This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.mft
File: cQUbDizppMnmEh6YPRZf6rh-w1Q.mft (raw, json)
Hash identifier: qQu5Kr0Q04UTJGsrlvFBiGKScnlIwuO+TMKnVu3+v8E=
Subject key identifier: FB:51:79:60:34:7E:A4:49:D6:41:91:C6:2B:7D:30:65:FE:1A:CA:68
Authority key identifier: 71:05:1B:0E:2C:E9:A4:C9:E6:12:1E:98:3D:16:5F:EA:B8:7E:C3:54
Certificate issuer: /CN=71051b0e2ce9a4c9e6121e983d165feab87ec354
Certificate serial: 019B31C42A7570E966F30799A1C36CF0B302
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cQUbDizppMnmEh6YPRZf6rh-w1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.mft
Manifest number: 1118
Signing time: Thu 18 Dec 2025 14:01:37 +0000
Manifest this update: Thu 18 Dec 2025 14:01:37 +0000
Manifest next update: Fri 19 Dec 2025 14:01:37 +0000
Files and hashes: 1: 77c7LwFJ33uk1xUKt1FAfMJrE9U.roa (hash: Xw/VJxGC8Vr3IxfSUZP9dX3SHM7xwIjH1eQJVicfbvU=)
2: cQUbDizppMnmEh6YPRZf6rh-w1Q.crl (hash: th1d1YTdpAaumUyDstcIAqSl3Dx9n8OPAjv2F3Z9Zdo=)
3: ksfUG5eUsSmxI4_eXAlia-83kt8.roa (hash: Ve1sXWpLbI/ytU2pjBhiO6pODt6uVzJVCiwoLnmWH3M=)
4: mQfuYDhcQ_uLiN8TuC8vArT48n0.roa (hash: q6GrLFR9Jvk7SkT0Gz0aQLhMWCRoiLx7tXQ4Qt2xjP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/cQUbDizppMnmEh6YPRZf6rh-w1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Dec 2025 13:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:31:c4:2a:75:70:e9:66:f3:07:99:a1:c3:6c:f0:b3:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71051b0e2ce9a4c9e6121e983d165feab87ec354
Validity
Not Before: Dec 18 14:01:37 2025 GMT
Not After : Dec 19 14:01:37 2025 GMT
Subject: CN=fb517960347ea449d64191c62b7d3065fe1aca68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:26:b3:59:19:06:5f:2e:50:2e:29:3b:37:e7:
4a:3a:b8:1f:ac:8c:15:76:02:58:c3:91:2b:8f:76:
c8:48:42:01:3c:af:6a:12:80:6b:cd:ca:a8:b3:29:
2e:49:30:dd:97:1b:0f:38:97:18:5b:83:fd:15:00:
3c:91:e0:a7:31:64:dc:42:64:ba:56:17:01:f3:9f:
0a:69:f3:00:4e:27:6d:bc:0c:00:ee:8e:c7:39:75:
5c:eb:d7:0a:18:61:09:1c:be:cd:80:36:80:fe:e0:
97:43:70:79:bb:7b:d8:11:a4:f6:9c:67:80:f4:2a:
2e:6f:87:f1:a7:bc:ab:c1:24:0c:e8:b1:3a:b6:d9:
fc:cd:b6:68:21:23:86:f9:fc:75:37:9b:3a:68:7c:
eb:ef:07:c4:d8:f4:21:0a:c5:24:fe:3f:7e:35:d8:
9a:af:1b:ec:86:0b:b0:d9:89:36:11:f1:30:58:eb:
38:5c:88:ab:1f:91:0b:00:62:32:aa:d1:90:82:5e:
6b:37:8a:ac:c8:0c:f2:33:a8:e1:6f:0c:89:3f:dc:
36:bb:b3:94:cf:c6:71:dc:5b:5d:d5:c4:a6:1c:58:
6b:f6:fa:3f:be:a0:12:18:cb:27:5e:1c:3a:7c:52:
b3:89:00:34:10:65:b0:d2:91:19:c7:7c:75:39:df:
55:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:51:79:60:34:7E:A4:49:D6:41:91:C6:2B:7D:30:65:FE:1A:CA:68
X509v3 Authority Key Identifier:
keyid:71:05:1B:0E:2C:E9:A4:C9:E6:12:1E:98:3D:16:5F:EA:B8:7E:C3:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cQUbDizppMnmEh6YPRZf6rh-w1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:7e:cb:01:76:b2:61:05:4b:c4:ee:d5:4d:56:ea:23:6e:bd:
69:f9:3f:4a:29:14:2c:fc:42:5f:e1:7c:f9:3f:35:26:8c:9a:
42:95:89:06:c8:92:69:10:5a:67:79:d9:63:93:dd:a1:46:60:
7e:d5:2b:64:cd:4e:15:ba:25:37:63:80:8c:c9:6e:5e:f5:67:
4d:48:a7:bc:f4:a4:95:33:de:07:f4:fa:52:fd:b2:34:7a:41:
a8:a5:55:39:09:dd:b9:32:8e:3b:15:d6:18:a6:68:b1:e9:c3:
0f:51:fa:77:a5:84:b0:0d:d9:81:60:61:dc:07:f9:5a:70:2c:
56:31:33:6b:05:35:09:9b:02:5b:e7:e6:9f:b4:d9:35:15:b9:
ae:ae:99:c4:f9:d9:ed:e9:c9:74:fd:f8:61:ce:ab:b2:ad:58:
cc:05:96:eb:4e:2a:3b:f1:16:37:d5:ec:f2:1b:da:54:e0:d0:
49:e6:48:63:7c:a3:8c:b5:ef:2d:67:5b:96:ae:a8:71:07:8b:
c2:9d:85:d9:fc:14:9b:d1:4a:60:74:2f:c8:3d:08:cb:ce:b0:
9a:a9:f8:4d:93:72:8c:b5:ec:f9:02:ad:39:cf:95:67:57:90:
81:11:1d:4f:13:0e:ce:9e:37:81:ef:54:69:df:ce:07:29:f4:
77:f8:15:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 16:18:14 2025 by rpki-client