This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/b0fb0b-b96a-4390-86a8-6fe35ae54a5b/1/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.mft
File: RWjQpyBFYLY1bYN7vxUQ2WNt9jo.mft (raw, json)
Hash identifier: /8Vb79F/9X5pM55CWpY4F30HlnGoC5ap5eC3RTWx/AQ=
Subject key identifier: A3:46:59:18:05:1A:2F:2F:80:4C:FA:79:FA:9C:3B:82:44:BB:B7:07
Authority key identifier: 45:68:D0:A7:20:45:60:B6:35:6D:83:7B:BF:15:10:D9:63:6D:F6:3A
Certificate issuer: /CN=4568d0a7204560b6356d837bbf1510d9636df63a
Certificate serial: 019AF3F733633773175A048296453502B158
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/b0fb0b-b96a-4390-86a8-6fe35ae54a5b/1/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.mft
Manifest number: 05C7
Signing time: Sat 06 Dec 2025 14:00:55 +0000
Manifest this update: Sat 06 Dec 2025 14:00:55 +0000
Manifest next update: Sun 07 Dec 2025 14:00:55 +0000
Files and hashes: 1: BMhhovXMuBpKJMmG-rBz-nuJzd4.roa (hash: sNEztFGkvH7v3y29OhQmoouHMsRsRH9HNC026mey6ck=)
2: MK26JBdAOQHbbLIoXza8gOwP2L0.roa (hash: bfaAHwdU8g3+OMyQR1jrgL3b4O52QKIOBn86eAMWqtg=)
3: RWjQpyBFYLY1bYN7vxUQ2WNt9jo.crl (hash: r6mrOucfJ8eHZE6ZAaMyAWbvKwHVclqU27Qnl5sswdc=)
4: XhbfPxl0mTvKXWs6aYEV15Sf1Zw.roa (hash: Y9+T7Mn/gKGvDXGyHmLcv1HeCAXW8+WFBTkhydKojcU=)
5: ktaokuPl5jOXxjmENV6Nzr3jvRE.roa (hash: QCRewanHdBrJ4jBO5+8cVb/CCKaBft0aBHc179F+ba4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/b0fb0b-b96a-4390-86a8-6fe35ae54a5b/1/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/b0fb0b-b96a-4390-86a8-6fe35ae54a5b/1/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.mft
rsync://rpki.ripe.net/repository/DEFAULT/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 13:09:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f3:f7:33:63:37:73:17:5a:04:82:96:45:35:02:b1:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4568d0a7204560b6356d837bbf1510d9636df63a
Validity
Not Before: Dec 6 14:00:55 2025 GMT
Not After : Dec 7 14:00:55 2025 GMT
Subject: CN=a3465918051a2f2f804cfa79fa9c3b8244bbb707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7b:cd:61:4b:c3:af:59:c5:eb:ac:b5:7b:9a:
4a:13:2f:3e:0d:30:34:da:11:5d:69:1e:bb:8a:e9:
ea:41:65:94:cc:17:64:77:15:4b:2d:0e:5e:39:db:
94:95:e1:c2:fc:1d:1e:52:cf:ca:d7:76:c1:a8:94:
d9:4d:ee:fe:07:57:1c:96:9e:72:17:32:2e:90:64:
ce:36:21:65:00:04:91:7d:99:9c:1f:09:9a:53:8e:
01:61:6c:c9:71:cb:38:17:58:4b:ca:a1:32:3c:b8:
9b:c2:a2:e6:17:8b:a1:e5:48:ce:3d:10:19:aa:fb:
0e:66:cd:15:7d:6d:5d:a4:8a:02:73:10:5d:ed:0e:
c8:81:77:9c:57:2c:e7:01:1f:a6:8b:05:23:e8:3b:
3d:89:28:10:77:d6:74:2b:0f:43:58:49:70:46:d1:
23:73:e1:31:c2:53:be:e5:a4:f7:f7:c3:02:dd:c5:
33:10:bd:e8:2f:61:56:84:1d:2c:20:ad:cf:a9:e4:
b7:e0:57:bd:8b:c7:55:2e:dc:94:d4:c3:89:09:79:
c8:c7:0c:a2:c7:41:27:9e:72:e4:7c:4a:0b:25:4e:
26:42:7f:40:3c:c4:40:cd:9d:2f:df:98:20:84:df:
0d:38:80:43:d5:e3:35:7a:83:c3:74:08:53:37:f8:
47:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:46:59:18:05:1A:2F:2F:80:4C:FA:79:FA:9C:3B:82:44:BB:B7:07
X509v3 Authority Key Identifier:
keyid:45:68:D0:A7:20:45:60:B6:35:6D:83:7B:BF:15:10:D9:63:6D:F6:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b0fb0b-b96a-4390-86a8-6fe35ae54a5b/1/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b0fb0b-b96a-4390-86a8-6fe35ae54a5b/1/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:19:a3:10:6d:d8:43:e2:ef:5d:ae:39:da:2b:2e:a4:07:ab:
72:65:2c:46:cc:97:cd:e9:ac:78:4b:d6:dc:9e:d0:6c:e1:81:
32:ae:f9:5f:f2:16:b9:59:5d:0d:c8:44:c6:77:6d:07:90:6e:
73:45:b0:66:79:29:fb:c8:e3:8d:59:27:1f:bc:8a:d7:8e:f8:
8b:2b:ec:e5:5c:82:1b:77:e3:8f:fc:a2:ca:2a:36:9e:2b:db:
e9:e6:de:4d:4f:93:f5:9b:9a:42:5a:a8:4e:e0:14:1f:38:16:
a1:10:d1:16:9a:23:01:b4:b3:7f:4c:aa:09:c6:10:55:c4:d0:
fb:8b:e1:a7:08:f4:13:3c:75:6b:9e:d5:1e:48:eb:d8:63:70:
f3:26:e3:bb:9e:7c:87:5b:42:d1:dc:bd:8e:73:b9:55:15:fa:
3b:74:64:fb:df:1b:13:40:ed:cb:36:8d:12:11:aa:1e:1b:e7:
bf:46:7e:0c:35:9e:5d:ec:d2:d6:48:8c:d3:44:63:1b:81:b6:
a1:5a:fc:9d:ed:af:04:ac:af:9b:cc:f8:af:cc:1d:5a:d4:1c:
00:f0:e5:fd:39:dc:19:ef:40:b8:32:b5:6f:f2:f1:0a:c9:69:
f2:df:9d:cf:b5:8c:e4:5b:95:bb:21:d7:b3:30:8f:93:95:53:
d9:e8:19:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:16:25 2025 by rpki-client