This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.mft
File: 5QwixmuF-smN6D12HvQkNDerA5M.mft (raw, json)
Hash identifier: Oz9TD5EX5qKthvrNhzg+e1T4pWUOfD63YXUWJMCi1G8=
Subject key identifier: B6:8B:34:DE:90:2B:5C:E1:08:99:17:76:8C:B0:9F:32:C9:3F:3D:2E
Authority key identifier: E5:0C:22:C6:6B:85:FA:C9:8D:E8:3D:76:1E:F4:24:34:37:AB:03:93
Certificate issuer: /CN=e50c22c66b85fac98de83d761ef4243437ab0393
Certificate serial: 019AF208D041A807E81C387E11F0138FFFE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5QwixmuF-smN6D12HvQkNDerA5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.mft
Manifest number: 13FE
Signing time: Sat 06 Dec 2025 05:00:55 +0000
Manifest this update: Sat 06 Dec 2025 05:00:55 +0000
Manifest next update: Sun 07 Dec 2025 05:00:55 +0000
Files and hashes: 1: 5QwixmuF-smN6D12HvQkNDerA5M.crl (hash: iBTa0EQIjFYneHSkVmzRKK4SxBlSbgI5CctP+4g10QU=)
2: 5vvZLFuVzrlfVEjgWVSSvDzWzYc.roa (hash: d36pZwdlPn9b+lfJWHYLiYs9ysvYmjF2/rOLd55l7Go=)
3: f1b7by6SkYswASAnSv-cgB5XP2Y.roa (hash: x+DctqLC1gEcaYW0QmBitaKdQAwlen0XRAIQGmNrAQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/5QwixmuF-smN6D12HvQkNDerA5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f2:08:d0:41:a8:07:e8:1c:38:7e:11:f0:13:8f:ff:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e50c22c66b85fac98de83d761ef4243437ab0393
Validity
Not Before: Dec 6 05:00:55 2025 GMT
Not After : Dec 7 05:00:55 2025 GMT
Subject: CN=b68b34de902b5ce1089917768cb09f32c93f3d2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:48:1f:fd:98:17:10:ce:e9:17:c7:84:26:9f:
5d:5c:3c:a8:4b:f6:1b:66:97:d1:e1:0b:8d:27:d1:
ad:db:be:86:17:ad:25:fc:65:87:9f:a0:28:49:ff:
02:c0:07:a7:1a:3e:96:b1:b7:29:89:50:0c:fc:35:
99:47:a1:05:2e:92:32:51:a5:2f:1a:96:d6:d8:c7:
b8:43:ff:bf:63:7c:55:a7:04:83:e1:e5:9a:c0:6c:
3c:7b:84:a9:81:7b:17:08:c2:ab:c7:38:b6:a4:b4:
1c:3b:c8:fc:94:7b:e5:ef:19:87:b8:ca:c8:19:1c:
07:67:f6:89:a5:54:26:68:43:b2:f8:44:45:47:4f:
58:af:bf:99:05:75:ee:80:86:a8:9a:47:f6:e3:65:
09:81:78:31:8b:fc:e4:44:5c:c4:72:35:bf:dc:0f:
82:7f:b3:18:fc:a9:41:69:28:28:02:66:53:c4:e1:
3c:7f:eb:ed:91:45:40:fa:5b:6f:8c:8c:d8:0e:2f:
06:da:31:10:9e:ef:8f:88:36:c6:89:f3:2f:3a:fe:
b6:9f:35:9c:fd:e6:b2:33:c5:50:f4:d1:d2:82:5b:
f4:5a:b4:25:3a:61:cd:91:c2:10:0a:ae:d2:75:4b:
27:8c:9b:6f:5a:3a:0e:db:84:1d:bd:9b:07:ee:53:
3c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:8B:34:DE:90:2B:5C:E1:08:99:17:76:8C:B0:9F:32:C9:3F:3D:2E
X509v3 Authority Key Identifier:
keyid:E5:0C:22:C6:6B:85:FA:C9:8D:E8:3D:76:1E:F4:24:34:37:AB:03:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QwixmuF-smN6D12HvQkNDerA5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:69:d9:cf:7a:63:05:87:11:a5:3b:74:ed:1f:b8:85:9e:93:
78:6c:2b:ac:d5:50:38:f0:a6:2d:f6:19:2b:81:0f:e6:15:66:
b1:a5:94:ee:61:d4:64:88:2b:22:c7:45:86:0e:b3:89:d8:19:
d6:41:f6:db:33:28:b6:62:a1:e0:f0:21:e3:f8:10:de:03:7f:
5b:97:17:0d:12:f9:a9:d8:8a:7f:5e:e3:9d:0b:61:b6:30:cc:
37:30:27:cd:db:0c:80:b8:84:a2:f7:eb:2f:91:a8:7e:3a:76:
1e:79:e1:26:8c:48:70:e6:68:d0:e5:19:f5:40:7a:8f:05:97:
0e:85:64:da:92:32:82:02:52:b2:c2:ef:2c:f0:a8:95:45:a9:
6a:f6:d6:93:8d:c5:62:d3:7d:a3:5e:04:38:3a:99:ea:73:34:
52:d6:d0:ff:cc:f4:f2:fc:76:88:1c:0d:df:f8:30:73:c9:ad:
49:98:f4:4a:64:ad:36:ce:bd:35:11:c5:d1:65:54:19:16:dc:
ce:c6:11:c3:8c:32:fe:c3:da:4f:47:a5:16:c1:b3:6a:8f:4e:
a7:d4:1a:38:c0:93:c4:79:6c:59:8b:2d:2b:f1:c1:59:66:3f:
a6:4c:71:01:d6:5e:1d:c8:ee:39:81:6d:23:04:90:9b:90:fd:
96:e5:fd:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZryCNBBqAfoHDh+EfATj//jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1MGMyMmM2NmI4NWZhYzk4ZGU4M2Q3NjFlZjQyNDM0Mzdh
YjAzOTMwHhcNMjUxMjA2MDUwMDU1WhcNMjUxMjA3MDUwMDU1WjAzMTEwLwYDVQQD
EyhiNjhiMzRkZTkwMmI1Y2UxMDg5OTE3NzY4Y2IwOWYzMmM5M2YzZDJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Ugf/ZgXEM7pF8eEJp9dXDyoS/Yb
ZpfR4QuNJ9Gt276GF60l/GWHn6AoSf8CwAenGj6WsbcpiVAM/DWZR6EFLpIyUaUv
GpbW2Me4Q/+/Y3xVpwSD4eWawGw8e4SpgXsXCMKrxzi2pLQcO8j8lHvl7xmHuMrI
GRwHZ/aJpVQmaEOy+ERFR09Yr7+ZBXXugIaomkf242UJgXgxi/zkRFzEcjW/3A+C
f7MY/KlBaSgoAmZTxOE8f+vtkUVA+ltvjIzYDi8G2jEQnu+PiDbGifMvOv62nzWc
/eayM8VQ9NHSglv0WrQlOmHNkcIQCq7SdUsnjJtvWjoO24QdvZsH7lM8/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLaLNN6QK1zhCJkXdoywnzLJPz0uMB8GA1UdIwQY
MBaAFOUMIsZrhfrJjeg9dh70JDQ3qwOTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVF3aXhtdUYtc21ONkQxMkh2UWtORGVyQTVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8yYjdmZTktMmE4Ny00YzU3LWIxMDgt
OTIxNDI3ODEwOGE4LzEvNVF3aXhtdUYtc21ONkQxMkh2UWtORGVyQTVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy8yYjdmZTktMmE4Ny00YzU3LWIxMDgtOTIxNDI3ODEwOGE4
LzEvNVF3aXhtdUYtc21ONkQxMkh2UWtORGVyQTVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUmnZz3pj
BYcRpTt07R+4hZ6TeGwrrNVQOPCmLfYZK4EP5hVmsaWU7mHUZIgrIsdFhg6zidgZ
1kH22zMotmKh4PAh4/gQ3gN/W5cXDRL5qdiKf17jnQthtjDMNzAnzdsMgLiEovfr
L5Gofjp2HnnhJoxIcOZo0OUZ9UB6jwWXDoVk2pIyggJSssLvLPColUWpavbWk43F
YtN9o14EODqZ6nM0UtbQ/8z08vx2iBwN3/gwc8mtSZj0SmStNs69NRHF0WVUGRbc
zsYRw4wy/sPaT0elFsGzao9Op9QaOMCTxHlsWYstK/HBWWY/pkxxAdZeHcjuOYFt
IwSQm5D9luX91g==
-----END CERTIFICATE-----
Generated at Sat Dec 6 12:34:34 2025 by rpki-client