This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.mft
File: uCB2l9C3wkGZ5t0SgrSbVs7wJE8.mft (raw, json)
Hash identifier: +RYEgOLAtS2r/wekdAsSlG63ok3qClF8OzKVGmnAeVc=
Subject key identifier: 5D:65:A3:52:C0:E7:FB:33:B9:9F:17:B6:DC:0F:55:E2:34:D3:57:95
Authority key identifier: B8:20:76:97:D0:B7:C2:41:99:E6:DD:12:82:B4:9B:56:CE:F0:24:4F
Certificate issuer: /CN=b8207697d0b7c24199e6dd1282b49b56cef0244f
Certificate serial: 019B601C7E3576F1FCBA25332D5C87811163
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.mft
Manifest number: 10BD
Signing time: Sat 27 Dec 2025 14:00:38 +0000
Manifest this update: Sat 27 Dec 2025 14:00:38 +0000
Manifest next update: Sun 28 Dec 2025 14:00:38 +0000
Files and hashes: 1: 007nvtWixZOugOaPC4TALuzRNpU.roa (hash: nb2ffToXl9QEO/9H4On/CDRfMFNOM0eyZbkaz2nxsO8=)
2: E6R94wdwkh-hvCHzRqeitSBB2O8.roa (hash: 1a2WMmmz+ouXlrOwjMj3BpLs/97+QuTmqE3PpY2RusU=)
3: gCO1ND9wcaBDHzN0352WZvu2OM8.roa (hash: vHCRaVMpRHFUNXZQ8voh/coatK6+6x9ToQmFjeDovrI=)
4: kpFxxzn5rxVSC7pUTip-34ePAH8.roa (hash: 2PbpsfTlZEwOXoeKMnWL66QR3WBkUd2nLs/ZQj9Tcq4=)
5: uCB2l9C3wkGZ5t0SgrSbVs7wJE8.crl (hash: TabDd3EDFU9rwACA+YRqGbaeCZywtSBlvw9U24YO6l0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Dec 2025 08:42:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:60:1c:7e:35:76:f1:fc:ba:25:33:2d:5c:87:81:11:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8207697d0b7c24199e6dd1282b49b56cef0244f
Validity
Not Before: Dec 27 14:00:38 2025 GMT
Not After : Dec 28 14:00:38 2025 GMT
Subject: CN=5d65a352c0e7fb33b99f17b6dc0f55e234d35795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f0:49:70:53:10:37:2f:17:7c:00:9d:b3:fd:
e6:49:70:b9:3d:12:56:18:57:1e:06:34:c0:6d:e3:
79:ff:01:66:fa:65:08:f6:3b:6b:56:19:81:10:37:
0a:02:c4:19:95:b7:de:0e:c3:f4:6c:75:dd:1a:27:
59:ef:67:14:d4:8c:1b:2c:a1:3f:62:32:1f:b4:22:
1e:d2:ac:ba:38:ed:57:2e:ff:0a:13:8d:22:40:01:
70:2c:34:b1:1e:f7:f9:29:42:29:82:53:de:0d:0a:
2e:aa:fa:51:0d:aa:42:cd:92:f7:26:0b:29:09:bb:
0e:b1:8e:a2:ed:b8:29:ce:d5:d3:51:b8:6c:fc:7d:
9d:49:8b:17:3d:05:1b:28:cc:b4:50:1f:d5:3b:bb:
e6:28:9d:9c:4a:2f:75:01:e9:f9:44:b4:24:a9:2a:
a8:29:e4:e8:9c:e3:0d:39:e3:18:bf:a0:80:0e:55:
f3:73:94:02:e2:34:73:dd:e4:58:59:c5:0a:67:ed:
e7:ad:83:a4:c3:e0:43:d3:95:d6:cc:86:fc:a8:aa:
c8:1a:80:4e:cf:55:0e:49:d2:4c:6b:46:b7:f3:2a:
02:69:5b:dc:bc:a6:e3:bd:d9:e4:6a:21:f7:e0:c5:
08:fc:fc:28:98:95:14:48:1e:24:09:6d:54:fe:d1:
7d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:65:A3:52:C0:E7:FB:33:B9:9F:17:B6:DC:0F:55:E2:34:D3:57:95
X509v3 Authority Key Identifier:
keyid:B8:20:76:97:D0:B7:C2:41:99:E6:DD:12:82:B4:9B:56:CE:F0:24:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:f2:36:72:82:f5:1e:1b:ef:72:6f:15:c3:f9:0e:9c:9a:49:
1a:50:77:9c:cf:57:41:f5:aa:98:a3:5c:b1:18:cb:bb:b7:8d:
bc:a9:9a:fa:ae:6c:72:1d:da:bb:ca:8a:8c:4c:92:8c:10:f7:
1e:d8:8b:90:99:f5:b7:a8:2e:90:94:e2:a1:cc:48:d4:59:18:
ef:8d:4d:77:aa:ba:b3:43:f3:34:21:ab:e8:b2:86:99:4e:43:
36:ad:bd:b0:5e:d5:7d:5a:b2:6a:39:eb:c9:c3:d9:cf:b1:78:
ab:3d:f0:2d:cf:cb:17:ff:60:bc:d5:95:1f:4a:41:95:80:e8:
40:2a:a2:28:d2:19:85:17:b1:fa:3d:8b:80:08:37:8b:be:e6:
f6:c3:c4:83:73:a8:8e:89:85:3d:89:12:9d:f1:7d:47:28:36:
11:a9:c1:81:d1:db:38:4f:7b:b7:50:b4:c2:ef:65:a8:18:b9:
81:f7:b3:a6:6e:0c:5a:df:61:be:f1:99:a9:f1:27:0c:a5:f5:
1d:80:83:9c:29:b8:8c:67:bc:ed:cb:b3:03:06:15:28:e2:5d:
51:ea:ac:db:a0:b0:f0:2c:de:25:07:57:73:bb:32:6e:eb:fb:
e5:8d:d0:28:da:f0:86:80:04:70:32:d5:b9:32:de:9c:c9:c6:
ae:ba:50:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZtgHH41dvH8uiUzLVyHgRFjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4MjA3Njk3ZDBiN2MyNDE5OWU2ZGQxMjgyYjQ5YjU2Y2Vm
MDI0NGYwHhcNMjUxMjI3MTQwMDM4WhcNMjUxMjI4MTQwMDM4WjAzMTEwLwYDVQQD
Eyg1ZDY1YTM1MmMwZTdmYjMzYjk5ZjE3YjZkYzBmNTVlMjM0ZDM1Nzk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfBJcFMQNy8XfACds/3mSXC5PRJW
GFceBjTAbeN5/wFm+mUI9jtrVhmBEDcKAsQZlbfeDsP0bHXdGidZ72cU1IwbLKE/
YjIftCIe0qy6OO1XLv8KE40iQAFwLDSxHvf5KUIpglPeDQouqvpRDapCzZL3Jgsp
CbsOsY6i7bgpztXTUbhs/H2dSYsXPQUbKMy0UB/VO7vmKJ2cSi91Aen5RLQkqSqo
KeTonOMNOeMYv6CADlXzc5QC4jRz3eRYWcUKZ+3nrYOkw+BD05XWzIb8qKrIGoBO
z1UOSdJMa0a38yoCaVvcvKbjvdnkaiH34MUI/PwomJUUSB4kCW1U/tF9RQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF1lo1LA5/szuZ8XttwPVeI001eVMB8GA1UdIwQY
MBaAFLggdpfQt8JBmebdEoK0m1bO8CRPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUNCMmw5QzN3a0daNXQwU2dyU2JWczd3SkU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9iOTkzZWYtYWFhNy00MDBjLThkYjct
OTZkMzA0YzhkYjAyLzEvdUNCMmw5QzN3a0daNXQwU2dyU2JWczd3SkU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi9iOTkzZWYtYWFhNy00MDBjLThkYjctOTZkMzA0YzhkYjAy
LzEvdUNCMmw5QzN3a0daNXQwU2dyU2JWczd3SkU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa/I2coL1
Hhvvcm8Vw/kOnJpJGlB3nM9XQfWqmKNcsRjLu7eNvKma+q5sch3au8qKjEySjBD3
HtiLkJn1t6gukJTiocxI1FkY741Nd6q6s0PzNCGr6LKGmU5DNq29sF7VfVqyajnr
ycPZz7F4qz3wLc/LF/9gvNWVH0pBlYDoQCqiKNIZhRex+j2LgAg3i77m9sPEg3Oo
jomFPYkSnfF9Ryg2EanBgdHbOE97t1C0wu9lqBi5gfezpm4MWt9hvvGZqfEnDKX1
HYCDnCm4jGe87cuzAwYVKOJdUeqs26Cw8CzeJQdXc7sybuv75Y3QKNrwhoAEcDLV
uTLenMnGrrpQLw==
-----END CERTIFICATE-----
Generated at Sat Dec 27 15:55:45 2025 by rpki-client