This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.mft
File: 5GZIM5avs3fl43nRYVveD9TZ7Uc.mft (raw, json)
Hash identifier: oKQYt01xh0+W1MSnJtmfZ9FH5RViyZqwMSzTwkbYBzI=
Subject key identifier: BF:03:03:02:07:D1:15:F4:03:F8:01:49:0C:E5:43:24:F9:DE:A8:D8
Authority key identifier: E4:66:48:33:96:AF:B3:77:E5:E3:79:D1:61:5B:DE:0F:D4:D9:ED:47
Certificate issuer: /CN=e466483396afb377e5e379d1615bde0fd4d9ed47
Certificate serial: 019B35328292222BC3AC97D0AACAC4D77D6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5GZIM5avs3fl43nRYVveD9TZ7Uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.mft
Manifest number: 0E7B
Signing time: Fri 19 Dec 2025 06:01:01 +0000
Manifest this update: Fri 19 Dec 2025 06:01:01 +0000
Manifest next update: Sat 20 Dec 2025 06:01:01 +0000
Files and hashes: 1: 5GZIM5avs3fl43nRYVveD9TZ7Uc.crl (hash: y/c5jfWQ6MdQzlvxPilVPVokuCbALeI1l7q9OofeacA=)
2: Btqt9dHmfyCgZm5YxFkx4BjR-Dc.roa (hash: O8dRjpLSf+cl4rOTaaTPD9tud0oWl3levwWO3JGp7jw=)
3: TLd_ZXXp2Q2UgInwhLKUEKhwDUc.roa (hash: IaRGq7PGoes/uNGrRRu/Qh4aGHDMpqDn5kGzUSwYnj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/5GZIM5avs3fl43nRYVveD9TZ7Uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Dec 2025 06:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:35:32:82:92:22:2b:c3:ac:97:d0:aa:ca:c4:d7:7d:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e466483396afb377e5e379d1615bde0fd4d9ed47
Validity
Not Before: Dec 19 06:01:01 2025 GMT
Not After : Dec 20 06:01:01 2025 GMT
Subject: CN=bf03030207d115f403f801490ce54324f9dea8d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a1:eb:c3:d8:a6:a8:85:8d:b8:a4:78:a7:1e:
04:d4:b7:3e:9a:6a:7a:70:ec:0b:c9:4b:b9:4f:db:
f8:80:40:33:d7:53:60:b8:2e:a9:ec:f9:e9:0c:f7:
d2:25:b9:f4:e9:4b:95:b4:9c:bb:15:38:7b:4a:00:
d4:85:a4:17:81:33:a5:0e:35:b4:14:5c:6c:34:9a:
4a:f6:52:1e:58:bc:cc:91:80:10:c5:3a:61:8a:12:
f4:6e:e1:40:09:9c:f2:48:db:82:76:10:59:96:d4:
d4:6f:77:1a:d9:7a:06:b8:8a:74:73:e1:85:f6:83:
83:58:ff:86:11:99:62:1b:15:b1:2b:3d:39:cc:f6:
39:91:35:d9:29:80:a6:04:18:37:05:27:5b:cd:51:
72:48:c3:f4:52:38:84:88:34:00:9f:05:94:cb:1e:
cc:8e:ec:06:49:a5:f6:49:0d:e2:7d:3a:a3:70:78:
8b:c5:4a:18:23:e3:d2:a9:e6:02:dc:f9:69:7b:a7:
7a:f9:3e:96:6b:78:f2:6b:9c:bc:4f:32:87:71:a8:
89:5b:43:40:cd:07:3b:f2:d8:91:81:0c:a9:ae:1c:
a7:a1:e5:37:8c:b4:5f:76:f6:8f:b7:ba:3f:66:67:
05:95:fa:61:83:f8:e5:42:2c:c1:2a:db:12:23:4b:
30:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:03:03:02:07:D1:15:F4:03:F8:01:49:0C:E5:43:24:F9:DE:A8:D8
X509v3 Authority Key Identifier:
keyid:E4:66:48:33:96:AF:B3:77:E5:E3:79:D1:61:5B:DE:0F:D4:D9:ED:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5GZIM5avs3fl43nRYVveD9TZ7Uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:15:a4:5c:a3:d7:19:99:5c:5a:83:ed:1b:90:06:f0:fd:ef:
c3:69:cd:35:fe:3f:94:08:e2:32:a0:a3:96:e1:fa:2b:d7:ca:
53:34:e9:c1:01:dd:cc:ca:e3:ec:43:31:e6:a1:f7:79:34:1b:
b3:16:de:b3:7b:72:6c:41:f0:80:df:6e:a9:e6:b4:1d:97:f7:
c0:b1:3c:1b:11:38:7a:74:3d:2e:89:52:40:b6:0b:a8:0d:d9:
e2:73:91:90:96:11:42:d4:89:de:eb:9f:04:e1:58:38:1a:c7:
79:14:79:5f:69:5c:5c:a0:85:f7:98:61:62:f2:3b:5c:4e:1b:
1a:c3:3c:71:10:59:96:6a:bb:01:e8:42:f6:4d:bd:ce:a6:46:
0b:cc:6b:5c:5b:8f:4e:af:f2:3c:6e:46:52:39:49:01:88:78:
3e:56:85:65:23:bb:e4:3d:9d:bd:e7:f6:d9:bc:3c:1a:e8:61:
97:d2:c8:dc:5b:d6:f4:29:d0:37:78:97:3e:f9:f2:96:05:cb:
8a:6b:0b:42:40:69:df:19:f5:03:f2:46:29:df:d5:1a:b1:f5:
f6:da:83:fb:7b:ef:6b:17:55:37:20:66:8e:3a:30:93:97:b0:
b0:3f:76:da:ab:cd:a9:71:0f:13:dc:8b:49:37:3c:07:5a:86:
9f:ff:91:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 15:15:17 2025 by rpki-client