This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/F5WshDzYupAYj3MTZSu1YSmbKW8.mft
File: F5WshDzYupAYj3MTZSu1YSmbKW8.mft (raw, json)
Hash identifier: r5artZoSIblqBx+zY3bDvNVZtHNQhh5ifLPPDBefaXw=
Subject key identifier: 2D:2E:B4:B1:33:10:7D:EF:D5:EE:C9:4F:70:F9:5C:91:9A:C7:23:91
Authority key identifier: 17:95:AC:84:3C:D8:BA:90:18:8F:73:13:65:2B:B5:61:29:9B:29:6F
Certificate issuer: /CN=1795ac843cd8ba90188f7313652bb561299b296f
Certificate serial: 019AF4D2AA89386A7FFF1330D78BA5A5FC1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5WshDzYupAYj3MTZSu1YSmbKW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/F5WshDzYupAYj3MTZSu1YSmbKW8.mft
Manifest number: 176E
Signing time: Sat 06 Dec 2025 18:00:38 +0000
Manifest this update: Sat 06 Dec 2025 18:00:38 +0000
Manifest next update: Sun 07 Dec 2025 18:00:38 +0000
Files and hashes: 1: BGKLdnBBDejou33OrAMguB4fA_4.roa (hash: nQjabd0iTAbPBudq8662bhERneJSKjsRW9LjqK/8NoE=)
2: F5WshDzYupAYj3MTZSu1YSmbKW8.crl (hash: f2GgtUkgJzsRPZOkbmH8NZYZRcgiSvmCyIDWpyPw7Ps=)
3: LkE6OmvUvLDEPLVXvhD8kSWchgI.roa (hash: TIEViqlGaXbwRIzS3a8WhThpumMDQCKC4sJFBNgCRkg=)
4: ZFdBgXtGzTSyBGSw60XB32cB-AA.roa (hash: 9AZAjPuYZlr2IIMZY508T3D+XaoUBtHO/4Z0E+AyZEw=)
5: _OFNw-GBnd-o_UkPPoF8Y7s25zo.roa (hash: YjFqSfXiAolAj9dxHs/dwz/o2yt4XxRKBGVbY9zdKmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/F5WshDzYupAYj3MTZSu1YSmbKW8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/F5WshDzYupAYj3MTZSu1YSmbKW8.mft
rsync://rpki.ripe.net/repository/DEFAULT/F5WshDzYupAYj3MTZSu1YSmbKW8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 18:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f4:d2:aa:89:38:6a:7f:ff:13:30:d7:8b:a5:a5:fc:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1795ac843cd8ba90188f7313652bb561299b296f
Validity
Not Before: Dec 6 18:00:38 2025 GMT
Not After : Dec 7 18:00:38 2025 GMT
Subject: CN=2d2eb4b133107defd5eec94f70f95c919ac72391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5c:76:07:50:54:dd:79:b1:77:24:f8:ec:66:
9e:f1:9a:af:ee:52:55:6c:34:14:bf:f1:a0:10:b1:
03:ac:7f:66:23:b3:29:c8:33:c9:c8:98:24:af:b1:
0d:83:b3:d2:59:4b:95:df:49:5c:bf:26:ca:62:bf:
9f:52:12:72:f5:75:63:5f:b1:fe:85:6c:2f:c2:73:
e6:c8:91:bd:71:17:d1:ae:ab:72:56:61:48:6c:80:
e1:a8:85:06:0a:9d:a8:63:17:1f:af:18:e6:71:08:
be:27:cc:8e:5f:e7:34:10:41:1b:c8:2c:20:48:df:
a2:e4:73:2a:9a:26:1c:1a:a6:a2:bb:54:f8:57:20:
eb:0a:25:f8:28:9f:b4:58:a9:f7:fd:57:94:45:4e:
ce:ba:94:ff:70:e0:a7:03:81:3f:c5:73:4c:a4:11:
67:b0:47:f3:2d:9c:36:4a:36:b0:d1:e2:c2:05:b4:
ee:f6:63:c1:1a:26:82:73:4f:ff:e0:9e:2f:06:9a:
08:63:8b:33:d9:22:82:8a:88:9e:52:b5:96:c4:82:
dc:0d:7e:9e:fe:7c:50:74:23:42:00:73:ed:25:06:
84:7c:19:42:f0:9c:dc:45:96:81:e9:16:f8:15:cf:
6a:4c:07:30:b7:1d:69:5c:fc:7e:72:cb:6e:9a:f7:
11:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:2E:B4:B1:33:10:7D:EF:D5:EE:C9:4F:70:F9:5C:91:9A:C7:23:91
X509v3 Authority Key Identifier:
keyid:17:95:AC:84:3C:D8:BA:90:18:8F:73:13:65:2B:B5:61:29:9B:29:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5WshDzYupAYj3MTZSu1YSmbKW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/F5WshDzYupAYj3MTZSu1YSmbKW8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/F5WshDzYupAYj3MTZSu1YSmbKW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:ea:51:f9:5a:9e:08:73:b0:6f:b0:4c:0f:ee:c4:5f:38:0b:
cd:35:27:22:11:7b:d5:eb:86:f2:3e:39:0f:a5:e0:5c:5c:eb:
99:7b:03:7d:61:f4:f3:1d:61:50:ef:f5:3b:55:b0:13:76:d2:
1a:7c:61:d6:73:68:a9:37:57:53:fa:6d:d8:fe:a5:69:0c:2a:
61:26:cb:50:eb:2c:47:80:a0:d9:37:19:a7:5d:f0:45:65:b9:
a6:fa:a4:33:83:3a:0a:59:e0:31:3c:14:05:18:2c:65:c7:f0:
5c:91:43:30:74:47:8a:fa:b4:d0:92:c1:5e:75:ad:be:1b:49:
83:c2:92:bb:29:7e:74:e7:3d:e9:39:0a:36:53:d8:ba:90:60:
f5:c7:cf:34:d6:08:71:00:71:3c:11:7d:c0:1c:10:01:3b:fb:
af:e2:55:7a:83:0b:ed:7d:1a:a9:25:86:fa:1c:89:36:a1:a8:
03:40:c8:7e:86:66:c8:a7:af:2b:6a:d3:c4:8c:77:e7:3d:ca:
f4:68:75:a0:61:bb:c6:2a:65:87:bc:67:c4:12:c1:9c:76:65:
7b:ab:4f:99:21:43:c5:24:b0:77:0d:6d:77:85:16:cb:c2:51:
33:1b:2d:a0:a8:6c:5f:47:0d:2d:ed:53:37:a9:94:06:94:e5:
e2:c3:ed:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:03:45 2025 by rpki-client