This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.mft
File: 1WIM7HCXTQN9d2l1jHRmgwWzLPI.mft (raw, json)
Hash identifier: kWy5zXTd1DAbahgw7iCUxV54W350MxvqzwNcE2tMeEg=
Subject key identifier: 5D:60:C7:90:3B:77:FE:F1:56:76:22:DA:52:B2:8D:71:34:45:B0:BE
Authority key identifier: D5:62:0C:EC:70:97:4D:03:7D:77:69:75:8C:74:66:83:05:B3:2C:F2
Certificate issuer: /CN=d5620cec70974d037d7769758c74668305b32cf2
Certificate serial: 019AF61C22CC6B8F4DAF7D3B7615BF07BC36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WIM7HCXTQN9d2l1jHRmgwWzLPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.mft
Manifest number: 0EC7
Signing time: Sun 07 Dec 2025 00:00:30 +0000
Manifest this update: Sun 07 Dec 2025 00:00:30 +0000
Manifest next update: Mon 08 Dec 2025 00:00:30 +0000
Files and hashes: 1: 1WIM7HCXTQN9d2l1jHRmgwWzLPI.crl (hash: eAfWNSoXOzNnr/CSqxAnR3IuRruN3sye/+j5ijgCGNI=)
2: QCTiWGHEKmUOdJTM7oPATib-rWI.roa (hash: k26mJ2kyD6PN3QHWZlo9Dbc0a0mryGGisjgGFZ6rWDs=)
3: hrRzVBROURephwaz7IZClsaHDKQ.roa (hash: Fof+bR6X5zJSmDYDTc8T97sYO9am/Pj5PX1jkaREIks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1WIM7HCXTQN9d2l1jHRmgwWzLPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 21:29:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f6:1c:22:cc:6b:8f:4d:af:7d:3b:76:15:bf:07:bc:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5620cec70974d037d7769758c74668305b32cf2
Validity
Not Before: Dec 7 00:00:30 2025 GMT
Not After : Dec 8 00:00:30 2025 GMT
Subject: CN=5d60c7903b77fef1567622da52b28d713445b0be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:85:20:3e:9c:5a:6a:eb:ab:d1:d4:a8:97:b2:
25:81:00:d3:aa:f7:c5:12:55:ab:7c:0c:0e:da:e0:
15:d8:24:ae:51:af:14:58:d0:fd:78:2a:a0:1b:34:
9f:3c:bb:32:08:de:ef:68:a9:17:8a:1c:9d:cb:41:
c5:61:55:d4:b6:78:68:22:d8:7e:52:14:55:cb:ac:
99:b1:5e:21:0e:0f:c6:6b:73:8d:d8:16:fd:29:07:
58:cd:92:a0:67:c8:14:ba:9d:e4:15:f3:05:80:b6:
c0:28:0d:9a:b7:58:7c:6d:7e:e7:c3:e2:85:32:c0:
24:f1:a3:47:66:d3:62:68:41:ee:b3:14:28:52:ad:
5b:4b:74:82:52:f2:47:95:c7:57:40:cc:b2:b6:de:
63:e2:9c:3f:42:57:d2:e8:9e:77:8c:80:46:88:95:
ee:09:dc:e1:08:a7:48:26:56:65:7e:ef:c7:95:78:
72:a8:83:c1:d4:7f:e5:a1:a3:f9:ec:84:61:eb:14:
20:a5:71:10:b4:af:64:ed:f7:c4:aa:a8:2a:f1:6e:
1b:cd:2f:ed:ac:58:dc:bc:3d:3d:1b:67:a8:73:74:
35:83:1e:a5:e0:1b:2d:85:d8:da:5c:a6:09:60:35:
2a:4e:10:be:f8:b9:19:c1:62:06:a4:15:80:75:77:
06:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:60:C7:90:3B:77:FE:F1:56:76:22:DA:52:B2:8D:71:34:45:B0:BE
X509v3 Authority Key Identifier:
keyid:D5:62:0C:EC:70:97:4D:03:7D:77:69:75:8C:74:66:83:05:B3:2C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WIM7HCXTQN9d2l1jHRmgwWzLPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:a3:3a:7d:ec:24:75:49:5b:e3:a7:a0:ae:e7:22:28:df:5d:
e1:5e:af:24:9f:f8:ce:b8:4a:d6:c5:20:ef:62:a5:2e:b7:55:
d6:9b:80:94:ed:8e:7f:73:35:dd:04:ee:71:12:5b:68:85:57:
73:0b:a8:e1:ec:49:a5:b6:e4:3a:f7:58:d2:d9:45:cf:09:ca:
bf:c5:fb:ae:d3:c3:5a:d4:33:9b:9d:13:6e:7b:e8:43:99:a3:
be:88:7d:72:b0:6c:1d:45:68:f7:1a:44:e5:b9:bf:9e:2a:36:
94:a8:58:be:79:d1:a3:97:b9:63:fa:0b:d9:63:a9:c0:4d:48:
c5:ee:38:b2:b1:a2:72:99:49:3e:a7:9c:25:65:f4:ba:b3:46:
fd:1f:93:57:c9:49:50:9d:f7:9a:ca:f6:f0:c7:af:cd:0d:83:
f3:00:2b:00:ea:f5:82:ea:ed:25:7e:76:da:82:64:17:9d:a8:
58:45:70:9b:b8:fb:76:08:08:03:25:fe:c4:20:30:e3:0e:d1:
49:02:de:98:14:46:4f:35:b8:93:d2:e7:83:1b:24:40:00:d1:
0a:f4:56:ba:e9:c2:31:3f:78:6c:ee:4a:a2:5c:df:80:dc:36:
61:10:86:d5:2f:59:9d:03:4b:5e:77:a5:a5:15:8b:70:e1:4b:
6c:41:ae:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 07:23:27 2025 by rpki-client