This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/b7ca89-70f2-408f-a4e4-b4a0cb8ed821/1/bWUK8XJES1IRanpn10qsffilXhw.mft
File: bWUK8XJES1IRanpn10qsffilXhw.mft (raw, json)
Hash identifier: caceGDZF6sleMoWjMBkcSM4ST+d2GFBd7LCH6DhvQ2s=
Subject key identifier: FE:06:24:84:38:EE:8D:17:4E:14:2D:AB:F1:66:53:14:67:64:F8:2A
Authority key identifier: 6D:65:0A:F1:72:44:4B:52:11:6A:7A:67:D7:4A:AC:7D:F8:A5:5E:1C
Certificate issuer: /CN=6d650af172444b52116a7a67d74aac7df8a55e1c
Certificate serial: 019B24E35F916CC5E2D3E243B150F926E010
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWUK8XJES1IRanpn10qsffilXhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/b7ca89-70f2-408f-a4e4-b4a0cb8ed821/1/bWUK8XJES1IRanpn10qsffilXhw.mft
Manifest number: 087C
Signing time: Tue 16 Dec 2025 02:00:39 +0000
Manifest this update: Tue 16 Dec 2025 02:00:39 +0000
Manifest next update: Wed 17 Dec 2025 02:00:39 +0000
Files and hashes: 1: Eo0dId6A79FMWJgsJrbvuL3-EFE.roa (hash: 681u60p0nhE1DcYKUWV+uIEbDRMQt7MvDh5nM8HZoDY=)
2: JA7bmNFaXPZ3zOhIhSoSK6cX0GM.roa (hash: /9NIaaC/nQfKu4JBvIQ0FkNL7E03OA0xPdL0pUFpcGQ=)
3: bWUK8XJES1IRanpn10qsffilXhw.crl (hash: 01zM1gSq5zywJKBiDlaQwAmjiIPemPqk03FOqI2TQJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/b7ca89-70f2-408f-a4e4-b4a0cb8ed821/1/bWUK8XJES1IRanpn10qsffilXhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/b7ca89-70f2-408f-a4e4-b4a0cb8ed821/1/bWUK8XJES1IRanpn10qsffilXhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/bWUK8XJES1IRanpn10qsffilXhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Dec 2025 02:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:24:e3:5f:91:6c:c5:e2:d3:e2:43:b1:50:f9:26:e0:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d650af172444b52116a7a67d74aac7df8a55e1c
Validity
Not Before: Dec 16 02:00:39 2025 GMT
Not After : Dec 17 02:00:39 2025 GMT
Subject: CN=fe06248438ee8d174e142dabf16653146764f82a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:51:0c:17:6c:49:08:23:8e:92:99:55:62:8c:
71:29:12:73:f3:ac:ca:4e:e6:77:e8:5b:c0:7f:fe:
a8:49:bd:d6:c7:a0:9f:53:37:33:e4:de:ed:05:56:
2c:af:cc:cc:3b:84:b6:70:e9:f4:59:34:b4:7f:ad:
31:ff:fc:e5:ba:c5:9f:de:8d:80:1c:e7:8a:6b:5c:
2d:06:36:24:9d:f9:7a:ca:5e:67:b0:c8:dc:1c:7c:
da:c0:0d:bc:b4:2a:f2:ca:f5:89:06:a8:da:19:ad:
53:67:be:5e:a3:ce:8c:c1:00:98:49:d7:e9:05:df:
58:28:f4:e4:35:ec:e2:60:34:95:7c:ed:dd:63:e5:
88:87:e1:e4:9c:21:d2:1e:df:50:ee:f2:4c:56:dc:
27:11:17:b4:f4:94:f9:de:43:0f:54:3f:88:82:ae:
f5:65:b0:89:31:50:91:a1:0f:b0:ec:68:c1:03:d4:
09:bc:51:56:d8:e5:fd:a8:10:5a:fc:de:91:28:cd:
ab:0f:8b:e0:be:45:a9:e5:84:f5:62:94:c0:9d:2c:
26:96:cc:e8:7e:6d:9e:05:5b:04:30:5b:a4:27:41:
4a:b9:24:db:24:65:f2:d7:7e:1a:27:47:07:7a:58:
fa:72:38:fb:9e:93:12:36:9c:5b:4e:2a:f0:7a:79:
67:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:06:24:84:38:EE:8D:17:4E:14:2D:AB:F1:66:53:14:67:64:F8:2A
X509v3 Authority Key Identifier:
keyid:6D:65:0A:F1:72:44:4B:52:11:6A:7A:67:D7:4A:AC:7D:F8:A5:5E:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWUK8XJES1IRanpn10qsffilXhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/b7ca89-70f2-408f-a4e4-b4a0cb8ed821/1/bWUK8XJES1IRanpn10qsffilXhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/b7ca89-70f2-408f-a4e4-b4a0cb8ed821/1/bWUK8XJES1IRanpn10qsffilXhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:f5:e2:93:8a:46:dc:b9:39:87:53:23:9d:10:c3:8b:3e:81:
e5:a1:3c:6b:46:8c:76:fa:0c:41:ab:4d:e6:28:c9:3b:25:35:
65:15:06:32:a5:db:22:ff:ec:79:65:f0:df:b2:2f:b6:95:d6:
68:47:f3:a1:36:12:08:fa:f9:43:3a:b0:47:de:dd:73:a6:8e:
72:ba:93:3c:3d:1d:da:cb:23:71:7e:63:dc:f4:57:f2:3b:da:
fc:d1:c2:b4:b8:b6:a7:97:a0:98:34:d3:fb:e7:7d:8d:69:3b:
47:07:67:7f:3b:00:65:57:5f:d9:f4:68:83:dd:79:10:9b:7c:
a5:ee:e2:29:81:51:0e:70:3d:2d:5e:52:b2:58:28:e5:63:30:
23:0d:15:4e:b5:10:9f:68:82:e0:04:e1:1c:bc:12:0b:ea:25:
63:fc:aa:e5:e7:06:32:9d:42:1b:51:1a:1a:0d:df:aa:e8:b9:
aa:32:03:76:8a:0c:37:f9:72:b7:72:3d:b5:61:27:1f:21:81:
6a:28:f1:e0:0b:81:8a:c5:f3:1b:be:23:3c:c4:91:21:c7:70:
5c:e6:16:c5:09:42:27:a0:5d:1e:eb:ee:52:3c:a3:f4:d0:d9:
e3:9b:84:88:65:fc:b6:d4:09:ee:1e:da:47:e3:90:83:99:5e:
4d:a5:fe:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 11:45:31 2025 by rpki-client