This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/7c3b6d-d5a6-4efd-99bf-c9880090e3c5/1/v141bOg5-NOTBn0fCbfdHFWgHlc.mft
File: v141bOg5-NOTBn0fCbfdHFWgHlc.mft (raw, json)
Hash identifier: sNtcoLlAypFpuhLRNGZ4Ff7dcy3RG8ZhtXdddQC00d8=
Subject key identifier: 6F:27:4A:68:B8:07:65:25:28:3C:7C:62:EF:25:93:18:CA:E3:42:94
Authority key identifier: BF:5E:35:6C:E8:39:F8:D3:93:06:7D:1F:09:B7:DD:1C:55:A0:1E:57
Certificate issuer: /CN=bf5e356ce839f8d393067d1f09b7dd1c55a01e57
Certificate serial: 019AF27713559091356ECF39C46555CE5BC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v141bOg5-NOTBn0fCbfdHFWgHlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/7c3b6d-d5a6-4efd-99bf-c9880090e3c5/1/v141bOg5-NOTBn0fCbfdHFWgHlc.mft
Manifest number: 045A
Signing time: Sat 06 Dec 2025 07:01:21 +0000
Manifest this update: Sat 06 Dec 2025 07:01:21 +0000
Manifest next update: Sun 07 Dec 2025 07:01:21 +0000
Files and hashes: 1: ELATsGohvpc6joSTJ_uIEE11SGA.roa (hash: O4g7t59TqivpoQ3oXC0ailYoqVlSZksB9bjaxrIerds=)
2: v141bOg5-NOTBn0fCbfdHFWgHlc.crl (hash: u7EjYdMw1bufo9efuF9PXfBCfDQlS7x2ibCa0XNvvcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/7c3b6d-d5a6-4efd-99bf-c9880090e3c5/1/v141bOg5-NOTBn0fCbfdHFWgHlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/7c3b6d-d5a6-4efd-99bf-c9880090e3c5/1/v141bOg5-NOTBn0fCbfdHFWgHlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/v141bOg5-NOTBn0fCbfdHFWgHlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f2:77:13:55:90:91:35:6e:cf:39:c4:65:55:ce:5b:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf5e356ce839f8d393067d1f09b7dd1c55a01e57
Validity
Not Before: Dec 6 07:01:21 2025 GMT
Not After : Dec 7 07:01:21 2025 GMT
Subject: CN=6f274a68b8076525283c7c62ef259318cae34294
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a1:76:34:da:30:c9:1d:37:d3:9d:39:e6:da:
a9:5f:66:eb:50:aa:21:69:d7:93:64:80:87:3f:e4:
50:65:0e:01:50:9c:19:35:b6:e1:2a:33:02:5c:6d:
41:fd:c2:c8:4e:d0:e3:32:54:69:d4:38:7d:51:d8:
21:71:5f:c4:d2:bc:e2:05:e0:9a:63:c9:d0:12:e2:
76:0a:0a:e2:89:29:8e:77:af:60:f9:63:c3:97:3c:
fa:b1:ca:27:99:70:06:7d:f3:33:1b:08:0e:e4:8a:
af:f6:1c:c5:b2:22:e6:79:b9:4c:e1:df:2b:18:97:
a4:79:20:d2:a9:79:b8:ae:93:66:23:04:9a:51:5f:
7d:5f:af:ee:72:3e:b3:7c:ff:67:75:49:1a:a9:d1:
66:30:6f:05:dc:81:a9:26:e9:e8:0d:e3:6d:d1:ef:
5a:a9:2d:0b:bd:3c:28:a8:24:70:3f:bd:7d:05:a9:
6c:b7:d0:ff:8b:aa:fb:fb:74:00:42:5d:db:ba:4d:
ce:bd:47:52:d5:18:3f:1b:f7:9b:aa:11:b2:2d:46:
60:c8:91:c6:dc:f6:e3:82:b3:13:6f:58:59:3a:c0:
d2:16:d7:85:77:8d:9f:bb:52:7a:b0:9c:7d:f9:de:
c0:59:b7:2f:b2:36:96:1e:24:90:a8:d3:d4:25:cf:
76:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:27:4A:68:B8:07:65:25:28:3C:7C:62:EF:25:93:18:CA:E3:42:94
X509v3 Authority Key Identifier:
keyid:BF:5E:35:6C:E8:39:F8:D3:93:06:7D:1F:09:B7:DD:1C:55:A0:1E:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v141bOg5-NOTBn0fCbfdHFWgHlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/7c3b6d-d5a6-4efd-99bf-c9880090e3c5/1/v141bOg5-NOTBn0fCbfdHFWgHlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/7c3b6d-d5a6-4efd-99bf-c9880090e3c5/1/v141bOg5-NOTBn0fCbfdHFWgHlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:5d:72:2f:c2:80:be:f6:d3:3a:e8:ed:95:50:02:11:07:9b:
c7:3b:30:45:57:e3:ac:44:bf:bd:cc:0c:64:42:49:5a:95:26:
8a:cd:4e:e6:8b:75:ed:6e:cf:77:2d:42:c1:7d:fe:ea:b4:96:
ba:cc:d1:2c:37:a0:d7:5f:90:0f:e3:7f:cb:24:80:1c:5b:22:
23:d8:ba:5a:a6:c8:c7:79:99:cb:91:b7:f5:4a:7f:c2:5c:86:
62:3b:51:00:e4:49:87:3c:0c:3c:c2:25:dc:8f:af:81:77:14:
14:3a:cf:fb:74:89:60:65:ed:7b:bc:92:89:fb:b3:8c:14:25:
47:4d:dd:ec:8b:bb:58:18:71:bd:1e:22:04:c2:7f:29:e9:12:
e5:de:1b:67:2c:70:b2:d8:fd:0e:ba:f2:79:83:de:2f:c2:41:
98:79:cc:52:a9:78:3e:8b:7c:f8:fa:57:ab:37:ef:d6:7d:28:
35:90:79:8f:d8:1d:c2:9e:38:17:9f:01:8f:2c:aa:a0:91:5d:
d4:40:96:9d:04:98:dd:4f:0d:0f:46:59:e9:d8:7b:aa:92:01:
26:e8:d9:07:b4:29:bc:a4:d0:9c:6c:a7:c3:f4:01:78:ef:a5:
b7:83:9e:54:76:59:a5:f6:d7:5c:4f:95:2c:ea:68:93:c6:69:
82:94:03:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:23:16 2025 by rpki-client