This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.mft
File: 1-545C9y9la-rSl_4xO2e_ENoe9E.mft (raw, json)
Hash identifier: ehHkt2aaduDsPp2C5BsQbc8owbuN1jdNX0B5qDCpe5I=
Subject key identifier: 50:5A:18:E0:50:BF:ED:3F:C8:F5:0A:22:0E:58:FF:CA:82:D4:F0:0D
Authority key identifier: FB:9E:39:0B:DC:BD:95:AF:AB:4A:5F:F8:C4:ED:9E:FC:43:68:7B:D1
Certificate issuer: /CN=fb9e390bdcbd95afab4a5ff8c4ed9efc43687bd1
Certificate serial: 019AF3896425611064D77662060A39665BC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-545C9y9la-rSl_4xO2e_ENoe9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.mft
Manifest number: 10B2
Signing time: Sat 06 Dec 2025 12:00:58 +0000
Manifest this update: Sat 06 Dec 2025 12:00:58 +0000
Manifest next update: Sun 07 Dec 2025 12:00:58 +0000
Files and hashes: 1: 1-545C9y9la-rSl_4xO2e_ENoe9E.crl (hash: 7Ygf3mWR7gRLywZ6ODLMFUlilY28WDIsrY3UiqEW10k=)
2: AQyWHoTpIoD9YkmssqSGTmtU3kY.roa (hash: gQkpbE3OwjFrYUS2/tIcrYz4PZ/Z8nNnk27GBtk07kI=)
3: n9QbbxtHUjuRXoqW5WKf1TIqSDE.roa (hash: VlEMVs5cMOSULcZyXmypke2XQns+4ddKAif1EvT7d+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-545C9y9la-rSl_4xO2e_ENoe9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 12:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f3:89:64:25:61:10:64:d7:76:62:06:0a:39:66:5b:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb9e390bdcbd95afab4a5ff8c4ed9efc43687bd1
Validity
Not Before: Dec 6 12:00:58 2025 GMT
Not After : Dec 7 12:00:58 2025 GMT
Subject: CN=505a18e050bfed3fc8f50a220e58ffca82d4f00d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d1:1e:0c:7a:01:4c:03:40:f6:90:0a:98:e4:
bf:26:4c:3b:07:e6:91:9f:85:df:eb:d6:56:79:c8:
ab:a8:af:61:21:56:92:c7:a6:3b:33:fc:93:42:d1:
24:3a:43:7d:bc:d9:6b:e2:2b:b8:c7:44:da:05:55:
ff:ee:e2:be:86:25:66:18:6b:43:79:dc:cc:94:fb:
c3:89:77:2e:47:4a:52:69:72:63:16:ce:00:04:a6:
81:4c:c9:f2:79:e8:58:35:21:08:67:76:1a:64:01:
69:47:77:bd:0d:86:6e:5e:d4:40:5e:f4:64:d8:d8:
46:46:58:9e:8c:bf:d5:75:85:b0:fd:9b:d9:15:c6:
ba:91:74:7d:65:80:4a:72:fc:4e:4e:24:3c:6f:f5:
be:ee:40:93:fe:74:4b:27:5c:97:47:87:45:f8:10:
7a:46:bf:72:f2:1a:92:44:22:52:9d:00:51:43:53:
cd:82:e8:1d:5f:fb:a5:42:03:aa:c6:c1:da:50:b1:
97:0d:46:18:0d:a5:e1:5e:b1:af:48:87:49:ce:71:
e8:3c:c8:64:61:d6:53:b1:69:96:34:ef:0c:0a:72:
92:cb:07:98:10:8e:92:f4:f6:d6:86:8b:03:0b:76:
08:f1:99:88:92:ff:94:35:4a:c2:3f:91:b7:8f:ab:
d0:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:5A:18:E0:50:BF:ED:3F:C8:F5:0A:22:0E:58:FF:CA:82:D4:F0:0D
X509v3 Authority Key Identifier:
keyid:FB:9E:39:0B:DC:BD:95:AF:AB:4A:5F:F8:C4:ED:9E:FC:43:68:7B:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-545C9y9la-rSl_4xO2e_ENoe9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:cd:9a:d3:68:76:33:5c:93:3b:d8:6b:76:1d:d9:c4:e4:35:
17:dd:b2:1b:17:bb:71:b9:b1:c5:db:a8:c0:19:06:1f:ac:7b:
cb:5c:aa:2e:2f:64:40:b0:75:27:10:1a:eb:71:8d:bb:7d:68:
e1:81:8d:47:a4:5c:65:35:e0:87:25:57:f0:85:d7:ef:ae:2a:
50:63:50:d8:a7:10:55:94:20:13:6b:0b:cb:11:17:c3:2f:25:
dc:f1:68:69:39:4b:01:3d:16:e6:c6:28:25:93:1e:d4:66:f6:
c7:06:cc:f9:05:49:ef:49:68:8b:c8:83:20:f9:74:ed:86:83:
7f:f3:24:0f:e4:c3:dd:a2:e2:b9:3c:59:0e:42:12:a3:93:0e:
9f:34:af:15:c9:5a:fb:f2:2a:df:39:20:54:31:03:ac:b2:ac:
c2:9e:ab:3c:54:be:78:ae:58:db:5b:5e:de:5d:f5:e8:1f:a3:
06:8c:c1:16:68:c7:ff:f8:d9:2b:a6:3d:50:55:33:a1:8d:23:
00:5d:7b:f4:3b:68:43:07:5b:63:16:b1:6d:d0:c4:ef:aa:c8:
e2:fd:c8:43:8c:86:d6:72:7a:51:bd:18:af:e7:5f:d9:0b:fb:
4b:62:9e:c3:f1:94:67:7b:dc:f8:92:fb:86:ff:b6:b4:63:44:
b2:c2:fe:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:03:59 2025 by rpki-client