This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.mft
File: YNCwIHYDvkPYSS6YUTeLi08JWU8.mft (raw, json)
Hash identifier: zr81C2+wBv1IhTjPSFy+XicxlnrebC1KifTQs5YVLQE=
Subject key identifier: 31:3A:1F:DD:DC:1D:94:B2:F0:29:CA:B4:3D:A6:FF:31:0E:CE:4F:48
Authority key identifier: 60:D0:B0:20:76:03:BE:43:D8:49:2E:98:51:37:8B:8B:4F:09:59:4F
Certificate issuer: /CN=60d0b0207603be43d8492e9851378b8b4f09594f
Certificate serial: 019AF42E513A109EEFE9251D2B0CDFD41A32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YNCwIHYDvkPYSS6YUTeLi08JWU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.mft
Manifest number: 16F5
Signing time: Sat 06 Dec 2025 15:01:07 +0000
Manifest this update: Sat 06 Dec 2025 15:01:07 +0000
Manifest next update: Sun 07 Dec 2025 15:01:07 +0000
Files and hashes: 1: TGCJDTG82pX-vT9LeK2kOQ4sDi8.roa (hash: zRKBbHZChcvp4qDJB7Pkx8ohWvBK1TWvnJD0kE9wiHc=)
2: YNCwIHYDvkPYSS6YUTeLi08JWU8.crl (hash: NSqVzl+3hXer8JC5CCqQITyuNR+OYvKKv6ajiSRXksY=)
3: hmDTZOEMQo2FsgMZ2bH5HdU2vyI.roa (hash: NbIM1acTbudT3ToneHmDuzQP2dnfQF8A/BNgiqfCI44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YNCwIHYDvkPYSS6YUTeLi08JWU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 14:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f4:2e:51:3a:10:9e:ef:e9:25:1d:2b:0c:df:d4:1a:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60d0b0207603be43d8492e9851378b8b4f09594f
Validity
Not Before: Dec 6 15:01:07 2025 GMT
Not After : Dec 7 15:01:07 2025 GMT
Subject: CN=313a1fdddc1d94b2f029cab43da6ff310ece4f48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:58:7f:28:e5:51:a3:17:7d:4b:15:4a:82:de:
f2:8d:76:ca:45:25:92:5e:1e:aa:fe:f7:21:60:e8:
0e:e9:51:05:c4:9e:23:ea:b5:9b:eb:4e:e9:85:fd:
f9:aa:0c:c4:7a:f2:f2:a1:8e:da:08:79:87:3c:e0:
89:d3:9e:d9:15:60:80:04:cf:83:b4:d6:37:67:7d:
d7:b2:fe:b6:09:09:b8:2a:4f:b8:8a:66:76:8f:3d:
0c:21:e0:5d:3d:5e:5a:d8:ba:0b:2d:94:29:cf:aa:
36:32:dd:94:69:d1:ec:32:13:a2:ab:df:20:98:0d:
20:68:bb:59:69:51:f9:f4:cf:dc:7a:5f:eb:fd:71:
6e:7c:ff:0d:2a:5b:8d:f4:9f:d1:3e:ca:06:52:32:
95:e8:cb:73:cb:ca:5f:4e:99:85:5f:cc:3f:d6:a8:
8c:b0:0f:22:5f:41:90:5d:d5:08:8e:da:ec:eb:a0:
49:8b:29:3d:eb:2f:8a:1a:f1:5b:f2:f6:fc:a2:fb:
79:ba:63:d0:fe:ba:b7:78:2c:09:b0:38:7e:ec:71:
4b:00:8f:25:80:7e:a4:ec:b9:77:9b:66:0f:6f:2d:
01:d6:a9:b1:f4:45:ac:9c:12:9c:c2:5f:32:f8:03:
01:5b:d6:ae:1d:90:6f:8b:55:14:cd:b2:72:d6:27:
d1:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:3A:1F:DD:DC:1D:94:B2:F0:29:CA:B4:3D:A6:FF:31:0E:CE:4F:48
X509v3 Authority Key Identifier:
keyid:60:D0:B0:20:76:03:BE:43:D8:49:2E:98:51:37:8B:8B:4F:09:59:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YNCwIHYDvkPYSS6YUTeLi08JWU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:39:86:08:10:09:f3:84:28:81:03:28:4f:32:00:21:ec:a5:
e0:c1:40:c6:9d:68:ee:ce:2e:a1:df:c6:b2:af:05:2c:61:19:
5b:aa:e7:0a:1a:c1:c1:04:39:d6:ad:04:ca:eb:f5:24:a1:c9:
e6:8d:e4:fd:04:54:7c:1b:0a:1a:4e:75:3a:87:b4:e6:ef:87:
ff:5d:d3:cf:17:23:b3:53:a4:7a:bc:d0:c8:0a:3d:41:36:a3:
d9:e8:e4:1c:36:35:2f:e2:79:a4:5d:01:a2:ad:44:f9:e5:3f:
45:75:b6:b9:cd:e9:20:8b:61:1b:fb:1e:41:a2:71:fc:38:20:
cb:65:b4:44:b5:cb:27:a3:45:2d:b7:15:78:64:81:bc:da:30:
1c:f8:e4:24:91:85:39:5b:87:74:96:d4:a8:92:4c:63:57:31:
74:69:83:ec:92:77:67:99:c3:3e:a3:4c:a9:e3:e6:87:75:ab:
68:53:b8:3a:bb:f0:1e:9e:5a:bd:aa:25:4d:bf:00:75:be:d6:
c0:82:72:e0:fa:02:c8:ee:9c:a3:10:09:bb:90:c5:4c:a3:cf:
b1:8d:16:6f:be:b1:91:6d:26:88:cc:c5:5c:59:60:ca:db:9b:
32:c0:b0:18:0f:df:95:2f:3d:ad:4f:1b:d7:6e:79:d6:ef:f5:
b0:b3:3e:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:18:14 2025 by rpki-client