This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.mft
File: DpHeF0N6ACX9Ht4Q9xDxejCAs6s.mft (raw, json)
Hash identifier: 0u9zM65kYbzxkC7s4FVwBrahh14xdQyxSHbm6uPq/4w=
Subject key identifier: 52:4E:29:3C:85:42:B3:14:36:46:07:A8:E0:7A:1D:D5:8C:36:C4:1A
Authority key identifier: 0E:91:DE:17:43:7A:00:25:FD:1E:DE:10:F7:10:F1:7A:30:80:B3:AB
Certificate issuer: /CN=0e91de17437a0025fd1ede10f710f17a3080b3ab
Certificate serial: 019B43C9B940A92D1113B586C4763BB95313
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.mft
Manifest number: 147B
Signing time: Mon 22 Dec 2025 02:00:52 +0000
Manifest this update: Mon 22 Dec 2025 02:00:52 +0000
Manifest next update: Tue 23 Dec 2025 02:00:52 +0000
Files and hashes: 1: DpHeF0N6ACX9Ht4Q9xDxejCAs6s.crl (hash: ZdGksmkz0lrp0gItpDIR0vGUjl7UpuuehPuOVhtVkW8=)
2: Hhl_Ps8o2QGnYco4FO1OXr5ijFU.roa (hash: 6fvLi0/fqupKmxDBTFAgP5SGIqAO7BfwicUQEAWog9E=)
3: Nkr_GlprDZw9lnWd52PmBmd7vrQ.roa (hash: 9YHLm9DxE2hQJ58if++TORCN8vsnbZqNWmb+Zklfpt4=)
4: YG7S_BKbYfU6SUjYOo1Qwa6UIis.roa (hash: Jrnsr/C5NjCKGrVhAZ6DhSLYahtukJ6T9Dv6tWtZGv4=)
5: ZXngKU01a_kjXn9mpqf40kcafVA.roa (hash: 8RfkCh0AjrRQHRpm6NpNuh0rqzoYMIsu54leaUMRXA4=)
6: c8o0B4Kc0K00BPoNjWfCYKoQvYg.roa (hash: UmQmGO4jozhIbdSa6hU/VftLF6XoNAfjEHYNN7++TiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 22 Dec 2025 22:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:43:c9:b9:40:a9:2d:11:13:b5:86:c4:76:3b:b9:53:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e91de17437a0025fd1ede10f710f17a3080b3ab
Validity
Not Before: Dec 22 02:00:52 2025 GMT
Not After : Dec 23 02:00:52 2025 GMT
Subject: CN=524e293c8542b314364607a8e07a1dd58c36c41a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b0:89:14:5c:e3:d6:db:38:51:d4:82:a1:22:
53:13:bb:43:70:11:7d:01:0b:1d:9c:91:43:c6:cb:
0d:46:b4:8c:69:a4:19:1b:eb:22:10:30:b3:52:17:
83:32:79:00:6a:d9:81:cb:4d:cb:12:a4:b1:ad:33:
7c:90:fe:9b:a0:42:f3:02:90:74:e8:26:91:34:87:
2c:c3:be:e2:c6:e7:0a:28:9b:55:df:3f:e6:61:d6:
88:bb:60:f4:d5:6d:b6:d3:4f:f6:f0:cd:91:e7:e8:
49:19:ee:5f:3b:7f:c2:15:40:93:9b:7b:e9:2f:17:
89:98:74:ea:dc:6e:eb:0d:21:47:d1:0f:7d:72:76:
fa:55:7c:71:e3:a8:0b:18:ce:cc:04:34:2f:ec:59:
fd:d4:ee:9b:20:e7:21:05:ec:55:21:74:9c:13:c5:
89:14:3b:db:f2:3e:92:a9:d8:c2:b4:24:89:3b:45:
98:32:2f:11:0f:a1:3f:a5:98:d8:a4:cf:d8:85:69:
e2:e5:32:ac:75:b6:d5:c9:7e:18:10:53:20:22:26:
47:a7:88:06:0b:e7:34:49:8d:ea:be:2e:0a:56:f6:
56:ea:61:ad:e6:f3:f2:ea:bc:fb:43:9f:94:df:ae:
cb:62:c3:c9:8c:f2:12:e9:60:d8:6b:e9:15:81:7c:
5b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:4E:29:3C:85:42:B3:14:36:46:07:A8:E0:7A:1D:D5:8C:36:C4:1A
X509v3 Authority Key Identifier:
keyid:0E:91:DE:17:43:7A:00:25:FD:1E:DE:10:F7:10:F1:7A:30:80:B3:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:6c:96:f3:c1:71:f1:f0:22:5f:ba:02:2a:89:5d:75:2c:c1:
b1:5a:59:d3:4d:50:a8:93:79:07:64:ae:c2:db:c2:eb:2c:30:
de:fc:61:38:05:dc:71:30:82:1e:d3:95:35:54:12:fa:7f:f6:
09:fa:71:10:4e:f0:41:ab:bd:b4:dc:fb:f7:6b:04:bf:4b:04:
e7:5e:1c:4a:ab:fa:90:53:56:ab:f5:7a:66:43:a0:f5:fc:aa:
d1:16:30:2d:59:ac:f7:ed:84:d1:c6:45:fa:28:17:bb:0c:f7:
a9:b5:40:49:2b:4f:fe:d1:ad:08:3c:df:3a:da:b2:b4:f1:81:
25:03:87:ac:2e:58:a9:de:46:96:33:06:b8:57:ed:3e:24:b6:
1e:03:5d:4a:84:ae:d4:90:91:b2:f3:14:72:0e:0b:28:3f:f6:
e8:82:7e:fe:2b:bb:54:69:a2:bf:ee:d5:63:6f:ab:5c:45:bd:
4e:a8:9b:96:85:0a:a0:c7:99:13:ad:20:fb:b6:0f:bc:23:ff:
90:36:a9:8a:40:e5:6d:6f:50:3c:c2:e6:d2:6d:d9:de:18:7f:
d9:16:96:b9:cf:4a:9d:65:c0:d8:5d:b2:9b:8c:8e:1c:14:f0:
dd:11:c2:c9:cb:a7:30:c7:c3:3d:8d:e8:9e:58:a8:3c:05:83:
67:37:0f:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 06:24:11 2025 by rpki-client