This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/afa091-b16f-4527-8b00-1ddac2b08404/1/v5gt73eibXzBlHOzpAZNzFIX5HE.mft
File: v5gt73eibXzBlHOzpAZNzFIX5HE.mft (raw, json)
Hash identifier: O1nlyj9OwFO1YczAeeMb7k6Xhg94go1OQLBwkr4EGnw=
Subject key identifier: 6B:34:B2:88:50:E6:FB:B7:A6:BE:2B:7B:35:2E:B4:C3:AF:0A:4B:C0
Authority key identifier: BF:98:2D:EF:77:A2:6D:7C:C1:94:73:B3:A4:06:4D:CC:52:17:E4:71
Certificate issuer: /CN=bf982def77a26d7cc19473b3a4064dcc5217e471
Certificate serial: 019B35A0CCB3A3AD516E274D57DEB619DC53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v5gt73eibXzBlHOzpAZNzFIX5HE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/afa091-b16f-4527-8b00-1ddac2b08404/1/v5gt73eibXzBlHOzpAZNzFIX5HE.mft
Manifest number: 1785
Signing time: Fri 19 Dec 2025 08:01:29 +0000
Manifest this update: Fri 19 Dec 2025 08:01:29 +0000
Manifest next update: Sat 20 Dec 2025 08:01:29 +0000
Files and hashes: 1: JoXkjArh1eQOEzJmDg5eyKhlAZU.roa (hash: IpnTumi25Jm35YnmbE0mTeFwDsMDbPll4BvRMHinz6I=)
2: v5gt73eibXzBlHOzpAZNzFIX5HE.crl (hash: w7XMACZT6UN4FH02CpSPVs29nLZec12KKGhk5qkMxek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/afa091-b16f-4527-8b00-1ddac2b08404/1/v5gt73eibXzBlHOzpAZNzFIX5HE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/afa091-b16f-4527-8b00-1ddac2b08404/1/v5gt73eibXzBlHOzpAZNzFIX5HE.mft
rsync://rpki.ripe.net/repository/DEFAULT/v5gt73eibXzBlHOzpAZNzFIX5HE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Dec 2025 07:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:35:a0:cc:b3:a3:ad:51:6e:27:4d:57:de:b6:19:dc:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf982def77a26d7cc19473b3a4064dcc5217e471
Validity
Not Before: Dec 19 08:01:29 2025 GMT
Not After : Dec 20 08:01:29 2025 GMT
Subject: CN=6b34b28850e6fbb7a6be2b7b352eb4c3af0a4bc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:40:28:52:f5:cf:6b:62:a1:4c:29:6e:83:cb:
1f:c5:62:b2:49:8a:84:70:ac:56:e2:56:26:60:cc:
3d:34:a4:1f:11:dd:5d:e5:53:95:4e:91:2f:98:bb:
45:58:4f:e9:57:6a:fc:64:8e:f3:51:96:7a:cc:38:
a2:86:f0:ff:27:b5:af:81:cf:13:9b:59:f1:ee:4d:
ee:7b:e4:79:56:a7:92:8c:f2:c1:83:c3:69:bb:ef:
6e:ba:67:25:33:d8:4c:4f:ac:dd:a6:28:fd:4d:fb:
4a:0e:d8:e5:74:db:a6:f5:32:3f:f9:ee:cc:70:e9:
d5:bf:ab:37:05:88:4e:eb:50:a7:41:a1:44:e2:fc:
26:38:8a:44:03:3f:91:88:33:fa:d5:76:24:54:70:
5e:15:a5:dd:b7:5e:88:56:d5:d3:94:8b:1a:2f:aa:
66:cd:96:b0:1a:73:6d:4d:75:0d:6b:e9:a1:5c:dd:
fc:0c:09:a9:2c:82:29:16:aa:78:f7:68:dc:de:e3:
32:2f:88:92:95:e1:4c:da:33:2e:8c:64:5b:5e:67:
37:74:19:36:d3:0f:47:aa:05:b2:5f:57:a4:35:ed:
9e:4e:64:a2:be:f9:8a:5f:02:f6:7f:62:a3:90:48:
09:9d:06:06:6f:7d:dd:87:9b:02:f5:84:82:f1:b3:
d0:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:34:B2:88:50:E6:FB:B7:A6:BE:2B:7B:35:2E:B4:C3:AF:0A:4B:C0
X509v3 Authority Key Identifier:
keyid:BF:98:2D:EF:77:A2:6D:7C:C1:94:73:B3:A4:06:4D:CC:52:17:E4:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v5gt73eibXzBlHOzpAZNzFIX5HE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/afa091-b16f-4527-8b00-1ddac2b08404/1/v5gt73eibXzBlHOzpAZNzFIX5HE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/afa091-b16f-4527-8b00-1ddac2b08404/1/v5gt73eibXzBlHOzpAZNzFIX5HE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:26:11:11:3e:d5:71:1c:1c:ae:d5:fd:a6:31:5b:8c:cf:2e:
fc:0c:fa:39:60:bf:e3:9c:2d:53:b8:2e:80:dd:cb:21:d2:e2:
6d:56:87:6b:13:e1:72:68:d1:d0:fb:13:f0:d8:5f:44:b8:a5:
00:d7:95:c2:2c:52:95:d9:f6:c2:7f:ff:83:d2:71:f1:ab:67:
bd:d8:02:6d:21:73:44:e0:9a:03:e8:26:1a:71:0a:d6:56:0e:
ba:70:f0:e3:dc:1d:40:04:d1:9f:f7:23:c8:67:6c:ce:93:38:
9b:ad:af:56:df:af:70:55:e9:d3:ec:87:70:22:82:2a:14:c3:
8c:10:12:4a:32:aa:85:0d:92:c2:d7:95:c3:68:92:62:55:22:
6a:cc:56:5e:ba:d1:6d:47:2f:fc:e3:4a:c2:ce:db:2b:95:b8:
36:21:cf:5d:0a:a8:87:1f:0d:76:65:c7:ad:a1:d1:19:fe:76:
3b:55:98:01:c2:b6:74:39:0a:51:ee:69:e1:16:ca:fb:30:bf:
8d:91:0a:dd:c6:5f:b5:68:38:ec:ca:5d:ae:14:cb:d1:57:0e:
1b:1a:18:28:cd:21:82:ae:3f:0c:df:aa:ec:47:10:72:a1:15:
35:67:43:10:8c:6a:69:2e:ed:0f:1b:d4:9e:5f:87:fc:1d:57:
c9:ab:ac:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 10:25:37 2025 by rpki-client