This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/2ef900-ef25-42a4-9edd-45e6cd6e320e/1/sHplogTjx5n7GDuevkc2L6fP6MQ.mft
File: sHplogTjx5n7GDuevkc2L6fP6MQ.mft (raw, json)
Hash identifier: NHyld9L+YwiTpDEYrpWp/ua++ufKmbU3r3MxzKe/rp4=
Subject key identifier: 54:94:9D:74:51:5C:D3:8C:5D:83:D7:EE:16:DC:90:FE:E5:7A:02:3C
Authority key identifier: B0:7A:65:A2:04:E3:C7:99:FB:18:3B:9E:BE:47:36:2F:A7:CF:E8:C4
Certificate issuer: /CN=b07a65a204e3c799fb183b9ebe47362fa7cfe8c4
Certificate serial: 019AF509E724FA1E2A46C9AE1665F5D9166A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sHplogTjx5n7GDuevkc2L6fP6MQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/2ef900-ef25-42a4-9edd-45e6cd6e320e/1/sHplogTjx5n7GDuevkc2L6fP6MQ.mft
Manifest number: 01A8
Signing time: Sat 06 Dec 2025 19:00:58 +0000
Manifest this update: Sat 06 Dec 2025 19:00:58 +0000
Manifest next update: Sun 07 Dec 2025 19:00:58 +0000
Files and hashes: 1: PW2sWVJ9FFBsjfGLnP2cm8afOE8.roa (hash: 6jybPU5tVXkCjx5dz+V7ya485HszpB6dPF9HmYkhSqM=)
2: sHplogTjx5n7GDuevkc2L6fP6MQ.crl (hash: PlMoBWTeQeRKska7+NDX3K21hAPiAoBsXoy7eSyXf/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/2ef900-ef25-42a4-9edd-45e6cd6e320e/1/sHplogTjx5n7GDuevkc2L6fP6MQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/2ef900-ef25-42a4-9edd-45e6cd6e320e/1/sHplogTjx5n7GDuevkc2L6fP6MQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sHplogTjx5n7GDuevkc2L6fP6MQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f5:09:e7:24:fa:1e:2a:46:c9:ae:16:65:f5:d9:16:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b07a65a204e3c799fb183b9ebe47362fa7cfe8c4
Validity
Not Before: Dec 6 19:00:58 2025 GMT
Not After : Dec 7 19:00:58 2025 GMT
Subject: CN=54949d74515cd38c5d83d7ee16dc90fee57a023c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:df:a2:b0:e5:0a:e1:7d:bf:a8:64:0f:2f:eb:
54:34:7a:9c:9c:a3:07:b2:51:e3:8d:7b:1f:23:ef:
13:84:da:c2:5a:e3:0b:98:01:6b:9a:62:0a:62:84:
41:26:ae:ff:4e:5b:17:23:34:40:1c:82:c4:fc:2c:
43:c7:04:53:f6:bd:24:00:67:74:d8:6c:a3:03:d1:
07:8c:6a:ea:91:06:b4:fe:e8:eb:88:c1:15:f8:c4:
0c:09:64:85:ce:9a:94:c0:5d:fa:05:4b:b3:f0:7d:
6d:50:6a:d2:5c:6b:b0:fa:b3:14:57:c2:be:02:7c:
50:e8:4a:f4:96:fc:50:85:87:7c:71:dd:33:1d:a6:
a4:c2:fa:25:48:2a:77:f5:0b:82:94:64:38:5b:0f:
61:44:99:5b:ac:c5:11:3b:50:1d:d2:9c:05:20:d3:
96:06:86:2c:54:bf:1b:b9:b4:ab:f2:47:b4:30:16:
67:20:70:cf:88:56:00:be:64:ed:6f:f2:cf:50:35:
29:52:cc:3f:d2:e9:2f:1c:2e:69:ee:6b:da:21:d6:
f7:b0:38:83:d0:35:30:d1:71:00:2c:60:7f:d9:14:
cc:4e:d2:a3:83:e3:66:97:1e:dc:e2:59:21:66:ae:
c7:7e:67:f2:63:d3:46:08:b0:d7:cb:c0:9a:77:be:
29:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:94:9D:74:51:5C:D3:8C:5D:83:D7:EE:16:DC:90:FE:E5:7A:02:3C
X509v3 Authority Key Identifier:
keyid:B0:7A:65:A2:04:E3:C7:99:FB:18:3B:9E:BE:47:36:2F:A7:CF:E8:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sHplogTjx5n7GDuevkc2L6fP6MQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2ef900-ef25-42a4-9edd-45e6cd6e320e/1/sHplogTjx5n7GDuevkc2L6fP6MQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2ef900-ef25-42a4-9edd-45e6cd6e320e/1/sHplogTjx5n7GDuevkc2L6fP6MQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:ca:00:c2:e6:19:bb:9f:6a:62:5b:c8:31:1e:df:29:ca:71:
8a:25:c7:54:fb:97:5f:49:b2:9a:45:c8:a4:6a:e3:0d:6a:e8:
1d:72:e4:41:3f:c7:7f:28:4e:57:a6:46:29:e4:cb:c2:7f:0a:
18:12:14:be:89:d2:9c:f2:43:c0:6b:de:0a:80:87:4b:9b:d1:
02:83:c0:83:3e:cb:b0:6a:fe:4e:f0:50:1b:6f:4d:4f:f7:50:
63:87:b7:52:68:4c:7e:5b:23:e3:08:c8:98:9a:93:ac:5e:09:
2a:1b:93:d7:cf:89:27:28:fd:9e:cd:64:9e:85:d6:ab:4d:fb:
29:2c:2b:9e:6e:a5:d8:79:63:37:e3:e7:52:88:b2:e8:ca:80:
5a:ee:c8:f2:c4:50:9a:be:00:4d:c2:0b:63:20:fb:eb:5d:c4:
f2:d9:d8:f3:b0:a8:4b:8c:1e:70:b4:63:f6:e7:36:a5:fb:d0:
2a:8b:68:56:a5:30:34:1b:79:45:f5:cd:a5:93:df:47:30:8d:
8e:b3:28:56:07:5f:a4:19:ca:c4:d6:d8:17:7f:d9:05:1b:43:
a4:d5:26:06:4d:08:fe:23:cc:a1:31:39:2b:a6:89:7a:9d:d3:
2c:ae:08:7c:08:db:e1:f2:12:60:67:2d:e2:69:00:fa:16:ba:
fd:b5:52:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:09:26 2025 by rpki-client