This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/6d663a-4538-4cbf-ad1f-857580fc6167/1/w4UgGjO1J8ZEqtWuzTeCxqjC9R8.mft
File: w4UgGjO1J8ZEqtWuzTeCxqjC9R8.mft (raw, json)
Hash identifier: ZZfO4Snoja0G7T0H9/LaFY64ViFhHPn6e6BjGG7yUbw=
Subject key identifier: 1F:35:A2:ED:1E:88:E8:5D:4B:B4:0B:B0:F1:11:56:A8:96:CF:5C:14
Authority key identifier: C3:85:20:1A:33:B5:27:C6:44:AA:D5:AE:CD:37:82:C6:A8:C2:F5:1F
Certificate issuer: /CN=c385201a33b527c644aad5aecd3782c6a8c2f51f
Certificate serial: 019B35A07E17870409DB319264AA84385D84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w4UgGjO1J8ZEqtWuzTeCxqjC9R8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/6d663a-4538-4cbf-ad1f-857580fc6167/1/w4UgGjO1J8ZEqtWuzTeCxqjC9R8.mft
Manifest number: 1783
Signing time: Fri 19 Dec 2025 08:01:08 +0000
Manifest this update: Fri 19 Dec 2025 08:01:08 +0000
Manifest next update: Sat 20 Dec 2025 08:01:08 +0000
Files and hashes: 1: H9QpnLm8fW1NfasYmS-Z-4wW9K0.roa (hash: ZMCXrj27lV/u3oSg3kl26pqz/wenN/+jeAtwxfISyBE=)
2: w4UgGjO1J8ZEqtWuzTeCxqjC9R8.crl (hash: eqVT0rO3r3ZFb9M1xPf58R15NClpW8y6tSC3yvDpVMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/6d663a-4538-4cbf-ad1f-857580fc6167/1/w4UgGjO1J8ZEqtWuzTeCxqjC9R8.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/6d663a-4538-4cbf-ad1f-857580fc6167/1/w4UgGjO1J8ZEqtWuzTeCxqjC9R8.mft
rsync://rpki.ripe.net/repository/DEFAULT/w4UgGjO1J8ZEqtWuzTeCxqjC9R8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Dec 2025 08:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:35:a0:7e:17:87:04:09:db:31:92:64:aa:84:38:5d:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c385201a33b527c644aad5aecd3782c6a8c2f51f
Validity
Not Before: Dec 19 08:01:08 2025 GMT
Not After : Dec 20 08:01:08 2025 GMT
Subject: CN=1f35a2ed1e88e85d4bb40bb0f11156a896cf5c14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f4:f8:f4:ae:8a:1d:db:93:da:b1:1b:95:62:
fb:2c:87:38:37:62:ad:63:7d:27:34:f7:af:a7:e6:
06:13:97:14:ab:cd:3b:7c:95:3c:83:5c:43:9d:fa:
3e:c1:60:9b:0f:63:5f:61:a9:2b:0a:6f:6d:6b:58:
2d:2f:73:0e:94:fb:15:d5:96:b1:22:11:3a:fa:1b:
04:88:02:3d:9c:41:9a:e6:1d:ac:86:29:1d:60:00:
3c:28:d3:91:a0:cc:f6:93:31:14:df:db:b6:d7:f7:
33:dd:27:07:36:f0:ef:08:d0:77:2e:a0:63:a4:70:
69:2c:7a:80:93:70:4c:1e:db:fc:51:c0:13:b8:19:
5b:6d:a6:ac:ad:1f:17:06:c7:7e:c6:d5:34:8c:01:
80:48:c0:87:5d:95:eb:7e:5f:48:06:21:53:7b:4a:
77:bb:19:8f:a1:8c:3e:dc:7b:39:63:90:e3:0d:1e:
3b:72:bf:97:b4:59:2c:27:4b:74:53:9b:f4:ff:13:
41:d7:12:2f:aa:63:7e:8b:7f:33:cb:15:96:21:37:
99:4e:34:af:ce:8c:73:88:67:95:16:80:9a:84:92:
e8:6f:e8:ee:73:a9:f9:c2:b5:47:21:0a:cf:fa:88:
18:7d:36:a3:21:dc:b1:6c:93:91:5f:a5:cd:6a:5f:
93:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:35:A2:ED:1E:88:E8:5D:4B:B4:0B:B0:F1:11:56:A8:96:CF:5C:14
X509v3 Authority Key Identifier:
keyid:C3:85:20:1A:33:B5:27:C6:44:AA:D5:AE:CD:37:82:C6:A8:C2:F5:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w4UgGjO1J8ZEqtWuzTeCxqjC9R8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6d663a-4538-4cbf-ad1f-857580fc6167/1/w4UgGjO1J8ZEqtWuzTeCxqjC9R8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6d663a-4538-4cbf-ad1f-857580fc6167/1/w4UgGjO1J8ZEqtWuzTeCxqjC9R8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:2d:81:32:a4:5a:ca:6e:fb:af:d5:b0:51:c1:03:47:77:e1:
20:d7:39:3c:d8:0a:f6:82:93:68:d0:db:c2:2b:0f:51:b1:a6:
17:b6:9c:73:26:a7:37:67:e0:a5:d1:e0:44:57:57:26:38:d5:
41:82:6d:c2:a5:e8:ea:92:f3:c9:76:a5:95:e2:76:d0:a8:1c:
da:52:ef:5a:48:dd:e3:b9:ed:a0:26:3f:73:1b:25:4e:40:88:
63:b4:d1:f3:41:dc:d9:3e:ca:f8:99:e7:0c:0d:24:7a:33:49:
5c:03:8c:b7:6b:5d:5d:0a:24:58:79:3d:96:c3:2c:e9:c6:8d:
c7:d5:2b:2f:c6:b8:dd:78:a6:6d:8a:ef:ef:5a:8b:c3:5d:f1:
82:58:9f:ce:b2:41:bc:78:5b:16:5d:8c:8f:c1:ec:a5:67:cb:
b3:61:c7:05:19:ba:ff:0d:52:49:7a:33:b9:a6:a0:88:0c:cb:
93:e9:4b:fd:7f:43:fd:ad:65:25:7c:aa:88:2e:7d:e4:a3:98:
b0:2b:64:4c:ec:4a:41:50:05:64:89:4b:79:f5:44:c8:09:9f:
d9:3f:bf:0c:48:da:93:43:ab:2e:ef:8d:89:5c:9f:4d:04:b1:
b0:77:00:3a:f3:20:a8:b3:88:41:84:db:0b:2d:4a:d8:b2:51:
a6:4b:30:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 18:01:45 2025 by rpki-client