This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.mft
File: T5CKbYaKuem9sQRy--wxyWbpQnQ.mft (raw, json)
Hash identifier: kR8DDw6lHIPM3UPihy+fZEsOX8n4Xw3xNfjABZWi7Jk=
Subject key identifier: 6A:C9:E2:0C:D4:31:22:A2:15:94:C8:9C:D8:CD:53:4C:8D:B7:BA:DA
Authority key identifier: 4F:90:8A:6D:86:8A:B9:E9:BD:B1:04:72:FB:EC:31:C9:66:E9:42:74
Certificate issuer: /CN=4f908a6d868ab9e9bdb10472fbec31c966e94274
Certificate serial: 019B3E6C85C664DD71385FAF2F39C8A2C5FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5CKbYaKuem9sQRy--wxyWbpQnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.mft
Manifest number: 178B
Signing time: Sun 21 Dec 2025 01:00:58 +0000
Manifest this update: Sun 21 Dec 2025 01:00:58 +0000
Manifest next update: Mon 22 Dec 2025 01:00:58 +0000
Files and hashes: 1: N4O1f1HdN3aaUng8Ezj5qGov-Js.roa (hash: sfcsuhZVAT4PlLRFtuXFGetuMIfE20AC6DkhL2YQizc=)
2: T5CKbYaKuem9sQRy--wxyWbpQnQ.crl (hash: 7ovkqZ8VpHq62541n5kWx2UntMRW6seisf8BT8JSHVE=)
3: _UFtjPZkJY8PTrDfIiY7fIJkM78.roa (hash: 8nSnhnVWRfLLWBF2I/d3mZE5/5hk3aPfKW0pXvBb3bk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/T5CKbYaKuem9sQRy--wxyWbpQnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 22 Dec 2025 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:3e:6c:85:c6:64:dd:71:38:5f:af:2f:39:c8:a2:c5:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f908a6d868ab9e9bdb10472fbec31c966e94274
Validity
Not Before: Dec 21 01:00:58 2025 GMT
Not After : Dec 22 01:00:58 2025 GMT
Subject: CN=6ac9e20cd43122a21594c89cd8cd534c8db7bada
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c7:1c:97:4c:14:66:e4:3c:12:6d:80:08:3a:
33:1f:37:f5:f8:2c:a8:df:b3:72:33:af:ca:2a:11:
7e:28:7b:6b:21:66:43:a3:0d:15:34:98:74:aa:7a:
75:e3:de:b5:77:66:01:16:68:f9:af:8f:ab:f1:5c:
a6:a4:70:5a:00:f2:cd:5c:da:41:a4:8d:06:6e:62:
bd:9a:9e:5e:65:de:47:da:31:f9:c3:f3:de:6c:e0:
40:71:0e:77:ec:5f:22:a4:d2:98:f3:44:bd:d9:18:
c1:93:00:f6:46:52:d7:3f:38:20:fb:21:e4:12:00:
04:74:32:18:67:08:ca:c5:51:5e:53:44:9e:0f:ba:
6e:1b:b3:e4:ea:81:20:84:3a:d7:2b:fd:be:71:6e:
b9:93:f3:ab:3b:98:5b:03:af:ac:21:72:c5:03:04:
98:0b:9c:f2:c6:fe:72:4a:a8:49:a4:c1:04:32:9c:
38:83:a3:d8:24:7a:23:23:5f:b4:b6:e5:f9:f7:67:
ad:06:99:da:83:d1:7e:d1:17:b5:12:0c:24:19:b2:
c8:72:8c:bf:7e:76:77:55:f4:27:65:bc:fb:19:8b:
05:9c:11:83:74:f4:b5:ec:66:73:99:17:fb:60:c1:
bd:83:91:26:1b:d8:fb:b7:2f:eb:2a:a1:92:19:a8:
ce:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:C9:E2:0C:D4:31:22:A2:15:94:C8:9C:D8:CD:53:4C:8D:B7:BA:DA
X509v3 Authority Key Identifier:
keyid:4F:90:8A:6D:86:8A:B9:E9:BD:B1:04:72:FB:EC:31:C9:66:E9:42:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5CKbYaKuem9sQRy--wxyWbpQnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:6e:48:d5:40:0d:ec:da:7f:90:95:0a:85:65:d5:e3:52:34:
b5:7c:59:5b:74:a6:f1:49:68:46:ab:30:e1:9b:34:e8:a7:5e:
80:db:4f:74:ee:03:6a:21:5b:67:7b:c5:5f:e2:32:bf:59:61:
72:7c:8a:75:4b:5d:23:a2:20:9a:b3:72:ea:25:44:27:0f:4b:
d1:1e:ed:96:38:b8:e6:7e:4e:61:0a:f4:f0:03:2c:fd:46:39:
37:c8:40:8d:62:bd:1d:5f:cb:a1:48:61:82:d6:6c:ef:8b:41:
85:0a:45:f8:d3:60:38:64:8c:28:bf:8e:88:32:a8:2d:c3:08:
56:8f:96:7b:45:99:98:e9:03:0c:19:de:f0:8b:b9:e6:26:f5:
2a:29:6c:ee:e3:76:80:07:98:82:c8:a6:32:70:0f:ba:d4:6c:
a8:7e:01:fd:bf:99:fe:53:fa:0c:32:25:50:3e:57:aa:cc:36:
b4:e2:9f:c7:05:68:7c:30:2b:d3:f7:12:84:ee:b4:ab:bf:7f:
3e:5e:63:e9:db:6f:4e:f6:c2:5e:9d:cd:a2:3c:df:09:7d:e8:
bd:1b:5b:61:4d:7a:ce:d2:6c:a0:08:d7:5b:50:47:5c:0d:f0:
05:5a:aa:2a:0f:92:24:57:80:d7:d7:c9:a2:18:29:88:c3:c9:
16:23:4e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 08:59:34 2025 by rpki-client