This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.mft
File: 5lAiAKbmP3Y5etuU39g0wRaAm58.mft (raw, json)
Hash identifier: sskjmaksVnBYWX7DzParbPX/XxocF2+HycRKa5T2C4A=
Subject key identifier: 3E:FE:95:ED:82:A7:A4:B9:36:04:C9:95:AD:AB:47:C8:73:B5:4C:5F
Authority key identifier: E6:50:22:00:A6:E6:3F:76:39:7A:DB:94:DF:D8:34:C1:16:80:9B:9F
Certificate issuer: /CN=e6502200a6e63f76397adb94dfd834c116809b9f
Certificate serial: 019AF19B52B219F47F5640AD5ABA36B238CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5lAiAKbmP3Y5etuU39g0wRaAm58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.mft
Manifest number: 0DEE
Signing time: Sat 06 Dec 2025 03:01:19 +0000
Manifest this update: Sat 06 Dec 2025 03:01:19 +0000
Manifest next update: Sun 07 Dec 2025 03:01:19 +0000
Files and hashes: 1: 5lAiAKbmP3Y5etuU39g0wRaAm58.crl (hash: Eec8z638QROvi0jcwrTne4gXu5SQwJ0hKD6AxPXvYHs=)
2: PPydfwM1qrJ_5LEP2Lu7pEc74lg.roa (hash: pMnth1QdrHrp1n0i0bRqhdBwVaon4su5sBWJ9WYdSts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.mft
rsync://rpki.ripe.net/repository/DEFAULT/5lAiAKbmP3Y5etuU39g0wRaAm58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 03:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:9b:52:b2:19:f4:7f:56:40:ad:5a:ba:36:b2:38:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6502200a6e63f76397adb94dfd834c116809b9f
Validity
Not Before: Dec 6 03:01:19 2025 GMT
Not After : Dec 7 03:01:19 2025 GMT
Subject: CN=3efe95ed82a7a4b93604c995adab47c873b54c5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:bc:b9:a0:f7:90:c2:c6:2e:55:a5:47:0c:9e:
42:08:e1:38:49:64:4f:a8:00:b8:57:18:8d:73:28:
5f:d8:dd:5e:9f:7f:c5:e0:57:f7:85:7a:7b:3b:6a:
85:75:c0:ae:57:cb:63:78:0e:1d:59:c7:28:cc:86:
e6:84:4f:1f:92:23:8b:a5:d5:d7:56:55:a8:07:1c:
73:0e:ec:bf:8e:3a:c8:e7:7e:27:d5:38:32:8b:21:
61:e8:db:83:b3:52:f5:6c:44:98:48:fd:09:f2:b3:
a8:87:40:d6:e1:24:55:98:85:e9:19:19:65:d4:4b:
9b:0f:61:be:af:c9:76:a3:18:de:89:f8:cd:80:ad:
d0:c5:fa:a8:cb:0a:89:44:f9:b4:d2:10:0d:11:f7:
d5:64:48:df:c4:ce:84:ba:6f:53:0c:d9:3c:ae:ae:
87:7e:d0:4c:fa:e1:f7:f9:c3:0f:7e:d2:f7:d3:9b:
a0:bf:42:cb:05:10:90:46:04:bc:5b:44:05:19:1a:
f8:07:51:32:f0:fb:43:fe:f1:a4:ec:09:53:97:54:
54:6e:97:de:6a:5d:6c:ac:50:5a:a7:48:b5:2a:16:
a3:c2:86:8e:bf:61:93:61:ab:5a:8b:03:17:d5:48:
c3:c1:35:0f:81:15:14:09:a3:9d:d4:43:ec:c1:c0:
a7:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:FE:95:ED:82:A7:A4:B9:36:04:C9:95:AD:AB:47:C8:73:B5:4C:5F
X509v3 Authority Key Identifier:
keyid:E6:50:22:00:A6:E6:3F:76:39:7A:DB:94:DF:D8:34:C1:16:80:9B:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5lAiAKbmP3Y5etuU39g0wRaAm58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:46:fe:3f:27:e7:64:7a:e6:f1:ef:9d:1e:f6:b0:0a:2e:36:
f8:0b:db:6c:06:7c:87:51:48:a5:7b:96:3a:a5:08:18:06:c8:
b4:14:d2:22:e8:02:6e:ae:ff:7b:1a:f1:e4:d5:c8:7d:f9:75:
32:d6:ac:bd:79:85:c3:e7:e2:1d:96:47:d0:61:53:6b:bf:91:
98:f9:ac:7b:e3:41:77:79:96:64:5b:a8:62:97:80:dd:3f:73:
41:bb:56:c0:5e:70:1b:a3:f2:c5:da:e4:5d:4b:65:ab:97:0b:
ea:86:46:3d:41:09:d4:c2:e0:b1:37:e5:ba:47:c6:8d:0c:e4:
17:1b:12:66:fa:97:75:0c:ea:58:85:2d:ef:d2:0b:1f:b3:db:
ef:7f:05:09:93:d8:5f:66:79:fd:ce:22:a1:df:a8:5e:03:c7:
43:12:e9:7d:2e:94:ed:3c:e9:7c:42:a9:0b:fe:6d:20:8c:3a:
7c:8f:06:4d:c2:45:df:9f:f3:19:0e:fc:2d:86:9a:93:b8:36:
a2:e8:19:f3:57:f2:64:f9:c3:76:f0:11:74:3a:df:05:40:6c:
0d:e7:96:60:06:40:13:a5:62:15:47:b3:93:4f:c3:2f:17:2d:
87:4c:bf:00:21:f4:48:5c:7d:fc:26:ed:f8:5a:be:67:c0:56:
33:5d:69:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:21:04 2025 by rpki-client