This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.mft
File: wSM4YSB6IwVk7zbxHgFXNEcx4_k.mft (raw, json)
Hash identifier: UGhHWOBvFbY6w1H2q6gCqFFATyGXmTmY++P5p3jZBz8=
Subject key identifier: 12:4D:52:40:BD:E1:71:F3:75:7B:04:78:4B:AF:9F:8F:F2:BF:88:60
Authority key identifier: C1:23:38:61:20:7A:23:05:64:EF:36:F1:1E:01:57:34:47:31:E3:F9
Certificate issuer: /CN=c1233861207a230564ef36f11e0157344731e3f9
Certificate serial: 019AF0BF6E4C0FE58B8872358C5B25E70EAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSM4YSB6IwVk7zbxHgFXNEcx4_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.mft
Manifest number: 1769
Signing time: Fri 05 Dec 2025 23:01:08 +0000
Manifest this update: Fri 05 Dec 2025 23:01:08 +0000
Manifest next update: Sat 06 Dec 2025 23:01:08 +0000
Files and hashes: 1: G0mfJKH5XthYEp56dZd7amNIFIg.roa (hash: ZdlmpS8KB0XJ2RMI8I0V6gnsbS1MxMfFNBLIs6WQ0tQ=)
2: J3tQAc-R4PT9iUkojothol4LOyU.roa (hash: 3yeSEY7/c0NLf9TAv7WKIHKi3Ggm4vF4/G3CEy8wx+U=)
3: SjT04nA7qX_MCmXA-4Xf2qOOvyk.roa (hash: hyMLCE9dKw6nHLTE5zUsN701ouIzmTXWz2+LUwVBqEU=)
4: mgF34y33vscxiS4stuO3BYu8JlE.roa (hash: G0qOZyPDZdpreKkYGFQ+RFa5w/ELVkiOatwZcMI9hrQ=)
5: wSM4YSB6IwVk7zbxHgFXNEcx4_k.crl (hash: lG4lmbD0wNKlZVKD8f25NGx+a4kjdigVLKcgYwo3YDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/wSM4YSB6IwVk7zbxHgFXNEcx4_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Dec 2025 23:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f0:bf:6e:4c:0f:e5:8b:88:72:35:8c:5b:25:e7:0e:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1233861207a230564ef36f11e0157344731e3f9
Validity
Not Before: Dec 5 23:01:08 2025 GMT
Not After : Dec 6 23:01:08 2025 GMT
Subject: CN=124d5240bde171f3757b04784baf9f8ff2bf8860
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:17:4f:8a:3c:b2:cf:d3:20:cd:f6:f2:45:a6:
0f:9a:cb:c1:01:3a:21:d4:3f:b9:11:d7:dc:19:cc:
cc:23:1d:08:e6:70:6c:bb:1b:70:6d:36:b5:bc:de:
5f:54:50:be:65:b5:34:e4:f3:4a:7a:fa:87:25:8b:
0f:eb:40:f5:8c:5f:fc:d5:84:84:5c:4c:0b:b9:c8:
5d:fd:73:b6:bc:76:60:92:a5:16:62:a2:6b:dc:1f:
41:ff:bc:70:1f:df:f4:ef:6b:1d:fc:54:e7:63:13:
6f:d8:6b:ed:eb:1b:98:2a:e6:5a:78:e5:d6:c5:0c:
37:32:30:ab:31:8b:21:86:7e:74:e7:c9:59:fc:59:
0f:12:4e:f6:05:31:5d:cc:68:cc:36:69:90:cb:25:
37:3d:aa:c9:98:46:f6:d7:87:8f:2e:94:18:4d:c5:
87:e9:3a:04:17:fd:06:00:3e:64:85:fd:02:c0:98:
1d:7a:38:e8:8e:fd:a2:6b:c5:81:55:51:db:1b:55:
43:6c:63:77:a7:72:b6:aa:de:9b:bf:1f:a1:18:54:
f8:d5:fd:27:f7:b2:ff:87:be:c8:d4:22:07:87:ab:
0c:9d:4c:37:c6:12:e6:62:b7:10:d3:af:7e:d2:09:
35:4b:2f:44:4c:f4:3f:5c:64:77:fc:b4:5a:43:3e:
a2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:4D:52:40:BD:E1:71:F3:75:7B:04:78:4B:AF:9F:8F:F2:BF:88:60
X509v3 Authority Key Identifier:
keyid:C1:23:38:61:20:7A:23:05:64:EF:36:F1:1E:01:57:34:47:31:E3:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSM4YSB6IwVk7zbxHgFXNEcx4_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:d2:f9:a7:b0:3c:ef:c9:1e:9f:75:63:75:71:56:58:28:9c:
a0:af:97:ae:85:4a:69:81:8c:3d:7e:fe:7e:a5:c1:f1:84:5d:
55:e0:4a:d6:bf:41:28:e2:9b:85:d9:e7:35:bc:e4:00:2c:7d:
45:11:ba:32:3b:92:46:b6:af:d0:e8:90:b7:22:0d:17:77:e1:
9b:c8:6c:cd:4d:b3:e5:65:90:dd:2a:de:24:dd:f4:b5:00:e3:
4a:18:ec:c2:a4:47:80:d9:19:57:5c:d6:57:3a:f5:23:5e:1d:
19:8f:62:b1:ec:e7:65:77:61:13:14:94:91:be:64:8b:02:3c:
e2:b7:12:f1:7e:c8:cb:0c:e5:52:7f:b0:a6:85:61:a6:74:ef:
f9:8b:64:04:92:33:30:96:8f:8c:e2:30:b9:ed:7e:c4:4e:2b:
31:04:73:04:f5:47:18:3a:11:0c:59:b2:ab:37:2f:71:c1:f1:
bb:c9:3a:f9:40:b3:48:80:ca:3c:3a:13:48:5e:b6:20:81:f1:
8a:aa:c5:42:c2:9e:50:10:6f:ee:69:6f:f9:25:46:3c:f8:57:
a5:84:a7:d3:7f:63:74:3e:8b:19:4f:f6:b6:a3:b8:f4:4d:00:
12:37:73:65:93:ff:70:30:aa:8e:6c:03:c1:1a:07:d4:07:67:
9f:4b:48:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:11:03 2025 by rpki-client