This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/5047e8-c547-4b75-afc0-c6ece5901580/1/wPDumEJicDHsomTaxl5f72OUP5g.mft
File: wPDumEJicDHsomTaxl5f72OUP5g.mft (raw, json)
Hash identifier: P6TnGEfwG8XXGSkJBd1tq4wendx3xBSxmB4CvmXtIpw=
Subject key identifier: 52:07:04:92:8D:D7:CF:72:49:27:BD:C0:7A:7A:A5:FA:9D:BA:90:81
Authority key identifier: C0:F0:EE:98:42:62:70:31:EC:A2:64:DA:C6:5E:5F:EF:63:94:3F:98
Certificate issuer: /CN=c0f0ee9842627031eca264dac65e5fef63943f98
Certificate serial: 019AF2094C112690754118119CF066F0561E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wPDumEJicDHsomTaxl5f72OUP5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/5047e8-c547-4b75-afc0-c6ece5901580/1/wPDumEJicDHsomTaxl5f72OUP5g.mft
Manifest number: 0E30
Signing time: Sat 06 Dec 2025 05:01:26 +0000
Manifest this update: Sat 06 Dec 2025 05:01:26 +0000
Manifest next update: Sun 07 Dec 2025 05:01:26 +0000
Files and hashes: 1: KyVtpyRTcvgBS4JaV8NPZOuwdLQ.roa (hash: iY3Qd0RfijC3WmQCC9uFX5dUNLie0ZRKHtS62kmKzs8=)
2: wPDumEJicDHsomTaxl5f72OUP5g.crl (hash: je1UrJ1zGJcXwIp6ZFpUZEiToV3yWjARQjWRymY+yJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/5047e8-c547-4b75-afc0-c6ece5901580/1/wPDumEJicDHsomTaxl5f72OUP5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/5047e8-c547-4b75-afc0-c6ece5901580/1/wPDumEJicDHsomTaxl5f72OUP5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/wPDumEJicDHsomTaxl5f72OUP5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f2:09:4c:11:26:90:75:41:18:11:9c:f0:66:f0:56:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0f0ee9842627031eca264dac65e5fef63943f98
Validity
Not Before: Dec 6 05:01:26 2025 GMT
Not After : Dec 7 05:01:26 2025 GMT
Subject: CN=520704928dd7cf724927bdc07a7aa5fa9dba9081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:17:08:5a:be:86:1c:b4:77:d2:03:42:be:73:
7f:71:83:58:c6:22:61:67:83:a3:68:02:10:03:a8:
f5:1f:a6:b0:b6:85:12:8e:bf:8a:69:ae:4c:83:9c:
76:83:7d:a9:d9:2c:c4:94:f1:ee:5c:c4:36:6b:e7:
17:33:89:90:7b:2a:94:8d:41:a4:c0:f4:7b:fa:d5:
ab:46:d8:ab:4f:d0:3f:b6:36:75:81:d0:c7:60:dd:
e7:8d:ac:c9:a8:a3:4f:f8:96:03:65:f1:a7:d7:ba:
c1:53:3a:e5:fd:65:82:c5:22:16:09:0c:e0:0e:73:
8d:23:e0:b8:8d:81:9b:be:71:81:ee:0f:61:21:e0:
4e:4e:d0:65:22:6c:f8:5f:f1:86:e4:f9:1c:fe:68:
36:04:a1:82:20:e9:cc:1b:34:58:73:f6:03:fd:07:
a6:43:66:e0:2f:9f:17:73:59:3a:cf:59:08:16:fc:
07:3b:cb:74:41:49:ec:db:75:e4:25:06:e3:2c:47:
59:f4:8e:39:38:49:06:75:28:54:21:7c:e1:47:20:
94:5c:f3:5d:9a:9a:26:3b:1f:17:04:0b:26:f9:c9:
6e:46:45:c5:13:d2:4a:45:01:14:a2:6b:7f:e5:e0:
04:21:41:19:5a:eb:fe:52:cf:fb:09:0d:e0:a9:d9:
45:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:07:04:92:8D:D7:CF:72:49:27:BD:C0:7A:7A:A5:FA:9D:BA:90:81
X509v3 Authority Key Identifier:
keyid:C0:F0:EE:98:42:62:70:31:EC:A2:64:DA:C6:5E:5F:EF:63:94:3F:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPDumEJicDHsomTaxl5f72OUP5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5047e8-c547-4b75-afc0-c6ece5901580/1/wPDumEJicDHsomTaxl5f72OUP5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5047e8-c547-4b75-afc0-c6ece5901580/1/wPDumEJicDHsomTaxl5f72OUP5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:da:2a:62:f4:47:83:c8:88:1e:c9:81:5f:b2:ea:e8:d4:b6:
c8:f7:5d:a9:98:5b:1f:34:20:28:d8:02:49:49:70:9e:e4:2b:
ac:92:e7:61:45:1a:5c:69:f0:b9:c8:fc:ee:97:f5:a4:d2:ff:
b6:04:95:43:02:34:2a:01:d6:a4:06:18:ad:fa:d3:ed:78:73:
ae:ab:a4:50:01:ce:c4:3b:dc:1e:88:c3:2d:39:e0:76:37:ed:
50:6a:80:9a:82:7d:a1:0c:87:06:dc:b0:9e:55:9d:23:69:66:
66:7d:91:0a:9d:18:f2:e7:fe:34:8b:4a:85:12:11:0e:1c:2d:
a3:65:36:3b:a0:27:2e:71:ed:22:e8:47:4c:0e:83:e3:e1:45:
ef:f4:9d:29:b0:19:b5:f5:d3:ca:b3:03:65:73:e1:60:a5:a9:
dd:30:68:c3:14:55:8c:81:cd:6a:d7:c8:9f:e2:f5:c2:70:94:
03:e2:58:04:5b:ca:08:ff:c6:e5:06:3e:27:27:16:84:7c:76:
25:29:73:e7:f8:b8:4d:cf:45:26:0c:f7:ab:31:0f:03:47:d1:
89:7a:70:3a:5c:17:65:6c:d9:4b:62:14:5f:9a:a0:bb:18:85:
ab:98:da:35:63:fa:a0:84:cb:f7:e3:30:e0:23:47:a5:de:7a:
f3:09:44:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:21:37 2025 by rpki-client