This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.mft
File: mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.mft (raw, json)
Hash identifier: mk/pDm5PiFaElChTHPBYo5JAcrunmig1PQ2xUror/kQ=
Subject key identifier: E8:AC:95:72:14:F4:8E:32:8D:95:4D:E9:D4:4D:66:9C:45:BC:D6:4C
Authority key identifier: 98:82:96:C5:0D:94:BB:ED:22:5F:28:67:23:1F:A5:09:3D:EB:EA:91
Certificate issuer: /CN=988296c50d94bbed225f2867231fa5093debea91
Certificate serial: 019AF2091B9281E970BCDD81733626A69A47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.mft
Manifest number: 13A6
Signing time: Sat 06 Dec 2025 05:01:14 +0000
Manifest this update: Sat 06 Dec 2025 05:01:14 +0000
Manifest next update: Sun 07 Dec 2025 05:01:14 +0000
Files and hashes: 1: UjP5WMZKRBsvIlHnzhDHFBUyi78.roa (hash: pQ6/nnpLIpK2rwKH9JMJUyXoOlk8zghaFAetdmitLfY=)
2: mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.crl (hash: lEe3FXBGJYe+mh//TYWKPwNLS+oovxuwaageZVoGRvE=)
3: oFqjjYPuOysZm8IvX2HFnZ2yMN8.roa (hash: xodF+0GY/o0dnV+Pf3SoupYGcpVAvzY6q/h09Jx9Nzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f2:09:1b:92:81:e9:70:bc:dd:81:73:36:26:a6:9a:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=988296c50d94bbed225f2867231fa5093debea91
Validity
Not Before: Dec 6 05:01:14 2025 GMT
Not After : Dec 7 05:01:14 2025 GMT
Subject: CN=e8ac957214f48e328d954de9d44d669c45bcd64c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8a:0b:c9:37:45:e6:91:74:24:b1:39:0e:7c:
99:6c:11:62:dc:4c:e6:76:29:2f:fd:eb:de:57:e4:
cc:8f:36:ec:42:9a:86:df:eb:0a:8f:0b:23:d3:5e:
93:17:27:f7:8d:3d:1a:42:56:30:c4:65:d9:c7:db:
4f:b3:f5:f1:4e:4b:7b:4d:d5:bf:ed:ce:32:5f:6b:
53:b5:12:42:e9:bc:7a:fc:1a:14:9e:fb:2f:a8:ce:
b4:4b:4d:a0:dd:ce:f7:32:d1:c6:9c:08:72:1f:93:
d4:29:99:05:d4:a6:e1:1a:01:09:30:77:5f:a3:92:
72:ff:e5:56:37:1b:fa:e7:4a:6e:79:3d:9b:45:f2:
8b:76:89:9a:c0:a9:51:ae:5a:5a:c0:bd:a6:37:04:
b8:aa:8e:4f:4d:aa:9b:7a:b7:13:79:83:06:05:9e:
f6:8f:a5:5a:5f:9b:dd:41:42:c1:a2:48:40:8a:30:
82:54:0b:fb:08:71:9b:9c:0a:28:8e:a2:8e:af:66:
42:6a:7e:fe:d8:cb:44:c2:d6:bc:a6:e9:3e:05:18:
70:cc:6b:d6:47:f0:71:09:0c:1b:a8:e0:d8:ef:24:
65:76:e9:0f:20:e3:95:8a:a3:5d:7b:b4:0c:c6:d6:
35:3b:dd:0f:55:3b:d6:db:79:c9:11:c2:71:dd:d8:
2d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:AC:95:72:14:F4:8E:32:8D:95:4D:E9:D4:4D:66:9C:45:BC:D6:4C
X509v3 Authority Key Identifier:
keyid:98:82:96:C5:0D:94:BB:ED:22:5F:28:67:23:1F:A5:09:3D:EB:EA:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:d1:64:1d:64:07:3b:7a:f3:11:1b:6e:a4:43:0b:ae:a8:b7:
5c:59:6c:a8:13:66:12:4f:35:b2:44:22:86:94:4a:b7:06:ce:
ff:6c:d3:96:5c:77:db:19:20:e2:7e:77:e3:f2:39:7c:f0:b5:
18:28:8f:f6:2f:2a:c1:08:d8:2f:89:ec:98:43:74:22:33:48:
9e:a2:83:f8:0a:d9:0c:57:17:38:53:f2:20:27:7e:10:69:e8:
06:1d:e9:c7:55:64:64:95:37:b6:56:6b:2e:a8:6d:63:7f:3c:
7c:6e:2f:88:ff:d4:8a:0c:bd:18:f5:ce:39:25:c6:1b:66:63:
46:d8:ce:49:d3:86:c0:d8:ab:52:c3:0b:9b:91:52:0b:0b:d8:
64:e7:7c:47:12:4a:26:0e:2a:50:c5:e8:27:49:6b:e0:44:85:
6b:9a:a3:9a:66:4e:33:42:c0:e3:69:d3:f8:c4:15:91:74:f9:
f0:22:e8:0b:9b:b4:59:4c:00:d1:38:84:22:4c:9a:b3:cc:99:
d1:4b:5e:d7:4e:56:15:13:dd:a8:e2:ae:05:3f:a0:70:41:30:
b0:13:25:c4:63:bb:80:0d:8f:fe:f1:af:ee:2d:33:d8:90:30:
be:53:a3:03:6a:93:6c:da:a5:4f:58:79:1e:20:7f:c1:e0:20:
b2:38:6b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:38:45 2025 by rpki-client