This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft
File: WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft (raw, json)
Hash identifier: a2s7BOFh/xnnhLBSxQiXyTvjyVb/o6k0lQlJSWn+qzo=
Subject key identifier: 9A:69:28:8A:1C:B4:E1:8D:DE:20:15:7A:48:B1:11:91:B7:03:63:29
Authority key identifier: 58:A1:27:45:3D:FB:A1:7E:10:C3:47:FA:34:BB:EB:AB:14:90:5A:57
Certificate issuer: /CN=58a127453dfba17e10c347fa34bbebab14905a57
Certificate serial: 019AF1D24A0C49F37F7C358469A54D52326F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WKEnRT37oX4Qw0f6NLvrqxSQWlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft
Manifest number: 086F
Signing time: Sat 06 Dec 2025 04:01:21 +0000
Manifest this update: Sat 06 Dec 2025 04:01:21 +0000
Manifest next update: Sun 07 Dec 2025 04:01:21 +0000
Files and hashes: 1: 2symQxt9tiTp5JPRu9SVrhpHnoI.roa (hash: ETxwfWEk5Ji119X6QNRzmnwtDjfSz5qCO5WUq2I4qpI=)
2: WKEnRT37oX4Qw0f6NLvrqxSQWlc.crl (hash: tjCBIPTKp1MN9oaZYGbmsnfqJ+gcNGelogvauOAWoTs=)
3: aiepDcInSC7XQM1NAo38Ltggcos.roa (hash: 6COc/WNOkQasZPkjRm4nKC/vd3bNAbojTsGDQ+J1+tY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/WKEnRT37oX4Qw0f6NLvrqxSQWlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 04:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:d2:4a:0c:49:f3:7f:7c:35:84:69:a5:4d:52:32:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58a127453dfba17e10c347fa34bbebab14905a57
Validity
Not Before: Dec 6 04:01:21 2025 GMT
Not After : Dec 7 04:01:21 2025 GMT
Subject: CN=9a69288a1cb4e18dde20157a48b11191b7036329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f1:f0:99:f4:6b:3f:aa:3a:ae:8a:a4:a4:8c:
01:c1:f9:7c:26:65:90:37:ce:bc:93:a2:3f:2f:cf:
cf:66:37:7d:7a:2e:9b:16:8d:3c:b5:bc:2b:13:89:
c3:d1:c9:4c:f7:04:5a:97:2c:ed:c3:e7:e8:34:fe:
76:87:c0:58:06:30:43:dc:1a:ad:27:a1:b1:7e:23:
6e:31:df:a1:2e:7d:0a:f2:9e:04:07:2c:7a:20:36:
d8:cb:bc:c0:8a:1f:42:02:bd:54:bb:06:14:c8:28:
b8:ad:73:e0:a9:e0:4e:6f:7b:04:9e:a8:ec:d1:7f:
32:cb:41:a6:fc:d4:a5:bc:9a:e6:2c:1b:13:45:6c:
5a:19:e6:d3:5e:aa:1f:ea:42:b9:d0:3c:94:8f:d1:
1a:a7:8b:47:38:23:f1:9a:cb:b7:cf:4c:6c:42:d8:
1e:5c:a8:17:a9:25:25:08:77:88:75:3b:96:e4:f8:
0d:12:79:af:6d:e4:1d:16:7a:0f:9b:a3:8c:ab:d9:
cf:13:0b:c3:e1:57:65:57:03:8c:95:60:83:f7:d7:
7a:60:52:21:08:38:4e:9e:c0:ff:27:2e:cf:ba:9f:
65:7d:d5:3b:bf:5c:fb:67:0b:4b:f3:fe:4d:62:e4:
06:7c:8c:98:ab:59:aa:c4:f1:eb:22:05:32:74:6a:
90:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:69:28:8A:1C:B4:E1:8D:DE:20:15:7A:48:B1:11:91:B7:03:63:29
X509v3 Authority Key Identifier:
keyid:58:A1:27:45:3D:FB:A1:7E:10:C3:47:FA:34:BB:EB:AB:14:90:5A:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKEnRT37oX4Qw0f6NLvrqxSQWlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:80:ce:c3:6a:92:60:2e:81:ac:bf:3d:e1:66:c4:a9:fa:e9:
eb:6f:4c:2c:bb:38:2b:bc:55:2f:18:9c:d3:b1:e0:ed:dc:f7:
0c:fb:47:3e:e0:db:d9:90:aa:2f:fb:2c:46:b2:d0:2f:d2:86:
ef:7c:f4:e8:9e:91:dd:62:42:fc:57:7b:04:da:5c:d3:cb:45:
84:f7:bd:d7:e7:36:78:cc:0f:98:19:8a:bc:7d:10:a8:60:73:
77:11:14:e7:c9:ca:82:8e:3e:63:b0:bc:b4:fe:b6:af:54:03:
a7:d9:fe:52:f4:de:ef:4f:b7:36:d3:28:fb:44:81:1b:d2:71:
80:e9:22:17:8b:84:ea:aa:3b:be:e7:08:86:9d:c8:24:75:21:
12:ab:d8:ff:40:0e:46:f1:e1:7a:ce:f1:6a:89:fc:32:52:d0:
51:f9:fb:d9:03:d3:a6:74:58:f2:c8:f0:77:b8:3a:e9:e2:04:
ef:00:e0:f5:93:1b:c8:b5:10:6c:ca:87:24:27:86:11:6b:92:
5f:e6:7c:73:e6:82:88:b0:d9:53:e0:9c:7b:b2:52:4e:1e:be:
93:67:8f:ed:80:16:ef:37:fc:4f:d7:cd:bf:fc:4e:1a:c9:d1:
9d:66:2c:50:bb:b3:c7:2e:25:e4:7e:d0:d4:19:d2:ac:88:66:
eb:6a:fc:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:32:55 2025 by rpki-client