This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft
File: 5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft (raw, json)
Hash identifier: 39czv8qhO74wYiYf9banUt3ysqWVnkVE7m6uikYR8tE=
Subject key identifier: 93:E8:BE:92:21:63:B9:C6:78:8A:99:72:1D:38:06:E7:0E:82:16:31
Authority key identifier: E5:1D:71:7F:B2:D4:37:D4:11:D8:71:AF:7B:9F:BC:B0:1E:89:F9:6C
Certificate issuer: /CN=e51d717fb2d437d411d871af7b9fbcb01e89f96c
Certificate serial: 019AF27706AA6273191226A5966BC542672F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5R1xf7LUN9QR2HGve5-8sB6J-Ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft
Manifest number: 0C84
Signing time: Sat 06 Dec 2025 07:01:17 +0000
Manifest this update: Sat 06 Dec 2025 07:01:17 +0000
Manifest next update: Sun 07 Dec 2025 07:01:17 +0000
Files and hashes: 1: 5R1xf7LUN9QR2HGve5-8sB6J-Ww.crl (hash: VDEP3w3V8nszNeYvbcmFSnANZrFi37+cxGHdxhyH1K8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/5R1xf7LUN9QR2HGve5-8sB6J-Ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f2:77:06:aa:62:73:19:12:26:a5:96:6b:c5:42:67:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e51d717fb2d437d411d871af7b9fbcb01e89f96c
Validity
Not Before: Dec 6 07:01:17 2025 GMT
Not After : Dec 7 07:01:17 2025 GMT
Subject: CN=93e8be922163b9c6788a99721d3806e70e821631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:91:8d:0e:0c:90:05:73:38:24:b2:c0:d2:ca:
db:14:f3:d1:a1:53:87:10:00:70:2d:ff:e8:67:ad:
ab:93:fe:95:98:f8:97:cd:df:d5:1a:d8:50:e1:e2:
7e:c3:ee:fa:c6:5e:1b:5e:ab:1b:7f:4c:69:51:0a:
a9:f4:de:03:96:53:81:7a:73:20:d8:7b:12:d8:5d:
22:7a:bb:40:80:5e:7b:42:f4:86:aa:34:c7:cb:bc:
1a:0a:42:47:e2:54:c3:92:59:50:ca:d9:06:d7:2b:
63:a7:8f:0b:48:a0:09:c7:5c:48:24:d4:43:ec:11:
12:80:90:96:b6:dc:ef:68:13:ed:d2:4e:cc:3a:bf:
8e:32:df:2d:ee:0d:62:8f:eb:4e:34:b6:d1:37:bc:
c3:bd:cc:be:c7:f6:db:3c:f4:aa:26:d9:2e:b6:86:
6e:57:34:cc:0a:04:05:7f:ac:87:ba:c3:c1:9d:5b:
0b:14:4f:05:77:51:2c:60:17:ae:7e:c4:1c:39:a5:
9f:28:97:00:91:d1:df:05:04:e4:76:44:71:3c:3f:
4e:a3:75:d0:c6:66:9c:c9:a7:c3:5a:1a:59:b3:a7:
ae:a6:14:d6:ae:2a:66:8c:a7:d4:d8:0a:fa:d0:89:
5f:2b:83:f6:b7:ab:60:9d:05:fa:10:9b:4a:a0:3d:
3c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:E8:BE:92:21:63:B9:C6:78:8A:99:72:1D:38:06:E7:0E:82:16:31
X509v3 Authority Key Identifier:
keyid:E5:1D:71:7F:B2:D4:37:D4:11:D8:71:AF:7B:9F:BC:B0:1E:89:F9:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5R1xf7LUN9QR2HGve5-8sB6J-Ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:47:98:df:b4:39:7d:77:62:3b:20:af:39:69:03:89:5b:3f:
ef:d2:1f:65:d9:81:64:10:63:5c:c4:28:e6:39:07:10:28:ae:
7d:22:48:ea:f1:0d:1f:0c:8d:82:9e:41:5a:80:26:34:53:6f:
ac:a8:9c:c0:9f:a8:97:79:ad:30:a6:1b:76:d9:85:ce:ab:71:
0e:ce:42:5d:f4:ac:64:cd:8f:7a:28:ab:e8:38:c9:41:d2:c5:
4e:93:a3:15:69:77:99:c7:ce:3f:af:d1:30:da:9e:fa:95:cf:
a0:a9:f2:40:47:cf:57:b2:f3:73:a0:76:a0:70:72:90:eb:58:
4a:7e:25:52:2e:b1:83:13:e7:46:3f:81:a1:a6:a3:1a:35:f5:
8b:bd:3e:22:71:39:34:d4:dd:b7:a2:95:41:87:a7:68:8b:60:
77:e4:67:c4:a4:7c:ae:1a:32:40:69:fa:eb:76:cf:7c:dc:2a:
f6:83:ee:fb:19:3a:6b:9e:27:ca:06:25:c9:ec:ca:ab:c1:c8:
72:a9:ec:f6:04:8e:db:0d:f2:6f:ac:ef:a8:3c:03:bf:0f:f4:
aa:3c:2f:68:ed:79:4e:8a:1e:f9:6d:8c:73:d7:52:cf:73:dd:
06:93:21:62:ce:c2:66:d4:d9:ee:f2:96:ff:cb:b4:96:c3:4c:
cf:98:22:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrydwaqYnMZEiallmvFQmcvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1MWQ3MTdmYjJkNDM3ZDQxMWQ4NzFhZjdiOWZiY2IwMWU4
OWY5NmMwHhcNMjUxMjA2MDcwMTE3WhcNMjUxMjA3MDcwMTE3WjAzMTEwLwYDVQQD
Eyg5M2U4YmU5MjIxNjNiOWM2Nzg4YTk5NzIxZDM4MDZlNzBlODIxNjMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpGNDgyQBXM4JLLA0srbFPPRoVOH
EABwLf/oZ62rk/6VmPiXzd/VGthQ4eJ+w+76xl4bXqsbf0xpUQqp9N4DllOBenMg
2HsS2F0iertAgF57QvSGqjTHy7waCkJH4lTDkllQytkG1ytjp48LSKAJx1xIJNRD
7BESgJCWttzvaBPt0k7MOr+OMt8t7g1ij+tONLbRN7zDvcy+x/bbPPSqJtkutoZu
VzTMCgQFf6yHusPBnVsLFE8Fd1EsYBeufsQcOaWfKJcAkdHfBQTkdkRxPD9Oo3XQ
xmacyafDWhpZs6euphTWripmjKfU2Ar60IlfK4P2t6tgnQX6EJtKoD08MQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJPovpIhY7nGeIqZch04BucOghYxMB8GA1UdIwQY
MBaAFOUdcX+y1DfUEdhxr3ufvLAeiflsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVIxeGY3TFVOOVFSMkhHdmU1LThzQjZKLVd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8xMmVkNjUtNDE1Yi00OGZiLWEzZDkt
MzE0ZDVlMmI2NmNhLzEvNVIxeGY3TFVOOVFSMkhHdmU1LThzQjZKLVd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8xMmVkNjUtNDE1Yi00OGZiLWEzZDktMzE0ZDVlMmI2NmNh
LzEvNVIxeGY3TFVOOVFSMkhHdmU1LThzQjZKLVd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGEeY37Q5
fXdiOyCvOWkDiVs/79IfZdmBZBBjXMQo5jkHECiufSJI6vENHwyNgp5BWoAmNFNv
rKicwJ+ol3mtMKYbdtmFzqtxDs5CXfSsZM2Peiir6DjJQdLFTpOjFWl3mcfOP6/R
MNqe+pXPoKnyQEfPV7Lzc6B2oHBykOtYSn4lUi6xgxPnRj+BoaajGjX1i70+InE5
NNTdt6KVQYenaItgd+RnxKR8rhoyQGn663bPfNwq9oPu+xk6a54nygYlyezKq8HI
cqns9gSO2w3yb6zvqDwDvw/0qjwvaO15Tooe+W2Mc9dSz3PdBpMhYs7CZtTZ7vKW
/8u0lsNMz5giGA==
-----END CERTIFICATE-----
Generated at Sat Dec 6 10:53:23 2025 by rpki-client