This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/LOre5Y-GT0cutCKwuVSXuFB1oSs.mft
File: LOre5Y-GT0cutCKwuVSXuFB1oSs.mft (raw, json)
Hash identifier: L/FgS3L/XqGjVSHWJ+FwO03btY/puu5m7ngzb+sTPpQ=
Subject key identifier: 7F:31:06:2D:95:0F:D2:CA:C4:30:0E:28:FE:AD:8C:3A:51:8D:6B:1F
Authority key identifier: 2C:EA:DE:E5:8F:86:4F:47:2E:B4:22:B0:B9:54:97:B8:50:75:A1:2B
Certificate issuer: /CN=2ceadee58f864f472eb422b0b95497b85075a12b
Certificate serial: 019B3231F3B34B520B066337C8CF5A7A4CC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LOre5Y-GT0cutCKwuVSXuFB1oSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/LOre5Y-GT0cutCKwuVSXuFB1oSs.mft
Manifest number: 15D1
Signing time: Thu 18 Dec 2025 16:01:32 +0000
Manifest this update: Thu 18 Dec 2025 16:01:32 +0000
Manifest next update: Fri 19 Dec 2025 16:01:32 +0000
Files and hashes: 1: FBdl7VOodLJhSXYfDoAofAIRhnA.roa (hash: I3zrIjexf9/s3BfDjPpCzKMEPfl4E3s1P3fqPquhjIg=)
2: LOre5Y-GT0cutCKwuVSXuFB1oSs.crl (hash: BR0U4o29gFAd4buqGEQrkmVsrzpVKNOTSd36S9Nkcj4=)
3: ZBji9OX_VotOWmsBmNsHM021d9w.roa (hash: VbyaXchd5eBQYGJ65pdgdekBYkxDCu5DrAnwaoKvIrc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/LOre5Y-GT0cutCKwuVSXuFB1oSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/LOre5Y-GT0cutCKwuVSXuFB1oSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/LOre5Y-GT0cutCKwuVSXuFB1oSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Dec 2025 13:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:32:31:f3:b3:4b:52:0b:06:63:37:c8:cf:5a:7a:4c:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ceadee58f864f472eb422b0b95497b85075a12b
Validity
Not Before: Dec 18 16:01:32 2025 GMT
Not After : Dec 19 16:01:32 2025 GMT
Subject: CN=7f31062d950fd2cac4300e28fead8c3a518d6b1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1a:fe:fc:a1:2a:b7:3d:9c:4e:74:93:6f:22:
ab:44:a9:45:97:2a:91:a6:af:e4:cc:41:d4:de:3d:
34:bb:42:a5:17:a5:38:b3:e8:a9:de:cf:cc:50:99:
15:3c:13:1e:ca:fb:6c:aa:2f:52:e0:4b:e3:44:03:
5c:31:84:53:b8:f0:b1:40:ab:8f:27:03:8b:30:5b:
61:a4:4e:e9:e0:92:61:7b:6f:2f:24:21:0a:42:c1:
85:64:9f:eb:b0:e5:f4:37:32:6d:e3:22:df:68:5e:
bd:ec:4a:f7:76:4e:e8:14:1e:c2:67:7b:5e:47:43:
78:3d:f4:d5:02:11:81:2a:5f:4e:0c:a8:45:d5:68:
58:be:da:5f:08:d4:67:e1:5f:1a:09:06:94:2d:91:
b0:b4:15:49:20:6f:44:3c:d6:df:fa:32:77:09:2a:
98:bc:cc:2a:57:f1:5d:c5:32:30:46:e0:cd:1c:80:
c2:d5:6b:bc:9f:a7:08:ba:87:e2:15:ef:c6:19:53:
a7:31:82:70:16:a1:a2:d3:15:bd:74:d5:75:38:97:
cc:42:47:65:17:ec:93:0e:a6:16:9a:02:87:d5:f2:
81:63:24:d6:cd:61:e5:83:3f:e5:93:14:6d:ae:d2:
8a:4c:04:bb:d8:14:81:1b:20:cd:53:93:32:ae:c1:
e0:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:31:06:2D:95:0F:D2:CA:C4:30:0E:28:FE:AD:8C:3A:51:8D:6B:1F
X509v3 Authority Key Identifier:
keyid:2C:EA:DE:E5:8F:86:4F:47:2E:B4:22:B0:B9:54:97:B8:50:75:A1:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LOre5Y-GT0cutCKwuVSXuFB1oSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/LOre5Y-GT0cutCKwuVSXuFB1oSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/LOre5Y-GT0cutCKwuVSXuFB1oSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:04:ad:ea:81:71:c6:5d:51:02:fe:1e:90:72:6b:91:80:ba:
b9:60:cd:91:ba:8c:bc:0f:6e:7c:4d:2e:cd:c0:dd:a0:01:91:
61:1b:d3:8f:d1:ba:ac:ff:53:ed:fe:ee:36:e2:11:fc:5f:19:
0e:cb:b1:bb:95:b0:e4:b1:76:97:57:01:fc:08:2e:cc:74:d9:
cf:f8:15:93:9a:a9:2b:db:d9:62:20:ff:1f:dd:6d:7b:29:14:
01:15:3a:be:50:6f:c0:d1:61:ee:36:d1:96:98:77:62:ac:8f:
9d:39:8c:64:09:6f:00:8d:8b:6c:74:2b:d2:a2:72:c3:a1:11:
9d:ec:a7:b6:41:b8:79:5a:a2:49:9c:72:5e:c0:7a:8c:fc:92:
bd:71:91:75:af:ac:d5:ad:8e:81:9f:a8:d8:66:87:23:f2:ff:
e4:5d:51:3e:19:61:7a:0e:0a:d8:9a:a1:99:15:fc:98:9a:50:
77:42:85:45:32:4d:e7:aa:8b:18:f4:03:b5:e9:74:d0:06:2f:
ed:2d:7b:e9:1f:80:ba:84:35:de:08:d6:c6:a0:c3:f1:32:63:
a9:b9:34:c4:a5:56:03:6b:2c:1c:f0:63:1d:99:1c:40:b4:35:
54:2c:93:52:c4:98:79:0f:4b:26:3f:b0:48:85:ae:1e:e7:26:
13:f3:7f:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 17:52:09 2025 by rpki-client