This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/532f41-2e3b-47eb-bed5-0e1c4ad03956/1/5wQefn0YTV261xQp42W58Kx2ylI.mft
File: 5wQefn0YTV261xQp42W58Kx2ylI.mft (raw, json)
Hash identifier: tEI8Gt6L4cCTJEZLQJUi4a1T5W2bBotp2ABww1mbG9s=
Subject key identifier: 8B:26:6A:FF:E5:97:0F:D3:0B:FD:6F:B0:B6:DA:22:D8:3F:74:2C:E7
Authority key identifier: E7:04:1E:7E:7D:18:4D:5D:BA:D7:14:29:E3:65:B9:F0:AC:76:CA:52
Certificate issuer: /CN=e7041e7e7d184d5dbad71429e365b9f0ac76ca52
Certificate serial: 019B25F614677D991A263056FE5A6343BA4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5wQefn0YTV261xQp42W58Kx2ylI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/532f41-2e3b-47eb-bed5-0e1c4ad03956/1/5wQefn0YTV261xQp42W58Kx2ylI.mft
Manifest number: 59
Signing time: Tue 16 Dec 2025 07:00:42 +0000
Manifest this update: Tue 16 Dec 2025 07:00:42 +0000
Manifest next update: Wed 17 Dec 2025 07:00:42 +0000
Files and hashes: 1: 0ZdT-A1OOobTLe7pEXgq5ICZ3xU.roa (hash: HOZ5WIyd7l9qMnDgexhTmQS4if90MR9OSxDtHYi40wo=)
2: 5wQefn0YTV261xQp42W58Kx2ylI.crl (hash: r4yt13mF5+NFgrIbW23ztBVA9XXhplHPLP1RRzq9yyE=)
3: HCUB8Ne_omF1mtWINXAY-a2Vkyg.roa (hash: EPSlRz71ev+kfUwClC5OWx5tsHjYK1rbuqi7kFkvbgg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/532f41-2e3b-47eb-bed5-0e1c4ad03956/1/5wQefn0YTV261xQp42W58Kx2ylI.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/532f41-2e3b-47eb-bed5-0e1c4ad03956/1/5wQefn0YTV261xQp42W58Kx2ylI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5wQefn0YTV261xQp42W58Kx2ylI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Dec 2025 07:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:25:f6:14:67:7d:99:1a:26:30:56:fe:5a:63:43:ba:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7041e7e7d184d5dbad71429e365b9f0ac76ca52
Validity
Not Before: Dec 16 07:00:42 2025 GMT
Not After : Dec 17 07:00:42 2025 GMT
Subject: CN=8b266affe5970fd30bfd6fb0b6da22d83f742ce7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:cf:f6:7a:b3:17:97:a5:d3:02:9f:b1:f8:99:
80:f2:65:d5:57:fe:78:65:11:67:8d:11:84:fe:56:
f3:10:cf:a1:16:1d:2e:06:3b:93:ef:bd:06:71:22:
79:08:7d:9f:0f:e8:79:6a:c8:7c:35:0b:14:b3:76:
29:0f:e1:9f:9d:2b:3c:ba:c4:b9:88:4f:8a:15:69:
ef:21:6f:b5:68:68:4a:78:5c:5f:17:e3:ae:49:2f:
74:66:61:8b:90:de:62:f0:0e:f5:41:a9:d1:ab:71:
03:05:c6:97:b5:a5:45:c3:70:08:93:33:ca:01:6e:
6b:28:f2:b7:74:ab:8c:60:11:84:d5:19:10:3e:ae:
4c:d2:b0:c6:aa:a7:69:47:f5:97:4d:36:9d:41:b4:
ab:16:3b:fb:72:0c:b7:dd:a3:97:0e:f3:5c:86:7d:
67:04:a0:90:92:ae:ce:81:60:26:2a:24:2e:2c:eb:
00:b7:85:02:5d:8a:9b:8b:f1:cf:7d:48:8c:3a:da:
0a:a2:d5:8e:6a:2c:8f:fc:c7:59:1d:17:16:16:d4:
01:7f:b7:bd:4c:dd:7f:b9:0f:d6:db:b4:c7:ea:38:
54:95:3f:c1:25:46:df:29:2d:68:87:9e:9d:e6:85:
17:a2:9d:13:41:bc:ea:7f:c5:f2:4e:4c:93:b2:77:
44:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:26:6A:FF:E5:97:0F:D3:0B:FD:6F:B0:B6:DA:22:D8:3F:74:2C:E7
X509v3 Authority Key Identifier:
keyid:E7:04:1E:7E:7D:18:4D:5D:BA:D7:14:29:E3:65:B9:F0:AC:76:CA:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5wQefn0YTV261xQp42W58Kx2ylI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/532f41-2e3b-47eb-bed5-0e1c4ad03956/1/5wQefn0YTV261xQp42W58Kx2ylI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/532f41-2e3b-47eb-bed5-0e1c4ad03956/1/5wQefn0YTV261xQp42W58Kx2ylI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:86:ae:68:0d:b9:e7:75:d8:f6:a3:52:9f:1d:f3:b3:94:98:
4a:b4:de:43:65:bf:be:55:79:c3:6a:5d:27:38:fa:33:12:24:
02:ca:85:ca:62:58:4e:c1:49:f9:40:c7:3b:2c:8b:ff:69:f6:
54:a5:97:a0:b9:a7:46:d1:91:27:b9:e8:11:f3:18:9e:5c:77:
ce:88:41:ca:85:15:da:d3:e3:7d:03:56:ab:3e:0d:54:fa:45:
86:a1:e9:51:95:0c:7d:32:d7:c8:25:82:36:72:e9:89:0f:89:
b7:01:cb:36:3d:90:0d:22:bd:6f:f6:de:de:fd:34:7c:df:a3:
57:a5:1a:10:d4:a1:96:f4:c5:e3:14:3b:21:02:c7:e3:c2:b3:
63:32:28:44:44:8e:3a:da:3f:bf:9a:23:07:f1:11:01:2e:c9:
28:05:6a:04:52:fd:5e:5e:98:ac:36:e0:a8:c2:d7:f0:fc:03:
6e:34:8d:7d:bf:eb:91:0f:a1:5a:1b:7c:44:d2:27:a5:56:01:
1a:34:20:fa:d7:40:29:71:7e:20:c8:28:46:11:1b:6f:a7:06:
64:d1:d0:02:2b:bc:b5:b2:a3:b2:e9:cf:32:51:23:90:8a:42:
6a:a5:e8:00:f5:1d:07:af:55:ef:b5:b6:27:31:8f:85:40:a7:
57:03:fe:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 14:05:01 2025 by rpki-client