This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft
File: 1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft (raw, json)
Hash identifier: s62Dzpx1NdN7bpPAipA8WshdyfOZbwTmOErq9QoKGig=
Subject key identifier: 03:94:D1:39:15:8E:11:CE:D3:70:71:E8:3E:38:C4:80:0F:B2:9B:67
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial: 019AF31B8528F82F805C210269EA853EFC1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft
Manifest number: 0D75
Signing time: Sat 06 Dec 2025 10:00:58 +0000
Manifest this update: Sat 06 Dec 2025 10:00:58 +0000
Manifest next update: Sun 07 Dec 2025 10:00:58 +0000
Files and hashes: 1: 1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl (hash: epPESKxFDcuxGWeIAHDaoItL+sjP3yGd5BgryN8P6ig=)
2: 90yTu1ZvBXsj2zvvf_cf6smqsAY.roa (hash: d0+vl+KGJdXe44PbjywGVSh4mi3ZR2K5B0XyBELq85Q=)
3: 9ESb3nU5cbHcLFUhNEpqkvmhj_4.roa (hash: LHv33BgF/+ayoq8UGd9MWgrIjXrwU1xij1zgE5RnA6k=)
4: MPC4WGBwWzUKQ4MIf9vheq3ljf8.roa (hash: X1yT4PQqSCT8h7K1UyGvzdMze10lM3EBcX0jmIp7dhY=)
5: QWJn3q0Lr5gGgTezlymenkp6b1w.roa (hash: FCKvF/NqXSUJyECvMZNBgT9ANA+px+Gc/iswj+zUJEI=)
6: UCuT9DdR1uf2eaUQ5W61UcGGe5s.roa (hash: el2ZUvN5cR0Xlq/3JU37CLxdd+Op9S06q4bKQS6tg4A=)
7: WkuL6FUDIfRDF14nPyGZlNz9TC8.roa (hash: D4GYrfLtGgd4PpXaht+eqgT9SvcVMk1Cz7ndFDRulUI=)
8: X2UArr6NpSeUa_r53UJKN_WcE2Q.roa (hash: 7e3/Cphtp59zFTi7++qenlH+zOQWGj2nPifYLt+4tUo=)
9: bFcZDGbJEt3C25QZpuOG1dcl73c.roa (hash: k66etaeQpibh+6ldsVEJ1epfT/mPN5OS3FzuNI+MZuc=)
10: du_MXb8GLOewa44v34_3lLw6dnw.roa (hash: a2a2dhTFIXXWOYnBPekfjuJxO8TA9JqXeDf3zAfH4X8=)
11: gczW35cqQlBADOQAWeSQ-bYxRMo.roa (hash: 9jHvOrJ1ViTa6G5Us1NPMW3J9nbWdq6Gknf3R0RABUE=)
12: gq4-qZZLFBuurcOJ9Pxlu03_UHo.roa (hash: xfn9bc1Rb+filmBHMlKSU98Tci6TOw0mmXsz+N116Q0=)
13: n3IhM1zBRa6pSVaHWbwRlWlBc9c.roa (hash: cG88RiwnklB+hGfdAs9rfXTkd4LxMdYdGB9RXUfaE4M=)
14: pwMO6ssE5D-O8Xyj-6Cg12qPD5Q.roa (hash: jNpNRBAX1vK+/7+Nq5SPgMC/QUrkJvx5kFMoBcHUw5U=)
15: sUUBdGAF9TJecEG5749G1YWJ5bU.roa (hash: GKDRtzmqCQRfHRzfpLrnvEf31pPDp4sPaetIcigYVig=)
16: wz-KZ5KX8jTmXScvr3XeQj04j3I.roa (hash: RxnlIvfwP2SpAoX0QlB2pLFsNqlUFCANi/oFyJ3SgAs=)
17: ycORncNA45mJd3RcVB4kkVyYyek.roa (hash: 73ViTZ9duoNfFxXb5BewNjClF8EYFoeTaVe/H//+q5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f3:1b:85:28:f8:2f:80:5c:21:02:69:ea:85:3e:fc:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
Validity
Not Before: Dec 6 10:00:58 2025 GMT
Not After : Dec 7 10:00:58 2025 GMT
Subject: CN=0394d139158e11ced37071e83e38c4800fb29b67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:1b:18:db:1c:78:13:c1:12:5c:23:c0:a7:44:
25:d6:58:17:57:65:16:93:c1:77:4c:0a:7b:c8:3c:
cb:2e:30:28:a4:a1:00:6e:e4:b9:06:c1:b1:cb:e6:
be:2a:5a:70:8e:fd:a5:bd:f1:7b:04:bd:38:2d:ee:
0b:2a:d6:cb:be:57:a4:28:63:20:65:e0:35:41:b0:
b0:d9:aa:d6:fb:0a:ed:88:53:48:f3:73:ea:c9:6d:
1b:84:50:7a:31:3a:88:b4:76:b5:c7:3f:18:1d:31:
79:9b:96:84:e8:09:e3:2b:97:bd:ab:4c:10:34:f1:
16:a2:e5:84:de:0c:c0:8e:df:d8:f0:c5:d9:c9:70:
33:cd:b5:5b:b6:20:55:8d:9d:7b:9b:4f:35:17:04:
17:5f:f6:51:a5:81:b9:10:a8:52:2a:b8:53:cf:92:
eb:51:e4:0a:92:12:8e:4a:d1:a5:4b:71:ca:12:dd:
ca:3c:f7:6f:1a:34:9f:51:14:75:3e:cb:0c:0d:0b:
11:70:ec:ff:97:37:27:8b:df:8e:50:5f:51:7c:99:
28:c7:21:05:8b:50:c5:30:2b:aa:3c:25:1b:c0:e5:
42:a2:2d:cb:b0:3f:72:6d:68:5d:6b:0d:85:8e:c3:
90:5a:ec:1d:00:71:4c:06:16:16:cd:25:f7:a7:69:
4e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:94:D1:39:15:8E:11:CE:D3:70:71:E8:3E:38:C4:80:0F:B2:9B:67
X509v3 Authority Key Identifier:
keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:5a:09:46:bf:30:44:fd:de:05:e9:6e:32:95:a6:fb:54:f0:
f6:30:fb:92:34:00:df:bd:d7:c3:d8:03:30:47:50:35:ca:6d:
6e:a0:97:52:11:da:62:00:1d:66:53:92:16:8d:12:ba:9a:5d:
a7:b5:15:f7:4c:fb:dc:55:d0:2d:dd:ab:a8:c3:5d:e8:36:05:
59:d6:80:67:62:57:38:e7:15:63:90:2c:7e:39:4e:2a:01:5f:
14:51:b4:b8:cc:36:a7:7b:35:e1:0d:e1:81:54:aa:f6:a0:98:
8d:93:10:96:00:8d:af:53:99:39:e8:ef:93:5b:34:9f:71:d3:
14:a3:0b:a8:fb:01:21:0e:05:f4:e4:19:20:ab:69:72:70:ce:
fb:42:71:53:79:52:e9:fb:7f:13:bb:a1:9f:28:e2:f6:42:c5:
51:87:f7:43:e9:e8:79:6b:92:db:ba:a2:7b:6f:8f:8c:dd:00:
9a:66:79:e7:f7:d3:1c:74:2f:10:e8:14:40:6d:98:66:75:77:
25:c7:4b:28:21:d3:06:41:eb:c2:3a:4d:c2:8a:36:7d:8f:3f:
5c:3f:71:0c:21:97:59:24:b1:2e:d9:21:f1:da:af:2c:40:79:
a3:d4:d2:98:0d:83:b7:ed:2d:31:65:1f:5c:c2:0a:6b:44:23:
f8:01:60:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrzG4Uo+C+AXCECaeqFPvwcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1NjM3NjkyZmY1YzQ1NDg2ZDEwNTNiMTQ5ZGMxNDIwMDI2
Y2Q3MzMwHhcNMjUxMjA2MTAwMDU4WhcNMjUxMjA3MTAwMDU4WjAzMTEwLwYDVQQD
EygwMzk0ZDEzOTE1OGUxMWNlZDM3MDcxZTgzZTM4YzQ4MDBmYjI5YjY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4hsY2xx4E8ESXCPAp0Ql1lgXV2UW
k8F3TAp7yDzLLjAopKEAbuS5BsGxy+a+Klpwjv2lvfF7BL04Le4LKtbLvlekKGMg
ZeA1QbCw2arW+wrtiFNI83PqyW0bhFB6MTqItHa1xz8YHTF5m5aE6AnjK5e9q0wQ
NPEWouWE3gzAjt/Y8MXZyXAzzbVbtiBVjZ17m081FwQXX/ZRpYG5EKhSKrhTz5Lr
UeQKkhKOStGlS3HKEt3KPPdvGjSfURR1PssMDQsRcOz/lzcni9+OUF9RfJkoxyEF
i1DFMCuqPCUbwOVCoi3LsD9ybWhdaw2FjsOQWuwdAHFMBhYWzSX3p2lOBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAOU0TkVjhHO03Bx6D44xIAPsptnMB8GA1UdIwQY
MBaAFNVjdpL/XEVIbRBTsUncFCACbNczMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVdOMmt2OWNSVWh0RUZPeFNkd1VJQUpzMXpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi85OGUxMTMtZTAwMi00ZDkzLTlhNDkt
YWRlYWRlMjg2NWMxLzEvMVdOMmt2OWNSVWh0RUZPeFNkd1VJQUpzMXpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi85OGUxMTMtZTAwMi00ZDkzLTlhNDktYWRlYWRlMjg2NWMx
LzEvMVdOMmt2OWNSVWh0RUZPeFNkd1VJQUpzMXpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhFoJRr8w
RP3eBeluMpWm+1Tw9jD7kjQA373Xw9gDMEdQNcptbqCXUhHaYgAdZlOSFo0Suppd
p7UV90z73FXQLd2rqMNd6DYFWdaAZ2JXOOcVY5AsfjlOKgFfFFG0uMw2p3s14Q3h
gVSq9qCYjZMQlgCNr1OZOejvk1s0n3HTFKMLqPsBIQ4F9OQZIKtpcnDO+0JxU3lS
6ft/E7uhnyji9kLFUYf3Q+noeWuS27qie2+PjN0AmmZ55/fTHHQvEOgUQG2YZnV3
JcdLKCHTBkHrwjpNwoo2fY8/XD9xDCGXWSSxLtkh8dqvLEB5o9TSmA2Dt+0tMWUf
XMIKa0Qj+AFgUg==
-----END CERTIFICATE-----
Generated at Sat Dec 6 18:50:00 2025 by rpki-client