This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/d81b59-c05a-48fe-b5b1-158927337689/1/RWF9LghjWN2nvbDcRmyhyG7U_so.mft
File: RWF9LghjWN2nvbDcRmyhyG7U_so.mft (raw, json)
Hash identifier: T1eh1Ohc7I0vVhOVHiMwA29m5iLvF7FThEsEm0ZCBw8=
Subject key identifier: 23:08:0B:13:1E:53:02:C3:EC:18:09:F4:8E:A8:6F:3D:3D:FC:13:D2
Authority key identifier: 45:61:7D:2E:08:63:58:DD:A7:BD:B0:DC:46:6C:A1:C8:6E:D4:FE:CA
Certificate issuer: /CN=45617d2e086358dda7bdb0dc466ca1c86ed4feca
Certificate serial: 019AF1D22AE04A76C556BDB6FD30EC4B83C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RWF9LghjWN2nvbDcRmyhyG7U_so.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/d81b59-c05a-48fe-b5b1-158927337689/1/RWF9LghjWN2nvbDcRmyhyG7U_so.mft
Manifest number: 16F5
Signing time: Sat 06 Dec 2025 04:01:13 +0000
Manifest this update: Sat 06 Dec 2025 04:01:13 +0000
Manifest next update: Sun 07 Dec 2025 04:01:13 +0000
Files and hashes: 1: Kp8YOETyXn_CJNlkKRcjiHTajds.roa (hash: pE4tiu3XHnbIpJeimbwG8Yyb4EwnGUv1VJS0J7muojA=)
2: RWF9LghjWN2nvbDcRmyhyG7U_so.crl (hash: cOdCcfCBlBx/0LrFhLZTS0DIVzGLxjpDmtRy4yGShbk=)
3: opT_I9F9NlBeldQr0GrqFI_DCW8.roa (hash: MFWRH48M0sUB0KCZQGPrxKIdCpAK4ygrD33P9KlMNcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/d81b59-c05a-48fe-b5b1-158927337689/1/RWF9LghjWN2nvbDcRmyhyG7U_so.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/d81b59-c05a-48fe-b5b1-158927337689/1/RWF9LghjWN2nvbDcRmyhyG7U_so.mft
rsync://rpki.ripe.net/repository/DEFAULT/RWF9LghjWN2nvbDcRmyhyG7U_so.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:d2:2a:e0:4a:76:c5:56:bd:b6:fd:30:ec:4b:83:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45617d2e086358dda7bdb0dc466ca1c86ed4feca
Validity
Not Before: Dec 6 04:01:13 2025 GMT
Not After : Dec 7 04:01:13 2025 GMT
Subject: CN=23080b131e5302c3ec1809f48ea86f3d3dfc13d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:46:de:08:84:1e:36:2e:ce:e8:52:cc:69:1a:
fa:7b:44:fb:c0:21:2c:58:82:92:51:00:0c:3a:c7:
5d:3d:39:ab:5c:5c:61:cf:8f:7c:e8:63:8c:3d:6c:
e0:df:41:02:0c:01:57:b3:59:2f:6d:b1:83:a1:25:
7d:24:31:2e:85:46:e6:ca:35:31:77:10:b2:c4:3d:
6e:d5:66:a7:3a:d1:c7:c6:db:8f:7f:81:a1:56:3d:
19:d0:23:d2:72:c4:2f:df:21:ad:c9:1f:49:56:ea:
19:01:49:80:6c:30:dd:c6:fe:24:82:6a:19:4b:0f:
83:2c:a4:bc:ba:25:b4:26:cc:6f:a2:bf:e8:b9:b5:
45:61:18:6a:54:1b:d6:ca:9b:74:a8:f8:ed:ca:60:
2c:2b:ab:7a:ce:69:a8:6b:d3:8d:08:02:c3:01:50:
e0:74:d3:48:4e:be:c8:d7:32:78:8e:19:9a:4c:d7:
45:31:e3:81:36:da:28:70:89:44:1a:cd:07:c6:3d:
d0:74:40:3f:a8:73:1b:8b:f5:41:92:98:bf:90:8b:
51:4f:f5:ae:94:fb:ee:c4:4d:9d:16:08:b7:46:3e:
51:64:0a:db:8a:77:40:6b:9e:eb:4e:bf:88:ba:f6:
d0:28:2c:50:47:05:ca:50:2c:4e:3c:ae:47:41:ee:
1f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:08:0B:13:1E:53:02:C3:EC:18:09:F4:8E:A8:6F:3D:3D:FC:13:D2
X509v3 Authority Key Identifier:
keyid:45:61:7D:2E:08:63:58:DD:A7:BD:B0:DC:46:6C:A1:C8:6E:D4:FE:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RWF9LghjWN2nvbDcRmyhyG7U_so.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/d81b59-c05a-48fe-b5b1-158927337689/1/RWF9LghjWN2nvbDcRmyhyG7U_so.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/d81b59-c05a-48fe-b5b1-158927337689/1/RWF9LghjWN2nvbDcRmyhyG7U_so.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:5e:86:e4:cf:f0:e7:af:63:ef:4f:ac:8f:52:ca:9f:fa:b5:
c3:96:c4:1a:59:9e:7b:63:1b:5f:c0:9e:dc:83:b0:b6:40:bb:
4e:21:3e:df:78:8b:4c:8e:18:70:01:83:a6:a1:38:dc:e6:99:
dd:b1:69:68:53:b3:b8:b7:dd:da:f4:b1:61:57:63:8b:26:f4:
6f:c4:35:97:24:f2:28:c2:ec:64:f5:55:18:c2:76:06:a4:29:
b4:cd:1d:25:22:0a:5a:95:f6:81:f5:11:09:9a:31:59:bd:f7:
17:26:78:eb:c1:37:bb:d7:08:63:a5:15:61:25:db:b0:34:5b:
ee:68:f1:4b:b8:9c:16:07:67:39:e6:f6:42:bd:84:7d:d0:5a:
61:a5:a6:fb:7e:37:79:72:e9:f1:42:8d:ed:60:d9:21:2a:96:
a9:0a:97:60:93:c3:9c:e1:16:1f:43:a3:bc:ed:3b:53:bc:23:
62:28:c2:9f:9c:52:5f:e2:df:03:97:e0:c9:40:40:4c:05:2d:
2f:81:1b:6b:1d:c4:9e:3b:3b:9b:36:3d:30:b4:d8:27:f3:50:
f0:2f:5d:4b:4f:27:d5:2e:ca:a7:f0:52:89:ad:e4:63:c6:3d:
3c:c3:c3:09:c0:7e:03:46:86:04:97:21:eb:7e:31:1c:78:2b:
d8:e6:37:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:23:12 2025 by rpki-client