This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.mft
File: pW4itGIL0EL3OiqWIfDJJH1RJIo.mft (raw, json)
Hash identifier: wvNYOUXa5TA1TPTBQA8E8Px24Cd65tL3g5wer8ncjqk=
Subject key identifier: D3:74:B3:6E:8A:38:92:24:D4:12:0E:1A:89:AF:1A:1E:C4:7C:FC:D9
Authority key identifier: A5:6E:22:B4:62:0B:D0:42:F7:3A:2A:96:21:F0:C9:24:7D:51:24:8A
Certificate issuer: /CN=a56e22b4620bd042f73a2a9621f0c9247d51248a
Certificate serial: 019B4815952128AE13CB5C52EF660D00DF8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pW4itGIL0EL3OiqWIfDJJH1RJIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.mft
Manifest number: 01B1
Signing time: Mon 22 Dec 2025 22:02:12 +0000
Manifest this update: Mon 22 Dec 2025 22:02:12 +0000
Manifest next update: Tue 23 Dec 2025 22:02:12 +0000
Files and hashes: 1: nzgTTwbAHjDz2-zsShiAXUCqJOU.roa (hash: GBnP7tc+zXd9JtLmcvpJOSz2ArIIJJ/9cimz8hGmRDA=)
2: pW4itGIL0EL3OiqWIfDJJH1RJIo.crl (hash: z20snkMLmJHCnDlvgqX3zqiXJs6z5iGfJb8oLJTf/Tw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pW4itGIL0EL3OiqWIfDJJH1RJIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 23 Dec 2025 22:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:48:15:95:21:28:ae:13:cb:5c:52:ef:66:0d:00:df:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a56e22b4620bd042f73a2a9621f0c9247d51248a
Validity
Not Before: Dec 22 22:02:12 2025 GMT
Not After : Dec 23 22:02:12 2025 GMT
Subject: CN=d374b36e8a389224d4120e1a89af1a1ec47cfcd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:65:e4:97:1e:8c:1b:d9:a3:ea:a8:21:15:16:
9d:8c:fd:0b:80:3e:a0:f7:57:97:b5:2d:e8:99:6f:
c3:25:e1:5e:88:b3:34:9b:f0:ee:e1:02:37:e3:63:
ae:35:7c:91:b1:d3:da:db:91:7a:0c:75:26:76:8c:
b0:16:be:f0:13:77:f4:ea:8b:5c:42:92:f2:2e:db:
3d:22:f5:9d:45:b0:fd:18:ec:d9:b9:e3:da:9f:40:
9a:b2:c5:7b:b5:12:02:8c:9b:23:ed:3e:88:a2:22:
38:f7:af:a5:02:60:5c:54:f8:5a:20:53:98:8e:95:
2c:4c:28:88:c1:94:39:47:f5:84:63:dd:84:a9:82:
0e:bc:f6:b5:53:08:80:26:33:5e:6c:a0:3e:68:c2:
2b:fd:63:0a:33:ba:6b:4d:54:96:1c:19:c1:5a:2a:
85:fa:00:a7:e3:ed:c4:e9:12:08:1a:98:9f:aa:af:
a2:cf:44:5d:61:9b:c0:33:09:4d:fb:11:9c:95:65:
89:23:68:e3:02:24:d2:e1:33:c5:6f:63:9b:12:8c:
f5:c8:0a:26:17:f1:46:43:de:33:e7:a0:93:91:58:
72:f4:26:f0:5d:82:5b:58:df:44:5b:0f:81:cc:b5:
3d:c7:25:ae:aa:ca:18:11:e2:24:15:d7:f3:aa:7b:
5c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:74:B3:6E:8A:38:92:24:D4:12:0E:1A:89:AF:1A:1E:C4:7C:FC:D9
X509v3 Authority Key Identifier:
keyid:A5:6E:22:B4:62:0B:D0:42:F7:3A:2A:96:21:F0:C9:24:7D:51:24:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pW4itGIL0EL3OiqWIfDJJH1RJIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:f9:71:e4:62:a5:b9:54:f8:cd:ea:37:a5:6a:af:94:43:28:
94:c4:7f:68:48:45:21:70:60:da:2e:8b:32:e2:b0:54:30:8a:
75:12:24:f5:19:77:10:f7:cb:5a:0d:3c:4a:eb:95:6d:01:33:
2e:5d:9b:63:40:bc:8e:66:c0:19:d8:65:05:e9:a6:74:82:5e:
79:38:49:1f:d2:16:31:11:3e:bc:28:ae:c3:d8:98:aa:be:58:
5a:a9:4a:4d:25:e6:6d:3b:23:c9:32:9e:1d:e5:fb:2e:8b:b0:
1f:be:9b:5a:88:4d:db:48:97:38:f4:4f:46:21:ed:b1:49:94:
3d:93:11:a7:dd:19:fd:07:87:c1:a8:21:e6:3e:ad:10:c6:48:
25:20:7d:e1:02:6a:be:d0:b0:d2:df:5b:90:85:98:a6:0c:70:
81:5f:24:f1:ba:0e:aa:88:76:4e:54:d2:58:27:f1:1a:2f:e6:
21:bc:ee:5b:e9:2d:1d:22:da:61:ec:5d:b9:5c:ac:79:9c:88:
7f:46:a1:6e:c6:56:eb:6c:22:a6:4f:52:b2:29:78:2f:6f:9a:
bb:96:6d:93:7b:f2:c5:25:fd:c3:4f:8e:2c:69:53:a8:9e:32:
dd:a0:d0:7d:6d:4f:f8:73:d5:97:90:78:e0:93:22:52:58:d4:
5c:16:bc:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 07:50:19 2025 by rpki-client