This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.mft
File: Xdczb6kVchzjv-4hf06ZFk25Uys.mft (raw, json)
Hash identifier: 5+HYqv/Dg/wOf6zLBH1re0Wc9ZujVFut3RbkZCQ7vXw=
Subject key identifier: EE:B0:0B:E4:21:04:BC:E1:C5:11:2D:74:3C:9F:32:44:F2:1C:12:A5
Authority key identifier: 5D:D7:33:6F:A9:15:72:1C:E3:BF:EE:21:7F:4E:99:16:4D:B9:53:2B
Certificate issuer: /CN=5dd7336fa915721ce3bfee217f4e99164db9532b
Certificate serial: 019AF163EA0CB3094DC0B75E4919A530A689
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdczb6kVchzjv-4hf06ZFk25Uys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.mft
Manifest number: 1767
Signing time: Sat 06 Dec 2025 02:00:48 +0000
Manifest this update: Sat 06 Dec 2025 02:00:48 +0000
Manifest next update: Sun 07 Dec 2025 02:00:48 +0000
Files and hashes: 1: DkHIx2qomTMRxi5txwcyeQJUMC4.roa (hash: aUooC/gZIs2knffE4CSZxz4fOwgHg5KB9hMX38VnhFA=)
2: TBZUFVuLjgaJ-XADpnEKR7pLEmo.roa (hash: DDp1P+ue/jG2hxWSfwXECX5hRH8hg4KzLSyGRRpINWI=)
3: Xdczb6kVchzjv-4hf06ZFk25Uys.crl (hash: lba2PeeUkGEeIMVhG+YWA84Pjtn0doOmwepiCP2WWwU=)
4: YPWPyR2PrV8C7bZPatIE86usWRg.roa (hash: oPtwylk/25k8zLps+NlaEoKI3y6QpsbDE1m1nmcztaE=)
5: bOO4UAkgvXb-rMii_89NfL-6bTI.roa (hash: NL1lyy08FzW+vpLdiv9to5VdvnEWSxR942DR56bOFW4=)
6: gVKSPISn7WOtLgcYX82T_CB0k8w.roa (hash: Ym9+8pOqwFm62YT9wllYnMmkH1dr3oLLznDhqgDjeLA=)
7: gincnI_gYVCe8a-UMsJw8uGTHk4.roa (hash: /B3bMOP6Q4JtPQrlZm8v7Y12jGfc6csMXusEpKv3HP0=)
8: pjijzSQUxqzDP8xeNUFbC_-9WRc.roa (hash: idDVoTbAeotEcfiyv3LfRPsc1HSc8qISJahqgpNH+A0=)
9: sbcX3dD-IzvBjjiuOceGuIya184.roa (hash: OgKPXFMnHlbOLdXfkb/OHlLV/72L9AOodiZ4Hgh7ss4=)
10: tmZ0o6fg7g2ZAFjY0aabWuJemGY.roa (hash: a2zNXAKUIiHFRxrlG+HegKhw0N5htHdLY3b/L14Vpl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xdczb6kVchzjv-4hf06ZFk25Uys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:63:ea:0c:b3:09:4d:c0:b7:5e:49:19:a5:30:a6:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd7336fa915721ce3bfee217f4e99164db9532b
Validity
Not Before: Dec 6 02:00:48 2025 GMT
Not After : Dec 7 02:00:48 2025 GMT
Subject: CN=eeb00be42104bce1c5112d743c9f3244f21c12a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9f:2b:da:4a:d6:5a:20:af:80:b1:b0:7a:01:
ce:0d:a6:2f:16:c8:78:0f:b9:da:00:e2:31:2a:13:
ae:e2:0c:34:8a:00:32:be:e4:db:b3:62:bf:36:ae:
9a:2b:9b:69:3c:b5:04:d6:60:39:e3:7b:c8:f3:9c:
e7:05:83:3e:65:72:03:82:44:78:51:60:f9:54:25:
0d:9c:8d:a4:57:b7:18:5a:0b:a7:7b:97:9b:c0:6a:
83:2f:6b:09:95:f9:f8:d3:18:ec:85:29:95:32:f2:
aa:5c:b9:2e:fa:ae:80:ec:90:90:f4:e7:a6:65:95:
b4:a8:2e:61:13:81:9d:79:f9:1f:d6:42:1d:bb:45:
3b:1b:d9:bc:a5:51:c6:8c:53:66:b7:7f:76:cc:f6:
62:d8:a7:df:7e:db:a3:0f:f8:51:05:73:b0:3a:cb:
94:cc:ad:e3:b8:be:16:21:e7:47:e6:33:43:81:e9:
75:5c:93:5b:d7:15:2a:15:10:4b:38:cd:21:78:96:
47:2c:af:94:47:c2:2b:37:2c:ed:86:ec:d6:a7:9b:
38:d7:43:0b:a3:f8:92:3b:50:a6:9c:32:03:10:a3:
13:36:4d:8c:33:b7:b1:46:61:e9:63:ac:2e:73:1b:
6e:b0:59:97:b5:2c:94:d1:67:9e:6b:87:4d:ab:01:
20:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:B0:0B:E4:21:04:BC:E1:C5:11:2D:74:3C:9F:32:44:F2:1C:12:A5
X509v3 Authority Key Identifier:
keyid:5D:D7:33:6F:A9:15:72:1C:E3:BF:EE:21:7F:4E:99:16:4D:B9:53:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdczb6kVchzjv-4hf06ZFk25Uys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:38:22:e9:2f:7f:c1:07:d6:3f:89:89:11:af:d2:0d:ba:36:
c4:f2:41:5a:b7:52:12:58:b1:b1:35:2a:08:f7:f8:9a:57:fb:
4a:5f:9d:c6:22:b5:d7:ac:cd:11:15:37:99:e2:7b:86:35:bd:
4c:7c:06:9b:bb:71:b2:a4:08:29:0f:09:25:ee:6d:dd:7b:82:
25:e8:b3:75:87:92:aa:18:df:29:13:8c:49:7c:70:06:c3:01:
47:ce:e8:23:84:6e:e3:62:26:8b:36:bc:7e:35:ea:fe:e0:32:
f9:be:75:40:5b:6c:aa:a9:e1:6a:89:6e:00:94:20:3c:3f:1b:
d6:1f:89:bf:81:28:12:4c:fc:39:49:42:32:0a:48:04:f7:62:
96:96:13:81:87:a5:b1:d6:b6:f6:02:bd:6d:84:fd:63:c3:cf:
08:cc:3e:b6:e7:28:74:eb:62:42:c2:11:ef:4f:08:9e:86:13:
20:05:3e:ca:ac:fa:82:2b:4f:0b:b1:16:af:33:84:bc:60:40:
6b:82:fb:4e:4a:ce:57:b2:69:1d:6a:68:62:28:cb:8b:0a:92:
19:e4:3c:29:ba:9a:39:22:06:88:b5:fa:56:94:f7:91:2c:99:
0e:cd:d7:8f:88:52:e7:0a:cf:0e:55:ae:8b:73:0b:71:a9:1f:
ad:2b:67:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:58:28 2025 by rpki-client