This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.mft
File: wQmKGQW70zgVM4KPa3_SJxcEMe8.mft (raw, json)
Hash identifier: 4Vdf2vHpbdnGYnL1mSGK52r+x+ibngQoFjhfFSinFWk=
Subject key identifier: 04:FD:37:52:CD:90:D8:5E:6C:D9:C4:E8:6F:16:E5:5D:D9:77:68:E2
Authority key identifier: C1:09:8A:19:05:BB:D3:38:15:33:82:8F:6B:7F:D2:27:17:04:31:EF
Certificate issuer: /CN=c1098a1905bbd3381533828f6b7fd227170431ef
Certificate serial: 019AF1D22AFD2928EEA5C327B2E549827273
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQmKGQW70zgVM4KPa3_SJxcEMe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.mft
Manifest number: 1783
Signing time: Sat 06 Dec 2025 04:01:13 +0000
Manifest this update: Sat 06 Dec 2025 04:01:13 +0000
Manifest next update: Sun 07 Dec 2025 04:01:13 +0000
Files and hashes: 1: 9YIKds84pmkqqSUhkc6fWWyFF_U.roa (hash: Zl/u5pK0GcTZlUuMm3FsQSFvKxX3ghw5NC/1Sio1XdQ=)
2: Ak9XK5YFlXI4AoNUomQD5SJWMTQ.roa (hash: 8frbczP/WVHp6KYWn7u+vpW6oUS+dkfZt+1mfqWJkiA=)
3: DaFBPQjNIt89bZ-zjtkqkYfP25s.roa (hash: pp9Ceedlj+qqJJCfZTMjKuHvEOYjJEHNhnFxlngbiSQ=)
4: F7VtIEmMZmsdWkt0VCX4cwPSD3I.roa (hash: pt6vMx0dEwVx2sHh/Y99xQxE2icOOT8mwZQHp5NGxZY=)
5: LiSuEZmo37KNrprlXWzfzY5S02k.roa (hash: e8rmMPPNFWDzhYmLB6a/wGnc8mLE8LxBTmrpswyhCBs=)
6: cdYJonDxjk5U7tPV78g4h2hSLZo.roa (hash: WtYQS9yTDEW6OANZ+f6hcNrUBMmPvrFNaBsMzLB79qc=)
7: kJ6H7AmIyUvdxMRQ4aBB5sxRD_U.roa (hash: QA88mloj+h/kCAIWi5WNjJl3VlB1DBIdl1O6jQwCD1U=)
8: rjGmFkwnUYXEX0cUD6PtZIhDgCQ.roa (hash: 8lyI42qGGJpOurvj2Ytg7oiHPag1u3DuPow/DXZUQqs=)
9: v1N3xmdR1ASJlnAcsLFTqDIui1A.roa (hash: KG5H+1BX4vaK5edjyu9fGn2Pxz5+wSG/Gox81B9kK+4=)
10: wQmKGQW70zgVM4KPa3_SJxcEMe8.crl (hash: DIZc51YtwAfYButq/DNhR+VYGTnnaoxZdja0ptXGDHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wQmKGQW70zgVM4KPa3_SJxcEMe8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:d2:2a:fd:29:28:ee:a5:c3:27:b2:e5:49:82:72:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1098a1905bbd3381533828f6b7fd227170431ef
Validity
Not Before: Dec 6 04:01:13 2025 GMT
Not After : Dec 7 04:01:13 2025 GMT
Subject: CN=04fd3752cd90d85e6cd9c4e86f16e55dd97768e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:01:31:f3:ac:c3:0d:fa:9d:12:73:10:c1:f9:
c2:c4:52:b4:67:8e:3f:b2:3a:2c:38:32:14:c1:f8:
38:a4:e8:47:b8:cf:7d:71:6a:3c:dd:dd:8f:29:8e:
59:82:9a:4d:08:65:bc:66:2d:96:b3:f4:aa:f6:60:
5e:5e:ac:a3:59:90:4a:8a:b7:79:1f:6f:21:79:72:
4f:fd:a2:dc:38:2d:44:39:3c:3c:4f:1d:18:9b:bc:
94:86:39:4d:80:92:19:fd:54:81:4f:a4:c9:b8:ca:
12:c0:2e:98:9c:24:7d:68:77:c1:58:17:12:b2:bc:
37:dd:02:3e:9e:58:1b:3c:87:e5:04:ff:f1:f7:2a:
04:ef:55:3d:2f:ea:18:73:21:45:0c:04:51:21:8b:
45:99:7f:bf:31:c5:d8:3d:bf:a0:0d:63:0b:06:6a:
6b:d6:e2:6f:10:cb:12:1e:1b:32:32:5b:93:69:75:
ee:40:e9:6e:13:76:a1:99:f9:be:66:b3:b8:31:1e:
53:4b:7a:ff:e2:c6:4a:66:45:3b:de:c5:e6:3a:8c:
b2:4c:06:1c:0d:94:cf:65:a1:4f:bd:f7:20:4f:5d:
5a:6f:4e:c7:e0:4f:df:b0:1c:eb:93:fe:b6:e9:67:
90:30:9b:62:99:4d:51:ca:d0:c5:fe:08:11:11:c7:
a1:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:FD:37:52:CD:90:D8:5E:6C:D9:C4:E8:6F:16:E5:5D:D9:77:68:E2
X509v3 Authority Key Identifier:
keyid:C1:09:8A:19:05:BB:D3:38:15:33:82:8F:6B:7F:D2:27:17:04:31:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQmKGQW70zgVM4KPa3_SJxcEMe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:0c:e0:99:12:2f:53:30:d4:1e:6a:67:b4:cc:09:dd:a1:66:
05:85:d4:0d:41:52:b9:de:9e:f2:8c:db:71:63:d6:d6:4b:cf:
76:14:22:60:4a:1e:a6:05:f6:f3:e2:39:71:a1:9d:06:84:4d:
66:3c:0b:f8:a4:a1:56:a4:e6:74:38:b1:a3:cb:d6:2a:fe:3c:
1a:8b:8b:34:cd:23:6d:36:22:2d:6c:2d:26:e2:34:f0:41:cf:
db:90:5f:72:20:0a:67:e2:0a:e0:a8:0b:0f:c9:60:92:e6:6f:
e8:a0:71:84:64:86:8c:36:09:dc:a5:df:da:fd:69:1a:cd:07:
46:66:ec:1c:ec:a1:77:4a:0e:7d:d1:15:8a:c2:38:9b:ec:ae:
0a:07:aa:c7:4e:81:2d:71:c6:7e:2d:40:9e:8d:9d:5e:48:05:
a3:5d:7e:1e:65:54:47:40:c0:46:c4:3f:4c:1f:d5:74:94:d5:
5e:13:88:23:f6:78:70:98:64:cc:7f:3e:3f:cb:7d:41:cd:61:
2f:1e:5a:09:cf:b9:a6:ac:cf:ce:8c:f9:3e:af:8b:3e:6b:d1:
80:eb:37:17:7b:b9:7c:bf:c6:fd:b6:1f:79:79:e9:0f:13:f6:
50:c4:4a:0e:c1:b2:66:44:ec:fd:f5:d6:ad:28:bc:01:46:9a:
2e:05:3f:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:26:23 2025 by rpki-client