This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/69e109-0e02-4f3c-981f-548d47a46ad4/1/u_iwZ3moMGXb3FgI4ef_r5x9jag.mft
File: u_iwZ3moMGXb3FgI4ef_r5x9jag.mft (raw, json)
Hash identifier: OuHmEccEPpTomNr/yS1bMU5785rRg2eaYkT317nRhd0=
Subject key identifier: D3:2E:53:33:D4:CB:99:A0:D7:C7:0A:B4:AB:75:E6:F1:F4:E4:7B:88
Authority key identifier: BB:F8:B0:67:79:A8:30:65:DB:DC:58:08:E1:E7:FF:AF:9C:7D:8D:A8
Certificate issuer: /CN=bbf8b06779a83065dbdc5808e1e7ffaf9c7d8da8
Certificate serial: 019B4EBB1CDBAB48E8CC217A468828F97980
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_iwZ3moMGXb3FgI4ef_r5x9jag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/69e109-0e02-4f3c-981f-548d47a46ad4/1/u_iwZ3moMGXb3FgI4ef_r5x9jag.mft
Manifest number: 0234
Signing time: Wed 24 Dec 2025 05:00:43 +0000
Manifest this update: Wed 24 Dec 2025 05:00:43 +0000
Manifest next update: Thu 25 Dec 2025 05:00:43 +0000
Files and hashes: 1: p50yN57F3LkXuY7-mhCsw823E8k.roa (hash: dyK2Pi+JnZP3NZuI9yP93De2BsaZ3Ntgr/tFvxnQ/R0=)
2: u_iwZ3moMGXb3FgI4ef_r5x9jag.crl (hash: OfSGrFgV3cEDQ4OXErK3Kl/YIjZTVVNujl5avYYtSZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/69e109-0e02-4f3c-981f-548d47a46ad4/1/u_iwZ3moMGXb3FgI4ef_r5x9jag.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/69e109-0e02-4f3c-981f-548d47a46ad4/1/u_iwZ3moMGXb3FgI4ef_r5x9jag.mft
rsync://rpki.ripe.net/repository/DEFAULT/u_iwZ3moMGXb3FgI4ef_r5x9jag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Dec 2025 05:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:4e:bb:1c:db:ab:48:e8:cc:21:7a:46:88:28:f9:79:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbf8b06779a83065dbdc5808e1e7ffaf9c7d8da8
Validity
Not Before: Dec 24 05:00:43 2025 GMT
Not After : Dec 25 05:00:43 2025 GMT
Subject: CN=d32e5333d4cb99a0d7c70ab4ab75e6f1f4e47b88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:cb:eb:66:fc:cc:a3:59:75:05:08:e5:c2:32:
8a:4c:a8:e0:82:3e:12:c3:c5:10:02:f0:0d:e1:8c:
1f:ad:6f:08:8f:1a:ef:1e:06:7e:6c:ea:9e:5e:e6:
ab:14:cb:65:59:ef:e6:5e:b5:5e:49:cd:fd:fb:cd:
57:0f:56:f2:e4:09:70:4a:c6:15:c2:a5:4a:c6:58:
01:77:b6:49:5b:44:db:54:b9:c5:01:d4:40:62:54:
31:2e:8d:cf:04:46:45:7d:8f:78:0a:dc:a2:ba:d5:
35:e2:07:ab:d4:74:7b:86:5c:19:a1:c8:55:3a:96:
91:43:62:3c:87:0b:fd:f0:53:c9:1d:a3:ba:10:2b:
90:d2:89:7d:78:67:df:af:a2:87:d1:c9:37:56:94:
a6:e9:4d:fc:d5:74:c9:fb:31:5c:07:8a:e3:dc:92:
03:d5:7f:84:e8:4e:1d:9f:8c:28:1a:7f:13:a5:c9:
3f:52:3b:d8:ed:b6:d4:bf:64:a1:5c:40:c9:dd:d1:
17:ff:5b:06:9b:44:6e:9b:77:f6:7e:15:77:e8:e0:
24:c5:1a:9d:8f:6c:bc:87:9c:e8:ed:43:08:54:89:
8a:7c:71:e7:73:cc:b1:ca:84:1e:56:da:26:05:50:
e5:50:1d:1f:25:87:3f:02:5c:bc:28:61:5b:b9:ca:
52:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:2E:53:33:D4:CB:99:A0:D7:C7:0A:B4:AB:75:E6:F1:F4:E4:7B:88
X509v3 Authority Key Identifier:
keyid:BB:F8:B0:67:79:A8:30:65:DB:DC:58:08:E1:E7:FF:AF:9C:7D:8D:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_iwZ3moMGXb3FgI4ef_r5x9jag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/69e109-0e02-4f3c-981f-548d47a46ad4/1/u_iwZ3moMGXb3FgI4ef_r5x9jag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/69e109-0e02-4f3c-981f-548d47a46ad4/1/u_iwZ3moMGXb3FgI4ef_r5x9jag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:e7:bd:b6:e1:3b:d1:cc:9f:2d:7c:d2:82:27:9e:65:25:22:
d4:6c:13:9e:11:b7:13:6d:20:cf:85:2d:2a:4d:92:d9:eb:59:
74:79:ad:cc:ea:d2:cb:21:65:ca:72:a5:dc:35:df:c6:e6:fa:
7a:69:91:c5:4e:aa:ab:60:57:61:dd:3c:7b:0c:04:31:85:b5:
eb:b8:3e:b9:6e:d1:b5:2c:e6:f0:40:9a:21:61:f9:5f:3d:3b:
dc:e0:b7:5c:22:41:1c:82:88:ca:d3:bb:14:b6:d1:c8:f8:22:
0f:15:8f:03:3f:04:10:b8:f5:5b:f5:45:bd:53:bf:4c:0a:eb:
bf:b2:9a:cb:78:4f:c7:de:b7:a3:7c:6e:3c:5d:74:83:0f:39:
12:6c:16:04:74:3d:c4:7d:0e:b9:89:9a:05:4e:3c:42:22:22:
24:99:cf:2c:c5:cd:d6:3e:a1:fc:3e:aa:a4:97:58:08:d6:79:
f1:d1:68:e3:cc:3a:14:90:fc:1e:50:06:da:ca:f7:7e:18:46:
1e:10:c2:7b:cf:d0:19:3f:bb:c8:21:f4:f8:13:5e:88:1d:a8:
b8:ac:b4:57:ff:7a:06:e6:6f:c3:c6:01:6a:f7:71:2f:e2:5d:
c7:bc:39:86:3a:b1:60:41:0c:22:35:59:89:39:32:a6:e7:be:
c5:11:2a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 12:29:09 2025 by rpki-client