This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/1d4596-6ae3-480e-ad16-76151bb9719d/1/mGmeAMEXUdAbNeNfwCl9om6seeo.mft
File: mGmeAMEXUdAbNeNfwCl9om6seeo.mft (raw, json)
Hash identifier: RxlqUZtjMA6WSPfkHxaIVVemyrjrvFPn+vMrrt/kNd4=
Subject key identifier: 48:F5:DA:28:5A:E1:3D:50:F7:F8:E3:CE:46:A2:CB:FF:63:23:A5:6C
Authority key identifier: 98:69:9E:00:C1:17:51:D0:1B:35:E3:5F:C0:29:7D:A2:6E:AC:79:EA
Certificate issuer: /CN=98699e00c11751d01b35e35fc0297da26eac79ea
Certificate serial: 019B32D7EFE3DA5F296CB00A8B642904ACE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGmeAMEXUdAbNeNfwCl9om6seeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/1d4596-6ae3-480e-ad16-76151bb9719d/1/mGmeAMEXUdAbNeNfwCl9om6seeo.mft
Manifest number: 052C
Signing time: Thu 18 Dec 2025 19:02:50 +0000
Manifest this update: Thu 18 Dec 2025 19:02:50 +0000
Manifest next update: Fri 19 Dec 2025 19:02:50 +0000
Files and hashes: 1: D8t9LetVYSLLb_TLh9xUmyS0_cE.roa (hash: 6STeuA04n6UbXt4NmyiolKvnu452YSYrUoVlj4sED8M=)
2: mGmeAMEXUdAbNeNfwCl9om6seeo.crl (hash: fmvXK/dH4WNWHQt1UBATg2nNW/p3Z9OnYyJYYZBbOrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/1d4596-6ae3-480e-ad16-76151bb9719d/1/mGmeAMEXUdAbNeNfwCl9om6seeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/1d4596-6ae3-480e-ad16-76151bb9719d/1/mGmeAMEXUdAbNeNfwCl9om6seeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mGmeAMEXUdAbNeNfwCl9om6seeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Dec 2025 13:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:32:d7:ef:e3:da:5f:29:6c:b0:0a:8b:64:29:04:ac:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98699e00c11751d01b35e35fc0297da26eac79ea
Validity
Not Before: Dec 18 19:02:50 2025 GMT
Not After : Dec 19 19:02:50 2025 GMT
Subject: CN=48f5da285ae13d50f7f8e3ce46a2cbff6323a56c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c8:b8:fa:48:35:25:28:24:9f:84:49:57:18:
2c:09:1f:c3:f9:09:74:da:01:9a:b3:27:86:61:12:
ea:b9:3b:a7:ab:fa:59:5a:55:bb:fd:e3:f1:1c:18:
6f:d7:d7:c5:cd:98:54:c9:3d:df:e1:4c:66:cd:5f:
73:a7:90:79:11:73:2e:2e:40:e3:05:5c:6a:1b:42:
56:47:7d:15:93:03:93:60:d4:97:5a:8d:da:3c:b4:
66:24:9d:4f:16:97:3b:6d:41:d2:cd:89:22:6a:56:
71:25:ab:92:1a:e4:9b:8d:b9:27:71:8e:da:b5:d7:
eb:20:83:53:e4:88:e8:37:3e:c2:26:d5:20:85:ee:
8a:1c:ef:1f:99:50:f4:a7:05:34:00:57:37:33:3a:
4d:57:42:fa:8b:87:95:35:3c:38:87:2c:a5:97:23:
79:46:87:9d:62:80:73:42:9c:b4:14:e7:71:cd:06:
3f:5e:c4:e0:5c:61:44:f9:dc:90:d8:ae:f9:0e:3b:
6c:5f:d6:ed:b7:13:fa:78:52:d3:a4:5b:fd:15:0a:
c8:15:41:57:5b:41:9f:0d:43:b7:2f:4f:26:2c:af:
f5:f3:3c:cb:08:83:9a:e0:13:ec:15:14:ac:9a:01:
a4:4b:5e:c2:5d:22:9f:dd:9f:5a:06:e3:b2:5e:28:
f4:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:F5:DA:28:5A:E1:3D:50:F7:F8:E3:CE:46:A2:CB:FF:63:23:A5:6C
X509v3 Authority Key Identifier:
keyid:98:69:9E:00:C1:17:51:D0:1B:35:E3:5F:C0:29:7D:A2:6E:AC:79:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGmeAMEXUdAbNeNfwCl9om6seeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1d4596-6ae3-480e-ad16-76151bb9719d/1/mGmeAMEXUdAbNeNfwCl9om6seeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1d4596-6ae3-480e-ad16-76151bb9719d/1/mGmeAMEXUdAbNeNfwCl9om6seeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:fd:ed:1a:57:02:e4:8d:2b:c6:68:85:31:6b:22:22:e1:ea:
72:ff:0f:81:52:fe:df:b7:d4:98:98:69:4e:ac:a1:e1:df:fa:
49:df:f3:e3:8b:ab:7c:f0:ba:f0:20:9b:a4:37:1f:03:f0:d7:
0a:ae:4f:5d:fe:2a:d1:e4:ba:31:48:4c:22:b2:24:e3:4d:fd:
5a:0d:92:96:f5:86:90:b0:0d:81:37:46:ea:85:02:e7:4d:02:
b8:e9:79:90:6a:a0:ea:e8:c6:0a:21:e3:4a:d6:ea:8a:e2:7f:
1e:c9:f0:ec:ac:c6:0d:4d:bf:91:b9:ed:53:47:c2:a5:aa:0b:
ce:06:65:7c:6b:a2:f0:c1:83:c3:63:1f:3e:61:f6:69:7a:9e:
08:81:d8:4b:ec:89:6d:db:a9:36:30:19:f3:d6:db:20:f9:b5:
d3:99:b7:48:b9:04:37:52:e1:5a:6f:eb:ee:c2:bc:78:0e:1d:
0e:ee:28:bd:ce:29:58:71:8a:10:a6:7e:9b:ed:20:7b:e2:4b:
c5:0e:4b:69:90:38:55:35:72:83:09:f2:0b:87:ef:b7:13:30:
1e:64:cf:77:07:3a:f0:b9:9f:ce:56:69:eb:84:fe:dc:35:ce:
99:f4:b5:d8:04:bb:ed:05:91:68:16:ce:46:1f:50:ef:5a:9a:
7f:5b:b6:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 22:09:31 2025 by rpki-client