This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/52b199-9e1f-4ec7-b0aa-4a4e0f424f17/1/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.mft
File: rwNoFqMX3ZnSU4OjKmgYWcBHtf8.mft (raw, json)
Hash identifier: //kjGYRwwuDxRcRR29p844aWlLiNoEnEzKtaGQwiVH8=
Subject key identifier: 76:1B:C7:F4:CD:69:EE:31:D9:33:D4:4A:D0:73:C5:36:09:0A:8F:9B
Authority key identifier: AF:03:68:16:A3:17:DD:99:D2:53:83:A3:2A:68:18:59:C0:47:B5:FF
Certificate issuer: /CN=af036816a317dd99d25383a32a681859c047b5ff
Certificate serial: 019AF1D1E31A7511CB799D3EE9485EDE7057
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/52b199-9e1f-4ec7-b0aa-4a4e0f424f17/1/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.mft
Manifest number: 11BD
Signing time: Sat 06 Dec 2025 04:00:55 +0000
Manifest this update: Sat 06 Dec 2025 04:00:55 +0000
Manifest next update: Sun 07 Dec 2025 04:00:55 +0000
Files and hashes: 1: dv2-CubAEzDgm9-A6q6tebm8sb8.roa (hash: TsKOArcBjp/tutNspO+BZ3fNFViji2g9Yje5CxDDQXE=)
2: rwNoFqMX3ZnSU4OjKmgYWcBHtf8.crl (hash: 5pOqNbCvmXGQJCRLIalqbu3lLM5y+nqSH8hG6JMxHd4=)
3: uPmBIiMy_mwoAMwRr2tHb8mN_DQ.roa (hash: HueNCAsjAp0HpCdgeRDBaDeI3suLIq9xXvHT44od5wE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/52b199-9e1f-4ec7-b0aa-4a4e0f424f17/1/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/52b199-9e1f-4ec7-b0aa-4a4e0f424f17/1/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 04:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:d1:e3:1a:75:11:cb:79:9d:3e:e9:48:5e:de:70:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af036816a317dd99d25383a32a681859c047b5ff
Validity
Not Before: Dec 6 04:00:55 2025 GMT
Not After : Dec 7 04:00:55 2025 GMT
Subject: CN=761bc7f4cd69ee31d933d44ad073c536090a8f9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:07:57:14:c0:2d:a3:fd:31:f3:46:64:f7:63:
cb:16:c5:39:c1:f8:15:c5:28:e8:9c:0a:9c:e5:1b:
bc:de:a4:dd:7d:0d:34:5b:77:71:37:92:49:ca:f7:
d6:d6:70:e4:58:70:08:04:75:3c:5e:44:39:a0:ba:
8c:a3:a6:5d:5d:fa:39:35:7c:1c:77:15:7f:c0:90:
3f:85:4f:e6:c6:a7:57:64:bc:c2:60:d8:36:65:49:
f0:60:18:d1:73:be:84:66:18:22:a7:26:19:ef:aa:
2b:f6:3a:58:bf:0d:1a:82:ec:f1:44:f5:6c:92:7f:
06:ee:f6:d9:87:39:f9:65:22:93:4d:1d:01:53:da:
64:f3:27:29:73:d0:4d:30:ec:78:99:10:5f:c5:ed:
e8:08:83:12:9c:aa:cf:32:a3:15:c6:a8:0b:7d:35:
fb:01:f2:cd:7c:13:dd:0c:c6:25:34:20:79:69:d1:
23:09:f3:aa:98:f6:80:46:dc:5b:46:5e:f0:19:bb:
bb:4e:d3:bd:72:14:61:d3:8d:ff:a9:3e:37:e5:62:
28:2b:49:4a:df:e3:15:b1:48:17:9f:9e:ae:b8:e1:
df:c3:53:88:83:a3:0d:c1:b4:11:36:d4:55:23:5f:
2f:ea:bf:37:38:8d:e7:71:a6:cb:25:c1:39:20:8c:
35:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:1B:C7:F4:CD:69:EE:31:D9:33:D4:4A:D0:73:C5:36:09:0A:8F:9B
X509v3 Authority Key Identifier:
keyid:AF:03:68:16:A3:17:DD:99:D2:53:83:A3:2A:68:18:59:C0:47:B5:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/52b199-9e1f-4ec7-b0aa-4a4e0f424f17/1/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/52b199-9e1f-4ec7-b0aa-4a4e0f424f17/1/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:41:10:e7:4e:2c:43:f1:ff:9b:fa:2d:a4:8c:67:fa:04:01:
c4:db:2f:ec:88:15:39:41:42:2c:c1:70:16:d8:65:93:24:fa:
ab:5b:6c:06:0b:fd:3c:43:8b:52:a6:29:1d:e8:0b:aa:f3:c8:
6f:d2:c3:c6:a2:20:be:de:2b:bc:70:0c:97:4d:39:2e:3d:37:
c0:9e:58:95:89:ff:d1:93:a5:21:34:ab:23:3f:82:d4:3b:d0:
0b:45:d0:d5:c9:04:3c:7b:d0:ce:9b:73:0d:3c:36:14:a9:5d:
88:78:39:32:06:00:05:4c:c4:b6:1c:39:1e:41:3b:6b:4e:ae:
7b:e7:b2:f4:6c:88:ce:bc:aa:ba:c3:1d:b9:ac:3e:0d:8d:ae:
05:d4:5c:bd:e2:c5:66:3c:aa:9e:5a:e9:16:b8:a5:ed:0e:11:
1a:2b:84:46:1b:3d:b0:2e:87:3a:43:2c:62:c2:f0:5a:f6:cc:
02:1e:89:cf:37:20:7e:99:99:47:b4:77:20:27:d6:03:e1:42:
23:e9:47:e4:71:87:83:66:bc:ec:ed:9b:85:b0:97:28:6d:ad:
6e:88:95:ea:f6:1b:29:7e:8e:40:0f:41:97:32:41:95:b2:82:
c0:bb:92:73:c3:1d:56:d6:75:9c:8a:ac:cf:5e:ed:4e:19:4b:
45:9a:45:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:38:49 2025 by rpki-client