This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/e7b1d7-3d7a-46ab-810f-eddf23c1ba6d/1/GMrrFKAe4W2DZWXhT6U7SrPDzSY.mft
File: GMrrFKAe4W2DZWXhT6U7SrPDzSY.mft (raw, json)
Hash identifier: P0QWq7FvotBsWeJkOqJcabjOk7AvtsMw81SYePnDty8=
Subject key identifier: CC:23:5F:1D:22:E6:5D:82:86:BF:D4:0E:A8:F0:3F:55:79:98:B7:5E
Authority key identifier: 18:CA:EB:14:A0:1E:E1:6D:83:65:65:E1:4F:A5:3B:4A:B3:C3:CD:26
Certificate issuer: /CN=18caeb14a01ee16d836565e14fa53b4ab3c3cd26
Certificate serial: 019AF1D244C6783D655227FB9F632D9CBF64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GMrrFKAe4W2DZWXhT6U7SrPDzSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/e7b1d7-3d7a-46ab-810f-eddf23c1ba6d/1/GMrrFKAe4W2DZWXhT6U7SrPDzSY.mft
Manifest number: 1764
Signing time: Sat 06 Dec 2025 04:01:20 +0000
Manifest this update: Sat 06 Dec 2025 04:01:20 +0000
Manifest next update: Sun 07 Dec 2025 04:01:20 +0000
Files and hashes: 1: Co6M_nxOxRb4ejhwPMZFPOzlY1U.roa (hash: sSWEBAjRZaqtAdwjOfykVqgf7b7OWWPQ8cRcY8XqZmU=)
2: GMrrFKAe4W2DZWXhT6U7SrPDzSY.crl (hash: 9odHLo2MUMGVCIEVUpdwOzvRQq5yfoIfasRmWtsJIdQ=)
3: LASNDVJFR7nISIIuLJuen3qOehA.roa (hash: zvljnKWMuxdFNbiIQd7aWSR9xyeCp6tRJSsTE0UC5w8=)
4: y0q_mnHeqqODRkh3mN1XsHcA07o.roa (hash: vPYM1qZGBQlB55R1ITXDPJhnP7mpA1SIlCNpOTcVP6w=)
5: zO1aOnWzpH8Vmp45J1jZtXxaKKw.roa (hash: N6qZrGzU3tG6EdhOgnUHNSlOSI1pX79eNnDUPpj91So=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/e7b1d7-3d7a-46ab-810f-eddf23c1ba6d/1/GMrrFKAe4W2DZWXhT6U7SrPDzSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/e7b1d7-3d7a-46ab-810f-eddf23c1ba6d/1/GMrrFKAe4W2DZWXhT6U7SrPDzSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GMrrFKAe4W2DZWXhT6U7SrPDzSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:d2:44:c6:78:3d:65:52:27:fb:9f:63:2d:9c:bf:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18caeb14a01ee16d836565e14fa53b4ab3c3cd26
Validity
Not Before: Dec 6 04:01:20 2025 GMT
Not After : Dec 7 04:01:20 2025 GMT
Subject: CN=cc235f1d22e65d8286bfd40ea8f03f557998b75e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f1:2a:65:f6:f1:60:9a:22:bf:a8:a6:c2:f5:
7e:b8:ff:95:54:dc:5c:e9:ec:3f:39:1e:ba:9d:7f:
c0:b7:0d:e2:55:5b:bc:db:48:6b:c1:cb:fe:1b:60:
52:45:e9:53:d8:33:45:2b:b5:85:4d:77:73:5b:7e:
57:71:f0:3d:53:c1:b0:3f:0c:e0:88:d3:70:ea:73:
ce:5c:9d:34:f2:c7:10:b0:59:f2:fb:7c:23:85:75:
99:f9:7f:18:3f:24:40:63:e9:c3:80:1e:91:0a:50:
d4:f6:42:19:93:b1:c9:24:5a:58:2b:0f:de:66:6c:
d2:07:3c:92:39:e5:aa:8b:74:30:90:17:d7:ea:0d:
45:91:21:c7:52:25:e2:f8:ae:7f:26:71:63:09:b7:
5a:49:a7:5e:ab:db:53:6a:97:66:61:9b:a7:32:10:
72:f8:ec:b5:ff:fd:43:ad:1e:c6:cf:76:4d:3d:cf:
25:43:1a:00:d1:7f:47:50:5e:83:02:88:db:09:8d:
66:ef:83:e8:05:0a:b7:db:dd:77:c5:39:2f:cf:81:
3b:78:63:10:4b:d7:3f:5e:2e:4f:2d:ec:ea:01:45:
06:7a:72:c4:51:9d:7b:9e:e2:3e:b6:70:c2:97:ec:
90:b7:a1:ba:03:9f:09:0d:ed:8c:30:7b:93:c2:a5:
d2:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:23:5F:1D:22:E6:5D:82:86:BF:D4:0E:A8:F0:3F:55:79:98:B7:5E
X509v3 Authority Key Identifier:
keyid:18:CA:EB:14:A0:1E:E1:6D:83:65:65:E1:4F:A5:3B:4A:B3:C3:CD:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GMrrFKAe4W2DZWXhT6U7SrPDzSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e7b1d7-3d7a-46ab-810f-eddf23c1ba6d/1/GMrrFKAe4W2DZWXhT6U7SrPDzSY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e7b1d7-3d7a-46ab-810f-eddf23c1ba6d/1/GMrrFKAe4W2DZWXhT6U7SrPDzSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:b3:96:4e:ab:4f:25:ea:21:e1:73:9c:77:17:55:65:7b:6c:
eb:6c:1e:b7:e7:f4:db:9c:24:44:08:93:03:6d:e6:e9:9b:61:
cd:04:08:23:40:32:e6:2e:21:56:51:f0:e3:f9:b4:98:4c:d3:
55:cc:a4:28:aa:45:48:52:81:13:f0:2b:25:61:0d:75:ec:59:
ec:1d:6c:1f:dd:63:32:9d:7a:e9:8b:15:39:11:32:87:5b:38:
9a:b4:78:1a:ea:28:f3:f9:46:80:4f:9f:bd:e7:73:cc:b8:46:
d7:29:32:41:d9:ef:4d:a5:89:f7:d3:7b:ea:8b:5c:9b:0c:00:
0b:91:c6:19:8b:c8:ce:cc:62:7e:87:5f:a4:a5:d3:7c:2d:fd:
90:38:3b:60:6c:c1:0f:92:3f:3b:78:58:0d:04:ec:5a:80:bd:
7c:0d:f6:a3:ac:20:99:26:fa:1d:2e:f6:67:43:a8:0b:eb:a5:
15:1f:8c:b7:a8:65:3c:e9:c5:7d:55:53:f2:2c:61:37:af:7e:
00:78:22:21:cd:77:1a:f9:82:60:6a:14:3f:c1:6b:b9:ed:f2:
3b:b7:e6:dd:3a:fd:2e:9d:d4:80:55:43:3b:ad:5d:fc:36:b9:
c0:e8:e2:d6:5c:11:8c:35:14:a9:10:82:39:82:3d:44:34:33:
3d:da:95:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:07:38 2025 by rpki-client