This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/ecd14b-d2a9-40f9-b631-d5c208ea7e7e/1/5wVXsySVkhfZJZvs0aBUm2_6n2U.mft
File: 5wVXsySVkhfZJZvs0aBUm2_6n2U.mft (raw, json)
Hash identifier: 6i6glcLI420gUMDcxoAmStsMqcFbqPSDKhM3yCtpEmc=
Subject key identifier: 0C:23:06:32:5A:E5:9C:0B:7C:6F:AC:A8:16:A0:53:DB:1E:7B:8B:23
Authority key identifier: E7:05:57:B3:24:95:92:17:D9:25:9B:EC:D1:A0:54:9B:6F:FA:9F:65
Certificate issuer: /CN=e70557b324959217d9259becd1a0549b6ffa9f65
Certificate serial: 019AF2769C4C5935B4AFF71399A0CB682DA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5wVXsySVkhfZJZvs0aBUm2_6n2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/ecd14b-d2a9-40f9-b631-d5c208ea7e7e/1/5wVXsySVkhfZJZvs0aBUm2_6n2U.mft
Manifest number: 04C0
Signing time: Sat 06 Dec 2025 07:00:50 +0000
Manifest this update: Sat 06 Dec 2025 07:00:50 +0000
Manifest next update: Sun 07 Dec 2025 07:00:50 +0000
Files and hashes: 1: 5wVXsySVkhfZJZvs0aBUm2_6n2U.crl (hash: 7v900vYI2bGhHmYydwRDI/YKq5teubXUsmMnG7yKPNk=)
2: LC4E7CVdqve2s0imFECZpSxeumc.roa (hash: ctBI7RM04uAc4w/A50VeS7LJSTWUarW03NaBD0t5f6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/ecd14b-d2a9-40f9-b631-d5c208ea7e7e/1/5wVXsySVkhfZJZvs0aBUm2_6n2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/ecd14b-d2a9-40f9-b631-d5c208ea7e7e/1/5wVXsySVkhfZJZvs0aBUm2_6n2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/5wVXsySVkhfZJZvs0aBUm2_6n2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f2:76:9c:4c:59:35:b4:af:f7:13:99:a0:cb:68:2d:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e70557b324959217d9259becd1a0549b6ffa9f65
Validity
Not Before: Dec 6 07:00:50 2025 GMT
Not After : Dec 7 07:00:50 2025 GMT
Subject: CN=0c2306325ae59c0b7c6faca816a053db1e7b8b23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6e:a3:7d:64:99:45:64:3e:4f:8d:78:b6:39:
9c:e7:cb:3d:96:b7:fd:ea:af:e4:4b:76:8b:62:82:
96:40:10:49:52:9d:95:5d:d9:61:48:ce:6e:32:7a:
78:84:0e:5f:5f:d1:96:91:2e:24:fc:cc:87:5d:a5:
c9:fb:bc:a5:89:0c:1d:58:3c:4b:9b:6c:7f:88:39:
8b:7e:48:4a:03:7f:5d:1e:c6:eb:99:ab:7e:22:68:
45:0a:c9:fc:bd:a7:68:7e:f4:6b:5d:8d:ee:02:3c:
de:b5:a8:10:fa:9a:48:52:71:14:76:dd:68:1a:ec:
9e:fc:8b:b9:e4:66:c9:4e:76:51:7d:e1:44:6e:b5:
58:d8:26:83:fe:cc:1e:75:da:38:42:86:f0:1f:96:
7d:1e:04:6a:2e:0c:0d:69:82:9d:40:e7:b8:1c:32:
f2:d3:32:95:ef:bd:13:f4:20:b7:71:9c:9a:bb:65:
df:f9:75:93:2e:bd:02:1e:15:05:c9:9a:41:6a:64:
b2:55:92:56:7a:c9:96:6d:9f:ce:00:d8:11:c4:5c:
50:a8:ef:04:ab:b6:b6:7c:a7:8b:f2:25:d7:5b:dd:
fc:32:8a:dd:95:1f:de:96:f0:1b:f5:ba:6d:01:45:
d1:91:46:10:bf:d6:f4:62:3c:7a:85:15:0f:37:79:
6e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:23:06:32:5A:E5:9C:0B:7C:6F:AC:A8:16:A0:53:DB:1E:7B:8B:23
X509v3 Authority Key Identifier:
keyid:E7:05:57:B3:24:95:92:17:D9:25:9B:EC:D1:A0:54:9B:6F:FA:9F:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5wVXsySVkhfZJZvs0aBUm2_6n2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ecd14b-d2a9-40f9-b631-d5c208ea7e7e/1/5wVXsySVkhfZJZvs0aBUm2_6n2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ecd14b-d2a9-40f9-b631-d5c208ea7e7e/1/5wVXsySVkhfZJZvs0aBUm2_6n2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:4e:09:28:63:6c:88:03:de:cf:1c:20:6b:dc:18:e7:86:83:
84:a3:e7:93:e5:5d:c7:28:a2:55:c3:34:04:e7:91:79:7f:1e:
7d:4a:a5:cf:94:9c:20:76:af:01:f5:99:46:a9:48:1e:5c:f2:
7c:0d:57:cb:e7:49:76:48:f2:2f:29:b5:15:86:aa:8e:1f:67:
e8:91:8d:fb:22:09:ee:37:ff:ab:64:19:69:c2:21:75:2e:37:
26:76:00:82:32:b3:9e:ba:53:4a:e0:2c:72:b2:6a:5d:42:20:
e9:04:f6:ce:41:58:81:35:b1:04:55:0d:bf:a0:ce:3b:89:4b:
a3:9a:8f:ab:db:56:61:96:76:d0:9a:6a:8e:8b:14:0c:f2:0e:
d8:e1:a2:c5:47:82:76:77:36:98:81:3d:f1:bf:4b:7a:be:47:
05:b7:79:06:4a:55:aa:cb:4c:14:cf:0b:56:1f:5d:3f:7b:2e:
aa:8e:55:ef:af:57:11:b3:e4:a2:5e:5a:b3:5d:1c:69:10:e8:
18:0d:61:26:7c:00:d1:93:ff:34:aa:75:59:ce:3a:3d:81:e8:
cb:c6:15:f2:33:19:5d:98:2d:8f:05:d8:fc:9a:63:cc:d3:30:
b7:d6:b5:91:8a:10:df:92:a6:9e:98:b5:48:df:16:dc:eb:60:
35:c1:3a:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:05:45 2025 by rpki-client