This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.mft
File: w70m_iKV5GK-JnhTPvpTHiO38QI.mft (raw, json)
Hash identifier: eAoRfQYSu/dW15E+Rnv8zZg3K7mv0615N9zqIiTbW/E=
Subject key identifier: A8:09:C3:85:1B:7E:CB:B3:5E:2C:E1:D2:AB:46:AE:62:D1:FD:7F:24
Authority key identifier: C3:BD:26:FE:22:95:E4:62:BE:26:78:53:3E:FA:53:1E:23:B7:F1:02
Certificate issuer: /CN=c3bd26fe2295e462be2678533efa531e23b7f102
Certificate serial: 019AF31C54B1ECB31BCC2A802EE4456E8951
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w70m_iKV5GK-JnhTPvpTHiO38QI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.mft
Manifest number: 1763
Signing time: Sat 06 Dec 2025 10:01:51 +0000
Manifest this update: Sat 06 Dec 2025 10:01:51 +0000
Manifest next update: Sun 07 Dec 2025 10:01:51 +0000
Files and hashes: 1: mdzOjm97CLLzPCbjlPobKIT1pLw.roa (hash: t6RlQNOZ4r0YZ3Um/Nvgu1T4czU0EwLc7Ga8Lg+Wxu4=)
2: w70m_iKV5GK-JnhTPvpTHiO38QI.crl (hash: XrCcpqGhrTTQ5qadWL/6edX4maZA/PvA6YNE/7Qhnuk=)
3: yHP9EGdLjDrqdAgK0gSgkfOYdDE.roa (hash: 9lzUExWqudI5IZaHPGACvDV+UoMVt4hmvKdyWsLEU8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.mft
rsync://rpki.ripe.net/repository/DEFAULT/w70m_iKV5GK-JnhTPvpTHiO38QI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f3:1c:54:b1:ec:b3:1b:cc:2a:80:2e:e4:45:6e:89:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3bd26fe2295e462be2678533efa531e23b7f102
Validity
Not Before: Dec 6 10:01:51 2025 GMT
Not After : Dec 7 10:01:51 2025 GMT
Subject: CN=a809c3851b7ecbb35e2ce1d2ab46ae62d1fd7f24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3c:a7:88:0d:b9:b8:02:ec:af:80:5d:2d:7a:
7e:3e:f0:be:14:d3:f7:58:4f:d0:c1:81:45:10:00:
ee:da:1f:8f:77:dc:54:1d:41:6b:f5:d6:3c:a3:e8:
0e:16:e1:ac:3f:1e:90:68:fc:60:f7:8a:dc:bc:96:
f5:43:32:53:04:59:33:65:e9:68:50:4a:4f:c1:07:
18:5e:6f:33:6d:5a:e5:85:4f:ec:9a:ea:ad:f6:6d:
d9:a9:7c:ff:4d:92:cb:d1:21:57:f2:b4:11:b4:ba:
15:9b:c8:2a:fb:e2:de:0f:57:74:5c:1e:e7:bc:1b:
2f:b3:6f:5d:b5:a7:b2:71:6b:79:03:75:ed:da:9f:
ec:0e:c6:93:e3:f6:61:27:7e:c4:d1:92:ca:3b:1b:
3f:19:6b:00:42:00:79:78:1a:8c:cb:57:7a:6c:cb:
c2:dc:15:5b:cc:d7:0b:2f:15:5d:15:5f:92:12:c4:
0e:0d:76:46:26:7b:50:ea:4e:25:f8:cc:29:24:77:
de:cf:d2:74:0c:7c:30:43:39:d1:41:48:6c:1b:91:
aa:c2:74:06:dc:98:29:38:aa:9a:89:dd:73:5b:84:
95:1c:02:13:9e:3a:d4:85:f3:14:c8:e3:86:b3:b6:
2d:b6:23:93:2b:a1:c9:9a:98:eb:8a:c6:b5:d8:d2:
a4:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:09:C3:85:1B:7E:CB:B3:5E:2C:E1:D2:AB:46:AE:62:D1:FD:7F:24
X509v3 Authority Key Identifier:
keyid:C3:BD:26:FE:22:95:E4:62:BE:26:78:53:3E:FA:53:1E:23:B7:F1:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w70m_iKV5GK-JnhTPvpTHiO38QI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:48:49:f5:b4:1a:69:06:aa:3c:55:f9:7b:24:37:cd:89:24:
58:f9:3c:8b:ae:be:1a:25:25:03:af:6a:0c:6d:4a:f8:93:3e:
03:d5:c3:fd:cd:21:13:7b:77:f5:49:27:72:b8:e4:91:3c:ba:
97:9f:1d:ab:e3:df:f5:41:03:c1:72:16:05:46:6a:e3:af:e4:
6b:02:c1:2c:78:71:46:3f:a3:2a:6e:29:1a:65:8c:a1:b4:5a:
3d:45:82:8d:94:07:55:44:22:a3:b4:0a:1b:ee:b2:4d:2b:ba:
48:af:08:43:8e:bc:75:87:4c:37:fd:0f:3e:f6:3a:df:97:3d:
7c:7f:1d:73:0c:b7:45:52:71:e0:09:5e:7a:5e:c6:30:27:0b:
0a:da:b6:70:ed:b2:ce:03:d1:5d:27:6c:06:eb:e0:d4:22:f6:
aa:87:0b:ac:72:87:23:07:ae:9e:9d:68:da:7e:fc:0d:17:58:
35:f7:5e:c8:fe:a3:b7:69:16:e7:95:7f:d9:2f:fc:fb:33:74:
07:9b:3f:93:a9:51:8e:bd:e8:40:fa:94:09:55:50:6b:3b:8f:
2c:d7:61:66:7b:e9:9e:9f:d8:e8:b7:01:0b:43:6c:fb:ab:e6:
dd:19:d0:fb:60:96:6d:f9:cb:9f:6c:95:81:93:e5:5a:a1:f9:
b8:b7:55:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrzHFSx7LMbzCqALuRFbolRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYmQyNmZlMjI5NWU0NjJiZTI2Nzg1MzNlZmE1MzFlMjNi
N2YxMDIwHhcNMjUxMjA2MTAwMTUxWhcNMjUxMjA3MTAwMTUxWjAzMTEwLwYDVQQD
EyhhODA5YzM4NTFiN2VjYmIzNWUyY2UxZDJhYjQ2YWU2MmQxZmQ3ZjI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzyniA25uALsr4BdLXp+PvC+FNP3
WE/QwYFFEADu2h+Pd9xUHUFr9dY8o+gOFuGsPx6QaPxg94rcvJb1QzJTBFkzZelo
UEpPwQcYXm8zbVrlhU/smuqt9m3ZqXz/TZLL0SFX8rQRtLoVm8gq++LeD1d0XB7n
vBsvs29dtaeycWt5A3Xt2p/sDsaT4/ZhJ37E0ZLKOxs/GWsAQgB5eBqMy1d6bMvC
3BVbzNcLLxVdFV+SEsQODXZGJntQ6k4l+MwpJHfez9J0DHwwQznRQUhsG5GqwnQG
3JgpOKqaid1zW4SVHAITnjrUhfMUyOOGs7YttiOTK6HJmpjrisa12NKk3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKgJw4UbfsuzXizh0qtGrmLR/X8kMB8GA1UdIwQY
MBaAFMO9Jv4ileRiviZ4Uz76Ux4jt/ECMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzcwbV9pS1Y1R0stSm5oVFB2cFRIaU8zOFFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC85YzVhMDAtMGI1Zi00YTk1LTk4YTgt
OGJkOTc2OTEwZGJmLzEvdzcwbV9pS1Y1R0stSm5oVFB2cFRIaU8zOFFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC85YzVhMDAtMGI1Zi00YTk1LTk4YTgtOGJkOTc2OTEwZGJm
LzEvdzcwbV9pS1Y1R0stSm5oVFB2cFRIaU8zOFFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABkhJ9bQa
aQaqPFX5eyQ3zYkkWPk8i66+GiUlA69qDG1K+JM+A9XD/c0hE3t39UkncrjkkTy6
l58dq+Pf9UEDwXIWBUZq46/kawLBLHhxRj+jKm4pGmWMobRaPUWCjZQHVUQio7QK
G+6yTSu6SK8IQ468dYdMN/0PPvY635c9fH8dcwy3RVJx4Aleel7GMCcLCtq2cO2y
zgPRXSdsBuvg1CL2qocLrHKHIweunp1o2n78DRdYNfdeyP6jt2kW55V/2S/8+zN0
B5s/k6lRjr3oQPqUCVVQazuPLNdhZnvpnp/Y6LcBC0Ns+6vm3RnQ+2CWbfnLn2yV
gZPlWqH5uLdVAQ==
-----END CERTIFICATE-----
Generated at Sat Dec 6 11:52:56 2025 by rpki-client