This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/W7HFcFXCnWafKJqfaPOSgjlCEyo.mft
File: W7HFcFXCnWafKJqfaPOSgjlCEyo.mft (raw, json)
Hash identifier: zsG3mz26PS+yXvopg/m3tB/GWneFpmWMwhJnQYBpbCI=
Subject key identifier: 1D:F0:BC:66:30:6F:AC:83:FD:98:42:F1:8C:9E:BB:BE:BB:B8:9A:75
Authority key identifier: 5B:B1:C5:70:55:C2:9D:66:9F:28:9A:9F:68:F3:92:82:39:42:13:2A
Certificate issuer: /CN=5bb1c57055c29d669f289a9f68f392823942132a
Certificate serial: 019AF464D4766166E30321AFB1DE345EAB33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W7HFcFXCnWafKJqfaPOSgjlCEyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/W7HFcFXCnWafKJqfaPOSgjlCEyo.mft
Manifest number: 1370
Signing time: Sat 06 Dec 2025 16:00:39 +0000
Manifest this update: Sat 06 Dec 2025 16:00:39 +0000
Manifest next update: Sun 07 Dec 2025 16:00:39 +0000
Files and hashes: 1: 4DaFRyhphaevZU2yeo88GTb2ZWE.roa (hash: OEDhk/DEbdvUjBCo9g+h/wGJyG5A2KruYkh8mbV9XYs=)
2: W7HFcFXCnWafKJqfaPOSgjlCEyo.crl (hash: mpvlblj36PUCRfQvSXE+S36zlhLTPxM2L6lSYw03Tng=)
3: oLD0eFUFYxck4v3i6OymPCRtKqc.roa (hash: d9IQhkXi9el+adqbpk+yqo7QWqWaJxfrg/LT1tEGEMY=)
4: uB1fsTN5xt9prk3FmqA_vfOk3V8.roa (hash: Xbk+Y99PsH3Ea8NbCtaJ5KS35ZMdZP+5pz4Y3JKvU0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/W7HFcFXCnWafKJqfaPOSgjlCEyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/W7HFcFXCnWafKJqfaPOSgjlCEyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/W7HFcFXCnWafKJqfaPOSgjlCEyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 13:09:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f4:64:d4:76:61:66:e3:03:21:af:b1:de:34:5e:ab:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bb1c57055c29d669f289a9f68f392823942132a
Validity
Not Before: Dec 6 16:00:39 2025 GMT
Not After : Dec 7 16:00:39 2025 GMT
Subject: CN=1df0bc66306fac83fd9842f18c9ebbbebbb89a75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:97:77:8a:05:29:59:e9:d5:e4:95:bb:b9:d1:
f7:b9:78:0d:72:4b:32:7a:50:56:03:5d:b2:a9:5f:
75:e2:0a:40:a9:9d:2b:d0:03:2f:d8:3f:0f:d8:71:
fb:78:a4:ee:89:6b:e7:5c:bb:b4:9a:91:78:82:c6:
3d:9b:f7:ae:66:49:f4:d1:70:34:56:ec:cf:10:03:
82:42:30:8b:64:05:fe:37:32:c2:e6:bc:de:c1:0e:
82:57:5f:a4:77:a1:8d:31:47:c3:25:bc:f9:3f:70:
77:b0:59:28:54:d7:b9:0e:78:4b:27:94:90:13:d3:
22:fe:74:a2:62:5d:74:43:f4:31:07:cf:17:dc:7f:
60:53:04:af:cc:b7:bc:ad:df:9b:69:41:b6:a6:76:
cd:1d:6b:f6:08:ba:bf:53:2e:ea:c4:ae:dc:33:2b:
10:d2:6b:96:e1:3d:ec:76:e1:d4:8f:ea:fe:91:5d:
26:dd:ab:5a:2c:db:f9:e8:e6:e9:11:e4:64:53:b9:
d2:dc:f2:69:52:73:61:70:3e:69:02:46:13:6c:ed:
91:86:1e:6d:4a:f4:6b:b1:85:7b:1a:4f:4a:66:01:
49:30:b4:bf:9b:06:b5:b5:1e:3d:06:21:b9:39:df:
a8:59:cc:49:c9:d7:f3:d4:b0:52:34:0d:7a:b5:b9:
f8:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:F0:BC:66:30:6F:AC:83:FD:98:42:F1:8C:9E:BB:BE:BB:B8:9A:75
X509v3 Authority Key Identifier:
keyid:5B:B1:C5:70:55:C2:9D:66:9F:28:9A:9F:68:F3:92:82:39:42:13:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W7HFcFXCnWafKJqfaPOSgjlCEyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/W7HFcFXCnWafKJqfaPOSgjlCEyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/W7HFcFXCnWafKJqfaPOSgjlCEyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:51:70:af:20:89:15:87:fc:d4:27:ee:86:d1:fc:f7:00:8a:
1e:d9:03:d6:66:a7:6e:d5:1b:c1:80:e8:3f:d1:48:b6:13:46:
88:f3:62:40:1c:b1:70:a5:8d:29:48:98:a5:5a:bb:4b:cc:3f:
f9:c2:4a:6b:8e:fb:d3:30:0e:00:cc:53:14:5a:11:e9:23:ea:
45:41:b8:0a:21:af:94:76:2e:04:af:f5:21:e9:be:42:1f:6d:
c2:4a:35:7e:d1:88:5b:e5:8e:f7:65:6a:f8:05:4d:e3:9a:a2:
e8:54:ca:09:e8:63:c8:94:31:80:86:ba:83:e9:aa:4b:a4:30:
35:63:f2:16:53:bb:99:5c:c6:ed:35:28:b0:a9:56:ad:76:ac:
6e:71:d8:18:64:06:c7:67:fc:b6:2a:7a:4d:30:30:5e:38:c5:
c5:f0:fd:47:2b:bf:c9:72:70:97:94:47:9c:8f:56:c7:99:30:
2c:5e:fa:5c:88:af:a2:53:53:47:9d:73:ed:44:fe:55:0c:74:
4a:dd:e8:74:3c:be:2f:15:0a:b3:a9:bc:36:42:f5:3a:a0:50:
e8:bf:2a:56:11:9c:43:50:cd:35:02:94:e8:42:bd:f3:51:7e:
56:6e:46:ac:fc:b9:41:7c:cb:2c:7c:19:23:a7:ae:44:84:77:
27:47:5d:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:56:05 2025 by rpki-client