This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/LOre5Y-GT0cutCKwuVSXuFB1oSs.mft
File: LOre5Y-GT0cutCKwuVSXuFB1oSs.mft (raw, json)
Hash identifier: mChS/5SL8DYsEom5yE0wT0lB+ZdusB4j/SZeOeGn0ZM=
Subject key identifier: 98:83:07:F2:06:3C:41:EA:8E:B6:DC:A1:97:F6:72:A7:D5:A8:9C:1C
Authority key identifier: 2C:EA:DE:E5:8F:86:4F:47:2E:B4:22:B0:B9:54:97:B8:50:75:A1:2B
Certificate issuer: /CN=2ceadee58f864f472eb422b0b95497b85075a12b
Certificate serial: 019AF2768EC52D6E214149DB2072DA9B7ED5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LOre5Y-GT0cutCKwuVSXuFB1oSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/LOre5Y-GT0cutCKwuVSXuFB1oSs.mft
Manifest number: 15B0
Signing time: Sat 06 Dec 2025 07:00:47 +0000
Manifest this update: Sat 06 Dec 2025 07:00:47 +0000
Manifest next update: Sun 07 Dec 2025 07:00:47 +0000
Files and hashes: 1: FBdl7VOodLJhSXYfDoAofAIRhnA.roa (hash: I3zrIjexf9/s3BfDjPpCzKMEPfl4E3s1P3fqPquhjIg=)
2: LOre5Y-GT0cutCKwuVSXuFB1oSs.crl (hash: 1KhE54iRb3U/zaRmE051L9XWQq9waR2iCP38phacgMw=)
3: ZBji9OX_VotOWmsBmNsHM021d9w.roa (hash: VbyaXchd5eBQYGJ65pdgdekBYkxDCu5DrAnwaoKvIrc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/LOre5Y-GT0cutCKwuVSXuFB1oSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/LOre5Y-GT0cutCKwuVSXuFB1oSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/LOre5Y-GT0cutCKwuVSXuFB1oSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f2:76:8e:c5:2d:6e:21:41:49:db:20:72:da:9b:7e:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ceadee58f864f472eb422b0b95497b85075a12b
Validity
Not Before: Dec 6 07:00:47 2025 GMT
Not After : Dec 7 07:00:47 2025 GMT
Subject: CN=988307f2063c41ea8eb6dca197f672a7d5a89c1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0a:96:8d:5d:54:83:26:8e:af:85:f7:3d:5b:
30:1e:9f:70:2c:0b:1c:ef:d2:46:47:41:dd:bf:a4:
ac:04:b3:b8:98:0c:8f:ae:31:85:2f:5d:b9:67:1a:
91:01:c6:d5:b5:a8:70:46:8c:90:90:e8:ad:40:52:
fc:24:a4:6a:e6:49:98:c4:42:95:ea:c1:bf:65:79:
6b:dc:72:7b:bb:54:7d:23:9b:42:11:ef:61:32:94:
5c:5d:1c:b1:78:48:9e:a0:c9:c3:e9:12:56:da:93:
ec:ea:24:22:53:d2:78:6d:89:59:fe:01:a4:ef:47:
4d:55:de:7e:a3:ba:d3:1b:5c:13:06:73:b9:c0:91:
78:fb:15:40:b1:b8:6b:78:19:34:f7:10:d8:95:ea:
c0:d3:ed:0c:d8:ad:89:42:71:fc:08:19:b2:99:7e:
8b:9f:be:28:c4:a0:ba:b5:47:67:07:a4:b5:7a:01:
05:7d:5d:fa:2f:41:df:04:e4:27:31:cf:73:a7:29:
c5:40:e3:55:b5:d2:0e:e0:b2:f7:f1:79:91:6b:63:
5b:03:93:d1:e7:74:0c:8d:89:d6:78:c8:95:d6:65:
60:64:75:fd:fc:7f:c3:39:0e:0b:c9:90:bb:db:e2:
68:7d:f7:45:72:77:7f:cf:a8:76:ad:c7:6a:0b:b3:
bc:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:83:07:F2:06:3C:41:EA:8E:B6:DC:A1:97:F6:72:A7:D5:A8:9C:1C
X509v3 Authority Key Identifier:
keyid:2C:EA:DE:E5:8F:86:4F:47:2E:B4:22:B0:B9:54:97:B8:50:75:A1:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LOre5Y-GT0cutCKwuVSXuFB1oSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/LOre5Y-GT0cutCKwuVSXuFB1oSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/LOre5Y-GT0cutCKwuVSXuFB1oSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:0f:bf:65:c9:44:a1:8d:5d:26:69:7d:8e:a0:0c:0c:2d:ef:
c9:a5:d8:a7:c2:fb:3a:d2:da:bd:3b:e5:9e:c2:22:0a:c4:1d:
d6:8c:6e:2b:c9:e0:86:04:e5:ca:12:bd:6f:44:7d:2c:35:de:
d4:a4:d5:ab:58:9a:2d:f2:9a:90:e9:00:bc:d2:bb:82:86:9f:
8e:5e:2c:4f:42:f8:37:84:72:58:1e:bb:d3:16:2a:55:74:fe:
ca:f8:cd:bf:f6:37:84:be:fb:5d:60:ae:5d:54:0e:c8:11:18:
a5:c6:1d:c7:b0:d8:7f:83:2c:ec:7c:d1:01:3c:80:42:18:84:
ea:dc:27:17:df:c7:54:43:b6:7b:62:8e:fc:99:45:eb:68:9a:
7a:dc:f8:53:62:17:9d:01:5d:33:7d:30:62:ca:9f:3f:58:af:
e6:13:be:ee:cd:e8:14:cc:2b:bf:3a:ff:e7:ec:7a:02:03:56:
ef:c2:c0:bf:96:7e:25:8b:46:b3:58:f9:c8:6c:52:5f:14:1c:
d7:08:81:62:af:96:0e:d8:5c:7a:dc:c6:43:17:7e:a9:61:a8:
2a:69:97:c4:46:53:70:b6:f7:20:83:5a:45:b5:75:c0:13:26:
89:c6:8c:22:73:a0:18:00:fc:de:c8:3f:c8:6f:75:00:33:05:
49:e1:65:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:07:51 2025 by rpki-client