This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a02262-e37f-4142-9a2c-9f176e24c034/1/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.mft
File: sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.mft (raw, json)
Hash identifier: vQ1nysIegXZ42Kt/aPyDYUFqgavYb0BdIafR1F9LcAA=
Subject key identifier: F5:27:5C:95:66:62:9E:34:39:25:CD:96:13:BA:95:E4:5F:CD:08:43
Authority key identifier: B0:80:F8:00:1D:59:93:33:73:FE:8E:58:84:9E:4B:91:DE:AA:2B:B2
Certificate issuer: /CN=b080f8001d59933373fe8e58849e4b91deaa2bb2
Certificate serial: 019AF12ED234246459D4C4C8EAED345B2553
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a02262-e37f-4142-9a2c-9f176e24c034/1/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.mft
Manifest number: 05A6
Signing time: Sat 06 Dec 2025 01:02:48 +0000
Manifest this update: Sat 06 Dec 2025 01:02:48 +0000
Manifest next update: Sun 07 Dec 2025 01:02:48 +0000
Files and hashes: 1: f-wF0yIlDOHaFqLViWnFWeP4B9o.roa (hash: 8olsSb6V441J0mOtJjve8qF0Z7IUWgXwJVtuxOxK2Bg=)
2: sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.crl (hash: W1oBT7rUq8veIM3E2GPnhI02JD18w19vJxWwtVt/CrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a02262-e37f-4142-9a2c-9f176e24c034/1/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a02262-e37f-4142-9a2c-9f176e24c034/1/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 01:02:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:2e:d2:34:24:64:59:d4:c4:c8:ea:ed:34:5b:25:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b080f8001d59933373fe8e58849e4b91deaa2bb2
Validity
Not Before: Dec 6 01:02:48 2025 GMT
Not After : Dec 7 01:02:48 2025 GMT
Subject: CN=f5275c9566629e343925cd9613ba95e45fcd0843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:73:fa:80:c1:44:c1:21:af:d1:6d:c1:38:56:
b9:9c:26:c3:fa:08:8c:97:7c:3e:1c:38:31:f5:dd:
3d:0f:75:d4:33:fb:2d:c8:dc:0e:97:2c:49:e5:63:
00:bb:52:a5:42:2f:16:c4:cd:b7:64:3d:69:3f:e8:
fb:54:3c:3b:74:9b:bb:25:01:46:71:80:23:95:7b:
2d:fa:5d:46:94:69:ef:11:bc:d9:19:06:c6:67:47:
1e:fc:0c:49:7d:d2:90:52:9f:ca:67:2e:12:2b:99:
f5:04:8d:19:db:8b:ed:80:69:62:dc:78:0a:c3:4c:
34:63:34:4b:fe:45:03:16:01:fc:da:f6:32:69:6e:
d4:7d:6b:6d:fa:7d:76:4c:f9:ca:8f:0a:44:eb:19:
9f:0a:eb:73:de:83:1c:bb:bf:45:37:8f:b3:e6:99:
da:4c:c1:97:d4:fc:82:5a:1a:51:3c:c8:99:2a:1d:
ac:44:7c:3b:b1:38:e8:56:78:3d:25:27:68:2d:9f:
be:d5:b5:14:8d:f5:cc:ff:4a:46:d1:79:ab:c1:72:
3d:5a:b7:e3:e3:e3:17:a9:9e:fd:c6:46:55:8f:2c:
4f:59:5c:5b:c9:b9:72:42:55:ae:19:bf:02:5b:3a:
ce:03:04:76:c2:39:a6:72:b8:05:7a:c3:d0:23:3e:
6a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:27:5C:95:66:62:9E:34:39:25:CD:96:13:BA:95:E4:5F:CD:08:43
X509v3 Authority Key Identifier:
keyid:B0:80:F8:00:1D:59:93:33:73:FE:8E:58:84:9E:4B:91:DE:AA:2B:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a02262-e37f-4142-9a2c-9f176e24c034/1/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a02262-e37f-4142-9a2c-9f176e24c034/1/sID4AB1ZkzNz_o5YhJ5Lkd6qK7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:87:e7:56:a6:d1:98:37:0f:11:90:40:e1:f4:18:05:89:93:
35:90:61:4b:7a:dd:44:32:b0:ab:66:22:3a:0e:22:3b:c1:32:
36:74:b1:fe:f6:15:f6:99:c5:02:c9:f3:06:e6:41:93:76:d9:
68:c8:44:07:97:0a:bf:72:f4:f5:02:8d:24:75:9d:fc:13:2e:
fb:2f:70:7b:bb:57:45:0c:ea:06:a2:34:b3:66:18:4b:39:e3:
d8:bd:30:04:32:84:e5:3f:a8:f5:a4:a7:36:16:1e:a9:4b:fe:
1b:c5:a5:48:0a:65:2a:96:a5:a6:48:be:d3:9d:58:31:0b:f7:
00:a5:62:93:f0:49:0f:f1:01:9d:31:8d:bc:ee:a2:96:e1:d5:
33:da:cc:ea:e3:c3:c8:5e:2d:98:fe:ed:70:8a:2b:46:55:e2:
7d:99:5a:f2:18:e2:cd:58:60:00:0f:0c:2b:d6:b9:5e:96:00:
9c:3d:bf:95:42:b9:bc:c1:96:d8:b4:3e:36:89:78:35:23:f6:
12:d6:54:d4:ac:08:a1:c8:ae:92:8c:32:8f:e0:b2:3f:d0:cc:
e3:3c:85:d2:6b:ad:ee:6a:d4:5f:52:17:6b:6b:d7:eb:24:5c:
d8:bf:9c:60:7c:44:67:2d:f2:8e:40:4a:d0:a2:fb:6e:2a:a8:
b0:18:b1:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:20:55 2025 by rpki-client