This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.mft
File: 5WB28n4T0YAOd9FuS2CyO29YyCA.mft (raw, json)
Hash identifier: eIfvLxnAtP+GP3pEJfWHQUmvxadi7MGiY8b/upUtxp0=
Subject key identifier: B5:02:55:CC:B1:D4:0A:EB:F6:B6:5D:5D:15:FB:6A:D7:37:DE:59:00
Authority key identifier: E5:60:76:F2:7E:13:D1:80:0E:77:D1:6E:4B:60:B2:3B:6F:58:C8:20
Certificate issuer: /CN=e56076f27e13d1800e77d16e4b60b23b6f58c820
Certificate serial: 019B1803FCC9829F120BB5E8906E12D929B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.mft
Manifest number: 10CC
Signing time: Sat 13 Dec 2025 14:01:13 +0000
Manifest this update: Sat 13 Dec 2025 14:01:13 +0000
Manifest next update: Sun 14 Dec 2025 14:01:13 +0000
Files and hashes: 1: 1-BGofSFZOno9pVnXMBI7UJeHJBg.roa (hash: LL/uaCHo6NuNRF9xktkjKIvVTGv3e4Z41mGfZiStgPc=)
2: 2ml5oRq-VyEb_mJG0C7Ahdjf8IY.roa (hash: ttehz4UlNMi9cbs/FPfy9Lw9uSsUlhxDo7xqWG0gtFA=)
3: 5WB28n4T0YAOd9FuS2CyO29YyCA.crl (hash: EA7sHMpSgYnePI054SjbTdgf0ngfzdba34zV4dAEWTM=)
4: 6SdikSl1jU5cpmKfnZzRmSDOHuU.roa (hash: ppHMqODDNYRhgCo6OadvbiBfTSlanNIKDu29ewQ4fxE=)
5: AgBjgI35YWeABs8oCUWHz3K2zWw.roa (hash: 4E8DBT5sfAcPhRkXfwuGn/b4aAai3g0fbeGZYZUWlss=)
6: DapHF4_ML4zHS1eSSpKXu6earDU.roa (hash: VRZxFZEzLMzQ017sges9Sj2H9YBysCUi/ugt8yTZW+k=)
7: SQWlc0rZJj-IH4BVVpWf4gkYzTE.roa (hash: pKU0nvpLv8g9iORRQCN0Yo6/Mr7aoPJ/lOVaNu8h5Gk=)
8: Y9YksH2bUiHljz8P5EhHyhB5y9g.roa (hash: T5FIsRO2g9NTZMOXMSlY2kZF7GuiHFYTJEt+zSOsPvQ=)
9: fX0xQGF-aX1OUm6loSYzR_yxa3s.roa (hash: WE6TQcdbZv7KpM5MoM+ZhGHXdH152fsJ6v0eYqFpKnw=)
10: yn6_FC3ZDlreYvdUbTREjMhfyxs.roa (hash: LlX6Tl5H1KTqy6O3g5CWu69Bs/CP9zvonCRnk8+j/fs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Dec 2025 14:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:18:03:fc:c9:82:9f:12:0b:b5:e8:90:6e:12:d9:29:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e56076f27e13d1800e77d16e4b60b23b6f58c820
Validity
Not Before: Dec 13 14:01:13 2025 GMT
Not After : Dec 14 14:01:13 2025 GMT
Subject: CN=b50255ccb1d40aebf6b65d5d15fb6ad737de5900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4d:4b:42:a4:2b:d7:45:9f:db:5a:d0:ca:0b:
3c:49:a1:c3:5f:04:8d:23:fc:58:f9:94:57:1d:87:
08:f2:1c:1a:00:76:ea:b2:28:68:54:6a:4d:37:f1:
e0:5a:12:83:93:2d:8b:71:6a:78:45:df:27:df:fe:
1d:0a:9c:b1:61:7d:50:c2:f6:20:3e:9e:d1:51:9b:
e6:57:87:ba:b8:e0:f1:9c:03:26:63:14:c7:ae:52:
65:c9:81:35:6d:65:a6:81:ba:30:3b:59:c8:0a:b3:
2c:15:8f:da:dd:76:5d:f9:2d:c1:f7:55:06:d2:04:
54:35:f8:d6:9a:4f:11:d2:f7:f2:90:be:0f:cc:12:
75:bb:51:94:2f:56:a5:81:d3:e3:00:9c:66:d0:38:
5a:17:43:6b:9e:d3:15:43:77:53:9b:07:2c:00:55:
2d:62:fd:4e:c8:00:1e:32:73:41:2c:1a:63:41:de:
f5:e8:4f:b6:a2:22:0d:89:e8:36:2b:94:7b:38:86:
c5:f4:e1:1f:30:47:12:34:77:4d:8d:36:c7:b8:70:
d1:66:e9:12:fd:26:0e:77:74:b7:d0:7a:eb:5a:ff:
49:09:06:39:bd:99:26:c2:4e:0c:ea:7f:9c:e1:46:
be:ef:c2:17:e0:4e:1b:2b:ed:07:e7:95:14:b7:03:
9c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:02:55:CC:B1:D4:0A:EB:F6:B6:5D:5D:15:FB:6A:D7:37:DE:59:00
X509v3 Authority Key Identifier:
keyid:E5:60:76:F2:7E:13:D1:80:0E:77:D1:6E:4B:60:B2:3B:6F:58:C8:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:46:68:d7:5b:1b:14:54:96:45:0d:b4:ea:04:0e:fd:0d:39:
77:23:31:d9:bd:9a:99:34:90:d0:44:47:df:78:a1:24:9d:ee:
8a:4f:5b:25:a3:42:70:b5:76:fc:c2:b1:0b:c3:73:fa:ec:39:
b7:6a:2f:7e:8d:cd:19:5e:b9:d8:f5:50:7f:65:c9:87:2b:53:
8d:53:a0:25:4f:8e:71:dd:c9:ac:e8:c4:52:35:ed:37:42:6d:
6c:1b:1d:a1:68:9e:7d:cd:fd:7e:3b:c8:d2:48:03:8c:b7:a0:
8d:52:fc:a3:ec:8c:d1:d7:94:49:f9:d9:15:9e:38:8a:41:51:
e7:87:84:82:8e:df:e4:05:dc:37:e8:22:08:ec:76:ab:a9:30:
0c:a6:36:2a:44:28:64:89:0e:6d:72:25:11:37:f4:25:2e:e8:
66:88:55:b9:25:38:03:36:d9:44:d8:18:76:8c:85:bc:6f:eb:
98:46:21:53:fa:fd:ce:4a:cb:62:88:bb:e0:ba:1d:51:ca:f4:
29:25:ae:52:7f:67:e0:f1:f7:a4:43:3a:be:61:6e:e0:fb:74:
84:19:e5:ff:aa:33:b3:f1:9c:ff:25:86:99:96:dc:5d:b6:0c:
e1:95:f5:a8:66:15:f1:99:7a:fd:ea:ff:e3:48:04:7f:b2:1d:
ee:aa:10:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 13 22:15:07 2025 by rpki-client