This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f0ea2c-d27d-4ecf-ba25-1e08dfd235c7/1/WuQ0HiOjMV7URVpUXRpIzvKeeJM.mft
File: WuQ0HiOjMV7URVpUXRpIzvKeeJM.mft (raw, json)
Hash identifier: 1E9mDGxGyihW+8AIUetzfGH5PaDoxV9WqOCMXjJUzoc=
Subject key identifier: 43:F7:18:1A:E7:D2:A4:7F:D7:90:0A:0E:11:F2:72:0D:07:9D:8C:72
Authority key identifier: 5A:E4:34:1E:23:A3:31:5E:D4:45:5A:54:5D:1A:48:CE:F2:9E:78:93
Certificate issuer: /CN=5ae4341e23a3315ed4455a545d1a48cef29e7893
Certificate serial: 019B342040F5B7C68FD3B131CC91E4628098
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WuQ0HiOjMV7URVpUXRpIzvKeeJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f0ea2c-d27d-4ecf-ba25-1e08dfd235c7/1/WuQ0HiOjMV7URVpUXRpIzvKeeJM.mft
Manifest number: 1780
Signing time: Fri 19 Dec 2025 01:01:27 +0000
Manifest this update: Fri 19 Dec 2025 01:01:27 +0000
Manifest next update: Sat 20 Dec 2025 01:01:27 +0000
Files and hashes: 1: H-w2T99zCrrlKQYxLvTqjVHNtNs.roa (hash: 8/w5H9itBFo+zRfCIM8deFlqPQ7aIcS5e5Q1K2Dc7sw=)
2: WuQ0HiOjMV7URVpUXRpIzvKeeJM.crl (hash: RihKY3YMbZxDdFfHHaqwtMnYqfAT2Ih0rMhvpiF4po0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f0ea2c-d27d-4ecf-ba25-1e08dfd235c7/1/WuQ0HiOjMV7URVpUXRpIzvKeeJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f0ea2c-d27d-4ecf-ba25-1e08dfd235c7/1/WuQ0HiOjMV7URVpUXRpIzvKeeJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/WuQ0HiOjMV7URVpUXRpIzvKeeJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Dec 2025 01:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:34:20:40:f5:b7:c6:8f:d3:b1:31:cc:91:e4:62:80:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ae4341e23a3315ed4455a545d1a48cef29e7893
Validity
Not Before: Dec 19 01:01:27 2025 GMT
Not After : Dec 20 01:01:27 2025 GMT
Subject: CN=43f7181ae7d2a47fd7900a0e11f2720d079d8c72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6c:04:4a:2e:3e:20:f6:9e:70:b8:d2:4e:6a:
ba:22:38:52:bc:69:0f:e8:fa:57:58:01:63:6e:fc:
a8:43:8a:d9:cf:ea:74:56:18:b8:73:87:87:2a:04:
0b:21:d2:6d:60:91:19:86:c6:15:fb:bb:69:36:a4:
00:73:94:90:a2:d1:1c:17:d4:18:72:44:99:77:90:
fa:ef:da:7d:5f:73:df:08:17:49:17:af:f7:33:db:
92:b8:4e:1b:17:23:6b:8a:1e:7e:0a:5e:1f:68:50:
20:6d:7b:82:69:5f:43:57:fc:1a:a5:04:cb:0f:b7:
c0:c8:a6:93:da:a4:1b:e7:b1:15:88:09:65:ff:99:
2c:0c:64:8b:d7:af:bc:c3:98:5f:59:77:7e:4d:7b:
3c:71:3a:de:fe:b9:59:42:43:32:c5:94:bb:47:97:
ea:78:80:71:21:6a:9e:d9:90:d7:78:e1:0e:0c:91:
7d:8b:40:b8:a5:95:f5:11:d7:35:d8:b3:01:d8:33:
f5:e4:91:90:b1:e4:dd:03:b7:1f:04:3c:8c:5f:e0:
07:e9:07:4e:20:9a:27:f5:eb:99:ec:d8:8e:46:e8:
67:0f:c3:de:b0:21:ea:9e:bc:d8:41:d2:e9:d0:f4:
c4:7a:a5:10:92:3c:2b:66:83:d0:4a:22:39:4f:39:
00:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:F7:18:1A:E7:D2:A4:7F:D7:90:0A:0E:11:F2:72:0D:07:9D:8C:72
X509v3 Authority Key Identifier:
keyid:5A:E4:34:1E:23:A3:31:5E:D4:45:5A:54:5D:1A:48:CE:F2:9E:78:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WuQ0HiOjMV7URVpUXRpIzvKeeJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f0ea2c-d27d-4ecf-ba25-1e08dfd235c7/1/WuQ0HiOjMV7URVpUXRpIzvKeeJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f0ea2c-d27d-4ecf-ba25-1e08dfd235c7/1/WuQ0HiOjMV7URVpUXRpIzvKeeJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:59:88:d2:e2:5d:7a:ef:17:3a:cd:8e:ae:be:7b:f8:56:8f:
2f:62:c0:da:18:6f:f7:25:ce:95:a8:20:43:39:41:50:30:b9:
c8:c9:57:4e:3e:7b:a2:40:05:d8:f8:26:00:eb:8d:38:c1:8e:
5f:28:91:23:d9:bc:a2:7b:22:a8:7d:8e:a5:ba:8b:f6:23:1c:
95:d6:ac:f3:69:97:12:30:77:25:1d:26:7d:b3:95:41:80:f0:
50:4a:1e:cb:61:3a:84:e7:b2:4b:77:ce:32:da:eb:d0:3b:da:
2a:36:dd:dd:4f:6a:51:0c:93:bd:53:78:e1:55:8c:ad:a7:5e:
7c:b6:3f:6b:bb:f2:09:74:9a:13:31:d6:0b:3d:9a:86:ef:b4:
e4:0e:e4:18:b6:52:99:53:27:1d:62:97:87:fa:46:90:82:df:
71:30:b0:3e:d1:0f:72:55:96:fb:da:99:fa:fb:96:ed:7d:2b:
f4:77:f0:5a:e1:b2:e1:3b:4e:96:b3:fa:7c:6c:dd:0f:94:22:
dc:97:76:99:72:ce:bb:cd:12:12:25:90:fb:47:16:d0:15:3c:
5c:6d:14:12:bd:8d:d1:dd:99:60:b3:21:b4:9c:72:5d:82:59:
14:12:25:48:bf:58:ea:63:06:0d:d2:6e:b0:19:fe:44:ee:0a:
94:7a:00:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 09:46:22 2025 by rpki-client