This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/25e96a-e91f-417b-a32d-0960c16f74bf/1/usSgifjmioMOuYpcH-JWBlHls5s.mft
File: usSgifjmioMOuYpcH-JWBlHls5s.mft (raw, json)
Hash identifier: s3tm5y+whUbBDNHXsmi2DVD2zQ5Vhwl49gMlkcU5ZjI=
Subject key identifier: 15:4B:AA:7C:86:D6:37:30:F6:84:02:36:EF:45:FD:1F:19:9B:E9:38
Authority key identifier: BA:C4:A0:89:F8:E6:8A:83:0E:B9:8A:5C:1F:E2:56:06:51:E5:B3:9B
Certificate issuer: /CN=bac4a089f8e68a830eb98a5c1fe2560651e5b39b
Certificate serial: 019B2A412B8937EB0A1A4659FC8DB55CC5F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/usSgifjmioMOuYpcH-JWBlHls5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/25e96a-e91f-417b-a32d-0960c16f74bf/1/usSgifjmioMOuYpcH-JWBlHls5s.mft
Manifest number: 19
Signing time: Wed 17 Dec 2025 03:01:12 +0000
Manifest this update: Wed 17 Dec 2025 03:01:12 +0000
Manifest next update: Thu 18 Dec 2025 03:01:12 +0000
Files and hashes: 1: 2HMiQuTO6J2fIcF3eHoToEe_Luc.asa (hash: Yt/kPR8GjLco9YHRPCXIo1zG3Dig9SCG1mXTu6u80U0=)
2: 6wdz3UOZ9WAT3BEVKu977wzSb_Y.roa (hash: j0wO5SPrwe9SF358RdnDGX3XEdT1IQMBpaTX8mDR3sE=)
3: usSgifjmioMOuYpcH-JWBlHls5s.crl (hash: CfKl826WlQ5EKZ7IEJ9Ir1uJsRFKxemVXiXXV47VYe0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/25e96a-e91f-417b-a32d-0960c16f74bf/1/usSgifjmioMOuYpcH-JWBlHls5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/25e96a-e91f-417b-a32d-0960c16f74bf/1/usSgifjmioMOuYpcH-JWBlHls5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/usSgifjmioMOuYpcH-JWBlHls5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Dec 2025 23:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:2a:41:2b:89:37:eb:0a:1a:46:59:fc:8d:b5:5c:c5:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bac4a089f8e68a830eb98a5c1fe2560651e5b39b
Validity
Not Before: Dec 17 03:01:12 2025 GMT
Not After : Dec 18 03:01:12 2025 GMT
Subject: CN=154baa7c86d63730f6840236ef45fd1f199be938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:28:4b:5c:c6:b5:75:25:34:03:9a:62:6a:0e:
9a:f8:90:05:5b:be:57:bd:64:0d:b8:71:a8:3c:16:
ce:59:2b:22:66:70:dc:e6:82:01:f2:9f:6e:4f:06:
da:e2:e5:fb:a3:9f:23:3d:3f:93:59:a9:2e:19:25:
a7:f3:06:dd:64:39:7c:b3:08:b1:c9:74:99:ca:96:
87:d9:de:d9:ac:7b:f0:a0:3f:bc:ee:45:dd:84:d5:
5f:13:7b:1b:ad:19:ca:7d:2c:e6:57:f3:d9:10:25:
52:35:c0:cf:a4:5e:4c:8b:f9:81:83:c9:83:1c:ca:
6f:06:d6:b8:83:4f:f0:fd:5e:f2:1e:3b:5b:1b:02:
81:4e:32:8d:ab:64:a6:a5:ed:5e:67:2e:d4:c2:b4:
d0:df:d9:b2:58:ab:8d:a0:32:f0:19:37:0b:ce:ae:
01:11:bc:ad:e4:4e:38:8a:8b:34:e5:95:15:8d:be:
8e:81:24:d3:b8:1a:cd:47:1f:13:16:53:12:c9:1d:
29:6b:23:5d:21:d2:6d:26:55:72:af:2e:55:0f:41:
fd:ff:46:f2:47:8a:ac:d8:aa:ed:1e:d4:b6:42:0b:
c7:6f:c1:e2:f4:42:b0:25:db:08:84:10:a3:15:36:
72:75:22:ab:52:ab:35:35:12:f1:e8:5e:99:bc:f3:
2a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:4B:AA:7C:86:D6:37:30:F6:84:02:36:EF:45:FD:1F:19:9B:E9:38
X509v3 Authority Key Identifier:
keyid:BA:C4:A0:89:F8:E6:8A:83:0E:B9:8A:5C:1F:E2:56:06:51:E5:B3:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/usSgifjmioMOuYpcH-JWBlHls5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/25e96a-e91f-417b-a32d-0960c16f74bf/1/usSgifjmioMOuYpcH-JWBlHls5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/25e96a-e91f-417b-a32d-0960c16f74bf/1/usSgifjmioMOuYpcH-JWBlHls5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:6f:f3:68:aa:9d:02:6a:d2:a1:28:af:3e:7f:1d:9f:ce:61:
14:6e:a8:cd:d3:3e:40:80:60:28:82:ec:7d:64:13:86:a5:c7:
6a:d2:35:f3:d5:2a:0e:04:67:e4:96:72:c9:09:68:75:78:da:
3c:c1:41:18:3c:5c:6a:1f:fe:1c:e9:f5:99:d6:29:34:eb:72:
3f:f6:2d:a5:91:af:11:ea:d9:cc:62:f5:e2:5b:58:0c:0e:70:
7f:a2:ab:86:13:f8:90:e4:da:e6:46:e0:31:d4:96:4d:d3:ea:
13:ec:bb:09:18:53:2c:61:61:9b:62:0e:fc:04:0a:cd:b5:f3:
66:6c:31:1a:c2:4f:9d:29:26:34:38:d1:d5:6a:e6:81:8a:90:
d2:95:be:3f:8e:f7:cc:de:4c:d5:ba:7b:47:94:71:23:e8:24:
f5:04:8a:50:ab:27:e8:50:39:cb:0e:dd:17:c0:3b:8b:ac:56:
ef:96:fd:29:8c:bd:26:45:b7:19:80:9f:92:9e:91:cf:10:3b:
9f:45:94:a8:e7:7b:ef:cb:69:d1:b1:75:b9:5e:ae:8e:d3:38:
1d:8a:6f:19:84:4c:c2:b4:7d:53:a5:75:4b:fe:69:40:31:b8:
a9:e8:87:25:1c:6e:08:9c:de:41:a6:59:46:bb:30:88:3f:e4:
2b:66:f5:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 06:44:28 2025 by rpki-client