This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.mft
File: mc5399kWUTuEkUhJlQ_kP1VpT9o.mft (raw, json)
Hash identifier: CLvuumHkxC5uqzIB+vufykN+HOfipvKM8Po7OCALfUY=
Subject key identifier: FD:50:CB:4B:0C:87:94:75:92:0B:23:E1:05:31:4B:CE:BD:B0:D1:4F
Authority key identifier: 99:CE:77:F7:D9:16:51:3B:84:91:48:49:95:0F:E4:3F:55:69:4F:DA
Certificate issuer: /CN=99ce77f7d916513b84914849950fe43f55694fda
Certificate serial: 019AF31B85ED5ED3570FD6B3470571D68AE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mc5399kWUTuEkUhJlQ_kP1VpT9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.mft
Manifest number: 145F
Signing time: Sat 06 Dec 2025 10:00:58 +0000
Manifest this update: Sat 06 Dec 2025 10:00:58 +0000
Manifest next update: Sun 07 Dec 2025 10:00:58 +0000
Files and hashes: 1: 04wvXQkxp_kIl5uRKr8ghukmhJI.roa (hash: GTtfMqk+jPWwguQx9YNOstJCSt+yXJTuSCt2I8sH22g=)
2: IxqqTicMk9q6G8gR9tJlENOjFRc.roa (hash: h/X3uGRGZNAQKipVXG0k+pt4jygDWjzWErh2sc4FvuM=)
3: MCU3b2xVwihTn4iMijHbh_JRyVI.roa (hash: f9gCgn5IGlkOz+OwQwChagJxpgUSziKJVT9IFUTeJPA=)
4: kPBy-28puZ8CFn-NDbUpDdz83-A.roa (hash: nQSxZr6dgfBylfZhJymFAU87J/QWTR7NQw9BEBikIEc=)
5: mc5399kWUTuEkUhJlQ_kP1VpT9o.crl (hash: fmOVaC3nrE3K8RwIQk76HJWo5fAY3hsJVbiF+Rp8hCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/mc5399kWUTuEkUhJlQ_kP1VpT9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f3:1b:85:ed:5e:d3:57:0f:d6:b3:47:05:71:d6:8a:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99ce77f7d916513b84914849950fe43f55694fda
Validity
Not Before: Dec 6 10:00:58 2025 GMT
Not After : Dec 7 10:00:58 2025 GMT
Subject: CN=fd50cb4b0c879475920b23e105314bcebdb0d14f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c2:a6:68:ff:c8:e5:95:52:9f:d3:21:74:de:
c1:e6:4d:0c:70:72:fb:cb:23:e2:70:d8:5a:81:09:
20:c0:fe:a6:ff:a1:4c:e2:51:37:38:f7:f0:c7:77:
55:f4:38:bb:78:06:6e:61:75:14:ee:e1:71:66:d9:
d3:05:8a:c4:22:83:9b:5f:37:1a:a3:2b:26:5f:3e:
8f:13:f2:8a:8b:58:d1:56:50:90:31:cd:7b:89:7f:
df:4d:56:dc:63:ba:58:b8:e5:7d:65:24:46:80:45:
c2:cc:23:6e:99:2b:b0:d5:99:60:0b:8e:02:cf:0a:
f7:60:bb:52:34:24:2f:05:67:64:a0:b2:bd:b3:09:
e1:da:85:35:cd:f6:ee:07:4f:80:99:b1:cd:a4:43:
58:5d:00:8a:4d:a0:03:b1:ee:51:62:5d:00:e6:4c:
a6:b2:60:7d:a9:5a:74:ca:84:2b:27:e6:1a:31:ac:
96:46:da:61:f7:20:32:fa:2d:de:b4:2d:3c:1d:d4:
e0:48:09:b2:a4:de:25:ae:f7:a5:d4:b6:58:15:10:
54:c3:ae:4b:ed:11:46:ee:cf:2a:70:54:28:0f:4d:
80:af:0f:5b:c4:0c:6d:1e:36:78:30:53:68:46:b1:
1c:b2:46:5a:d9:ff:dd:0d:65:06:62:da:f9:72:18:
5c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:50:CB:4B:0C:87:94:75:92:0B:23:E1:05:31:4B:CE:BD:B0:D1:4F
X509v3 Authority Key Identifier:
keyid:99:CE:77:F7:D9:16:51:3B:84:91:48:49:95:0F:E4:3F:55:69:4F:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mc5399kWUTuEkUhJlQ_kP1VpT9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:bc:28:97:4c:e8:27:14:fa:94:6e:c1:2c:5d:e5:5b:9c:be:
3c:59:d2:6e:d7:bb:18:61:c9:56:e8:c1:08:b0:e5:71:91:b9:
6e:7a:8b:f4:f1:09:37:d9:45:28:e3:de:17:13:54:c9:c9:3d:
2a:e9:45:65:dc:02:c1:67:d8:dd:2e:56:81:85:ca:11:a4:a4:
ff:40:18:d3:6a:b3:e8:50:91:cd:0c:87:cb:49:26:1c:3f:b0:
58:c9:18:02:cb:3a:ab:9c:81:a1:8f:10:ff:a3:9c:f9:be:dc:
4e:0f:a1:5b:14:be:26:87:5d:07:5d:93:4e:f3:3e:f4:1b:c4:
2a:49:16:03:0f:d2:23:23:16:d0:27:93:d3:ad:07:73:52:33:
b3:89:ed:dc:fe:8d:ca:2a:70:b4:ce:19:eb:df:85:fb:0a:a0:
b1:fa:69:c9:71:cd:31:dd:80:35:81:23:78:aa:c3:17:96:4f:
61:b2:bf:e0:60:6d:f9:56:ba:65:0d:21:bc:f7:14:6c:3e:a8:
e7:eb:74:07:b4:e0:a6:4b:c0:1f:7b:be:a3:62:e6:c9:59:31:
2f:20:83:79:f6:f8:1b:87:8b:70:1c:ca:08:ea:5e:63:2c:00:
76:88:24:85:9d:33:8c:cd:2c:e0:2b:ce:31:a4:ee:db:21:77:
ea:62:76:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:34:31 2025 by rpki-client