This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/3b33e7-30b4-4149-9045-a0564c9d6fde/1/wRkJVIaV8YwEy4leKs7rEQPgPhI.mft
File: wRkJVIaV8YwEy4leKs7rEQPgPhI.mft (raw, json)
Hash identifier: e+xfQYVFYnkPhliwByXObTPZZ336WujUytrpzpf9MyQ=
Subject key identifier: D9:00:F9:09:E3:6C:F3:D6:D8:7F:23:1C:96:B3:8B:59:EF:41:2F:23
Authority key identifier: C1:19:09:54:86:95:F1:8C:04:CB:89:5E:2A:CE:EB:11:03:E0:3E:12
Certificate issuer: /CN=c11909548695f18c04cb895e2aceeb1103e03e12
Certificate serial: 019AF23F6A939A32E152E9690E775D462419
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wRkJVIaV8YwEy4leKs7rEQPgPhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/3b33e7-30b4-4149-9045-a0564c9d6fde/1/wRkJVIaV8YwEy4leKs7rEQPgPhI.mft
Manifest number: 08A5
Signing time: Sat 06 Dec 2025 06:00:33 +0000
Manifest this update: Sat 06 Dec 2025 06:00:33 +0000
Manifest next update: Sun 07 Dec 2025 06:00:33 +0000
Files and hashes: 1: YrKYk7I6vE-csMWooaZM6NHB8BQ.roa (hash: DGcItu+t1LfBz2hIuLIG2raDTGGDZoaJ5stlNvHsdUs=)
2: qYy8XmUApmSr7E4zGQ4BdVZDGb4.roa (hash: Fn2Mqkncw63T9+361k6HpXw83uUzWzsG0tY0nJ1gyjM=)
3: wRkJVIaV8YwEy4leKs7rEQPgPhI.crl (hash: NnF2gdhDuzimzzbO6YZYqWo4r9Ks+oBWuF/GDh6xBlk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/3b33e7-30b4-4149-9045-a0564c9d6fde/1/wRkJVIaV8YwEy4leKs7rEQPgPhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/3b33e7-30b4-4149-9045-a0564c9d6fde/1/wRkJVIaV8YwEy4leKs7rEQPgPhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/wRkJVIaV8YwEy4leKs7rEQPgPhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f2:3f:6a:93:9a:32:e1:52:e9:69:0e:77:5d:46:24:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c11909548695f18c04cb895e2aceeb1103e03e12
Validity
Not Before: Dec 6 06:00:33 2025 GMT
Not After : Dec 7 06:00:33 2025 GMT
Subject: CN=d900f909e36cf3d6d87f231c96b38b59ef412f23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:d1:76:ac:e7:15:3a:cd:e3:89:51:e7:af:13:
4f:bf:58:5c:56:39:9a:b8:63:ba:f9:47:71:7b:ec:
26:f7:32:78:5b:a7:b2:31:99:0b:d0:e2:55:7e:08:
3b:34:6b:eb:2e:28:21:a7:51:03:07:b2:0d:1a:75:
ff:88:20:d5:1d:6f:74:eb:6c:fa:7a:41:ea:15:bd:
c3:2d:8c:1b:4d:33:a7:9b:14:88:a9:af:8b:e2:ee:
30:81:85:a7:bc:ce:b6:b8:36:ff:6f:db:fa:2d:f2:
6a:59:c2:2b:63:24:47:d7:58:54:f0:ab:e4:76:80:
35:bc:9e:38:08:19:65:18:3f:c0:20:92:39:af:03:
06:7d:05:d5:66:14:e1:38:c2:43:55:dd:8b:fc:63:
58:48:ea:07:ac:ad:f5:cf:78:2a:c1:71:e8:c6:ab:
e5:d0:77:12:b9:98:fa:4c:9f:bc:84:44:89:4d:c1:
7b:5b:4c:86:60:6e:9d:56:6d:dd:71:b5:1a:3a:9b:
8e:6a:36:ac:7e:a4:cd:46:55:10:2c:f3:5f:f0:52:
f8:63:85:f3:67:8d:81:f6:8b:30:db:fc:57:e0:b6:
45:d9:54:71:f6:7f:54:c4:b4:41:99:a6:b1:66:e9:
5a:d5:e0:8a:19:4c:42:e3:ec:ea:e9:a5:3f:23:fe:
57:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:00:F9:09:E3:6C:F3:D6:D8:7F:23:1C:96:B3:8B:59:EF:41:2F:23
X509v3 Authority Key Identifier:
keyid:C1:19:09:54:86:95:F1:8C:04:CB:89:5E:2A:CE:EB:11:03:E0:3E:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wRkJVIaV8YwEy4leKs7rEQPgPhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3b33e7-30b4-4149-9045-a0564c9d6fde/1/wRkJVIaV8YwEy4leKs7rEQPgPhI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3b33e7-30b4-4149-9045-a0564c9d6fde/1/wRkJVIaV8YwEy4leKs7rEQPgPhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:1a:bb:0b:9e:1f:12:ce:f8:dc:9b:b3:53:51:d3:8b:1c:5d:
00:83:68:10:65:45:b6:72:14:c8:d0:f7:04:4e:91:c6:60:d2:
69:57:52:ac:2d:e3:78:62:c9:46:8a:7c:7f:7c:0a:81:71:6a:
d0:18:ce:69:17:24:cf:df:07:9a:2a:49:c6:06:7d:f7:cf:0b:
52:d9:40:03:d2:0c:26:f4:94:54:e9:38:da:39:c3:ea:a0:15:
d5:01:b1:d2:32:19:c0:15:f3:6d:ab:01:c1:10:3c:7b:41:78:
8d:7a:21:f0:83:87:76:41:77:3e:11:0f:93:e3:21:08:9e:6a:
0a:2f:a4:1f:70:6b:c7:0c:f1:9a:ec:08:0c:17:70:dc:46:51:
8b:23:41:69:00:30:6e:ec:bc:7b:c3:f5:32:9b:95:53:49:d5:
33:03:52:40:ae:66:c5:cd:1e:a2:34:8a:46:1a:a6:6b:93:62:
22:6e:22:c7:1a:9e:d8:a7:db:cf:c0:61:87:99:11:aa:3f:0e:
6c:f6:2c:1b:9c:11:be:8e:05:dc:59:5a:93:0d:20:33:c7:58:
fb:f6:97:97:47:1d:82:0c:e6:2a:50:1d:82:6c:77:fb:b2:29:
f9:72:50:41:16:ab:c6:ff:e8:28:62:12:df:25:ed:5b:1e:00:
a9:85:de:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:01:10 2025 by rpki-client