This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/4b7576-2b9c-43af-8817-6b0065508996/1/WkpH1YK7DpaA-JJYq5bQWGfTUu8.mft
File: WkpH1YK7DpaA-JJYq5bQWGfTUu8.mft (raw, json)
Hash identifier: 0xrzHEcK2mhMXaHUpfN1Q/NbJ+xmSQ/hBqNL9Mmco8U=
Subject key identifier: 31:02:D7:30:6D:4D:58:17:BB:BF:35:4A:EF:AE:1D:6E:EE:4E:5C:1C
Authority key identifier: 5A:4A:47:D5:82:BB:0E:96:80:F8:92:58:AB:96:D0:58:67:D3:52:EF
Certificate issuer: /CN=5a4a47d582bb0e9680f89258ab96d05867d352ef
Certificate serial: 019AF12D4E09EDB4C7CB79DC6D5D80E0CB36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WkpH1YK7DpaA-JJYq5bQWGfTUu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/4b7576-2b9c-43af-8817-6b0065508996/1/WkpH1YK7DpaA-JJYq5bQWGfTUu8.mft
Manifest number: 154A
Signing time: Sat 06 Dec 2025 01:01:09 +0000
Manifest this update: Sat 06 Dec 2025 01:01:09 +0000
Manifest next update: Sun 07 Dec 2025 01:01:09 +0000
Files and hashes: 1: IAWEnryJVpaK2PC1i1p1gzyA5aM.roa (hash: V8zeqHEXmBXDf+5VLnGO8LhbeOvdCzFQOaNucWQFdJs=)
2: IxvoZc4F3Qaa5ur1q1XhsdbIwYI.roa (hash: uBXV07kX7Q7HlXXY9czyil+ZyCPUWCh5XY0q2xGQk9E=)
3: WkpH1YK7DpaA-JJYq5bQWGfTUu8.crl (hash: jPxtTpWgALielht9TbgW9ZjRInvhLgKQlRD3Szlml38=)
4: gcLYIM7NGFOjlEOaeCFYBSRJsQU.roa (hash: Gb37A8lctlHsApBbJF+wFlN+wBQgxlqZQzSQ9DIxfCE=)
5: tMFph9cmJacY9_6pBYOFi0X8qxI.roa (hash: yN3wCBUXrF4u5FVJmYsnf0p7F7khnudzz4ntTOuoOuA=)
6: tYYSCJCFza29RNke_2EcrZu7XHo.roa (hash: lB4PFBQhaKp43hqTQ3cMQhuQr2bCAaP0ut24A/mZGfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/4b7576-2b9c-43af-8817-6b0065508996/1/WkpH1YK7DpaA-JJYq5bQWGfTUu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/4b7576-2b9c-43af-8817-6b0065508996/1/WkpH1YK7DpaA-JJYq5bQWGfTUu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/WkpH1YK7DpaA-JJYq5bQWGfTUu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 01:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:2d:4e:09:ed:b4:c7:cb:79:dc:6d:5d:80:e0:cb:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a4a47d582bb0e9680f89258ab96d05867d352ef
Validity
Not Before: Dec 6 01:01:09 2025 GMT
Not After : Dec 7 01:01:09 2025 GMT
Subject: CN=3102d7306d4d5817bbbf354aefae1d6eee4e5c1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ed:29:48:23:e1:1a:ef:45:68:23:9e:1c:c1:
ed:a4:0e:d7:38:08:5f:ed:b5:a7:e3:88:d4:61:c3:
b6:00:0d:12:ef:5e:10:64:49:b2:76:ee:c6:5d:c8:
c3:14:62:0d:a3:36:59:ce:4a:b5:31:02:84:6c:bb:
be:b6:64:77:fa:ff:85:a8:d1:94:e6:2b:86:18:d3:
c9:06:4d:9f:01:be:0b:59:e0:3c:06:47:b9:0f:61:
a6:af:34:bb:9b:cb:2c:d8:ef:37:13:77:8c:18:55:
92:7a:86:5a:1e:4d:9a:ac:9a:df:e2:f5:3b:90:43:
30:35:b3:08:ce:0d:4d:1c:ac:e0:af:74:37:23:38:
8d:25:5b:fe:4a:4c:42:13:a5:83:03:75:57:27:d9:
27:ac:eb:e2:fa:fe:57:95:79:36:f2:98:b6:2d:af:
ce:84:74:a8:38:12:bc:5a:4f:cf:5b:bf:d7:32:67:
a6:2a:7a:b3:cb:c2:18:3b:7d:4f:5d:f8:09:af:a5:
cf:7d:fd:0f:1a:73:8c:60:fc:56:06:47:45:da:1d:
a3:6b:21:f7:74:b0:5e:e6:cc:42:a4:21:ad:5a:94:
45:c0:f6:69:96:b1:a4:f2:ac:d2:8c:e3:6e:b8:9c:
ea:b5:0b:54:d0:dd:83:b0:88:91:3b:08:e9:58:78:
2e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:02:D7:30:6D:4D:58:17:BB:BF:35:4A:EF:AE:1D:6E:EE:4E:5C:1C
X509v3 Authority Key Identifier:
keyid:5A:4A:47:D5:82:BB:0E:96:80:F8:92:58:AB:96:D0:58:67:D3:52:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WkpH1YK7DpaA-JJYq5bQWGfTUu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/4b7576-2b9c-43af-8817-6b0065508996/1/WkpH1YK7DpaA-JJYq5bQWGfTUu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/4b7576-2b9c-43af-8817-6b0065508996/1/WkpH1YK7DpaA-JJYq5bQWGfTUu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:7c:ef:b2:7b:83:88:0c:33:21:a2:b9:71:96:5d:fe:d3:b3:
44:04:f9:44:c0:cf:c6:9d:ad:43:57:0b:24:dd:29:50:83:61:
27:f6:4b:03:aa:93:78:c1:31:f0:d9:83:97:8a:d2:05:35:98:
a0:6d:b8:2e:ed:20:eb:a6:31:f4:da:4c:36:77:06:20:d4:a4:
04:91:fb:82:fe:f7:6e:1d:fb:8a:6c:dd:e6:59:07:36:ba:a4:
13:23:42:d2:c3:f6:81:04:12:21:36:2c:70:f4:fc:69:ca:11:
7f:f8:8a:b8:d1:fe:34:fe:a2:82:f3:ea:08:6c:40:84:b4:5e:
5a:dd:0f:ad:55:46:60:37:f5:0d:6e:fa:b4:c5:ef:58:e9:28:
bd:c7:bc:c4:24:dd:c5:fc:42:01:6f:6f:ef:4b:8b:0d:5b:b4:
06:77:d3:dc:03:0d:e4:34:2b:2e:67:64:ba:5c:ee:45:d9:b0:
f5:7e:ea:9a:75:87:ef:df:84:2e:21:e8:33:54:10:91:2b:fd:
31:42:4c:98:99:8d:d7:0c:86:56:7d:10:ed:c6:91:7e:4b:20:
73:f5:13:65:02:60:08:74:27:6c:8a:17:eb:1d:e0:da:9f:15:
f5:8a:a6:aa:90:97:fe:88:c1:c4:2a:d0:7e:6e:34:4e:a4:20:
a6:24:97:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:13:12 2025 by rpki-client