This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/Ge5hnvlqOv0C_C1dADqUfk0tWQo.mft
File: Ge5hnvlqOv0C_C1dADqUfk0tWQo.mft (raw, json)
Hash identifier: wwGznCA5YI3LoZCYJIGqEjVwMqeGkyCad5SSBYKQlz0=
Subject key identifier: BC:6C:EA:7F:9A:2C:8B:4D:0F:00:D8:5F:B7:A8:F5:73:69:4C:73:F7
Authority key identifier: 19:EE:61:9E:F9:6A:3A:FD:02:FC:2D:5D:00:3A:94:7E:4D:2D:59:0A
Certificate issuer: /CN=19ee619ef96a3afd02fc2d5d003a947e4d2d590a
Certificate serial: 019B243EC5527CB2590F199A2E232F14B0CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ge5hnvlqOv0C_C1dADqUfk0tWQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/Ge5hnvlqOv0C_C1dADqUfk0tWQo.mft
Manifest number: 082A
Signing time: Mon 15 Dec 2025 23:00:51 +0000
Manifest this update: Mon 15 Dec 2025 23:00:51 +0000
Manifest next update: Tue 16 Dec 2025 23:00:51 +0000
Files and hashes: 1: Ge5hnvlqOv0C_C1dADqUfk0tWQo.crl (hash: 6odf0R/DFGYSvCyAWRHHoV1kUX+9cS8i1Xuqc39UTgI=)
2: UDJ25qWD57Bw7FcU1JLbyObIuuo.roa (hash: DrbNben6Azyc3081NKjsbYp37NNjbptdcPBV8kesvaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/Ge5hnvlqOv0C_C1dADqUfk0tWQo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/Ge5hnvlqOv0C_C1dADqUfk0tWQo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ge5hnvlqOv0C_C1dADqUfk0tWQo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Dec 2025 22:36:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:24:3e:c5:52:7c:b2:59:0f:19:9a:2e:23:2f:14:b0:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19ee619ef96a3afd02fc2d5d003a947e4d2d590a
Validity
Not Before: Dec 15 23:00:51 2025 GMT
Not After : Dec 16 23:00:51 2025 GMT
Subject: CN=bc6cea7f9a2c8b4d0f00d85fb7a8f573694c73f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c0:91:f3:1e:02:49:13:65:f8:70:08:de:14:
99:38:55:6b:48:d2:ba:65:26:56:16:08:89:dd:43:
82:80:e7:1b:97:a6:fe:18:bf:eb:16:d2:fa:1b:3c:
d9:3f:a1:63:a7:79:00:dd:f3:5f:3d:4d:74:a3:f8:
2b:6b:2c:15:55:80:0b:7a:1e:75:76:ab:e1:a1:84:
79:5b:26:20:39:41:54:77:45:bf:86:be:ad:47:74:
46:90:ff:40:5a:a3:7f:33:98:9b:16:4a:de:23:6d:
b1:fc:23:0b:21:84:af:92:31:1d:f3:e7:78:c2:c6:
d1:e9:53:f3:ba:ec:ee:91:b0:c2:63:5b:62:0b:ee:
54:90:74:a5:c2:bd:6d:97:90:b8:4a:6a:8f:cf:6b:
2c:de:de:9d:ef:69:b7:d7:6f:06:3f:7c:f0:ac:e7:
9a:75:81:8e:f0:cf:84:c4:22:88:f6:ec:f5:b2:32:
ef:46:43:31:ec:04:be:31:bc:14:6c:f1:72:6e:67:
64:b6:57:f6:7d:6a:89:a1:b5:0d:7c:de:14:94:12:
c5:21:9d:ef:91:67:f3:c7:7e:8e:7d:6a:3d:cd:f2:
12:16:6c:40:36:bb:23:65:af:88:bc:a4:9a:11:15:
f5:28:14:bd:a8:68:45:9c:bb:9c:5b:95:c8:5a:54:
23:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:6C:EA:7F:9A:2C:8B:4D:0F:00:D8:5F:B7:A8:F5:73:69:4C:73:F7
X509v3 Authority Key Identifier:
keyid:19:EE:61:9E:F9:6A:3A:FD:02:FC:2D:5D:00:3A:94:7E:4D:2D:59:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ge5hnvlqOv0C_C1dADqUfk0tWQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/Ge5hnvlqOv0C_C1dADqUfk0tWQo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/Ge5hnvlqOv0C_C1dADqUfk0tWQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:ab:ae:c8:48:df:74:e3:4a:d9:f3:22:4e:2a:a0:b7:2d:e4:
88:9c:38:67:9b:81:35:8e:1d:88:97:bf:41:13:99:d1:57:31:
48:5e:ac:b6:fa:5e:be:88:c4:6a:7c:9e:21:42:06:d9:31:a4:
c7:5b:b6:d2:2d:20:34:5d:ed:81:6d:17:0d:8d:cc:44:c8:3e:
80:f9:01:b6:38:64:83:7f:1a:85:1d:be:6d:3b:82:2c:51:c3:
ba:8e:4f:f1:5b:38:4c:94:4a:4b:23:8f:71:8f:fa:68:d6:c2:
e2:09:b4:94:62:eb:c1:5a:37:79:34:08:c5:26:ac:07:e5:80:
2f:dc:4f:49:9d:ed:cd:fa:f2:e3:b0:e8:6c:96:90:7c:d9:05:
68:31:08:01:f2:c2:1e:75:87:9e:01:d8:dd:49:42:5a:e0:0c:
ad:8b:0d:7d:67:59:8b:3f:92:dd:07:a9:11:3d:2a:ee:d6:75:
1c:81:3e:7a:d4:77:67:60:d3:0f:e3:bb:5f:7a:60:1a:7e:d7:
2b:f1:be:05:45:c5:2c:9f:2c:4e:ad:34:17:c1:bb:ed:98:b6:
b2:5d:17:e1:b8:69:57:17:4d:d6:c8:81:d2:00:24:bb:f0:dc:
57:12:03:01:29:f2:46:09:94:b5:81:45:c3:24:e1:61:f8:d8:
e0:04:22:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 05:26:28 2025 by rpki-client