This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/c0a971-d96f-43d4-a8bc-30625317430d/1/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.mft
File: 12Ir6Ipc6u-MMw1-lv_0NeggU7Q.mft (raw, json)
Hash identifier: gBRQ5AJbsceiYruhULFHh7f2SnXFGw7IYKY9tWQAOXM=
Subject key identifier: E5:6D:EF:F1:FD:D9:9C:96:E0:83:9E:03:C1:54:33:69:96:7D:39:63
Authority key identifier: D7:62:2B:E8:8A:5C:EA:EF:8C:33:0D:7E:96:FF:F4:35:E8:20:53:B4
Certificate issuer: /CN=d7622be88a5ceaef8c330d7e96fff435e82053b4
Certificate serial: 019AF209760BF543EA2A317A6775D0481196
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/c0a971-d96f-43d4-a8bc-30625317430d/1/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.mft
Manifest number: 045E
Signing time: Sat 06 Dec 2025 05:01:37 +0000
Manifest this update: Sat 06 Dec 2025 05:01:37 +0000
Manifest next update: Sun 07 Dec 2025 05:01:37 +0000
Files and hashes: 1: 12Ir6Ipc6u-MMw1-lv_0NeggU7Q.crl (hash: 7TtwItH8ARAoJQRbgZLUVI7j5sdRGwThAqQ5aVZtF/8=)
2: 3_lvOlC8Q73awEsCGt68pft-scE.roa (hash: kkfK8/3sSi/mI91PBNQyjxR7j14LRCGJu3KC5n63R3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/c0a971-d96f-43d4-a8bc-30625317430d/1/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/c0a971-d96f-43d4-a8bc-30625317430d/1/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f2:09:76:0b:f5:43:ea:2a:31:7a:67:75:d0:48:11:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7622be88a5ceaef8c330d7e96fff435e82053b4
Validity
Not Before: Dec 6 05:01:37 2025 GMT
Not After : Dec 7 05:01:37 2025 GMT
Subject: CN=e56deff1fdd99c96e0839e03c1543369967d3963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:11:12:35:37:44:35:bd:96:69:6f:71:1e:be:
5b:dc:fc:b5:bb:18:27:dd:df:27:1d:92:51:9c:52:
93:d7:a7:f4:1f:67:f4:53:e2:74:14:6a:f5:29:96:
44:f0:91:bf:ab:22:50:f8:c6:cf:ce:e9:35:d9:20:
59:29:69:57:3e:0f:fe:90:df:3f:6e:7f:b4:97:8d:
7c:31:55:51:c2:16:5f:49:ee:e0:54:66:64:b8:14:
57:a0:b2:6b:27:a0:aa:ff:60:a3:52:05:64:8c:4f:
5c:82:e6:09:73:54:fe:f6:0e:71:3a:57:9e:ca:ca:
93:c0:15:ab:9a:1d:8a:24:00:c4:2b:7b:50:66:ea:
df:4b:d4:c2:b8:1d:5b:ce:21:ed:32:f6:d3:27:6a:
94:4b:ff:a0:57:00:30:11:72:3e:28:3e:52:fd:a5:
0b:59:4e:87:ef:82:bc:ee:6b:22:04:be:5b:db:c5:
9f:d5:09:e6:f5:49:f7:d2:da:66:8f:10:dc:18:a2:
08:30:23:1f:65:a5:a2:74:49:af:7f:96:18:74:d1:
58:d7:28:11:84:23:65:38:45:ea:36:ad:00:63:4e:
de:29:ee:a1:f0:69:5e:88:21:b1:d8:6f:c5:4e:9c:
0f:ae:46:72:2b:aa:02:fe:05:cf:e0:cb:c8:ef:ad:
a4:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:6D:EF:F1:FD:D9:9C:96:E0:83:9E:03:C1:54:33:69:96:7D:39:63
X509v3 Authority Key Identifier:
keyid:D7:62:2B:E8:8A:5C:EA:EF:8C:33:0D:7E:96:FF:F4:35:E8:20:53:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c0a971-d96f-43d4-a8bc-30625317430d/1/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c0a971-d96f-43d4-a8bc-30625317430d/1/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:37:73:eb:09:5e:b8:4c:a8:ac:8d:6a:11:6c:47:65:52:88:
bb:4b:3c:5c:e1:93:7c:5f:aa:ff:38:fd:84:73:7c:77:c9:84:
cf:f1:d2:94:10:15:44:21:7e:4c:9c:c0:a0:2e:fb:02:22:9b:
00:1c:a2:d0:d4:5b:49:a2:33:aa:b3:0c:54:86:39:0c:ec:49:
cc:7e:c0:d8:17:b5:9f:51:7e:88:68:72:6d:af:06:d2:6a:34:
52:ff:40:bd:e9:a1:f9:17:e6:1c:b0:7b:84:ae:bf:5f:69:7b:
f5:3f:f3:d0:6a:1b:e1:6a:a0:75:5d:51:03:5b:d0:f6:e5:7e:
a0:a7:fd:d0:13:f2:68:af:d3:0e:d5:6f:4b:f3:cd:e3:85:b1:
17:f1:0f:92:f2:19:93:2b:d4:a9:41:03:08:8a:c2:2c:e3:09:
8b:44:50:4f:62:be:c6:26:16:52:3f:dc:db:76:63:6b:00:83:
34:6e:37:0a:8c:66:9c:25:c7:a9:89:56:8b:69:6d:3f:1a:28:
e8:2e:11:a6:0f:39:56:c1:4d:f6:76:79:57:2b:bb:1b:50:a1:
09:61:56:13:dc:e9:dc:1d:e9:60:10:89:18:c1:dc:89:26:f6:
86:0e:ed:f1:f6:96:03:eb:b0:61:10:d3:8e:db:54:0c:b0:84:
27:8e:c1:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:23:29 2025 by rpki-client