585aca423697c62236e2b5f91b41e4be7ae58
Validity
Not Before: Dec 18 03:01:02 2025 GMT
Not After : Dec 19 03:01:02 2025 GMT
Subject: CN=845241ef3e863e7169ad9c2e26ae945805cebbc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e8:18:ba:47:25:80:27:bc:9c:cb:f6:19:6c:
12:e8:d4:6f:58:08:1e:d1:2e:d9:7d:2d:00:ba:74:
49:7e:58:0d:d4:7d:3b:b7:27:a4:5f:93:34:43:64:
34:dc:0f:2b:35:4f:61:14:9e:27:f0:82:64:2b:f3:
4a:eb:4b:56:15:ec:41:ca:08:46:f8:96:e1:ad:a2:
43:03:12:4e:2a:14:5f:4a:10:31:be:0c:45:34:bf:
96:79:b2:54:99:00:fa:88:67:81:02:44:15:13:f8:
aa:cd:67:e7:c5:54:79:41:29:c9:73:bc:5c:f5:37:
38:1c:1e:10:84:a3:93:d4:70:64:05:6d:eb:63:42:
90:70:32:20:07:66:1e:3f:03:9c:62:4a:c1:99:1d:
4c:12:ac:61:aa:33:53:e6:2f:b6:e5:8d:a8:d0:3f:
2b:e7:98:4e:7d:c7:54:78:f5:7c:db:2e:cb:22:52:
5a:81:33:54:b1:3f:8d:e7:18:25:29:ee:42:20:cc:
92:be:dc:91:23:76:26:11:40:dc:af:ca:b0:b3:b5:
fe:31:a6:df:f7:fb:4f:c1:aa:61:b1:f1:bf:7c:fc:
37:14:d1:f4:90:99:cb:99:2a:b8:03:2f:a2:db:6a:
d6:92:8b:99:1d:25:6a:21:19:a8:9f:b1:52:ca:b9:
aa:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:52:41:EF:3E:86:3E:71:69:AD:9C:2E:26:AE:94:58:05:CE:BB:C9
X509v3 Authority Key Identifier:
keyid:51:55:85:AC:A4:23:69:7C:62:23:6E:2B:5F:91:B4:1E:4B:E7:AE:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UVWFrKQjaXxiI24rX5G0Hkvnrlg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/9d3f15-47d0-4069-b596-51a0f6bde4f6/1/UVWFrKQjaXxiI24rX5G0Hkvnrlg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/9d3f15-47d0-4069-b596-51a0f6bde4f6/1/UVWFrKQjaXxiI24rX5G0Hkvnrlg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:84:ae:2b:38:11:95:13:ee:97:ce:ed:65:ec:d0:91:3d:7c:
95:c1:12:37:9a:e4:6b:13:58:09:65:53:50:7c:e5:ea:65:f8:
2f:4f:cd:97:71:b6:a3:52:2c:4a:3d:93:d1:09:80:b5:4a:cd:
77:d9:fe:f5:d8:0e:93:0f:9b:bd:5a:a5:3c:7a:1c:7e:24:21:
0f:b2:ea:16:d0:b2:75:04:79:06:6a:f0:25:0e:4c:08:33:fc:
1f:a8:09:64:15:00:34:d6:89:17:c4:59:da:37:c4:63:58:90:
39:26:f5:19:44:6a:c6:6c:64:b0:0c:fb:9d:99:a9:72:df:88:
3e:b8:b4:2e:1a:01:fd:f6:fd:40:ce:98:d2:fb:38:0f:a7:7a:
c3:b1:fe:b5:c8:90:5b:18:e5:d9:63:5f:a0:05:a2:08:d9:3b:
ec:c0:0f:1f:77:f0:c9:20:45:e3:65:96:11:fc:2d:5e:06:01:
fa:69:41:10:f4:1a:6e:85:89:6f:2d:c1:2a:0e:b4:d5:1d:b5:
ae:b4:8a:2a:3d:69:08:48:81:c9:17:8c:06:17:19:8a:ac:08:
8c:d4:12:ab:13:4f:b0:cb:c7:39:2d:62:6a:a5:96:f8:94:29:
70:5b:4c:25:ce:4a:fd:cd:57:96:0e:70:ff:bd:63:b8:93:58:
78:87:ba:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsvZ2G7CP72dF/qgLERmEfiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxNTU4NWFjYTQyMzY5N2M2MjIzNmUyYjVmOTFiNDFlNGJl
N2FlNTgwHhcNMjUxMjE4MDMwMTAyWhcNMjUxMjE5MDMwMTAyWjAzMTEwLwYDVQQD
Eyg4NDUyNDFlZjNlODYzZTcxNjlhZDljMmUyNmFlOTQ1ODA1Y2ViYmM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnugYukclgCe8nMv2GWwS6NRvWAge
0S7ZfS0AunRJflgN1H07tyekX5M0Q2Q03A8rNU9hFJ4n8IJkK/NK60tWFexByghG
+JbhraJDAxJOKhRfShAxvgxFNL+WebJUmQD6iGeBAkQVE/iqzWfnxVR5QSnJc7xc
9Tc4HB4QhKOT1HBkBW3rY0KQcDIgB2YePwOcYkrBmR1MEqxhqjNT5i+25Y2o0D8r
55hOfcdUePV82y7LIlJagTNUsT+N5xglKe5CIMySvtyRI3YmEUDcr8qws7X+Mabf
9/tPwaphsfG/fPw3FNH0kJnLmSq4Ay+i22rWkouZHSVqIRmon7FSyrmqiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIRSQe8+hj5xaa2cLiaulFgFzrvJMB8GA1UdIwQY
MBaAFFFVhaykI2l8YiNuK1+RtB5L565YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVZXRnJLUWphWHhpSTI0clg1RzBIa3ZucmxnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS85ZDNmMTUtNDdkMC00MDY5LWI1OTYt
NTFhMGY2YmRlNGY2LzEvVVZXRnJLUWphWHhpSTI0clg1RzBIa3ZucmxnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS85ZDNmMTUtNDdkMC00MDY5LWI1OTYtNTFhMGY2YmRlNGY2
LzEvVVZXRnJLUWphWHhpSTI0clg1RzBIa3ZucmxnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGYSuKzgR
lRPul87tZezQkT18lcESN5rkaxNYCWVTUHzl6mX4L0/Nl3G2o1IsSj2T0QmAtUrN
d9n+9dgOkw+bvVqlPHocfiQhD7LqFtCydQR5BmrwJQ5MCDP8H6gJZBUANNaJF8RZ
2jfEY1iQOSb1GURqxmxksAz7nZmpct+IPri0LhoB/fb9QM6Y0vs4D6d6w7H+tciQ
Wxjl2WNfoAWiCNk77MAPH3fwySBF42WWEfwtXgYB+mlBEPQaboWJby3BKg601R21
rrSKKj1pCEiByReMBhcZiqwIjNQSqxNPsMvHOS1iaqWW+JQpcFtMJc5K/c1Xlg5w
/71juJNYeIe6/Q==
-----END CERTIFICATE-----
Generated at Thu Dec 18 10:31:16 2025 by rpki-client