This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.mft
File: RENP2YwR2Nct84DKg-33n8wAhZ8.mft (raw, json)
Hash identifier: TBVCeN0Ki+fAcr2ixkeNaZtSAV/h0COjvY2NEs4RcXk=
Subject key identifier: E1:03:31:EF:F0:92:6E:0C:84:74:A5:34:98:D0:BE:83:27:C6:4C:84
Authority key identifier: 44:43:4F:D9:8C:11:D8:D7:2D:F3:80:CA:83:ED:F7:9F:CC:00:85:9F
Certificate issuer: /CN=44434fd98c11d8d72df380ca83edf79fcc00859f
Certificate serial: 019AF49C1449AB4654464A150F1C8A964831
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RENP2YwR2Nct84DKg-33n8wAhZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.mft
Manifest number: 0BCD
Signing time: Sat 06 Dec 2025 17:01:00 +0000
Manifest this update: Sat 06 Dec 2025 17:01:00 +0000
Manifest next update: Sun 07 Dec 2025 17:01:00 +0000
Files and hashes: 1: 0k2RQNwafgZ-e81VbpAz2vrqb3k.roa (hash: F4mQI6q3szQ65tq8yOXleP2UVhZpsKUbEGpteoYml/c=)
2: 8V7ejxEv_GEeH4w675eVpJxAMGA.roa (hash: dpmJ8CsMRM0G3BSxOyWtbvqZ7FYrfuSdRQhIjIL3rWg=)
3: RENP2YwR2Nct84DKg-33n8wAhZ8.crl (hash: aK2GNszKewOTbngGaxu8uIAGzh5+1aGQQGgqfUrVWLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RENP2YwR2Nct84DKg-33n8wAhZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 13:09:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f4:9c:14:49:ab:46:54:46:4a:15:0f:1c:8a:96:48:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44434fd98c11d8d72df380ca83edf79fcc00859f
Validity
Not Before: Dec 6 17:01:00 2025 GMT
Not After : Dec 7 17:01:00 2025 GMT
Subject: CN=e10331eff0926e0c8474a53498d0be8327c64c84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c9:15:32:73:8e:25:43:8d:2b:d8:c5:5d:e8:
48:d5:b5:b0:c8:bd:3d:ed:cf:f3:39:a0:d0:a3:91:
a9:1c:02:a8:2b:85:2b:20:1e:33:f5:fb:44:14:60:
90:be:fb:88:83:9b:0b:d8:1a:b7:1a:0f:a4:f6:39:
3e:06:db:a0:db:fd:3f:ec:91:27:d6:28:81:bb:d9:
f4:c0:b6:72:2f:b5:8d:51:09:e5:65:c9:6f:ff:ea:
b0:55:52:31:16:0d:32:67:30:94:3b:27:1b:9e:71:
e8:83:23:01:a9:7b:3d:ff:36:7f:fd:61:c7:df:77:
b8:b7:1a:22:d2:0e:21:63:d0:e2:74:ae:15:f7:15:
bf:fc:ab:69:e9:7a:95:12:f4:82:57:a1:22:a8:c1:
24:01:88:53:c2:fa:99:ad:81:41:5d:02:78:c3:8b:
1f:96:a9:f3:c4:22:47:db:b9:e9:d5:86:36:5a:5e:
41:18:4a:93:02:77:a0:4e:62:23:05:44:af:88:3f:
29:a9:86:ba:50:34:12:64:8b:a5:91:fc:d4:09:c6:
45:4e:e2:71:9a:26:a0:ee:61:ea:b5:70:33:3d:c5:
54:17:35:92:92:b2:e1:2b:ca:e1:6c:18:35:e8:08:
68:fe:04:00:20:d8:a3:61:33:1f:ad:4e:f5:c3:12:
47:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:03:31:EF:F0:92:6E:0C:84:74:A5:34:98:D0:BE:83:27:C6:4C:84
X509v3 Authority Key Identifier:
keyid:44:43:4F:D9:8C:11:D8:D7:2D:F3:80:CA:83:ED:F7:9F:CC:00:85:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RENP2YwR2Nct84DKg-33n8wAhZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:39:b2:01:90:7e:58:6d:a4:3c:3b:7c:5f:bb:af:f0:91:f5:
45:f7:a1:26:50:8c:ff:60:25:56:36:da:65:2c:e9:17:29:a6:
bd:e4:ad:86:85:b8:7e:3f:64:af:98:cf:e6:f8:16:57:36:12:
51:4c:0f:3a:3c:09:35:27:6c:14:c7:04:ff:f6:04:9e:48:cd:
cf:20:f6:6a:83:d8:c7:69:38:b0:e9:59:ab:ef:88:8b:f3:d8:
41:43:fb:2f:30:d0:0e:31:82:93:2b:66:4d:37:28:c8:60:4e:
80:ab:49:e5:86:e0:b2:e3:52:2b:05:3e:50:f6:c1:c3:3d:f5:
04:e8:7e:54:d2:13:24:be:d2:50:cf:11:ca:d5:c2:b4:3a:6a:
5d:eb:60:58:0f:af:ff:fc:b9:45:76:9d:21:e9:3a:69:1c:78:
3a:63:1b:37:94:b4:65:43:1e:80:90:41:bd:de:2f:af:bd:38:
1b:17:a2:a3:b2:68:ef:04:a2:f7:a8:ff:7d:f5:cc:48:71:c1:
53:8b:4a:a2:ae:64:7a:a7:bf:3f:3e:4c:a8:0d:fb:23:73:68:
ee:91:41:91:cf:ab:78:de:e4:9a:de:07:86:41:d9:ae:64:9f:
07:59:9b:4d:75:d6:5d:0c:fc:f5:40:3d:67:f3:88:9e:87:fd:
5f:b1:4e:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:02:32 2025 by rpki-client