This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/sL_SyF5redRg5mDPlmTe5V3MyMw.mft
File: sL_SyF5redRg5mDPlmTe5V3MyMw.mft (raw, json)
Hash identifier: L/wTs8dQug+eqJolCBG153mkWk1MkYT/c/h14HYwo7Y=
Subject key identifier: FA:D8:C0:24:74:AF:2E:A4:FB:3D:AC:8B:0F:B4:E3:20:B5:85:02:A0
Authority key identifier: B0:BF:D2:C8:5E:6B:79:D4:60:E6:60:CF:96:64:DE:E5:5D:CC:C8:CC
Certificate issuer: /CN=b0bfd2c85e6b79d460e660cf9664dee55dccc8cc
Certificate serial: 019AF163DB84E73633F6E9C569D5BDDC6CFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sL_SyF5redRg5mDPlmTe5V3MyMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/sL_SyF5redRg5mDPlmTe5V3MyMw.mft
Manifest number: 1038
Signing time: Sat 06 Dec 2025 02:00:44 +0000
Manifest this update: Sat 06 Dec 2025 02:00:44 +0000
Manifest next update: Sun 07 Dec 2025 02:00:44 +0000
Files and hashes: 1: eFmnxR7CyMxvye5-XXcMbfaAVOw.roa (hash: pZJwNCYo3S0mBXNLEIKEUXn/lY7t5TEifbuRPldd2yI=)
2: oJDEzXr7gr-7eZ1rexTjd4c8Ul8.roa (hash: xZTw5KYNf4Du9zIJjL5q6os9uQVggXiruo8qaJQJCvQ=)
3: pGZsGJVmFoYhAv5VAkXf67JcN-w.roa (hash: /j9DfbiG7O3qG1GtbIDXzJ4rJWqS+jSuNHHJIbaeKpc=)
4: sL_SyF5redRg5mDPlmTe5V3MyMw.crl (hash: sAIsgv+Y2aCesjr18Oe0u3RMHBgWjrfOxB4MJd9AbO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/sL_SyF5redRg5mDPlmTe5V3MyMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/sL_SyF5redRg5mDPlmTe5V3MyMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/sL_SyF5redRg5mDPlmTe5V3MyMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:63:db:84:e7:36:33:f6:e9:c5:69:d5:bd:dc:6c:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0bfd2c85e6b79d460e660cf9664dee55dccc8cc
Validity
Not Before: Dec 6 02:00:44 2025 GMT
Not After : Dec 7 02:00:44 2025 GMT
Subject: CN=fad8c02474af2ea4fb3dac8b0fb4e320b58502a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4e:c5:72:9e:90:ca:c2:2e:25:76:9d:c7:02:
0f:a0:10:0b:e7:13:77:26:61:b0:fe:6c:1b:60:95:
6c:aa:c1:76:df:fc:8d:e1:42:47:be:eb:6f:a4:65:
4b:2c:82:c8:ec:6d:a2:52:7c:ae:e9:7a:3c:a7:60:
00:68:5e:dd:f4:b6:ba:db:a7:c0:15:76:40:a5:bd:
29:ef:e1:04:4d:e1:98:66:d9:f4:45:b8:c5:23:e9:
d7:1d:64:5f:c3:60:9a:4a:07:d6:6e:91:be:f3:53:
66:33:c5:53:7b:96:46:26:6e:70:8c:98:55:e1:4b:
5b:9f:47:c1:c9:4b:24:01:96:04:58:aa:c1:e2:e2:
a5:a1:14:c0:81:6b:0a:19:e0:e8:c3:d7:97:90:4b:
1f:31:de:d3:51:48:d4:ac:04:9b:db:54:be:e8:7b:
39:d1:4d:9d:96:34:bd:14:f6:b7:b6:a3:b3:9d:9a:
cc:63:f0:9e:5e:57:54:8c:c5:51:e3:03:f8:63:5e:
d5:10:65:db:6a:11:1a:03:9c:95:fc:13:c5:b6:27:
bc:5f:b2:54:e4:0e:24:49:4d:9e:6b:d2:65:7e:37:
4e:b2:47:cc:da:87:bc:b8:60:d4:d7:fb:ff:aa:f7:
aa:e8:fe:a6:60:07:ae:19:74:d3:bb:7d:76:ef:c9:
96:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:D8:C0:24:74:AF:2E:A4:FB:3D:AC:8B:0F:B4:E3:20:B5:85:02:A0
X509v3 Authority Key Identifier:
keyid:B0:BF:D2:C8:5E:6B:79:D4:60:E6:60:CF:96:64:DE:E5:5D:CC:C8:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sL_SyF5redRg5mDPlmTe5V3MyMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/sL_SyF5redRg5mDPlmTe5V3MyMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/sL_SyF5redRg5mDPlmTe5V3MyMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:2f:e0:b6:a3:01:be:c1:3e:ae:f5:25:54:3e:3b:d6:e6:a8:
ee:95:23:a1:22:23:66:e1:e2:4b:78:5a:ce:8b:80:31:85:4d:
46:c1:86:53:8d:bf:c5:aa:a8:b8:c1:38:ce:97:d6:c8:07:a6:
b6:53:24:96:0d:3f:b4:2c:23:87:b8:8e:63:1b:8d:69:1d:ee:
7f:b4:e0:2b:5e:08:85:af:5c:0f:08:58:01:be:fe:74:66:19:
0a:bd:03:7b:10:ab:4c:cc:0d:f6:b6:23:b6:d9:4f:81:ba:d9:
79:06:3d:a7:e3:4d:c6:87:6c:87:bb:fb:46:73:44:4e:95:2d:
6b:44:cc:85:70:c9:f6:02:2d:81:73:4f:af:58:40:50:cc:13:
34:39:34:5c:19:be:c7:d4:64:ed:ab:84:f5:0c:11:0e:56:95:
44:f1:44:a4:7f:a4:30:a8:31:17:30:b3:bc:39:10:d6:a1:94:
4a:b4:4d:0c:3f:f3:2d:b1:10:71:e5:47:74:62:7c:65:55:4d:
d7:a0:d0:0c:d9:ae:e9:3d:18:71:22:26:a9:04:fb:74:d0:72:
60:a4:67:44:af:55:27:03:15:ff:5c:02:25:f5:53:ce:0f:e4:
62:8f:51:40:17:e3:d2:53:24:b5:14:e5:b6:76:3a:f7:f3:04:
47:27:88:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:41:49 2025 by rpki-client