This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/532f41-2e3b-47eb-bed5-0e1c4ad03956/1/5wQefn0YTV261xQp42W58Kx2ylI.mft
File: 5wQefn0YTV261xQp42W58Kx2ylI.mft (raw, json)
Hash identifier: mYBxkhs5DrYQEOhe1YTuxmkrO7cVJthT18282wzO/NI=
Subject key identifier: EF:E7:C2:A7:5C:30:3F:46:84:1D:19:E4:92:4E:92:40:2D:7E:DA:18
Authority key identifier: E7:04:1E:7E:7D:18:4D:5D:BA:D7:14:29:E3:65:B9:F0:AC:76:CA:52
Certificate issuer: /CN=e7041e7e7d184d5dbad71429e365b9f0ac76ca52
Certificate serial: 019AF1D25F60B6327F45B65646EABBCB336B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5wQefn0YTV261xQp42W58Kx2ylI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/532f41-2e3b-47eb-bed5-0e1c4ad03956/1/5wQefn0YTV261xQp42W58Kx2ylI.mft
Manifest number: 3E
Signing time: Sat 06 Dec 2025 04:01:27 +0000
Manifest this update: Sat 06 Dec 2025 04:01:27 +0000
Manifest next update: Sun 07 Dec 2025 04:01:27 +0000
Files and hashes: 1: 0ZdT-A1OOobTLe7pEXgq5ICZ3xU.roa (hash: HOZ5WIyd7l9qMnDgexhTmQS4if90MR9OSxDtHYi40wo=)
2: 5wQefn0YTV261xQp42W58Kx2ylI.crl (hash: c3m7IcrH2Aq3MmVNj3mO4nnmh++OyYzCXWxGYlIbowg=)
3: HCUB8Ne_omF1mtWINXAY-a2Vkyg.roa (hash: EPSlRz71ev+kfUwClC5OWx5tsHjYK1rbuqi7kFkvbgg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/532f41-2e3b-47eb-bed5-0e1c4ad03956/1/5wQefn0YTV261xQp42W58Kx2ylI.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/532f41-2e3b-47eb-bed5-0e1c4ad03956/1/5wQefn0YTV261xQp42W58Kx2ylI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5wQefn0YTV261xQp42W58Kx2ylI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:d2:5f:60:b6:32:7f:45:b6:56:46:ea:bb:cb:33:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7041e7e7d184d5dbad71429e365b9f0ac76ca52
Validity
Not Before: Dec 6 04:01:27 2025 GMT
Not After : Dec 7 04:01:27 2025 GMT
Subject: CN=efe7c2a75c303f46841d19e4924e92402d7eda18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4a:17:d8:78:df:50:d3:0a:3e:84:24:93:8a:
88:6f:29:79:98:00:a6:c5:ef:9d:71:fc:60:82:86:
70:69:b9:28:6d:ea:d8:01:dd:6f:db:68:28:e4:fb:
c3:46:f3:19:17:4c:30:e2:2b:e1:3a:e4:15:a6:6e:
70:e6:0b:8c:5e:a0:8f:59:c3:0c:18:ef:18:aa:5b:
3b:1a:b8:fb:b3:5d:ac:3d:b3:ee:d6:1f:4c:1f:57:
a0:5a:23:13:01:fd:dd:74:f7:4c:f4:0c:90:19:3c:
45:e4:48:ee:42:a4:f5:72:e8:17:f9:fc:36:50:76:
f8:55:2a:4c:46:cb:49:c1:63:52:ef:8b:34:24:bf:
92:bb:ef:80:47:45:a0:3d:8b:cc:e9:8f:62:07:02:
90:1b:dc:3d:e5:53:d6:13:63:ad:b3:7a:d7:75:bb:
50:3c:af:37:fa:fa:eb:15:fc:b6:9e:83:fb:88:4e:
e7:9c:80:95:1b:f6:89:77:f7:48:fe:cc:45:c0:74:
34:a8:17:5e:92:70:14:4d:8a:4e:9f:10:75:b9:33:
2b:70:46:4f:c2:a7:b7:dd:a7:a4:af:74:d3:f8:03:
d0:e4:7b:d5:91:0b:ac:d1:02:3a:59:91:13:a5:1d:
86:e6:d3:7f:8a:c0:cb:df:4c:1e:23:16:d9:95:c0:
49:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:E7:C2:A7:5C:30:3F:46:84:1D:19:E4:92:4E:92:40:2D:7E:DA:18
X509v3 Authority Key Identifier:
keyid:E7:04:1E:7E:7D:18:4D:5D:BA:D7:14:29:E3:65:B9:F0:AC:76:CA:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5wQefn0YTV261xQp42W58Kx2ylI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/532f41-2e3b-47eb-bed5-0e1c4ad03956/1/5wQefn0YTV261xQp42W58Kx2ylI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/532f41-2e3b-47eb-bed5-0e1c4ad03956/1/5wQefn0YTV261xQp42W58Kx2ylI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:07:49:61:25:05:56:14:c7:05:d5:3e:ab:23:12:5b:50:42:
fb:0b:45:56:60:bd:73:71:46:a3:0f:4f:78:01:3a:c8:b7:db:
18:84:0d:c7:52:a2:c6:c8:08:37:18:b9:1a:69:67:e0:7c:2f:
5e:68:26:fe:ab:b3:a9:7c:88:46:98:6a:81:ff:15:9f:e6:75:
4b:9c:26:34:83:69:93:f0:47:5a:86:b0:3f:80:00:0c:10:8a:
a3:10:4a:95:57:60:2e:d6:f5:0d:1e:c9:df:66:d4:5a:8d:80:
c1:d0:fc:c4:c9:90:22:c5:ba:fc:69:b4:54:c7:11:28:05:8d:
2f:82:19:73:ed:14:5f:96:3f:ef:a2:fd:9c:11:10:15:15:9c:
92:5e:8c:b6:c2:ad:d9:16:b7:57:b4:2a:99:d5:61:5c:97:24:
53:26:62:e6:35:2c:a0:23:74:29:44:1e:14:36:82:03:e2:28:
d5:b4:f7:32:1d:ae:7b:bc:69:d5:3d:52:ac:59:3a:99:2f:88:
3b:e7:76:ba:79:c3:f5:16:77:bb:da:c7:f4:9b:9d:38:78:4c:
b5:f6:6d:7b:e4:de:c1:51:51:37:23:a6:17:b0:a9:66:48:ee:
e7:eb:39:d2:6a:79:31:c7:21:f3:03:74:ef:41:b7:c3:fe:38:
16:96:24:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:42:28 2025 by rpki-client