This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft
File: mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft (raw, json)
Hash identifier: dn11JsKtRAvrCLtIFjU0h7ePn9PhcseyqulydHvOhnE=
Subject key identifier: 9E:E4:E3:C1:1C:73:18:46:52:5C:E4:A3:6C:44:97:9F:CD:6C:7F:4E
Authority key identifier: 99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E
Certificate issuer: /CN=99ce569a14c2db3772f23187ce68e6541ec0048e
Certificate serial: 019AF5E61F2294741D0E33A4185696107D88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft
Manifest number: 1786
Signing time: Sat 06 Dec 2025 23:01:30 +0000
Manifest this update: Sat 06 Dec 2025 23:01:30 +0000
Manifest next update: Sun 07 Dec 2025 23:01:30 +0000
Files and hashes: 1: 7hlWKm8vTIF0LH1H2oS6Admh1TI.roa (hash: JGgMMA+OZIrWq67kkKcLVk/aNndkz3SnG1R5RYOVvj8=)
2: 8Okcs_WzeZSlRzql6-e5V5V7syA.roa (hash: Bgf74cz9Nwo/ctlxM9vVhY3z4DibfYQP6Uszu31EXc8=)
3: AJpw_2i3EoQNYD9kunMPYOdByi8.roa (hash: 2y+udfjFmNVer5C4pJzKndxIM53KHs0ELdljGNxXclM=)
4: AMENJrV8ygov73L3LGeoA2nctFI.roa (hash: gyRR16y3QtUpUlKZN2rwn2h0u1QJLqcAd5tS2Xa5lmY=)
5: BW-ZjApW-eGpyxFEOc0qqC_7S5k.roa (hash: RqpMiCDIPeUSPd1EPbgHwl0XZwlcr7/eFSWcSxO7pPY=)
6: Ik8Kqt-zKfrsdQjyrAjHXX-mlLc.roa (hash: Zg9C0+0W8n0QIjR6RRPkp/OJIpBk8iu2+syGMIoxQyg=)
7: RYdEtsOojE3SXyShhqAjMIQl9xQ.roa (hash: bxAZYk1bj8j4gGSsg9+CUkCHFq1GRl7baVopFxolE0s=)
8: WBeAt2UOvPgAdfpllYF8DBrXsx8.roa (hash: IGhLKO/rQTI4tOBHJDgWqI73xTyqxuZsgF0ztyC/dOc=)
9: dMlBq16YcIM7-JR7sVrQGjUo5Ts.roa (hash: i7NU7NT4PhY/w3tg6T+Z3qdRHBm2oFSaLm/74+Urx2g=)
10: f4e7IUwG3JkPasx3oPPOpKnw014.roa (hash: oT75cSQjF7ggxHOJOkz6Sxjs0hfilCF0H6NE1nJtUfo=)
11: mNguxrQSssFTgOvDx-TtVJcngJ0.roa (hash: p4yScE1NaP9LVRZLGH/RikX/bIEDOl76JK/45ns5C9Q=)
12: mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl (hash: 6ZGEXq50zCuZeV19+KiRsPIcxWRsHxyHFAFkXPfTxaw=)
13: tGisfrUmcm7oDtUaKLvnP0jBq0s.roa (hash: nA2OAz9Nlstpul0i0fjQIz6ieEk/T79qTn4SzXVWXBw=)
14: u_mqTybwgy-hqVDwwCNi1Bf-8tI.roa (hash: JZzfV1nFUUQsICoBUJ9//kJmxjSvH3d3D7ybB8QQr/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 23:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f5:e6:1f:22:94:74:1d:0e:33:a4:18:56:96:10:7d:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99ce569a14c2db3772f23187ce68e6541ec0048e
Validity
Not Before: Dec 6 23:01:30 2025 GMT
Not After : Dec 7 23:01:30 2025 GMT
Subject: CN=9ee4e3c11c731846525ce4a36c44979fcd6c7f4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b0:9d:b5:3e:14:eb:77:1e:49:20:18:0d:61:
dc:82:75:89:0d:ac:25:f7:66:5e:26:6f:b8:5e:a8:
9b:d5:c7:0d:43:22:76:d6:ca:67:be:e9:03:b7:9c:
22:6b:65:76:06:94:6f:6c:1f:4c:81:f0:1d:61:41:
20:be:5a:d8:7f:8b:ed:26:a6:c2:03:ef:87:11:ab:
7a:da:e0:86:50:7c:52:88:e2:8f:98:d4:75:18:10:
73:80:3c:ff:56:ca:60:e5:3a:2b:a1:3f:f6:38:ab:
15:4c:2a:a0:57:66:83:1d:07:8f:ea:89:64:ec:7b:
66:bb:33:af:97:1a:83:9f:35:2f:14:ae:f2:b8:ea:
ff:bb:6a:9d:8a:7c:2d:b5:04:d0:bb:8a:6c:ea:99:
22:23:ef:6b:16:0f:4c:a7:bf:7a:8b:28:5d:0f:ac:
bf:35:ba:2b:d8:9b:7b:3d:d7:16:10:1e:f0:69:81:
17:8e:e6:b8:ab:74:97:75:23:95:06:c1:8f:cf:a3:
52:e5:8b:04:35:27:75:df:41:54:26:c6:63:f0:a5:
a1:b0:19:04:d2:f0:24:ee:d4:89:0d:e6:21:d4:65:
cb:72:d7:55:b7:ce:77:ed:06:b1:b0:2f:be:27:a4:
83:31:bb:dc:ff:da:91:6d:fb:55:42:15:a9:a7:52:
7a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:E4:E3:C1:1C:73:18:46:52:5C:E4:A3:6C:44:97:9F:CD:6C:7F:4E
X509v3 Authority Key Identifier:
keyid:99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:7e:12:91:f7:0c:2b:d3:21:d7:12:cb:f1:f5:5e:ec:d0:c8:
d3:b9:25:45:de:da:a1:f8:8b:07:13:e3:38:e9:ff:74:7a:5c:
02:d0:20:70:13:f8:11:ed:80:8f:b0:e0:78:2a:72:69:84:4d:
69:42:19:b9:ac:e6:b3:15:4d:b8:cd:a8:a3:66:c1:2c:02:10:
8c:0a:64:50:0b:91:a8:09:4c:43:22:61:41:f7:d0:58:e6:63:
64:de:cb:45:7e:a9:9c:91:70:58:df:1a:cd:d6:ce:67:1a:8f:
42:ad:51:5f:8c:db:17:c8:d2:f8:a1:4f:88:cd:c8:2a:e9:b2:
ac:aa:98:41:7a:10:63:0d:e6:aa:9b:1b:aa:50:b9:09:9f:6e:
56:6b:1f:04:2b:d7:41:c6:b0:8d:8d:60:7b:a6:06:5f:8e:6b:
b4:d6:5c:35:73:05:60:8f:98:be:8d:4e:a3:9c:f9:d1:44:e1:
e1:38:91:ab:c0:7a:c6:83:6c:3d:52:c3:6b:51:2a:25:de:a3:
41:3d:c4:22:3f:6e:1a:fa:82:2f:24:e9:58:4f:50:18:db:01:
a9:48:74:49:6f:5a:df:7a:33:1d:be:e4:c5:5a:4c:7b:5d:b5:
95:f1:7c:28:5f:6d:a8:91:d4:00:92:13:b2:d2:97:eb:8c:16:
ae:84:c3:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 08:36:07 2025 by rpki-client