This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.mft
File: ypHELfpq-8EeeO6d4ueF-KILUEM.mft (raw, json)
Hash identifier: OULpRD1hcouy06Q6UdHKILnnljBSgBZs9i4uqmswS5A=
Subject key identifier: 03:6A:4F:70:9B:B3:0B:0C:D6:22:5B:68:C4:13:92:BB:82:5B:D5:3A
Authority key identifier: CA:91:C4:2D:FA:6A:FB:C1:1E:78:EE:9D:E2:E7:85:F8:A2:0B:50:43
Certificate issuer: /CN=ca91c42dfa6afbc11e78ee9de2e785f8a20b5043
Certificate serial: 019AF1D1908B8AA00E7B5B266BFB26FB501F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypHELfpq-8EeeO6d4ueF-KILUEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.mft
Manifest number: 0E4E
Signing time: Sat 06 Dec 2025 04:00:34 +0000
Manifest this update: Sat 06 Dec 2025 04:00:34 +0000
Manifest next update: Sun 07 Dec 2025 04:00:34 +0000
Files and hashes: 1: E7M-AYn157coR3NcaUllny2UPvo.roa (hash: V3zuwIj7KMTNA/2kj/Rg0T1KwXF19AZk9pNIoN8T7eM=)
2: I6C9OUy79kypN0-jFqEW807fCi0.roa (hash: 1Hel0O7FmPuldt5t71KSS/2qCERXV6+QisRzagvf8w8=)
3: ypHELfpq-8EeeO6d4ueF-KILUEM.crl (hash: av3ej4FwqKsPNXyEWS8hFhYVBQW31wxJFbrXMzQBqNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ypHELfpq-8EeeO6d4ueF-KILUEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 04:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:d1:90:8b:8a:a0:0e:7b:5b:26:6b:fb:26:fb:50:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca91c42dfa6afbc11e78ee9de2e785f8a20b5043
Validity
Not Before: Dec 6 04:00:34 2025 GMT
Not After : Dec 7 04:00:34 2025 GMT
Subject: CN=036a4f709bb30b0cd6225b68c41392bb825bd53a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3c:11:5d:85:45:1d:dd:6a:72:ab:96:a7:4e:
0a:92:96:06:45:a6:f9:dd:6f:0a:e2:4b:eb:09:2d:
c1:d0:34:7c:85:0b:13:6b:b1:bc:50:a1:dd:99:4b:
54:0c:a8:0a:67:7f:a7:f2:de:41:ac:da:40:32:e0:
7b:11:d1:c4:fa:5c:c3:32:41:40:9b:3a:8d:5a:38:
ac:b0:80:4f:a4:93:5d:ed:ca:2a:c0:d9:31:e0:42:
17:d5:c4:f4:e1:a2:81:d8:73:f4:f8:90:f8:72:89:
e7:d5:d8:e9:cd:2e:14:83:58:db:99:d4:eb:17:e0:
1c:5c:5b:01:f9:92:3f:b7:98:e6:a0:a7:e5:4e:f0:
e4:0b:37:ee:00:88:4d:c4:0e:f5:93:b5:d1:9a:ac:
78:5b:8f:af:8e:57:87:05:a7:f4:33:6e:f6:90:e1:
24:11:68:d7:f0:f6:50:16:1c:e1:43:e1:69:60:71:
27:7c:eb:41:9a:2f:63:2f:65:91:00:f5:7b:1b:84:
ce:cc:cb:c9:2e:f9:9d:de:8a:fd:5e:55:12:17:db:
ec:5f:c0:46:94:a7:cc:13:af:6b:82:b8:db:7a:6d:
41:12:cf:e9:8a:ca:6b:a5:77:c0:f9:a2:10:13:60:
ad:c6:8b:0c:3e:db:cc:c5:15:e8:e7:1b:6a:5d:a6:
6e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:6A:4F:70:9B:B3:0B:0C:D6:22:5B:68:C4:13:92:BB:82:5B:D5:3A
X509v3 Authority Key Identifier:
keyid:CA:91:C4:2D:FA:6A:FB:C1:1E:78:EE:9D:E2:E7:85:F8:A2:0B:50:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypHELfpq-8EeeO6d4ueF-KILUEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:fb:44:ee:90:2d:db:0d:c3:b1:cd:01:28:ce:f5:0b:3a:a9:
d0:84:10:81:76:b2:56:3e:6a:0c:5b:e5:13:8d:11:a0:5b:1c:
6e:03:ed:c5:c3:ee:eb:ab:4e:e3:49:47:d4:d3:4e:7a:91:37:
bc:e9:ce:49:07:9d:c7:cf:10:40:18:0b:88:c3:e5:70:cb:e7:
9a:fa:75:8a:1c:2b:cd:5e:34:00:69:58:09:61:59:09:6a:9f:
91:6f:30:a1:79:19:d5:41:64:ff:11:2c:69:5d:32:91:e9:dd:
e8:ab:40:d7:72:6a:2d:2a:75:0c:24:f9:ba:ce:45:7b:c7:d2:
6f:a1:b0:1a:19:5d:db:f9:33:c6:2b:40:4e:29:c4:e0:c2:24:
00:51:2f:96:fe:87:1e:bd:ac:41:6d:ac:88:24:e5:36:74:b2:
ac:c6:02:f3:19:40:42:d3:78:26:bd:55:0a:57:11:33:b7:c0:
6a:91:25:80:a4:f9:7c:37:21:7c:79:c4:76:8b:f5:2d:ff:21:
e1:8e:98:86:ad:d0:ab:81:6f:68:81:b8:b2:3b:ed:08:73:57:
4f:20:c2:6e:04:33:44:c5:46:37:51:ef:41:a3:3b:a3:95:52:
82:b1:af:8a:2b:40:6e:cf:e1:66:85:78:05:4b:ec:49:ce:dd:
0a:02:88:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:32:46 2025 by rpki-client