This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.mft
File: h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.mft (raw, json)
Hash identifier: yMPoo5Sr5kUEk0lv7zvHHU/LAluOxpj3JIB/tL2GgBc=
Subject key identifier: BC:C4:C7:E4:48:78:43:E9:A4:F6:CF:C0:08:24:C4:40:4E:57:09:6C
Authority key identifier: 87:94:39:5A:C8:22:DF:E0:11:65:21:6C:77:81:FF:D6:1D:B2:8D:5B
Certificate issuer: /CN=8794395ac822dfe01165216c7781ffd61db28d5b
Certificate serial: 019AF12EF859499958248CAF91E0EDC3C2F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.mft
Manifest number: 05E5
Signing time: Sat 06 Dec 2025 01:02:58 +0000
Manifest this update: Sat 06 Dec 2025 01:02:58 +0000
Manifest next update: Sun 07 Dec 2025 01:02:58 +0000
Files and hashes: 1: SalDxwYnKzervGIcZp186xtzhug.roa (hash: EtmDhhah0eA3Tfn8nv8gHra13dzs3VvNRMhkqeNatXs=)
2: h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.crl (hash: 7ZDNyDo4Fx2OjOnm99Lr2mtOJ+3ZPNafUlYyy5CM5rE=)
3: vJ1U4ASLgA44UNL7Z4BBXNsC6QU.roa (hash: UmSdOz5rZ6J32yPtrp522X1fQ0TXmlUWN5/Uf0zeDr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 01:02:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:2e:f8:59:49:99:58:24:8c:af:91:e0:ed:c3:c2:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8794395ac822dfe01165216c7781ffd61db28d5b
Validity
Not Before: Dec 6 01:02:58 2025 GMT
Not After : Dec 7 01:02:58 2025 GMT
Subject: CN=bcc4c7e4487843e9a4f6cfc00824c4404e57096c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:99:ed:5b:4f:49:a1:25:56:3d:bd:f8:45:94:
d1:66:1e:ea:09:3e:f6:3d:49:5f:41:8d:7d:16:7d:
12:2e:f6:a7:ea:39:a9:96:60:06:00:de:21:d2:51:
f4:aa:9d:4d:89:36:c4:8b:8c:74:c8:2c:94:51:61:
d8:ce:c0:8c:74:3c:91:dd:14:a7:1e:89:5e:2d:11:
c8:9a:25:3c:2c:a7:ac:6f:9d:95:52:17:27:60:72:
97:2a:a9:e6:d0:93:40:93:a2:f2:e2:13:f8:23:26:
89:90:b5:e3:26:0f:9f:e8:97:50:4a:07:40:c3:3c:
30:1e:87:e0:04:f1:88:1a:14:13:ad:59:90:81:46:
f5:43:13:95:46:b6:70:06:3f:0a:0a:54:10:0b:ba:
fc:74:95:71:66:86:1b:98:50:c4:b6:7c:bb:aa:36:
10:c5:5c:e1:07:af:4d:74:8f:45:0e:ab:72:97:4a:
23:27:f6:f3:96:0a:59:45:0a:bd:8f:24:f0:7d:00:
49:22:e0:7e:fd:c2:2b:d8:3e:86:ce:1b:34:02:c2:
b7:57:18:01:48:23:e3:63:5b:87:a7:64:92:fa:28:
ab:30:16:70:67:1a:d7:76:ba:3a:81:fe:03:ba:f3:
5c:76:15:34:a5:8d:9e:f5:27:3f:52:4e:83:7a:a2:
83:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:C4:C7:E4:48:78:43:E9:A4:F6:CF:C0:08:24:C4:40:4E:57:09:6C
X509v3 Authority Key Identifier:
keyid:87:94:39:5A:C8:22:DF:E0:11:65:21:6C:77:81:FF:D6:1D:B2:8D:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:57:ea:8d:00:99:f0:ce:36:c5:79:94:33:d7:bf:38:80:df:
b1:e7:0e:1e:39:57:27:50:79:86:8e:6d:ad:d2:92:99:6b:32:
0f:8a:4a:c9:96:08:00:df:f4:a6:11:bd:e7:f0:d8:f7:8b:0d:
5b:11:9d:76:52:12:5c:bd:4a:20:bf:bd:ec:3b:57:2c:4b:3e:
eb:cc:33:62:92:be:5c:5f:d8:da:35:b3:6b:85:a6:f9:74:30:
d3:ef:4e:44:ec:07:4b:41:70:01:9e:e3:11:38:bb:23:9a:5b:
a9:a3:b5:19:84:53:42:cd:a9:6d:6a:83:e9:78:d4:75:d3:86:
f8:36:fc:1e:2a:68:d3:62:01:51:dd:e1:84:b2:45:e6:8f:51:
6e:44:ca:76:f3:6f:6d:64:78:eb:7e:2c:ae:8f:2f:12:bb:a2:
dd:be:70:1a:52:bc:b6:1e:3b:54:68:ac:b4:93:a7:39:27:32:
90:bd:7c:33:15:69:5a:4f:43:6a:21:b6:c4:c4:47:3f:5b:77:
b0:68:ab:c5:1e:c7:3f:02:64:ed:44:7f:bf:d8:6d:23:38:bf:
a4:cf:97:58:7a:8b:c5:88:aa:04:2f:b5:64:9d:57:5c:1e:17:
46:f2:35:54:c5:5d:3b:2a:63:43:10:31:7b:3a:05:90:03:92:
53:36:45:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:59:51 2025 by rpki-client