This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/361bae-ab14-4aab-bb8f-7418b92aa209/1/wFIM7LolHNN83zxNWrA2JVIruqw.mft
File: wFIM7LolHNN83zxNWrA2JVIruqw.mft (raw, json)
Hash identifier: WpMxIbTOC05NSxBP57Wv6362PcoIxW2mf9qhfU03TD8=
Subject key identifier: BF:03:A7:65:84:D1:EC:62:69:FE:24:05:70:60:B0:3B:C0:DA:B1:E8
Authority key identifier: C0:52:0C:EC:BA:25:1C:D3:7C:DF:3C:4D:5A:B0:36:25:52:2B:BA:AC
Certificate issuer: /CN=c0520cecba251cd37cdf3c4d5ab03625522bbaac
Certificate serial: 019AF1D1AB0510AE5E57619DBE38D68A2AD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wFIM7LolHNN83zxNWrA2JVIruqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/361bae-ab14-4aab-bb8f-7418b92aa209/1/wFIM7LolHNN83zxNWrA2JVIruqw.mft
Manifest number: 1765
Signing time: Sat 06 Dec 2025 04:00:41 +0000
Manifest this update: Sat 06 Dec 2025 04:00:41 +0000
Manifest next update: Sun 07 Dec 2025 04:00:41 +0000
Files and hashes: 1: aU__37kt8ckO_YJQdDxx1zfJXr4.roa (hash: G2q1R6crWsWgIzSolrfZ7On3iNyzuy0vug1zXtUIFQY=)
2: ahMDGxNyecqlZxcgrlYmGrrq9pU.roa (hash: h30GXSYF139afkSTNjFaEpPAUr9XbrAvQRMhITWnZY8=)
3: mIknYG3WTBISQkb0avBlTMQBHO0.roa (hash: iFjLxQXc/Bjp4mKvj7ItM6hlDfEhly4nMW0gLz+f1Fc=)
4: wFIM7LolHNN83zxNWrA2JVIruqw.crl (hash: H4Z12tHlQybi45cFWgmL4BGt0EMAzYM34sB9ga0Vu7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/361bae-ab14-4aab-bb8f-7418b92aa209/1/wFIM7LolHNN83zxNWrA2JVIruqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/361bae-ab14-4aab-bb8f-7418b92aa209/1/wFIM7LolHNN83zxNWrA2JVIruqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/wFIM7LolHNN83zxNWrA2JVIruqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 04:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:d1:ab:05:10:ae:5e:57:61:9d:be:38:d6:8a:2a:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0520cecba251cd37cdf3c4d5ab03625522bbaac
Validity
Not Before: Dec 6 04:00:41 2025 GMT
Not After : Dec 7 04:00:41 2025 GMT
Subject: CN=bf03a76584d1ec6269fe24057060b03bc0dab1e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d4:f7:22:70:8f:e3:54:ba:28:c6:8d:11:90:
b2:9e:00:dc:b4:1d:e1:cd:ec:a3:88:b2:82:e5:d7:
28:25:5b:55:f0:71:b0:e5:6e:46:a6:91:8f:ee:a1:
e3:25:09:b4:0a:4d:8a:6f:64:1e:e3:c1:09:10:07:
2e:fd:5d:67:e8:27:b0:80:4c:f0:66:bd:74:17:ea:
c3:44:ee:8b:07:56:89:df:a2:77:03:29:78:3f:2f:
e6:56:38:8c:18:94:20:57:3b:91:67:1c:68:69:20:
d6:2e:64:ab:e9:f0:d7:6b:70:46:54:75:b7:c6:fd:
52:bf:dc:bb:56:ed:fa:4b:f7:88:40:cb:80:a4:56:
5f:7d:cf:c5:b2:24:3a:9c:99:c1:01:53:89:a5:ff:
b1:8a:8a:4d:47:b7:4f:f2:c4:58:c0:5b:f8:70:65:
5a:47:24:8b:9e:5f:9b:e5:94:05:87:2a:4e:de:6a:
08:0a:6d:c1:b7:cd:71:70:05:2b:76:be:a8:d0:11:
ed:0a:ed:2e:01:83:d5:26:8a:97:bb:5e:8a:0a:5e:
7f:ac:72:da:45:3f:6c:b5:96:22:d4:fb:d9:ea:79:
b2:bd:b9:e7:ce:b9:c0:a7:cb:5d:00:65:04:1a:a8:
0b:b2:fe:47:6e:55:de:68:4d:0f:6d:e6:27:a5:92:
7e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:03:A7:65:84:D1:EC:62:69:FE:24:05:70:60:B0:3B:C0:DA:B1:E8
X509v3 Authority Key Identifier:
keyid:C0:52:0C:EC:BA:25:1C:D3:7C:DF:3C:4D:5A:B0:36:25:52:2B:BA:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wFIM7LolHNN83zxNWrA2JVIruqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/361bae-ab14-4aab-bb8f-7418b92aa209/1/wFIM7LolHNN83zxNWrA2JVIruqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/361bae-ab14-4aab-bb8f-7418b92aa209/1/wFIM7LolHNN83zxNWrA2JVIruqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:7b:82:bf:d2:98:61:c4:44:7b:eb:61:da:f5:c6:68:e9:65:
02:ee:27:a3:3b:7a:53:2b:ea:ae:f0:fc:1b:d3:47:7d:68:19:
e8:5d:64:25:ec:15:f3:5e:0f:95:69:61:68:6b:e7:4a:1c:ac:
6d:e1:9b:84:c0:37:3c:4e:16:2e:9e:d5:19:b2:5f:d5:02:e3:
f8:17:9c:0c:eb:ea:fe:dd:37:ca:fc:d7:b6:15:66:29:88:da:
95:3e:49:7d:9f:1a:f0:d0:aa:fd:1c:54:63:21:4c:2b:e7:ef:
aa:d2:ca:71:28:82:fa:1d:b3:3b:bd:36:b4:a9:fb:80:80:c6:
86:a5:78:a4:01:d0:f3:52:12:5e:4b:05:71:29:ba:43:40:a3:
97:4a:aa:10:6b:b5:da:33:d8:65:1f:46:9d:72:78:57:ac:d0:
03:2f:f1:2a:f8:ac:72:82:eb:2c:78:2c:10:28:39:81:4a:d7:
53:06:44:14:7c:b6:6a:76:23:09:18:0b:45:31:82:43:7e:35:
10:3c:e8:b3:14:0b:fb:87:d7:4e:88:d8:75:9e:dc:b9:1e:b5:
84:41:8a:bb:50:a7:b4:c0:d7:0d:10:bf:37:eb:d3:21:05:31:
fa:51:f2:71:f0:0d:ab:d9:ce:b4:85:5a:a9:78:e9:41:d4:22:
6e:9f:52:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:18:22 2025 by rpki-client