This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.mft
File: 4FotrPXdTpv6LS2bLTw_lnh0WEE.mft (raw, json)
Hash identifier: lywjrQwvBNl8xdLCyOGajHTIX+eVbPm7znuvJTvx8xA=
Subject key identifier: 53:EE:5D:F5:AD:48:82:6E:B4:7A:85:C4:F6:5B:74:28:E7:83:A1:97
Authority key identifier: E0:5A:2D:AC:F5:DD:4E:9B:FA:2D:2D:9B:2D:3C:3F:96:78:74:58:41
Certificate issuer: /CN=e05a2dacf5dd4e9bfa2d2d9b2d3c3f9678745841
Certificate serial: 019AF2ADFB54E41997BD4885A35C6E00D16B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FotrPXdTpv6LS2bLTw_lnh0WEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.mft
Manifest number: 1764
Signing time: Sat 06 Dec 2025 08:01:19 +0000
Manifest this update: Sat 06 Dec 2025 08:01:19 +0000
Manifest next update: Sun 07 Dec 2025 08:01:19 +0000
Files and hashes: 1: 4FotrPXdTpv6LS2bLTw_lnh0WEE.crl (hash: 5gr6ruM0C3DDcYKQHcPZgCyxJF7WzjXnb4WU8ZNJY/4=)
2: BS790JJGQ7DZlNZUL_em5Su64B4.roa (hash: VVqWBTRMk3+7j4zbJrp8La5lSHjcZGiKvxZueV8Sl7A=)
3: UJGm2ryO8HuvxtqrnMckm6HvQuw.roa (hash: LmIHTI0l7Czq42uu144MFysAfpmWgQRM3SWHkhVtvVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FotrPXdTpv6LS2bLTw_lnh0WEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f2:ad:fb:54:e4:19:97:bd:48:85:a3:5c:6e:00:d1:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e05a2dacf5dd4e9bfa2d2d9b2d3c3f9678745841
Validity
Not Before: Dec 6 08:01:19 2025 GMT
Not After : Dec 7 08:01:19 2025 GMT
Subject: CN=53ee5df5ad48826eb47a85c4f65b7428e783a197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:53:c5:fe:f0:13:b0:4e:62:1f:5e:b5:fc:84:
62:91:e5:99:ad:c0:2c:2d:02:89:09:81:44:bd:a8:
da:ff:c0:5f:c8:66:77:92:f9:df:d5:d9:95:b8:75:
03:50:a2:70:a9:6f:29:43:98:3d:bb:5c:75:f4:7c:
f3:41:62:b1:6b:10:32:28:2c:80:80:aa:e6:77:ca:
6f:c4:07:24:f1:6e:d2:bb:31:6e:85:f8:69:f8:16:
c5:02:03:06:2a:17:ac:aa:e3:a3:9a:6a:3c:21:f0:
bd:73:78:29:6c:3e:81:d8:7f:1b:3d:a7:8d:9d:97:
2b:6b:53:6b:25:81:ed:3a:79:9d:80:06:79:9a:9d:
82:38:5f:8c:b8:f6:54:ba:08:5d:48:5f:2f:9b:05:
98:d7:1d:15:cd:ca:a7:67:40:a3:bb:27:de:65:18:
44:57:15:e6:61:01:5e:7e:c8:b8:19:70:b0:76:13:
69:96:86:07:b7:53:73:1f:b9:2a:db:5a:ee:7f:e3:
d0:13:51:9c:dd:34:4e:51:b0:af:c0:f3:96:25:e6:
d7:26:d2:54:b9:28:7a:05:fc:44:a1:77:95:eb:c5:
27:da:32:94:d3:ee:6a:bb:d6:8a:c4:2d:08:5c:f5:
28:77:b8:b8:0e:90:60:b7:9c:ce:04:b1:f5:27:9f:
ae:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:EE:5D:F5:AD:48:82:6E:B4:7A:85:C4:F6:5B:74:28:E7:83:A1:97
X509v3 Authority Key Identifier:
keyid:E0:5A:2D:AC:F5:DD:4E:9B:FA:2D:2D:9B:2D:3C:3F:96:78:74:58:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FotrPXdTpv6LS2bLTw_lnh0WEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:5f:c1:bf:19:93:0a:49:e9:c7:cf:b1:6f:ab:ad:15:8d:ce:
e5:0f:b8:99:3e:22:ff:7c:32:f5:21:1d:62:b2:ee:d6:a1:14:
30:4b:38:7b:38:b6:fb:ad:0f:71:1c:73:38:28:4c:e6:53:31:
9e:0c:7f:fc:96:c2:75:15:c3:63:d5:62:d3:09:ad:56:44:2b:
ee:b5:c0:77:16:6c:d4:4c:fa:53:09:d7:56:b5:45:59:67:df:
0a:40:88:e2:a8:68:d5:34:c1:0a:9a:26:b3:30:35:06:78:64:
55:bf:2c:1e:68:d7:64:74:8b:c7:78:bd:14:76:3e:ea:50:65:
5a:5b:c0:42:ea:71:2d:d3:2c:7b:43:21:d3:82:81:e3:57:a8:
b8:6a:b0:17:52:cf:dc:8f:89:38:6a:03:6a:ac:fb:d1:bf:b0:
64:7d:b0:92:39:58:ed:11:7e:8d:e2:72:7c:7c:ea:73:2b:10:
b2:a5:e3:b0:27:a1:32:dd:96:ff:81:e8:98:2b:96:63:4a:4e:
24:e2:63:08:00:02:db:1c:93:5f:f5:22:ef:28:45:58:f0:c4:
6e:fb:67:03:75:89:30:33:19:34:ea:58:7a:32:11:5e:6f:b4:
21:c1:73:de:42:cc:ff:13:0b:6b:77:8a:91:50:ef:83:8e:98:
ce:da:3a:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:00:48 2025 by rpki-client