This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/015e90-5204-4d09-8b26-fceacbd73845/1/5cveddU26RsoojRpNJ0c8ouISjs.mft
File: 5cveddU26RsoojRpNJ0c8ouISjs.mft (raw, json)
Hash identifier: PoztvFc0CZxZreTdYTtmv8BgQMMQDUDzw5ajSXQTCTU=
Subject key identifier: E1:D9:7E:7D:41:17:D7:DF:E3:5C:70:91:F7:8C:0B:BA:41:28:14:64
Authority key identifier: E5:CB:DE:75:D5:36:E9:1B:28:A2:34:69:34:9D:1C:F2:8B:88:4A:3B
Certificate issuer: /CN=e5cbde75d536e91b28a23469349d1cf28b884a3b
Certificate serial: 019AF12DDA4780C3A2384C85E49721E5100B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5cveddU26RsoojRpNJ0c8ouISjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/015e90-5204-4d09-8b26-fceacbd73845/1/5cveddU26RsoojRpNJ0c8ouISjs.mft
Manifest number: 168A
Signing time: Sat 06 Dec 2025 01:01:45 +0000
Manifest this update: Sat 06 Dec 2025 01:01:45 +0000
Manifest next update: Sun 07 Dec 2025 01:01:45 +0000
Files and hashes: 1: 5cveddU26RsoojRpNJ0c8ouISjs.crl (hash: nh0IYRIoSWI40x476VIzqP8J4upsZixeapJ9i7dDbSo=)
2: 8vBjC53BVW8zj4fBkE3UHTZwiNk.roa (hash: 1PeNucpAjZUP2ujHYN11UYlssoeYcm9jeCslEET3UiI=)
3: 9SKc1OPZn-eLWfpLDmHLKp6N8Ss.roa (hash: aMPoo7LYnaS7eWYIaQDX/Es2RSQYrk3CqkkwnLvbGQ8=)
4: UwHwc4Sk_hCRAHef6n3CUGRPGkk.roa (hash: KrGL3wXFY6k1GlYSZENHPy6IRLA8cwbf0xkJCypiFE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/015e90-5204-4d09-8b26-fceacbd73845/1/5cveddU26RsoojRpNJ0c8ouISjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/015e90-5204-4d09-8b26-fceacbd73845/1/5cveddU26RsoojRpNJ0c8ouISjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5cveddU26RsoojRpNJ0c8ouISjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 01:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:2d:da:47:80:c3:a2:38:4c:85:e4:97:21:e5:10:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5cbde75d536e91b28a23469349d1cf28b884a3b
Validity
Not Before: Dec 6 01:01:45 2025 GMT
Not After : Dec 7 01:01:45 2025 GMT
Subject: CN=e1d97e7d4117d7dfe35c7091f78c0bba41281464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:91:c7:89:7c:57:b3:ed:df:d0:f3:2d:ef:41:
95:ec:e8:e1:c7:0d:40:1a:ac:d1:ee:a4:7d:8a:a9:
fd:b7:d8:6f:13:39:35:77:c6:ab:12:d7:86:de:34:
6d:13:0c:f8:28:be:b2:4b:08:09:cc:08:e2:37:d0:
96:ab:0b:25:2f:eb:4f:b5:39:06:62:51:88:d1:12:
09:fc:dd:77:57:44:eb:85:71:ad:56:43:63:25:c2:
46:db:f7:cb:65:f9:0f:36:dd:b1:54:c9:c7:a0:e2:
bd:94:6a:45:50:05:5c:af:16:72:a1:43:d9:c3:63:
0b:1b:99:9b:b7:c8:4d:0e:55:4d:ce:c5:33:00:fa:
0c:83:59:0d:8f:63:ff:55:27:16:99:95:ed:9c:2e:
57:f0:51:ed:72:7c:75:82:4f:0d:26:15:1f:77:2c:
02:5a:a9:d7:65:bc:32:ab:13:2a:72:21:b1:70:84:
14:3c:2c:9f:8b:a8:c0:35:13:28:d6:07:02:c3:81:
ec:64:ef:bd:12:bf:83:1a:ad:5b:5b:34:9a:de:d6:
54:14:a3:52:b0:63:f0:2f:5f:d5:7b:51:91:7a:7f:
60:c8:34:c0:9d:f5:fb:cd:f9:1c:e4:07:02:5b:4b:
64:20:c8:fd:fc:4f:53:fd:7f:42:27:68:aa:93:07:
89:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:D9:7E:7D:41:17:D7:DF:E3:5C:70:91:F7:8C:0B:BA:41:28:14:64
X509v3 Authority Key Identifier:
keyid:E5:CB:DE:75:D5:36:E9:1B:28:A2:34:69:34:9D:1C:F2:8B:88:4A:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5cveddU26RsoojRpNJ0c8ouISjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/015e90-5204-4d09-8b26-fceacbd73845/1/5cveddU26RsoojRpNJ0c8ouISjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/015e90-5204-4d09-8b26-fceacbd73845/1/5cveddU26RsoojRpNJ0c8ouISjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:98:63:b7:0a:48:4a:65:71:5e:5f:11:3e:c0:fc:7e:e8:78:
f8:e1:b3:5c:8d:0c:0a:3b:a5:be:12:07:8e:2b:ad:60:41:8b:
2b:4b:b2:98:85:51:84:ed:95:62:b8:f7:7c:e2:39:0b:ad:66:
27:61:13:1a:d5:fd:00:7c:41:6a:f3:dc:97:06:3b:0c:25:73:
18:11:f7:df:3a:e3:d3:da:4b:33:62:da:1a:4c:ea:b3:38:42:
7f:c4:63:18:23:3d:2b:83:37:99:a2:9d:be:a9:4a:6b:0c:b6:
ee:bc:40:ee:36:37:c5:6e:8f:61:fa:2b:94:bd:cd:6e:ff:fd:
f4:9b:c6:42:55:71:ad:ba:b8:58:b1:13:90:79:f6:cb:f8:99:
aa:da:46:c5:68:f6:5b:97:08:e1:d5:93:64:43:e9:77:0d:d1:
12:31:38:be:5b:d1:d7:30:be:54:c1:2a:f7:73:39:0a:d0:7c:
2e:e5:9d:54:b7:e0:5e:c0:d5:67:fc:80:78:86:e9:71:b6:2b:
27:15:d7:81:30:59:8b:c3:b8:00:f7:91:fa:9e:5e:90:fd:3b:
fa:fa:6d:46:88:2f:b0:e5:2d:50:75:ef:26:08:da:55:1c:8b:
47:f7:d6:45:1a:6c:fd:a9:92:1c:8b:d3:c9:4b:3d:30:03:12:
b4:ac:2b:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:00:52 2025 by rpki-client