This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/4puawu9jG5LoL1ldc-R5LIFuxuY.mft
File: 4puawu9jG5LoL1ldc-R5LIFuxuY.mft (raw, json)
Hash identifier: z2Ha9EldjVBuyouX9C3ZcT3jQ15t4FWkAR1Xy9yH6Tk=
Subject key identifier: 24:BA:F6:BB:04:E3:C3:2B:A5:55:64:25:61:D4:CC:0F:FD:B5:93:3D
Authority key identifier: E2:9B:9A:C2:EF:63:1B:92:E8:2F:59:5D:73:E4:79:2C:81:6E:C6:E6
Certificate issuer: /CN=e29b9ac2ef631b92e82f595d73e4792c816ec6e6
Certificate serial: 019AF163D9CC01DE254728A75B81D70B1DF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4puawu9jG5LoL1ldc-R5LIFuxuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/4puawu9jG5LoL1ldc-R5LIFuxuY.mft
Manifest number: 0E52
Signing time: Sat 06 Dec 2025 02:00:44 +0000
Manifest this update: Sat 06 Dec 2025 02:00:44 +0000
Manifest next update: Sun 07 Dec 2025 02:00:44 +0000
Files and hashes: 1: 4puawu9jG5LoL1ldc-R5LIFuxuY.crl (hash: 4l7qfD6J78AQqyGx8zmsUczLRkdDugBY4+0nKpwawoA=)
2: EBmgons8smLjSy_pC81B7nZjG3w.roa (hash: zpgv0UbTTPAH0iIRbzl1hsN1Wy449Ae/Kgm8XxlzuA4=)
3: ImgvJz4_mDjqxdrfNbxhGYCKGu0.roa (hash: /y4sZGaV5lW/RKRkRNk7SmLLY+Y8ezjiodQM42Rpemo=)
4: X7I_6O60aP9OaBtbJevHcrghsuE.roa (hash: hR7L9FjeYMdP71zS9N34E835iFleUqKlYe8PrU5+gmY=)
5: peVRzfk7a5kMcnIN5l0vfDJAjV4.roa (hash: BZZQzoUGU3SVXNptLeHk5DArDqOJYETbuht6S7O+La0=)
6: yI5Nbp0-uf0q4zk47pCiYdnE9hQ.roa (hash: BKzz9xX/v8G21Kss5sh+1KuOPfvgIR81jj3LRU4Atjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/4puawu9jG5LoL1ldc-R5LIFuxuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/4puawu9jG5LoL1ldc-R5LIFuxuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4puawu9jG5LoL1ldc-R5LIFuxuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:63:d9:cc:01:de:25:47:28:a7:5b:81:d7:0b:1d:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e29b9ac2ef631b92e82f595d73e4792c816ec6e6
Validity
Not Before: Dec 6 02:00:44 2025 GMT
Not After : Dec 7 02:00:44 2025 GMT
Subject: CN=24baf6bb04e3c32ba555642561d4cc0ffdb5933d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:19:1b:93:c8:73:a1:e0:10:45:6d:1b:2d:64:
c9:b1:a3:7a:8c:66:d6:ce:c2:42:1f:bf:17:23:da:
b4:1a:dd:ae:d4:4f:14:4c:ae:88:04:05:7e:23:d2:
eb:b8:17:15:d0:1d:4a:10:42:ca:08:27:6b:5c:9c:
40:d1:18:67:22:55:f6:b4:8c:9f:cc:2f:7a:f6:47:
02:3b:9c:ba:74:ca:ef:e6:b8:00:58:a6:ce:cb:ab:
c8:5f:2e:cf:2a:a4:6e:46:c5:9e:bc:24:85:b5:c4:
c4:eb:22:92:e0:15:89:70:f5:27:e2:9c:46:16:70:
bd:c3:44:7b:9a:67:a2:4c:66:9a:e0:ff:3c:18:11:
e3:0a:01:cf:0f:c2:13:fb:c9:70:18:16:7d:0c:3f:
9c:aa:90:61:79:dc:9a:c1:27:03:ce:46:d6:aa:28:
19:d0:6d:3a:64:46:7e:c6:11:41:d1:84:0d:ba:ca:
19:a8:22:2d:6a:9b:88:b0:86:c6:66:86:37:73:09:
de:dc:9a:56:b2:ad:7c:98:6a:1e:bc:6c:67:43:61:
0e:67:72:0b:24:c9:d4:39:f3:1a:3f:68:0b:d7:a2:
53:ec:d4:e8:d5:4c:ff:2b:21:85:6e:b3:70:f6:12:
e9:de:fa:8c:3a:95:24:f9:7b:ed:37:f1:14:9c:16:
b3:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:BA:F6:BB:04:E3:C3:2B:A5:55:64:25:61:D4:CC:0F:FD:B5:93:3D
X509v3 Authority Key Identifier:
keyid:E2:9B:9A:C2:EF:63:1B:92:E8:2F:59:5D:73:E4:79:2C:81:6E:C6:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4puawu9jG5LoL1ldc-R5LIFuxuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/4puawu9jG5LoL1ldc-R5LIFuxuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/4puawu9jG5LoL1ldc-R5LIFuxuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:56:af:72:50:fb:8f:91:7a:d4:0a:b3:ad:78:30:7e:ec:f2:
f8:d8:b6:c2:64:a1:9b:7e:bf:b8:d3:85:19:4d:77:03:39:31:
2d:c4:a9:18:ab:f8:12:3b:18:bd:83:d9:3b:84:6b:3e:14:05:
32:35:b7:f3:cc:12:d5:34:a2:15:33:70:0a:51:43:f2:d9:22:
67:8c:b3:77:5d:7a:f8:8c:24:2e:22:50:29:25:4a:9c:4f:a3:
c9:d7:b5:4b:45:67:6e:3d:cf:fe:37:7f:49:bb:ba:11:f9:78:
7d:b7:c0:a9:c9:c9:05:17:01:28:8a:26:d1:10:55:2c:e8:e4:
5c:55:57:3c:4a:47:95:60:8d:a8:7e:58:bf:a9:30:83:3a:37:
b5:a7:3a:63:99:c9:d4:11:0d:ab:54:d1:4b:de:a1:e6:43:2b:
d7:17:a8:15:d1:5d:e1:f9:df:9f:61:da:7f:ac:bd:4a:b3:ae:
e2:d8:d1:05:8f:2c:76:70:1c:e1:f5:00:15:54:4a:c4:24:ad:
30:d2:00:6a:9f:12:0c:20:49:fe:61:9c:57:65:34:2b:8e:7d:
6e:1f:97:fd:26:2e:0a:a1:da:e9:1c:23:52:7e:ec:69:85:cb:
ff:4e:6b:b6:b6:5d:9b:51:ed:ca:ca:19:31:5c:bb:21:38:6a:
f2:50:d8:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:57:25 2025 by rpki-client