This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/S5Mx-nvkcNwXnhbDBumMbHMaV1w.mft
File: S5Mx-nvkcNwXnhbDBumMbHMaV1w.mft (raw, json)
Hash identifier: JdJFWppgv2z+pgMFkcvfxM6zVMSQfikR7on8CMV1f3Y=
Subject key identifier: C8:9D:BC:5E:A7:D9:54:73:82:0C:F4:DD:8E:5B:44:4D:5A:1A:B7:FA
Authority key identifier: 4B:93:31:FA:7B:E4:70:DC:17:9E:16:C3:06:E9:8C:6C:73:1A:57:5C
Certificate issuer: /CN=4b9331fa7be470dc179e16c306e98c6c731a575c
Certificate serial: 019AF12DA13C035E64B0B1D355EFF9EEACE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S5Mx-nvkcNwXnhbDBumMbHMaV1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/S5Mx-nvkcNwXnhbDBumMbHMaV1w.mft
Manifest number: 0527
Signing time: Sat 06 Dec 2025 01:01:30 +0000
Manifest this update: Sat 06 Dec 2025 01:01:30 +0000
Manifest next update: Sun 07 Dec 2025 01:01:30 +0000
Files and hashes: 1: 0_z69Mp8Uq-H2QPlCa0CLWX2coU.roa (hash: wm+6P/OKtHhF/O/CkulyZkvoYkTpsb5odPnFIekRy3I=)
2: 38pIrQ1QnBg71pfob_zDIDUIiFQ.roa (hash: U9USjryy/F+R/DZGDivAyocf94409+iay7FO0stAHGw=)
3: N0lzm-3vygtdiWRBn9eXgxBlyZI.roa (hash: 7Y1+rEyMo7py1HRJqnnqE/nkyygO/OisK6QTtH8xA/o=)
4: S5Mx-nvkcNwXnhbDBumMbHMaV1w.crl (hash: sa85dfuOTynkxn3oRpRJ66xK+Ll0OChcS1gFjvA+Q4E=)
5: XMt-aoKNBYw2mRgLlCcfOfS37es.roa (hash: G7hUI9W+vjvJqWM1E6n7TXAiBwlaOz/lSk1JZkA8kgc=)
6: _Khf-n0vZfCAmh5Kz1BybwMWUtk.roa (hash: kt8gl4Nj76yRL5CdwZbXkVqwHK70gqMfG0Z0kpN+NYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/S5Mx-nvkcNwXnhbDBumMbHMaV1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/S5Mx-nvkcNwXnhbDBumMbHMaV1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/S5Mx-nvkcNwXnhbDBumMbHMaV1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 01:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:2d:a1:3c:03:5e:64:b0:b1:d3:55:ef:f9:ee:ac:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b9331fa7be470dc179e16c306e98c6c731a575c
Validity
Not Before: Dec 6 01:01:30 2025 GMT
Not After : Dec 7 01:01:30 2025 GMT
Subject: CN=c89dbc5ea7d95473820cf4dd8e5b444d5a1ab7fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:59:e3:da:3a:18:26:16:8e:82:b9:74:08:7b:
56:d8:26:72:c7:17:8e:35:61:66:dd:c5:e6:c9:98:
f2:14:f3:52:11:02:91:cd:ae:3d:7e:f7:70:ce:3f:
fb:55:43:7a:98:0a:f4:4a:c3:2a:0b:66:26:f8:58:
6f:8f:69:d6:9f:f8:3b:02:86:3d:42:40:e1:8d:a2:
24:fd:71:29:f0:f0:19:81:31:38:c6:fc:81:68:9c:
b2:50:bd:f7:43:21:f1:e6:7d:43:3d:73:dd:d7:63:
d0:62:5c:69:0a:50:74:cc:43:54:23:a4:81:d1:dc:
0f:b2:08:a8:6a:e3:bd:20:e1:40:88:46:7f:ec:f0:
18:f1:ee:37:99:db:d2:5f:e9:08:6a:50:c6:b2:c5:
4a:d0:15:43:e6:02:d7:e2:99:a9:f8:50:47:36:61:
8c:cf:76:06:29:64:85:ad:c9:6b:af:85:b3:89:c0:
a1:89:53:e5:6f:14:e7:db:9f:a2:44:75:9e:35:bd:
9b:2d:c8:2a:ec:64:a5:98:a3:1d:72:7e:89:ff:50:
61:d0:44:bf:6e:d7:ab:ac:84:f7:0c:64:58:29:0d:
a7:e7:6d:91:02:c5:3a:f0:93:7f:8b:31:c5:4c:8b:
93:62:4b:ed:b2:4a:6a:5b:56:42:9d:77:38:cc:7e:
d9:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:9D:BC:5E:A7:D9:54:73:82:0C:F4:DD:8E:5B:44:4D:5A:1A:B7:FA
X509v3 Authority Key Identifier:
keyid:4B:93:31:FA:7B:E4:70:DC:17:9E:16:C3:06:E9:8C:6C:73:1A:57:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5Mx-nvkcNwXnhbDBumMbHMaV1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/S5Mx-nvkcNwXnhbDBumMbHMaV1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/S5Mx-nvkcNwXnhbDBumMbHMaV1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:0f:cd:20:44:0e:74:f8:5c:3e:b7:de:b1:b9:e4:fe:db:a7:
b6:ca:25:dd:b3:25:6b:a5:2d:7b:f1:32:78:2d:0c:a9:55:80:
a2:7e:1c:04:a0:89:8e:47:a1:be:57:0a:f8:4c:1b:c6:2a:73:
fb:37:30:5f:ef:84:d0:64:ac:0e:58:ca:c3:d3:ab:d9:dd:eb:
35:31:96:6f:23:53:e7:ba:4b:c0:07:a2:22:30:d4:f6:63:09:
9f:7d:f3:b4:0e:ef:d6:56:05:fd:c8:0e:e3:2f:10:71:60:92:
83:c4:98:2d:5a:f1:71:8f:9b:6a:72:10:ee:22:22:45:33:97:
8d:b9:91:40:e5:51:1f:61:6f:f6:56:2e:cc:8e:8b:1a:a5:b6:
52:f6:c9:fb:ca:fa:ee:73:f3:41:4e:d7:0a:c7:b2:98:ef:d5:
63:c4:78:97:12:dc:ab:92:c8:7b:9c:b8:39:70:30:61:6e:53:
9f:50:bf:32:b6:bf:65:66:fa:b4:c2:79:5d:de:29:33:e8:26:
82:06:0f:18:ab:b6:d3:cf:de:57:4b:11:61:3e:84:4f:1b:5f:
1e:ac:0c:ed:6e:3c:74:fe:70:5a:17:70:8b:1c:cf:2f:85:26:
a9:5d:ec:e8:d0:84:f2:65:b3:3b:a4:31:17:e1:86:15:73:d7:
86:31:ad:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:21:29 2025 by rpki-client