This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/5f793d-97f9-4aba-9ba1-b5d13a0189a5/1/FltW5Vtv77wg20rOb9dWxz10H5w.mft
File: FltW5Vtv77wg20rOb9dWxz10H5w.mft (raw, json)
Hash identifier: pHomWoplR+s1HcJ0CPL8EJadj/6ct/gwkYR0wntochU=
Subject key identifier: E8:44:B0:D7:3B:DF:62:31:24:5B:89:EF:FC:6A:20:90:0D:E1:91:3B
Authority key identifier: 16:5B:56:E5:5B:6F:EF:BC:20:DB:4A:CE:6F:D7:56:C7:3D:74:1F:9C
Certificate issuer: /CN=165b56e55b6fefbc20db4ace6fd756c73d741f9c
Certificate serial: 019B755B1B1F4A5A6CD5DB36A6008A7C49AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FltW5Vtv77wg20rOb9dWxz10H5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/5f793d-97f9-4aba-9ba1-b5d13a0189a5/1/FltW5Vtv77wg20rOb9dWxz10H5w.mft
Manifest number: 04FF
Signing time: Wed 31 Dec 2025 17:01:03 +0000
Manifest this update: Wed 31 Dec 2025 17:01:03 +0000
Manifest next update: Thu 01 Jan 2026 17:01:03 +0000
Files and hashes: 1: FltW5Vtv77wg20rOb9dWxz10H5w.crl (hash: IA1qbZIDQxXyouRUACseDs2Z/Q+W/+1/0Koc3chwlPM=)
2: sMegHqU7UUGqCYG93dUiBfzhiKY.roa (hash: Uew37Hsz2ZJ9NI8mYh/emEGauK92oIRApPEXx6MkFec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/5f793d-97f9-4aba-9ba1-b5d13a0189a5/1/FltW5Vtv77wg20rOb9dWxz10H5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/5f793d-97f9-4aba-9ba1-b5d13a0189a5/1/FltW5Vtv77wg20rOb9dWxz10H5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/FltW5Vtv77wg20rOb9dWxz10H5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Jan 2026 16:22:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:75:5b:1b:1f:4a:5a:6c:d5:db:36:a6:00:8a:7c:49:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=165b56e55b6fefbc20db4ace6fd756c73d741f9c
Validity
Not Before: Dec 31 17:01:03 2025 GMT
Not After : Jan 1 17:01:03 2026 GMT
Subject: CN=e844b0d73bdf6231245b89effc6a20900de1913b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:66:06:58:cd:c9:4b:7c:49:0d:65:ce:ff:75:
87:fa:da:b6:ed:97:00:97:82:52:02:20:cc:74:4e:
14:f8:a6:00:36:2b:26:de:38:54:1e:b4:24:30:7d:
5f:9e:e9:e1:57:4e:00:6c:fc:d5:82:95:88:1e:c5:
3f:78:24:43:07:28:9c:61:f8:fa:cf:e6:fa:81:01:
40:1c:c5:28:98:83:c7:6e:72:78:7e:e7:51:4e:e9:
73:97:b6:df:33:23:d4:32:12:08:89:3a:05:23:94:
45:69:b5:15:d7:ba:94:07:5f:02:98:0e:38:82:23:
4a:2b:34:3b:b4:d1:a5:47:22:b4:72:15:0d:29:b5:
94:c9:95:09:09:f3:87:b1:56:71:77:80:5d:98:f5:
2d:d6:10:63:c5:7d:65:10:73:08:98:9e:8f:1b:db:
f3:26:82:7f:a6:f1:7d:e9:00:c0:e5:7e:93:16:bf:
ac:ad:b8:cd:9c:c3:72:b1:6d:80:c8:11:67:96:23:
55:02:69:17:89:5f:02:f5:2a:ae:7b:c4:6e:12:24:
6d:72:7f:76:c5:ef:5f:6b:9d:11:a0:3a:82:e4:86:
b2:52:57:b4:14:37:a1:e1:78:a8:bb:2c:3a:b9:1d:
5c:df:96:0f:ec:8d:9b:52:47:9c:96:80:37:c1:8b:
5f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:44:B0:D7:3B:DF:62:31:24:5B:89:EF:FC:6A:20:90:0D:E1:91:3B
X509v3 Authority Key Identifier:
keyid:16:5B:56:E5:5B:6F:EF:BC:20:DB:4A:CE:6F:D7:56:C7:3D:74:1F:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FltW5Vtv77wg20rOb9dWxz10H5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5f793d-97f9-4aba-9ba1-b5d13a0189a5/1/FltW5Vtv77wg20rOb9dWxz10H5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5f793d-97f9-4aba-9ba1-b5d13a0189a5/1/FltW5Vtv77wg20rOb9dWxz10H5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:be:b6:d4:5e:53:c6:ac:ed:9b:13:37:94:78:00:05:5c:a1:
3f:7f:d8:6b:67:12:3a:9c:32:07:69:8c:32:f7:b9:3d:1c:4a:
21:8f:8f:1a:57:8d:df:2d:7a:be:c8:63:b7:90:39:18:76:01:
8a:af:3e:da:6c:04:c8:7f:56:00:22:fd:20:d9:e7:b0:8f:01:
1b:0a:9e:db:98:72:ec:e5:da:f9:8d:68:64:c0:7a:f4:03:ef:
9a:67:fc:37:d6:cf:45:00:46:c3:7f:d9:10:f9:31:3c:a7:86:
e7:e0:2a:4a:d6:f8:6e:a0:d0:0f:58:e1:80:cb:62:a7:2d:e8:
a8:1d:02:04:dd:08:2e:bf:d3:db:0d:a9:28:8d:39:4c:9a:9e:
2e:6b:f1:34:79:ed:c7:b7:ae:f4:01:f0:9a:57:5f:4e:a0:7d:
9e:ae:4c:cf:37:9d:73:4c:64:3d:e0:67:64:41:38:68:e3:f7:
c8:be:a0:7a:b3:da:22:5f:ec:7e:13:6c:45:5e:09:82:d0:93:
4d:7a:f4:2c:95:c4:6c:37:e0:31:7b:2b:39:38:77:51:cc:5e:
4e:22:f2:e0:a2:db:2e:9e:2c:62:d1:4a:3a:98:8c:94:a6:1f:
b7:cb:13:e7:6e:81:8e:3c:9a:ff:93:6c:7e:7c:e4:32:9f:b5:
b3:d7:13:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 21:07:41 2025 by rpki-client