This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.mft
File: 5c949fM57nd9p0khCpbs7Za38uc.mft (raw, json)
Hash identifier: zy0p7oLvi/m74o+Y8VmDryGtz0RcKBqoKEecwvL1bqk=
Subject key identifier: 24:D0:2F:70:02:BD:43:D6:EB:1B:C4:3D:59:E8:90:F0:D2:B0:FC:50
Authority key identifier: E5:CF:78:F5:F3:39:EE:77:7D:A7:49:21:0A:96:EC:ED:96:B7:F2:E7
Certificate issuer: /CN=e5cf78f5f339ee777da749210a96eced96b7f2e7
Certificate serial: 019B273F8536380AD77D97125F4535D0406E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5c949fM57nd9p0khCpbs7Za38uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.mft
Manifest number: 177E
Signing time: Tue 16 Dec 2025 13:00:32 +0000
Manifest this update: Tue 16 Dec 2025 13:00:32 +0000
Manifest next update: Wed 17 Dec 2025 13:00:32 +0000
Files and hashes: 1: 5c949fM57nd9p0khCpbs7Za38uc.crl (hash: P+v88L2YO8EuXhJkze1ToSM5kmWDUhUgUTEzyt60eOA=)
2: DV42p8se3L2zEopyG9pYChd08dA.roa (hash: AMDicnnABT602ZAKhipXKupbfFlgytQMYVTZdMa1H7g=)
3: fX6SqoqQUEoAM6pytW3ukSOt0zg.roa (hash: +rGQFaL4Fu3eymYJPVwzdqTwvlNhHBaV+a1ByGv4FVg=)
4: hvfjiAD64cA7L9D8OrPaqton6c4.roa (hash: HStUaUAHWIe7bU8iFx/jg5xzG2TZ8LFTU818HvhbG2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/5c949fM57nd9p0khCpbs7Za38uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Dec 2025 13:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:27:3f:85:36:38:0a:d7:7d:97:12:5f:45:35:d0:40:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5cf78f5f339ee777da749210a96eced96b7f2e7
Validity
Not Before: Dec 16 13:00:32 2025 GMT
Not After : Dec 17 13:00:32 2025 GMT
Subject: CN=24d02f7002bd43d6eb1bc43d59e890f0d2b0fc50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:18:68:90:92:f4:3a:9c:16:dd:66:c7:3c:71:
e9:8a:0c:6a:14:b0:7b:a7:66:4b:52:a2:0f:28:45:
27:7a:f0:c4:09:57:57:fe:19:88:8d:74:52:72:29:
a2:75:4c:5a:0b:1d:b3:b1:e6:0c:1f:d8:da:c4:f5:
c8:03:9b:c1:a8:ca:a6:19:d9:3f:15:5e:4f:a9:1e:
38:20:92:53:e6:69:27:96:9a:6a:0c:6e:6c:ad:d8:
35:bc:5f:f3:c1:00:8c:18:6b:1b:fb:ca:8e:7a:76:
f7:53:37:ef:42:15:55:a7:fa:0f:48:bd:29:b2:fc:
7a:71:86:00:9d:2b:c0:a9:c2:d3:0d:b9:09:fb:b9:
f2:bc:2a:75:b1:f1:34:20:67:e7:9b:a1:08:96:53:
84:40:a0:fe:1f:84:2f:a8:c5:4e:9e:db:a7:8f:b5:
1a:ff:9c:53:76:ec:95:42:58:d6:34:2d:73:e3:27:
66:b8:ea:82:2c:32:df:fd:0c:22:cb:b9:1a:be:0d:
2d:e8:8f:cd:28:f2:0a:38:48:d8:aa:a1:f3:28:d2:
49:7a:6c:32:de:7b:b5:59:61:be:b9:5a:f0:cb:37:
d1:4c:7f:91:8e:ab:dd:72:ea:bc:4f:82:69:52:b6:
cb:01:84:e1:3b:ac:e7:ad:93:87:9e:43:79:f9:89:
a2:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:D0:2F:70:02:BD:43:D6:EB:1B:C4:3D:59:E8:90:F0:D2:B0:FC:50
X509v3 Authority Key Identifier:
keyid:E5:CF:78:F5:F3:39:EE:77:7D:A7:49:21:0A:96:EC:ED:96:B7:F2:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c949fM57nd9p0khCpbs7Za38uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:35:66:64:1e:51:b9:d7:2b:40:8d:bc:c9:38:f3:28:99:b5:
ff:29:bd:12:db:a6:da:05:37:e1:c4:1b:3f:85:4d:45:f0:89:
e5:5a:c4:00:b4:1c:d1:f8:7e:b0:ce:81:01:ca:50:81:8f:da:
c1:7a:ff:d1:b7:fa:ea:0d:b9:7c:f0:d3:66:56:c3:a2:21:e2:
b3:1e:38:cc:68:57:a8:00:06:2f:a7:6b:f6:6b:98:c7:09:2f:
bc:82:1e:29:e1:cc:ae:ad:3f:30:2c:a1:f1:68:71:da:d9:92:
9c:03:36:fc:3d:e1:00:e2:bd:d4:bf:74:4d:d5:b1:d8:06:b1:
26:c5:b1:13:bd:db:b0:96:a9:c0:2a:39:22:98:39:84:78:f5:
82:35:7e:a0:78:d0:d6:3f:0a:bf:71:a2:1d:7c:4c:62:40:f6:
ff:8e:95:de:70:a7:a7:54:60:ac:21:fe:6f:19:11:bf:6b:2c:
f0:79:f9:b7:c2:2c:1d:a8:ff:64:74:3f:c8:f4:47:e8:b5:62:
84:6e:f5:8b:0d:e4:a9:5c:bb:36:df:4d:31:da:b4:8d:ed:d5:
59:81:ee:99:9e:bc:65:ec:b8:72:5c:2c:33:55:b8:cf:88:47:
3f:34:e4:d7:74:4e:39:2a:fe:61:69:13:92:14:5e:c1:98:7e:
24:9f:76:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 20:19:32 2025 by rpki-client