This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.mft
File: 5QwixmuF-smN6D12HvQkNDerA5M.mft (raw, json)
Hash identifier: 0uioG1ijeC+YDD2W9Oci5fDwdN57Gy9dTf2L3oICqVM=
Subject key identifier: FE:CE:3F:D4:50:21:03:3C:10:FA:DD:0A:AF:00:DE:B3:44:47:82:73
Authority key identifier: E5:0C:22:C6:6B:85:FA:C9:8D:E8:3D:76:1E:F4:24:34:37:AB:03:93
Certificate issuer: /CN=e50c22c66b85fac98de83d761ef4243437ab0393
Certificate serial: 019B31C36E5077B6C71E5CF3C6EA98CA43BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5QwixmuF-smN6D12HvQkNDerA5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.mft
Manifest number: 141F
Signing time: Thu 18 Dec 2025 14:00:49 +0000
Manifest this update: Thu 18 Dec 2025 14:00:49 +0000
Manifest next update: Fri 19 Dec 2025 14:00:49 +0000
Files and hashes: 1: 5QwixmuF-smN6D12HvQkNDerA5M.crl (hash: Lqko+4xQFrA23S5+WWrEYOsIHrIr1ukRhh+W4YYSjhU=)
2: 5vvZLFuVzrlfVEjgWVSSvDzWzYc.roa (hash: d36pZwdlPn9b+lfJWHYLiYs9ysvYmjF2/rOLd55l7Go=)
3: f1b7by6SkYswASAnSv-cgB5XP2Y.roa (hash: x+DctqLC1gEcaYW0QmBitaKdQAwlen0XRAIQGmNrAQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/5QwixmuF-smN6D12HvQkNDerA5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Dec 2025 14:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:31:c3:6e:50:77:b6:c7:1e:5c:f3:c6:ea:98:ca:43:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e50c22c66b85fac98de83d761ef4243437ab0393
Validity
Not Before: Dec 18 14:00:49 2025 GMT
Not After : Dec 19 14:00:49 2025 GMT
Subject: CN=fece3fd45021033c10fadd0aaf00deb344478273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:41:60:a6:3d:b1:9e:e6:0f:f2:a4:ba:50:73:
f5:d6:ce:4b:85:2a:69:77:f9:bb:f7:29:14:1f:ec:
ac:a7:bc:ab:b9:49:2f:23:65:8d:32:fa:0c:4c:28:
f8:c3:14:f6:35:e2:2b:62:8e:f5:c1:00:48:8d:c1:
3e:d3:e8:7b:8a:c0:6a:97:32:ba:77:e1:46:8a:39:
bc:36:09:3b:b5:48:5c:65:6c:86:a1:21:b9:1a:b2:
95:e4:77:3b:04:b1:a0:ed:22:e7:b6:01:da:d2:56:
e2:2f:f3:34:b9:31:9c:09:72:a2:57:59:4b:3e:cf:
96:9f:b8:04:da:5c:39:13:9b:28:08:77:a9:9b:5f:
45:eb:b7:be:4b:26:9f:69:fe:06:66:a7:2c:e1:f5:
15:f6:53:e5:b1:23:a1:72:57:90:ba:00:17:57:c7:
4e:a7:0e:07:73:05:eb:72:f4:87:41:e2:a3:da:a3:
1e:e3:aa:3e:c5:d0:22:f0:c8:3d:22:73:28:d0:b9:
42:c1:93:10:a2:f9:64:ef:17:96:b4:17:a2:39:09:
55:a4:60:d9:6e:04:76:19:e3:80:76:44:e2:b1:ab:
f7:8f:c9:b7:f8:74:25:ab:13:0b:05:e1:93:da:15:
a0:f1:c3:6c:88:bf:ef:92:cc:ab:df:21:af:18:4e:
ec:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:CE:3F:D4:50:21:03:3C:10:FA:DD:0A:AF:00:DE:B3:44:47:82:73
X509v3 Authority Key Identifier:
keyid:E5:0C:22:C6:6B:85:FA:C9:8D:E8:3D:76:1E:F4:24:34:37:AB:03:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QwixmuF-smN6D12HvQkNDerA5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:73:7d:14:17:6b:a4:48:ca:bf:77:45:d1:75:d0:ab:67:6b:
26:a8:f4:e1:85:bd:6e:95:ed:ad:49:5a:90:f8:15:a4:0c:e6:
67:f6:ad:ec:3e:c4:9f:c6:44:ad:2c:17:ee:5d:fe:15:c7:aa:
ee:b8:c5:a8:67:5d:30:fc:79:fb:d3:ea:68:c6:3d:c8:e5:f2:
69:52:56:68:c5:06:53:47:29:7e:e0:f0:b7:c6:39:f4:18:0f:
5c:9d:a1:42:f6:f1:2f:ee:6f:86:6a:f7:78:66:3c:8d:ba:6a:
5f:88:f6:34:54:6f:d3:13:44:c7:88:b2:c0:2e:f7:ab:d6:05:
c2:c2:17:3d:f4:39:76:a0:1b:89:ab:d5:6d:2c:9b:84:ee:91:
c5:e4:3e:d0:ec:af:fd:3a:98:09:10:1a:57:89:99:fd:7d:db:
33:35:be:4d:ef:de:71:73:0f:66:69:69:f6:12:93:56:00:70:
f5:81:a4:be:dd:1f:68:fa:8f:d9:e4:d1:ac:cc:67:48:0a:cd:
e0:39:a4:5d:db:ee:44:5e:fd:97:94:d6:aa:f0:7b:c0:2a:bb:
a9:71:cb:b3:dc:c7:ee:1a:1c:ae:e9:ff:1a:6b:f1:e5:36:a2:
26:5a:f7:58:8d:f4:14:91:5f:f2:ca:fb:ca:82:b0:4b:5b:b6:
7f:1f:b0:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 23:47:12 2025 by rpki-client