This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.mft
File: FwSlHYT7ptD-IYrtypWolNzOHNc.mft (raw, json)
Hash identifier: TQfGrrvA2W7XykBV3wCOQE2AruWBmX9qZKJfEvvOt6E=
Subject key identifier: 31:76:5D:B5:BA:5C:C8:50:24:91:68:B5:99:DC:90:31:B9:C1:73:ED
Authority key identifier: 17:04:A5:1D:84:FB:A6:D0:FE:21:8A:ED:CA:95:A8:94:DC:CE:1C:D7
Certificate issuer: /CN=1704a51d84fba6d0fe218aedca95a894dcce1cd7
Certificate serial: 019AF19B0B409AA576FD4073DB3C0C640A34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwSlHYT7ptD-IYrtypWolNzOHNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.mft
Manifest number: 1505
Signing time: Sat 06 Dec 2025 03:01:01 +0000
Manifest this update: Sat 06 Dec 2025 03:01:01 +0000
Manifest next update: Sun 07 Dec 2025 03:01:01 +0000
Files and hashes: 1: FwSlHYT7ptD-IYrtypWolNzOHNc.crl (hash: u7YWq9tZFBxm+MvfybvFXxM3pDr3OU+h+D16o/JNZ1E=)
2: vzORurH_cWu4s93Hg1XT5ltdLe0.roa (hash: lCzy3hcZEBhDFnviizG4eyjDlw5OJ8Xly0F6Emk8/ps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FwSlHYT7ptD-IYrtypWolNzOHNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:9b:0b:40:9a:a5:76:fd:40:73:db:3c:0c:64:0a:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1704a51d84fba6d0fe218aedca95a894dcce1cd7
Validity
Not Before: Dec 6 03:01:01 2025 GMT
Not After : Dec 7 03:01:01 2025 GMT
Subject: CN=31765db5ba5cc850249168b599dc9031b9c173ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a4:6c:e4:85:5a:91:2c:e5:30:6e:4e:b5:12:
a7:01:87:f8:17:d6:bd:47:b2:23:01:79:55:e3:10:
8b:45:cf:67:ad:fa:30:e4:b5:a2:75:a8:c8:6e:21:
00:c1:3d:7d:8c:d5:d1:c5:fe:34:d7:ce:84:8b:10:
08:74:3d:74:c2:54:ab:a7:f2:ea:a1:b5:46:41:a2:
39:ee:4a:d2:99:4c:33:e4:58:a0:06:1d:48:75:f3:
45:ed:f7:cd:25:69:e1:42:8c:c7:8d:68:d3:d9:3a:
fd:77:42:61:38:ff:27:d4:a2:50:ba:5b:69:36:9a:
49:68:83:e0:13:19:6c:1a:13:c4:76:5e:81:23:a2:
5f:22:f3:13:30:d1:e9:68:b4:a0:83:48:37:ee:19:
de:f7:5f:0d:80:64:51:15:f1:02:15:98:4f:55:2c:
33:20:03:20:53:d7:76:3d:f1:cc:11:56:bb:6b:b4:
69:e1:f1:f0:a2:4e:5f:a3:aa:c0:e8:e9:82:01:35:
8b:3b:42:ce:64:86:0f:26:54:e8:84:a0:a8:77:db:
c2:31:78:5a:37:1a:4b:b5:56:db:c0:dd:5a:4a:de:
93:28:78:fa:9c:33:39:ff:0f:58:27:2e:8b:f7:2c:
2d:a1:15:3e:6e:8c:b7:c1:c4:8f:bf:78:2e:88:40:
7f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:76:5D:B5:BA:5C:C8:50:24:91:68:B5:99:DC:90:31:B9:C1:73:ED
X509v3 Authority Key Identifier:
keyid:17:04:A5:1D:84:FB:A6:D0:FE:21:8A:ED:CA:95:A8:94:DC:CE:1C:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwSlHYT7ptD-IYrtypWolNzOHNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:ef:1e:ba:88:9f:14:34:ab:b0:03:79:3a:48:1f:65:b8:ea:
48:0a:56:e8:80:58:1f:a8:f7:09:a5:50:4f:c2:df:74:c3:05:
ef:c7:83:59:6c:83:44:5f:44:dd:83:e7:7b:a7:4f:dd:e9:74:
01:51:f3:43:8b:2f:1d:9a:1f:f4:5c:ef:57:f6:4b:ee:4c:58:
b1:1d:d6:09:d9:56:12:b5:15:9a:b8:ae:7a:f2:9a:23:63:ca:
be:03:73:2d:9a:05:72:c4:ce:16:93:c4:2b:98:2a:f9:d4:a9:
0b:f7:f1:10:c6:cf:81:84:6b:5c:30:8a:8b:ef:42:cf:d0:99:
af:15:26:c2:0e:19:0d:7d:46:e7:ad:d1:bb:79:a3:a5:9d:b2:
af:77:9b:cc:94:be:11:8c:03:23:6b:e0:50:2c:0b:e1:d4:bc:
4b:75:d3:7d:69:dd:46:90:b0:e6:88:3c:48:df:f1:29:9c:0f:
f9:85:05:52:38:1f:be:1e:07:d7:86:db:ae:66:e7:b7:a3:b6:
04:b3:1b:47:33:f9:d7:30:42:db:83:a5:c1:05:2c:56:41:ba:
ef:f1:8c:a8:ee:c2:95:6f:f3:a6:9a:15:9c:1a:f3:7e:d3:b2:
3c:5b:74:c1:eb:0f:21:31:b4:9a:4c:5c:ac:5e:4d:a8:f6:40:
01:95:43:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:24:27 2025 by rpki-client