This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.mft
File: ygwtrK_fpTmX7TsKcN-8JwqTO_Q.mft (raw, json)
Hash identifier: uHXW7vQN0CunyYpFO+W/YYKm+M+PgtS71o+Dm55LeQY=
Subject key identifier: E8:72:76:07:E7:EB:46:97:0C:C4:50:0F:28:74:38:83:86:58:46:7D
Authority key identifier: CA:0C:2D:AC:AF:DF:A5:39:97:ED:3B:0A:70:DF:BC:27:0A:93:3B:F4
Certificate issuer: /CN=ca0c2dacafdfa53997ed3b0a70dfbc270a933bf4
Certificate serial: 019AF19B4280F51209837489F98C44DFE918
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.mft
Manifest number: 1760
Signing time: Sat 06 Dec 2025 03:01:15 +0000
Manifest this update: Sat 06 Dec 2025 03:01:15 +0000
Manifest next update: Sun 07 Dec 2025 03:01:15 +0000
Files and hashes: 1: TBpy-9qiejUQQ-tchw6_vEGR2TA.roa (hash: Hj0WEeohah6IsMKUEfhTDBVFLO4BtqyUcqc4Aw6MbK8=)
2: ygwtrK_fpTmX7TsKcN-8JwqTO_Q.crl (hash: RT0PG1UBHqvL00VjGbUlXIuAq9XP4wP9NPGpYeW6PNU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 03:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:9b:42:80:f5:12:09:83:74:89:f9:8c:44:df:e9:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca0c2dacafdfa53997ed3b0a70dfbc270a933bf4
Validity
Not Before: Dec 6 03:01:15 2025 GMT
Not After : Dec 7 03:01:15 2025 GMT
Subject: CN=e8727607e7eb46970cc4500f287438838658467d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:03:c7:12:19:43:15:72:44:10:8c:3a:10:5c:
60:b7:12:24:80:22:0c:38:30:4e:e2:3a:85:ec:ff:
ea:3c:08:89:f5:95:ff:c7:13:05:0e:5f:c5:a0:39:
52:81:cf:80:60:f3:36:ec:a1:60:f7:79:08:e1:58:
68:48:1a:03:d5:2b:2a:7c:5e:21:8a:79:c2:c5:bd:
72:fd:7f:57:7d:2a:ca:4b:33:00:c9:89:51:19:c8:
28:0b:c2:ed:4f:ea:c1:8e:c8:34:5a:d7:da:85:09:
ea:bb:2c:ca:fe:f1:cf:3c:2c:ba:f9:41:8b:19:78:
f0:93:9d:a8:63:b4:0c:f5:f6:7e:4d:62:36:62:87:
bc:ec:0c:83:c4:59:e7:a8:dc:c1:cb:5c:d1:a4:78:
c5:3a:8b:bb:05:06:50:3e:9a:a5:e9:7b:e8:4f:eb:
9e:1b:62:d1:ae:c6:d7:77:10:b8:b0:77:ef:ed:4e:
62:85:ac:7c:f0:3e:43:bd:9c:54:65:35:65:f8:b3:
46:bf:85:de:61:1e:d9:46:4b:8b:89:95:6d:5e:fa:
96:39:ea:81:34:54:6e:91:0a:02:6b:fc:c9:44:24:
c7:a2:3d:00:15:b2:2c:21:5e:0a:fa:85:be:3f:7c:
5a:8a:2e:85:dc:f7:63:c4:84:1c:08:9d:20:2d:77:
e9:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:72:76:07:E7:EB:46:97:0C:C4:50:0F:28:74:38:83:86:58:46:7D
X509v3 Authority Key Identifier:
keyid:CA:0C:2D:AC:AF:DF:A5:39:97:ED:3B:0A:70:DF:BC:27:0A:93:3B:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:51:84:34:a2:8f:bd:25:11:b8:39:82:1e:e7:f2:2a:f2:c9:
6f:5f:8c:98:84:09:bc:58:14:7b:b1:ba:8f:9a:14:48:86:1f:
60:69:41:db:ee:2b:3f:92:dc:05:f5:b0:02:86:93:f1:50:c9:
bd:a9:8d:44:b1:42:01:7b:af:4d:cb:e4:6d:f3:88:d9:45:bb:
ac:c2:ad:33:bd:35:67:dc:80:29:8a:86:a8:12:55:9a:df:de:
c6:34:72:15:92:15:67:25:86:c0:24:c0:b2:cb:3b:0a:4b:1b:
43:79:b2:b5:80:74:d9:5a:b2:80:f3:32:1e:c9:3b:c9:88:a7:
54:0f:27:4b:b0:ff:35:47:89:0a:bc:5b:16:d5:e7:36:e1:62:
e9:9d:70:d8:9c:67:5b:1b:8b:8d:30:41:39:4e:f0:03:46:42:
4b:41:a7:7f:0d:cc:c9:61:73:e0:09:7b:68:e8:c9:6f:0a:9c:
c2:62:5e:61:31:62:04:b7:96:9c:75:e4:76:4a:e0:aa:7e:e3:
f2:18:5d:5c:7d:a4:91:88:cc:8a:f6:72:fc:e2:84:4e:0c:ef:
d3:7c:31:9d:d8:ed:d9:4c:3c:bd:77:08:60:9c:d7:7e:3b:f6:
93:a5:0a:ab:80:6e:88:eb:70:db:80:eb:5a:e0:b5:20:c4:3c:
00:1d:be:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:53:42 2025 by rpki-client