This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/RUv1gRnP6Z8XSbzZvRJHArqctxM.mft
File: RUv1gRnP6Z8XSbzZvRJHArqctxM.mft (raw, json)
Hash identifier: 8swS11uYQi+oKyqnn1FK20uZmq8+hn8FZ7E3h5c89pU=
Subject key identifier: 72:B6:B2:84:47:4A:71:FE:01:3F:62:75:83:AC:46:80:0C:64:14:52
Authority key identifier: 45:4B:F5:81:19:CF:E9:9F:17:49:BC:D9:BD:12:47:02:BA:9C:B7:13
Certificate issuer: /CN=454bf58119cfe99f1749bcd9bd124702ba9cb713
Certificate serial: 019AF42E3C71AB3813131261FD912EB1FD8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RUv1gRnP6Z8XSbzZvRJHArqctxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/RUv1gRnP6Z8XSbzZvRJHArqctxM.mft
Manifest number: 11EA
Signing time: Sat 06 Dec 2025 15:01:01 +0000
Manifest this update: Sat 06 Dec 2025 15:01:01 +0000
Manifest next update: Sun 07 Dec 2025 15:01:01 +0000
Files and hashes: 1: 0MiQGDuP-2KHqgPkUVqX2ggP6Xw.roa (hash: NonlM+H8k9TxA6ceFqWkm9nyMbEovf9PE4ZCtGqStgk=)
2: L11MObU2nfX5tH-1x602KEbM5GM.roa (hash: HEVauMqoyVrcLnG8IoffxDGm/vSrfN8OpGRNiQEHWho=)
3: RUv1gRnP6Z8XSbzZvRJHArqctxM.crl (hash: LmSvbnloVMuoKY+3jHY2yOS+z5LVoc7MOrrGNP2y4/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/RUv1gRnP6Z8XSbzZvRJHArqctxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/RUv1gRnP6Z8XSbzZvRJHArqctxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/RUv1gRnP6Z8XSbzZvRJHArqctxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 13:09:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f4:2e:3c:71:ab:38:13:13:12:61:fd:91:2e:b1:fd:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=454bf58119cfe99f1749bcd9bd124702ba9cb713
Validity
Not Before: Dec 6 15:01:01 2025 GMT
Not After : Dec 7 15:01:01 2025 GMT
Subject: CN=72b6b284474a71fe013f627583ac46800c641452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:1c:33:03:35:7f:bc:02:2e:f7:6f:27:92:42:
13:cd:56:74:b6:49:ee:23:ae:ab:1d:64:9f:59:b5:
46:e5:c2:9b:c1:af:1e:ef:fd:99:ac:cd:a8:15:e9:
76:07:1b:33:38:a7:ce:01:d9:30:65:48:41:2c:e0:
0d:ad:76:07:10:47:96:ab:39:02:92:b2:95:2c:cd:
0c:d6:3b:87:a3:0d:4d:c7:40:e4:11:6d:7e:a2:5f:
57:43:ed:24:5c:bf:85:56:43:14:f6:d8:24:2e:61:
f3:67:99:c9:8f:45:24:e7:b2:ed:a8:cb:ff:3f:9b:
cd:69:a7:ae:4d:09:43:67:5b:17:58:79:80:3d:a5:
6f:82:2d:06:e3:15:4a:58:7e:7b:79:03:bb:7b:c4:
a4:f8:f2:61:a7:ac:3b:1f:e1:f7:5d:ef:2f:a0:d9:
9e:90:20:21:80:74:9f:8e:e6:ec:62:f0:0a:fc:27:
03:6a:c9:e2:7c:43:b1:da:bc:d8:2e:0b:f5:08:d0:
8d:50:1e:9c:44:6d:61:69:da:59:6d:1a:71:a6:5e:
33:db:df:f6:98:f9:0d:c1:19:9d:8e:7c:4e:41:6c:
2a:73:2c:d9:29:bf:fd:72:b8:70:1d:74:c9:50:49:
b5:2e:57:49:da:5c:3e:d0:c2:37:92:5e:ed:d9:e5:
d3:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:B6:B2:84:47:4A:71:FE:01:3F:62:75:83:AC:46:80:0C:64:14:52
X509v3 Authority Key Identifier:
keyid:45:4B:F5:81:19:CF:E9:9F:17:49:BC:D9:BD:12:47:02:BA:9C:B7:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RUv1gRnP6Z8XSbzZvRJHArqctxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/RUv1gRnP6Z8XSbzZvRJHArqctxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/RUv1gRnP6Z8XSbzZvRJHArqctxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:5d:ba:b4:5f:5c:26:da:91:cc:a9:10:f6:e5:e2:51:24:64:
f0:f8:10:a6:b2:80:5e:78:af:60:ad:71:c7:f5:90:0d:ff:17:
52:bc:c6:7c:9d:44:17:d6:80:85:0d:04:21:52:49:c8:28:b4:
fa:b2:c9:fe:53:02:9f:03:da:cc:9a:c3:20:a1:94:d7:1b:a0:
b6:35:3c:df:97:65:d2:59:c5:86:55:64:e3:9e:ee:d8:0a:d1:
aa:74:19:a6:f9:4e:ad:4c:32:48:90:04:4c:32:7c:0f:0f:c0:
38:ce:c0:de:61:f3:a6:db:83:a3:fd:31:6c:12:c1:0e:a9:fa:
5b:44:b5:9f:b9:62:bc:96:fb:94:26:49:74:dc:e0:d5:47:4c:
69:41:3a:b7:69:2c:b4:6b:4a:d0:30:10:22:7b:ae:05:b0:42:
b4:c6:7a:ab:54:95:31:96:8f:3c:0c:cf:50:bd:f3:27:3b:32:
42:cf:58:d0:fa:75:c0:be:90:9d:8c:bd:e4:a1:9b:10:ef:77:
98:56:00:ac:bc:f5:d6:76:51:a0:79:9c:9f:49:34:2c:2d:c4:
2a:6f:46:09:e9:10:99:7d:41:51:37:70:fa:eb:83:74:a7:2e:
15:85:72:dc:f9:c0:7c:a8:63:21:ef:78:59:fe:4b:8a:52:86:
4b:56:b7:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:49:28 2025 by rpki-client