This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/2e5c49-0d74-487a-a81c-9174df4ddb9a/1/t5msmJxEsuHNq8JY6WypPKrUvWQ.mft
File: t5msmJxEsuHNq8JY6WypPKrUvWQ.mft (raw, json)
Hash identifier: UNju4dpDJoMtIJnZ2wodBaajSLo7aKtCgfN+8Y1oJY0=
Subject key identifier: 2D:BD:A5:C6:B8:53:AB:10:5E:41:D7:1D:8A:94:5C:D8:6F:1D:90:AC
Authority key identifier: B7:99:AC:98:9C:44:B2:E1:CD:AB:C2:58:E9:6C:A9:3C:AA:D4:BD:64
Certificate issuer: /CN=b799ac989c44b2e1cdabc258e96ca93caad4bd64
Certificate serial: 019AF12CCB09C79DE97CA4FBC254BA341BB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t5msmJxEsuHNq8JY6WypPKrUvWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/2e5c49-0d74-487a-a81c-9174df4ddb9a/1/t5msmJxEsuHNq8JY6WypPKrUvWQ.mft
Manifest number: 0B03
Signing time: Sat 06 Dec 2025 01:00:35 +0000
Manifest this update: Sat 06 Dec 2025 01:00:35 +0000
Manifest next update: Sun 07 Dec 2025 01:00:35 +0000
Files and hashes: 1: N5hZORY6BH0_7cHTBNOVNkVCEYU.roa (hash: WR+MD/xxBtQVHPY1qaKKu6KnkMSkFI0jT+q93Z2CIUM=)
2: eG7qPRRyMuGDnTaL5wdOylUl9yc.roa (hash: wEVy8BCY3//obLJ2YEaxXlAcf2i+3jpwZETui93UpjU=)
3: eZ9lsBSBE-9HylowSORYyQP1H3Y.roa (hash: 4bc1g2EfiPBsisazV/A2lyPDwqt6FApY78qkMRjIEcc=)
4: t5msmJxEsuHNq8JY6WypPKrUvWQ.crl (hash: SThQcJzyvhx2OjoAYrdiNhGBst6XY2uuq/mHLFCBhPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/2e5c49-0d74-487a-a81c-9174df4ddb9a/1/t5msmJxEsuHNq8JY6WypPKrUvWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/2e5c49-0d74-487a-a81c-9174df4ddb9a/1/t5msmJxEsuHNq8JY6WypPKrUvWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/t5msmJxEsuHNq8JY6WypPKrUvWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 01:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:2c:cb:09:c7:9d:e9:7c:a4:fb:c2:54:ba:34:1b:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b799ac989c44b2e1cdabc258e96ca93caad4bd64
Validity
Not Before: Dec 6 01:00:35 2025 GMT
Not After : Dec 7 01:00:35 2025 GMT
Subject: CN=2dbda5c6b853ab105e41d71d8a945cd86f1d90ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1d:21:7e:90:b7:7c:a3:ce:33:19:89:7d:fa:
0d:a1:74:df:8d:13:4e:1a:03:10:95:c7:c3:15:d6:
a7:10:15:06:3a:79:00:c6:0b:af:e2:ec:6c:e0:82:
91:1b:50:bb:d0:d9:9e:1e:df:72:69:27:df:00:1b:
09:33:6d:72:e8:70:1a:28:57:10:15:4f:06:12:82:
99:cc:79:37:97:0d:c3:4b:42:15:e8:ad:7c:15:38:
fb:2f:b1:73:42:81:4f:e8:0c:ff:a8:31:9c:40:49:
e9:7e:72:06:f0:6a:cc:34:e3:13:b5:a8:32:c3:64:
f8:5d:f7:17:c4:ba:88:1a:ff:34:11:7b:42:22:cb:
c6:7e:fc:65:ad:6a:d4:aa:10:7e:7f:5a:be:a4:3f:
9c:02:e3:63:5a:05:ab:c1:43:4d:f7:bf:c7:f6:95:
cd:9e:a2:1b:04:d0:94:cc:5d:28:c9:50:77:27:c2:
16:7e:2f:77:71:e5:53:d8:67:a6:d8:c2:e0:49:b9:
6c:f7:59:be:c6:60:ec:95:fb:7c:da:06:97:02:1e:
b6:2b:89:e2:34:d8:1f:72:df:7a:22:5d:88:5d:d5:
2b:88:a8:85:e2:17:ad:11:1b:e6:6c:0c:42:03:18:
d5:f7:d1:2f:74:da:47:30:24:34:a5:c3:c1:6b:5c:
e2:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:BD:A5:C6:B8:53:AB:10:5E:41:D7:1D:8A:94:5C:D8:6F:1D:90:AC
X509v3 Authority Key Identifier:
keyid:B7:99:AC:98:9C:44:B2:E1:CD:AB:C2:58:E9:6C:A9:3C:AA:D4:BD:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5msmJxEsuHNq8JY6WypPKrUvWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2e5c49-0d74-487a-a81c-9174df4ddb9a/1/t5msmJxEsuHNq8JY6WypPKrUvWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2e5c49-0d74-487a-a81c-9174df4ddb9a/1/t5msmJxEsuHNq8JY6WypPKrUvWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:fc:26:47:8f:d5:84:3d:6a:44:0f:6b:7d:03:a7:2c:23:43:
2d:a9:0c:8f:b9:57:97:e1:26:85:4f:50:b1:39:a7:43:8f:38:
c4:bb:42:36:c6:0c:03:86:df:c0:d1:be:0a:59:8a:6b:03:8b:
d4:25:19:b3:31:05:a7:8a:12:1d:15:77:b5:93:6f:d0:de:ce:
72:13:d2:9e:73:e2:55:cc:4f:dd:88:d5:82:8f:7a:31:d9:f6:
a2:13:ba:8b:a7:a5:0a:d1:04:3f:2c:db:05:f3:5d:34:22:84:
4c:52:68:30:1b:9c:88:4b:ee:12:39:fc:2e:6c:fb:91:3e:6c:
6f:72:75:5d:22:7f:a7:43:9c:f9:2b:e0:8c:4a:d3:b4:73:71:
a6:88:cb:ad:9c:d4:4f:83:fb:ee:69:b2:ea:ee:6c:32:77:0d:
8f:38:33:ed:ff:0f:8a:80:c4:fd:8f:aa:75:15:f4:12:d5:7e:
92:d0:78:c5:ca:d3:12:22:d4:ea:f4:03:e5:4a:a5:42:47:73:
1b:4f:bc:19:93:34:7e:4f:f1:1c:a9:cd:9c:9b:62:58:6e:a6:
3a:69:e0:12:09:c7:32:da:1b:98:0d:41:28:60:0e:87:d1:bd:
ed:29:12:fc:c5:b9:55:de:1d:7f:ba:21:0f:d8:a2:4f:00:e5:
cb:93:2c:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:19:54 2025 by rpki-client