This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft
File: J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft (raw, json)
Hash identifier: jUwpIOfVWNqzE863uC5JrOhiY2C84IgTf4cMGkms+xg=
Subject key identifier: A2:16:70:DD:11:BE:F7:64:F9:65:39:3B:29:D8:42:72:AF:0E:90:D1
Authority key identifier: 27:91:59:EF:22:F8:2B:93:67:31:66:4E:E6:7C:3B:6E:A9:6E:F4:43
Certificate issuer: /CN=279159ef22f82b936731664ee67c3b6ea96ef443
Certificate serial: 019AF23F6D94647D4CDA73673D14D51640D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft
Manifest number: 1283
Signing time: Sat 06 Dec 2025 06:00:34 +0000
Manifest this update: Sat 06 Dec 2025 06:00:34 +0000
Manifest next update: Sun 07 Dec 2025 06:00:34 +0000
Files and hashes: 1: J5FZ7yL4K5NnMWZO5nw7bqlu9EM.crl (hash: gePuhYTEcBASSptA49Pbnv2NuGyKo3obTTUhgvLFpDs=)
2: _pQtR1EJpgHMSOkTmSK_Er0tXsE.roa (hash: m5yMM2ApK+4Me2gJxPiOKP0gpYE7to93xl8Fx6CP7v4=)
3: qjMWC-5cgR3_FzvTJ8fV4seYOFk.roa (hash: fwjzyDVkTfLPWzdH9pq6+z0fYQ+pKyYb7cgFc8eFsFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft
rsync://rpki.ripe.net/repository/DEFAULT/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f2:3f:6d:94:64:7d:4c:da:73:67:3d:14:d5:16:40:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279159ef22f82b936731664ee67c3b6ea96ef443
Validity
Not Before: Dec 6 06:00:34 2025 GMT
Not After : Dec 7 06:00:34 2025 GMT
Subject: CN=a21670dd11bef764f965393b29d84272af0e90d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8d:4d:23:5a:c3:7d:b6:76:d5:cf:0f:b4:d4:
eb:8f:71:4e:b0:ed:ee:93:6f:07:33:13:e5:fc:4a:
91:89:b0:a2:0a:34:c3:db:a9:f5:0d:9d:1e:9b:bd:
52:c1:16:77:33:7a:3c:0c:0f:56:34:49:20:8a:74:
fa:35:91:a1:57:30:b3:03:0e:fa:34:75:ee:48:be:
21:ba:27:02:74:e4:c8:9a:b3:eb:cc:16:47:c6:b4:
ee:e0:33:8d:c1:51:d3:a4:b8:88:26:6c:c3:d2:17:
88:f4:39:de:70:67:90:76:db:06:17:58:a9:39:e3:
72:f8:a3:9c:0f:b4:cc:54:42:ef:eb:05:93:66:f6:
7e:04:1b:da:be:1f:19:ee:af:b6:03:c8:2b:bc:70:
7e:fe:ad:dd:8a:d2:88:5d:b1:7c:0e:6b:b9:3a:46:
0e:a6:ac:82:6f:fa:df:84:dc:6d:c3:29:b9:26:ba:
58:26:89:79:6d:7a:d7:35:0b:2a:43:82:3f:f5:77:
12:01:79:f0:6b:a4:2e:b9:bd:07:66:33:ae:e7:19:
26:28:db:65:c6:eb:ff:8f:1e:bb:95:aa:bf:90:eb:
4f:59:ca:48:20:51:02:98:49:6e:af:99:88:38:97:
86:65:aa:9a:7e:3a:ed:ce:47:1a:ec:85:a8:1a:5f:
83:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:16:70:DD:11:BE:F7:64:F9:65:39:3B:29:D8:42:72:AF:0E:90:D1
X509v3 Authority Key Identifier:
keyid:27:91:59:EF:22:F8:2B:93:67:31:66:4E:E6:7C:3B:6E:A9:6E:F4:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:e1:d4:e4:58:dd:02:bc:76:b2:e7:70:36:ef:16:2e:e3:df:
bf:b8:89:ef:a7:c0:86:87:b6:f1:6b:48:3c:27:5d:b9:68:69:
a1:93:7a:0e:4c:76:23:09:47:a0:a9:2d:d9:ac:84:34:47:48:
21:45:2c:b6:0f:2c:87:bd:8c:a7:77:7e:14:60:58:c8:09:3c:
c3:e4:6c:4c:b6:42:24:c0:a0:82:e1:4f:d3:83:c7:c9:ae:a6:
34:10:c9:a0:ab:7a:98:20:8d:bf:39:af:a3:2d:6f:ff:bb:c3:
81:6c:b0:ae:c8:3f:37:7b:d0:72:2e:1a:5f:fc:f6:fd:9c:c4:
fc:05:a9:92:4f:5c:96:19:fb:6c:8a:55:21:e7:fa:ac:70:fc:
e9:f0:23:a3:fb:45:ae:2c:b7:13:f6:19:5b:db:07:a7:3f:43:
c2:26:4b:dc:65:87:f3:fa:2c:74:90:5c:01:c2:23:21:81:79:
78:7e:a2:3d:d7:47:2c:98:38:90:6b:7d:5f:57:44:8c:dc:3f:
87:6e:06:03:0a:12:e6:08:15:e5:2d:00:f1:71:cb:56:b5:b9:
17:0f:ae:38:42:3d:63:e4:90:29:46:64:00:15:72:4c:3d:48:
ec:ec:25:5f:7d:ce:a0:e8:e1:13:92:e0:0d:b6:54:98:3b:45:
00:4a:b8:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZryP22UZH1M2nNnPRTVFkDQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3OTE1OWVmMjJmODJiOTM2NzMxNjY0ZWU2N2MzYjZlYTk2
ZWY0NDMwHhcNMjUxMjA2MDYwMDM0WhcNMjUxMjA3MDYwMDM0WjAzMTEwLwYDVQQD
EyhhMjE2NzBkZDExYmVmNzY0Zjk2NTM5M2IyOWQ4NDI3MmFmMGU5MGQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuI1NI1rDfbZ21c8PtNTrj3FOsO3u
k28HMxPl/EqRibCiCjTD26n1DZ0em71SwRZ3M3o8DA9WNEkginT6NZGhVzCzAw76
NHXuSL4huicCdOTImrPrzBZHxrTu4DONwVHTpLiIJmzD0heI9DnecGeQdtsGF1ip
OeNy+KOcD7TMVELv6wWTZvZ+BBvavh8Z7q+2A8grvHB+/q3ditKIXbF8Dmu5OkYO
pqyCb/rfhNxtwym5JrpYJol5bXrXNQsqQ4I/9XcSAXnwa6Quub0HZjOu5xkmKNtl
xuv/jx67laq/kOtPWcpIIFECmElur5mIOJeGZaqafjrtzkca7IWoGl+DfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKIWcN0Rvvdk+WU5OynYQnKvDpDRMB8GA1UdIwQY
MBaAFCeRWe8i+CuTZzFmTuZ8O26pbvRDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjVGWjd5TDRLNU5uTVdaTzVudzdicWx1OUVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS81YzE1YmUtYWVmMi00YzMxLWJmYjQt
MzFiYWY2ZWVkZThhLzEvSjVGWjd5TDRLNU5uTVdaTzVudzdicWx1OUVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS81YzE1YmUtYWVmMi00YzMxLWJmYjQtMzFiYWY2ZWVkZThh
LzEvSjVGWjd5TDRLNU5uTVdaTzVudzdicWx1OUVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs+HU5Fjd
Arx2sudwNu8WLuPfv7iJ76fAhoe28WtIPCdduWhpoZN6Dkx2IwlHoKkt2ayENEdI
IUUstg8sh72Mp3d+FGBYyAk8w+RsTLZCJMCgguFP04PHya6mNBDJoKt6mCCNvzmv
oy1v/7vDgWywrsg/N3vQci4aX/z2/ZzE/AWpkk9clhn7bIpVIef6rHD86fAjo/tF
riy3E/YZW9sHpz9DwiZL3GWH8/osdJBcAcIjIYF5eH6iPddHLJg4kGt9X1dEjNw/
h24GAwoS5ggV5S0A8XHLVrW5Fw+uOEI9Y+SQKUZkABVyTD1I7OwlX33OoOjhE5Lg
DbZUmDtFAEq4rg==
-----END CERTIFICATE-----
Generated at Sat Dec 6 10:18:35 2025 by rpki-client