This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f0ea2c-d27d-4ecf-ba25-1e08dfd235c7/1/WuQ0HiOjMV7URVpUXRpIzvKeeJM.mft
File: WuQ0HiOjMV7URVpUXRpIzvKeeJM.mft (raw, json)
Hash identifier: bfDw0w8g5tw4yddFy6M8ahqiRQ8yAz4Td0V5OXoj8os=
Subject key identifier: AD:44:76:5E:7A:11:CA:44:71:1B:C4:37:E0:41:96:E7:E5:45:5E:6B
Authority key identifier: 5A:E4:34:1E:23:A3:31:5E:D4:45:5A:54:5D:1A:48:CE:F2:9E:78:93
Certificate issuer: /CN=5ae4341e23a3315ed4455a545d1a48cef29e7893
Certificate serial: 019AF27732FB26E56125A352C2BFEAAD06DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WuQ0HiOjMV7URVpUXRpIzvKeeJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f0ea2c-d27d-4ecf-ba25-1e08dfd235c7/1/WuQ0HiOjMV7URVpUXRpIzvKeeJM.mft
Manifest number: 175E
Signing time: Sat 06 Dec 2025 07:01:29 +0000
Manifest this update: Sat 06 Dec 2025 07:01:29 +0000
Manifest next update: Sun 07 Dec 2025 07:01:29 +0000
Files and hashes: 1: H-w2T99zCrrlKQYxLvTqjVHNtNs.roa (hash: 8/w5H9itBFo+zRfCIM8deFlqPQ7aIcS5e5Q1K2Dc7sw=)
2: WuQ0HiOjMV7URVpUXRpIzvKeeJM.crl (hash: 4E3O6DRgWKDSDCJ89TtIc1TuyY66Mx9ic0bsyaAxTjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f0ea2c-d27d-4ecf-ba25-1e08dfd235c7/1/WuQ0HiOjMV7URVpUXRpIzvKeeJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f0ea2c-d27d-4ecf-ba25-1e08dfd235c7/1/WuQ0HiOjMV7URVpUXRpIzvKeeJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/WuQ0HiOjMV7URVpUXRpIzvKeeJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f2:77:32:fb:26:e5:61:25:a3:52:c2:bf:ea:ad:06:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ae4341e23a3315ed4455a545d1a48cef29e7893
Validity
Not Before: Dec 6 07:01:29 2025 GMT
Not After : Dec 7 07:01:29 2025 GMT
Subject: CN=ad44765e7a11ca44711bc437e04196e7e5455e6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7d:ca:ad:e9:36:4a:97:25:7b:04:39:35:39:
e5:54:9f:98:bf:f4:95:49:24:fd:c1:f3:5e:82:e3:
f4:55:59:20:2f:98:54:de:f6:e3:7a:8b:49:6e:f7:
4c:3d:72:01:47:aa:c0:05:7c:7a:f1:8d:a9:13:f3:
c6:c1:4b:22:c5:bb:3b:39:25:15:e1:d7:a1:4d:45:
39:d5:20:1e:0f:90:3d:14:a0:2b:30:51:0b:4c:8c:
2e:70:31:2e:a9:e9:3f:c1:e3:59:be:15:55:cf:17:
2f:80:ca:11:68:d9:15:f3:6d:64:91:a7:4b:f6:68:
69:a3:3b:26:2f:b1:6f:d9:11:44:c0:27:8c:2c:63:
f4:64:8f:5d:ff:9e:bf:51:39:ca:ea:16:60:ac:a0:
5a:5c:a7:b9:14:35:d3:f4:1b:a0:14:70:43:ed:5b:
fe:c8:9a:3b:42:ab:2d:53:79:5d:d8:6b:0c:32:9d:
4a:72:6f:dd:f4:f3:09:a2:3b:49:67:46:99:6a:df:
ab:d1:58:67:cd:06:f1:92:3a:75:67:6c:e7:06:07:
b0:36:8d:bf:b9:a1:13:b9:e5:22:83:95:95:fa:11:
a7:1f:19:f1:37:2b:53:b7:7c:f6:71:1f:3a:5f:0f:
d1:75:b4:ec:12:c6:50:f2:28:fd:fc:eb:be:2d:9c:
be:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:44:76:5E:7A:11:CA:44:71:1B:C4:37:E0:41:96:E7:E5:45:5E:6B
X509v3 Authority Key Identifier:
keyid:5A:E4:34:1E:23:A3:31:5E:D4:45:5A:54:5D:1A:48:CE:F2:9E:78:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WuQ0HiOjMV7URVpUXRpIzvKeeJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f0ea2c-d27d-4ecf-ba25-1e08dfd235c7/1/WuQ0HiOjMV7URVpUXRpIzvKeeJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f0ea2c-d27d-4ecf-ba25-1e08dfd235c7/1/WuQ0HiOjMV7URVpUXRpIzvKeeJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:9a:e6:c9:62:d0:fd:4e:49:ae:e3:40:44:03:01:f8:82:6d:
d4:1d:ad:63:ae:49:06:f1:eb:ce:05:01:18:e5:20:cd:d9:c9:
17:65:75:a6:08:04:67:85:da:04:5a:fc:dd:64:39:4c:2d:c2:
c9:e9:37:4f:c0:29:0f:8f:6e:cb:27:8d:f0:f4:17:c9:9b:38:
1a:3b:72:52:cc:ef:fa:75:b8:74:c8:a2:70:01:99:7c:08:93:
9c:18:b8:f4:f6:41:8f:5d:be:97:33:3a:81:6e:22:b9:6b:54:
a8:56:83:8d:b4:96:5d:37:c7:95:a4:5d:5d:6f:01:26:b3:15:
77:1a:e7:42:2b:b7:7b:6f:57:80:91:57:b4:ea:b0:8d:03:7a:
b1:16:84:23:5b:87:93:78:8e:53:b7:df:f4:65:2b:96:67:14:
c5:11:ff:e6:16:cc:39:55:c7:36:c1:49:23:ca:06:7d:9f:80:
a6:d8:e8:d4:da:08:f4:38:59:da:cc:f6:45:2d:05:40:0a:fd:
61:03:c2:01:25:08:eb:14:63:63:96:25:60:5d:b9:f4:82:09:
4e:ff:82:50:95:20:57:c5:24:38:27:18:c5:c5:91:47:c0:8d:
bd:de:27:ab:6a:28:74:a2:84:02:53:74:91:03:7f:84:77:55:
f8:99:36:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:58:38 2025 by rpki-client