This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/0187d6-8bfc-4c59-a6c4-6ad3252a1427/1/WIyr9vUj8m4mfbA7UkNHhBqqpGU.mft
File: WIyr9vUj8m4mfbA7UkNHhBqqpGU.mft (raw, json)
Hash identifier: j8qg6wcjM0EmMiGXcErRjuQOo4+hrUB1MfoeJcSVq/8=
Subject key identifier: 4B:89:3E:4C:D6:10:3C:3B:5A:4C:DF:42:56:E9:8B:A9:15:F6:83:BA
Authority key identifier: 58:8C:AB:F6:F5:23:F2:6E:26:7D:B0:3B:52:43:47:84:1A:AA:A4:65
Certificate issuer: /CN=588cabf6f523f26e267db03b524347841aaaa465
Certificate serial: 019AF051A4C8C718ED3EED07AFD62B3B1875
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIyr9vUj8m4mfbA7UkNHhBqqpGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/0187d6-8bfc-4c59-a6c4-6ad3252a1427/1/WIyr9vUj8m4mfbA7UkNHhBqqpGU.mft
Manifest number: 0C88
Signing time: Fri 05 Dec 2025 21:01:13 +0000
Manifest this update: Fri 05 Dec 2025 21:01:13 +0000
Manifest next update: Sat 06 Dec 2025 21:01:13 +0000
Files and hashes: 1: B8UFPGQw9x1qghEKWHyh34dW9Oc.roa (hash: ywFYtvx0NroO2K3FRCIUWY9DywW+W/YxpiNCO/8quMc=)
2: FdWV2F8xywrkJr_ZVSWY8qWRv_A.roa (hash: X0QnMJo/L6uBm6V2nWu9aN26xqXlZf++2BNldb6DVIg=)
3: WIyr9vUj8m4mfbA7UkNHhBqqpGU.crl (hash: 1pvVSsVgU7/KS8vypqddjTTeQCbasMdTcgp4YNSLIoU=)
4: b2nv7c16taiMY7lqlyo1vW0yars.roa (hash: cEulSKA26PCcgT5q7VJTUwPAnJnY+2U0A9I6b42tRhY=)
5: tizL6qWbIsOeypyIPPPfmLusGE0.roa (hash: sAyubtv15VYxRHUf9fkBNCBE+xwZmyTEiVd/Zqvt42M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/0187d6-8bfc-4c59-a6c4-6ad3252a1427/1/WIyr9vUj8m4mfbA7UkNHhBqqpGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/0187d6-8bfc-4c59-a6c4-6ad3252a1427/1/WIyr9vUj8m4mfbA7UkNHhBqqpGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/WIyr9vUj8m4mfbA7UkNHhBqqpGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Dec 2025 21:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f0:51:a4:c8:c7:18:ed:3e:ed:07:af:d6:2b:3b:18:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=588cabf6f523f26e267db03b524347841aaaa465
Validity
Not Before: Dec 5 21:01:13 2025 GMT
Not After : Dec 6 21:01:13 2025 GMT
Subject: CN=4b893e4cd6103c3b5a4cdf4256e98ba915f683ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:73:98:2d:cb:6d:c4:af:46:62:d6:e2:cf:eb:
df:c3:ac:2c:8f:41:09:b3:a4:eb:a4:c0:df:15:56:
cd:42:2b:6d:db:b7:c8:b5:bb:43:29:c4:33:23:27:
1d:ab:55:3f:ee:73:13:2d:62:f5:9e:e8:0f:77:05:
20:c3:a5:fe:cc:77:8e:30:b8:90:16:17:c7:57:bc:
4b:9b:f0:b4:ba:65:e8:0e:e2:fe:13:ea:3a:19:e7:
e8:ff:aa:b2:7e:31:1c:de:28:05:e0:f3:5e:6e:df:
b3:29:13:1b:02:c1:9c:b3:34:4d:4a:e2:cf:78:0b:
f6:ff:7e:4f:d0:b4:3c:f5:5b:b9:3f:b6:6f:ff:74:
4f:42:ce:50:24:e6:8d:ba:47:9a:b4:e1:07:7a:c8:
9c:49:e9:87:92:d5:96:95:97:d4:bc:d5:6b:d8:a8:
a2:65:ce:a0:bf:d5:0e:f5:4b:d5:d3:a2:87:66:34:
1b:31:09:0a:96:8e:f4:2e:fe:ca:6d:45:fe:06:9f:
2c:b5:10:0d:98:a5:18:2e:1d:e2:71:3f:2f:c3:03:
42:ba:b8:81:ae:ef:23:cd:5c:d0:33:5f:0c:ec:7d:
6b:26:ea:43:51:5f:ea:d7:c3:86:6c:b4:4b:35:2c:
29:d5:36:6f:cb:a0:0f:00:8f:15:fd:5f:c6:a2:94:
3c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:89:3E:4C:D6:10:3C:3B:5A:4C:DF:42:56:E9:8B:A9:15:F6:83:BA
X509v3 Authority Key Identifier:
keyid:58:8C:AB:F6:F5:23:F2:6E:26:7D:B0:3B:52:43:47:84:1A:AA:A4:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIyr9vUj8m4mfbA7UkNHhBqqpGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0187d6-8bfc-4c59-a6c4-6ad3252a1427/1/WIyr9vUj8m4mfbA7UkNHhBqqpGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0187d6-8bfc-4c59-a6c4-6ad3252a1427/1/WIyr9vUj8m4mfbA7UkNHhBqqpGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:7e:bb:f7:6e:52:09:17:07:67:91:93:9e:f4:2c:df:fd:54:
27:34:3b:18:8e:c7:b9:56:4b:5a:c1:ad:43:c0:a5:f1:30:d3:
46:07:f5:23:a1:0a:c8:00:45:0d:8a:be:c0:c9:9a:54:cd:06:
64:ba:1b:0b:25:9c:89:b6:e0:67:1b:76:75:aa:e3:d8:9e:22:
95:3e:31:ed:66:ef:b1:3c:07:e9:c2:80:d2:7a:c6:6e:7f:e4:
f2:be:55:d2:86:eb:ea:3c:42:ee:b7:57:a7:00:41:14:f4:58:
ea:47:48:38:49:13:50:30:71:8d:c0:32:04:a3:74:72:ec:f5:
26:39:4b:89:b4:37:e0:88:2a:cb:74:9d:9b:c0:c6:e7:27:02:
b0:1f:60:29:74:96:19:fb:20:a2:05:98:bc:11:74:3e:5f:91:
02:bb:f1:f9:ff:d3:d8:09:98:19:e8:47:98:8a:b3:95:53:45:
26:0b:cb:24:16:fa:e0:98:11:d8:24:00:60:2c:12:a9:83:ce:
12:25:bb:1f:02:0a:c3:45:47:32:92:39:e7:85:6c:ca:07:e4:
76:e7:9f:8d:09:00:b9:8f:5a:3d:f3:d9:3d:69:a2:29:b0:cc:
88:cc:27:08:41:22:27:77:d5:4b:28:14:f7:a6:bd:22:07:d7:
88:e9:e6:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 06:57:31 2025 by rpki-client