This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c502c1-f314-40b1-a024-8d10fee584fe/1/GWImUASBB5GK3xsizfCHyKg095w.mft
File: GWImUASBB5GK3xsizfCHyKg095w.mft (raw, json)
Hash identifier: Y+ClcnlM25rKMiUZzm5adOG0jtfavbmHsXXNimdY45o=
Subject key identifier: 3D:72:BD:4C:87:57:19:AB:65:29:63:A0:88:7A:FA:99:58:B2:FE:1A
Authority key identifier: 19:62:26:50:04:81:07:91:8A:DF:1B:22:CD:F0:87:C8:A8:34:F7:9C
Certificate issuer: /CN=19622650048107918adf1b22cdf087c8a834f79c
Certificate serial: 019B372139E64145C336B33CF1155C34454D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GWImUASBB5GK3xsizfCHyKg095w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/c502c1-f314-40b1-a024-8d10fee584fe/1/GWImUASBB5GK3xsizfCHyKg095w.mft
Manifest number: 0B86
Signing time: Fri 19 Dec 2025 15:01:22 +0000
Manifest this update: Fri 19 Dec 2025 15:01:22 +0000
Manifest next update: Sat 20 Dec 2025 15:01:22 +0000
Files and hashes: 1: GWImUASBB5GK3xsizfCHyKg095w.crl (hash: qKtE4F8mQq0bUDIaQmN+Etd/vIOiJ/2RiFDrDVYcN80=)
2: huPI6u_LRtdxxCntM6xWi8UILhs.roa (hash: dxaGNUPSqDMCpFu0jmftsWJq4vBwtQVy+FWsjciFptc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/c502c1-f314-40b1-a024-8d10fee584fe/1/GWImUASBB5GK3xsizfCHyKg095w.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/c502c1-f314-40b1-a024-8d10fee584fe/1/GWImUASBB5GK3xsizfCHyKg095w.mft
rsync://rpki.ripe.net/repository/DEFAULT/GWImUASBB5GK3xsizfCHyKg095w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Dec 2025 15:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:37:21:39:e6:41:45:c3:36:b3:3c:f1:15:5c:34:45:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19622650048107918adf1b22cdf087c8a834f79c
Validity
Not Before: Dec 19 15:01:22 2025 GMT
Not After : Dec 20 15:01:22 2025 GMT
Subject: CN=3d72bd4c875719ab652963a0887afa9958b2fe1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:73:b4:f9:55:18:17:5b:c8:23:5f:0f:70:7f:
3f:77:d8:27:17:d2:6a:f9:22:03:9a:63:9e:c9:d7:
85:28:53:fc:44:3c:2b:87:b8:9a:2e:3e:f0:13:28:
0c:ac:71:27:32:e0:a8:b3:01:cf:40:79:07:bb:92:
8d:f1:df:19:a3:0a:b1:69:e8:ef:67:38:11:3b:42:
18:e5:c3:0c:93:8e:b5:fd:f2:94:06:9c:39:b6:04:
3c:e8:dd:89:76:6b:3f:08:90:15:78:19:92:d7:9c:
f5:dc:b3:2c:4b:42:21:60:4b:3d:c4:4b:3e:9e:be:
26:00:3b:3a:30:81:44:6c:d6:b5:95:ba:05:48:68:
1f:50:27:e8:7b:55:38:9d:a1:45:0c:4e:c2:3e:db:
f5:f6:40:fd:98:75:d2:3d:94:ff:a0:d5:04:60:58:
ef:e0:13:73:3c:95:ea:23:e7:98:13:52:11:a0:18:
e3:75:b6:07:9d:ac:4d:af:a2:c3:89:a5:22:5a:3c:
37:88:c2:23:8b:c7:94:be:a6:6a:ea:33:68:08:cb:
f8:ad:1a:a1:93:04:c8:96:49:f6:7c:ab:97:6a:ba:
44:b0:ca:ac:5f:b0:12:b1:bb:b6:8a:c3:e4:71:71:
6c:d8:ad:3d:c1:7e:e7:2f:d3:ab:c8:36:58:67:15:
40:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:72:BD:4C:87:57:19:AB:65:29:63:A0:88:7A:FA:99:58:B2:FE:1A
X509v3 Authority Key Identifier:
keyid:19:62:26:50:04:81:07:91:8A:DF:1B:22:CD:F0:87:C8:A8:34:F7:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWImUASBB5GK3xsizfCHyKg095w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c502c1-f314-40b1-a024-8d10fee584fe/1/GWImUASBB5GK3xsizfCHyKg095w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c502c1-f314-40b1-a024-8d10fee584fe/1/GWImUASBB5GK3xsizfCHyKg095w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:4f:ee:b5:1e:5f:7d:4b:16:26:a2:57:08:c9:84:cf:36:b3:
9f:8b:7b:7a:e5:dc:63:52:8a:02:51:0d:97:c2:a9:41:90:c2:
01:a0:77:e6:be:4d:4f:a5:4d:ba:01:3d:11:30:be:47:b2:cc:
f2:0a:02:7f:02:7f:6d:b3:2e:6e:c1:70:b2:78:a8:1c:d3:ab:
29:07:e6:90:94:95:18:60:c7:ca:48:67:e9:e3:55:31:3c:52:
6e:da:05:27:6c:8a:f7:dc:b4:88:5a:a3:64:ac:8c:03:7e:65:
b2:9a:56:46:09:b1:95:22:4e:ee:b1:af:47:8e:a6:bf:d4:a9:
87:d1:b8:b9:9f:c9:4b:ee:62:b3:28:32:40:35:c6:84:01:61:
c1:cb:ce:ae:de:76:f9:48:cc:9f:da:d6:37:7f:d6:4a:fd:df:
10:0d:0b:8c:45:4e:54:ec:45:c0:75:14:2f:5a:dd:81:5b:54:
d2:66:6e:6d:17:4d:24:6a:84:3e:c2:bb:7d:c9:0a:c0:7f:49:
2a:e9:70:37:c8:e5:df:8b:ba:d7:f4:96:0d:82:af:d7:84:62:
26:3c:b3:45:bc:62:cc:48:d6:a5:f2:80:39:e4:bf:eb:88:56:
d6:b1:1e:b6:2e:4f:9b:08:1e:1e:c8:8a:ab:af:d9:bd:1c:bc:
93:d8:bb:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 00:15:02 2025 by rpki-client