This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.mft
File: XIkq7Tgz5hAPXgzxInH9gLdVw2E.mft (raw, json)
Hash identifier: MUy4m8Mu1qicTEFHV9ZwAopaQq6Fme0g5mm0T1MkdGw=
Subject key identifier: 7B:67:0D:7B:11:B2:1C:0F:8D:DE:ED:19:A9:12:D4:4D:FB:34:BD:2F
Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
Certificate issuer: /CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Certificate serial: 019AF2095A722E3B0EF2A8CC97E28DFBF8AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.mft
Manifest number: 0EDE
Signing time: Sat 06 Dec 2025 05:01:30 +0000
Manifest this update: Sat 06 Dec 2025 05:01:30 +0000
Manifest next update: Sun 07 Dec 2025 05:01:30 +0000
Files and hashes: 1: 6wQs6-0w-fWJLJ0hVPQK6QCCGkY.roa (hash: rb19DmwWMRxoIZtq3fo28eOFDkPmJthIUG0I+8TP2AM=)
2: BjsuLgGQNhMD4InbUJY9wvy3euM.roa (hash: HQnpHX6hfakLbQoTyAQapgMmds3GLNhUneOg7VrLXNA=)
3: EtBWv7v42TBRx3xi5if6zm6OAdo.roa (hash: wUjEWMJsxkGqfJP8Q+fyLu6SEzpYpLZd1/pV8n4as7s=)
4: N1kPa63Y6FcbIG4ZFA6vBaVC4N4.roa (hash: ADzkv6QiLNzt6CZ3/NGstYTNCCFuWgTGZZVgBsDhSg0=)
5: XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl (hash: 0QlhXC/22UENtoEV67W8Ell5f1L7pn8olpJxDtvkN/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f2:09:5a:72:2e:3b:0e:f2:a8:cc:97:e2:8d:fb:f8:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Validity
Not Before: Dec 6 05:01:30 2025 GMT
Not After : Dec 7 05:01:30 2025 GMT
Subject: CN=7b670d7b11b21c0f8ddeed19a912d44dfb34bd2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:12:eb:91:a7:0e:fd:f9:56:62:cb:59:c7:f2:
40:9e:78:c3:71:56:bb:34:70:90:e9:cc:c3:57:29:
6c:e4:cb:67:ea:2b:59:9e:44:2e:fa:6c:2c:13:06:
88:d5:14:3a:30:a8:22:b2:4d:9a:85:af:34:ac:b3:
75:86:8a:d2:1d:fe:93:7b:de:eb:7e:d9:e1:69:7c:
ba:cd:66:3b:7a:60:57:08:1b:ba:da:78:5d:47:51:
57:8e:ee:b4:10:04:54:00:01:51:99:1a:69:a7:17:
3e:01:d4:21:3e:0e:c0:6d:c1:20:0a:5a:2e:d9:4e:
0c:a5:d2:d1:38:b2:0f:1a:12:59:ac:a9:59:83:95:
d3:af:37:a1:f9:8f:e4:bb:1e:79:36:14:28:25:63:
85:76:30:f6:50:0c:57:d6:33:dd:2c:e0:a0:df:64:
5a:c0:66:51:05:f7:89:0e:58:a4:b7:5e:74:32:d6:
2f:f9:2c:78:cf:6a:69:bc:d1:b3:65:42:7e:18:1e:
6a:b5:bc:ec:bf:0b:c7:e9:a1:94:7a:a6:d1:70:26:
ae:fd:cd:fe:a2:cb:c6:71:fa:75:69:cb:15:be:68:
83:af:98:b0:ce:27:41:a0:87:64:0e:b6:25:12:41:
f3:88:95:8a:90:f7:11:74:57:5a:03:e2:fa:36:b0:
5a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:67:0D:7B:11:B2:1C:0F:8D:DE:ED:19:A9:12:D4:4D:FB:34:BD:2F
X509v3 Authority Key Identifier:
keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:2c:c2:f2:0d:71:0b:4f:da:e2:d4:f5:38:ea:0f:66:5d:39:
54:0d:96:fe:f1:82:ff:06:38:9e:d0:17:72:a3:b4:f2:ab:e7:
e8:7d:c0:a5:2c:57:b3:64:2a:ed:5e:bd:86:a0:5a:ce:1e:8d:
bb:13:47:e0:54:83:20:7d:9a:34:ec:68:3c:c5:0e:35:61:18:
79:6e:6a:80:dd:fd:fb:b4:62:8c:0f:93:e0:a4:74:a3:e0:d3:
18:a0:ff:37:57:f4:d4:fd:64:06:1f:a8:30:74:cd:4c:6b:e6:
b1:79:0d:02:b6:f6:fd:0c:78:af:b9:f8:a5:1c:d6:db:07:59:
e8:04:12:55:6c:49:27:42:f4:1e:df:bd:c9:a9:b0:df:71:5a:
e8:69:d2:12:fe:2c:b1:69:af:97:ba:05:18:d0:49:2b:73:0f:
3f:14:a6:de:46:d5:cc:a6:ad:5b:d9:7f:02:a3:f2:67:03:c5:
a1:ac:fd:ce:3e:ae:a5:6e:0d:af:57:64:6e:08:bb:7a:66:8c:
6a:df:b1:8d:07:9a:f2:ef:6d:3a:9d:a8:2f:42:e1:ce:ad:85:
24:d3:d5:12:f1:f2:51:e0:24:04:0d:a7:25:20:97:93:3f:80:
98:bf:c0:8e:dc:94:4b:03:fe:e6:7a:7a:f5:65:f5:f8:69:d4:
bc:b3:b3:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:31:32 2025 by rpki-client