This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/1-14u6ugu75tlf-J5UmcmECD5RMk.mft
File: 1-14u6ugu75tlf-J5UmcmECD5RMk.mft (raw, json)
Hash identifier: tbVyVNXcH2pfpfSYj9h+xober/J88Gw15xx2BPqChU8=
Subject key identifier: 9C:23:5C:9D:86:AE:21:89:D7:44:B1:0C:C9:83:77:AC:16:C3:45:37
Authority key identifier: FB:5E:2E:EA:E8:2E:EF:9B:65:7F:E2:79:52:67:26:10:20:F9:44:C9
Certificate issuer: /CN=fb5e2eeae82eef9b657fe2795267261020f944c9
Certificate serial: 019B3F1149C5F8083D4AB34A062040A75DD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-14u6ugu75tlf-J5UmcmECD5RMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/1-14u6ugu75tlf-J5UmcmECD5RMk.mft
Manifest number: 0313
Signing time: Sun 21 Dec 2025 04:00:56 +0000
Manifest this update: Sun 21 Dec 2025 04:00:56 +0000
Manifest next update: Mon 22 Dec 2025 04:00:56 +0000
Files and hashes: 1: 1-14u6ugu75tlf-J5UmcmECD5RMk.crl (hash: +ZuKdqt8kyI33/DjfEi7TvyZNXnC+dMHu0Crv5lFLeo=)
2: Dr_PQO2BPHoa4Gl0AZtI905-d-M.roa (hash: +sFVK8H7AnsXd5rUe7kR0o92ssiFNiEpWCKNsSev/NE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/1-14u6ugu75tlf-J5UmcmECD5RMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/1-14u6ugu75tlf-J5UmcmECD5RMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-14u6ugu75tlf-J5UmcmECD5RMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 22 Dec 2025 04:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:3f:11:49:c5:f8:08:3d:4a:b3:4a:06:20:40:a7:5d:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb5e2eeae82eef9b657fe2795267261020f944c9
Validity
Not Before: Dec 21 04:00:56 2025 GMT
Not After : Dec 22 04:00:56 2025 GMT
Subject: CN=9c235c9d86ae2189d744b10cc98377ac16c34537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:cc:c6:12:f2:4a:e9:ad:dd:2b:1f:03:55:ae:
d9:89:66:ee:ac:39:44:8b:69:76:8d:db:e1:32:ee:
1d:b0:aa:c9:e1:ef:ca:d1:b6:f3:9b:e8:88:da:4f:
09:6a:83:d8:8a:69:ce:fa:8c:cb:d2:d6:d0:a9:8a:
61:1c:f1:01:df:fb:ea:78:d0:4f:a5:7d:89:4a:09:
f8:84:a7:85:0a:e4:f7:c4:9d:7c:73:3b:1b:80:cd:
4a:35:10:38:54:df:c8:1d:56:30:49:99:79:26:13:
70:7e:0d:0f:9f:e3:90:74:2e:0a:36:7a:b6:26:31:
12:77:1d:78:3b:5a:73:cb:14:2e:81:ea:80:89:0e:
56:f4:cf:ce:e8:2e:95:d1:77:17:75:df:c7:11:46:
7a:71:94:45:1e:76:76:d1:c4:7a:d1:28:f5:85:c1:
df:59:73:05:7d:11:99:bc:4e:8a:50:9b:f8:79:55:
75:57:ae:93:b2:4f:f5:32:e8:32:7b:5e:0a:63:21:
23:ab:9a:2a:0e:5a:f5:92:6f:7b:23:6d:ac:46:cf:
2e:78:88:06:ee:9b:e0:8b:ab:67:65:42:ef:65:c0:
11:5b:9e:1a:94:80:86:25:2b:2c:15:26:5a:55:a3:
29:64:e7:6c:c0:43:0e:31:0c:57:b4:26:f4:81:82:
de:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:23:5C:9D:86:AE:21:89:D7:44:B1:0C:C9:83:77:AC:16:C3:45:37
X509v3 Authority Key Identifier:
keyid:FB:5E:2E:EA:E8:2E:EF:9B:65:7F:E2:79:52:67:26:10:20:F9:44:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-14u6ugu75tlf-J5UmcmECD5RMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/1-14u6ugu75tlf-J5UmcmECD5RMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/1-14u6ugu75tlf-J5UmcmECD5RMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:1d:f7:c4:34:1a:d0:cd:82:df:28:3f:b8:8c:09:eb:4d:7e:
8c:9c:84:60:5a:2d:3b:2b:8f:bc:c5:4e:47:d7:bd:0d:11:5c:
06:67:db:cc:96:b1:9e:c8:33:a0:3e:b6:76:56:46:7a:b6:00:
4d:f7:a3:64:06:97:6e:2c:78:c6:66:6d:cb:0f:bb:2f:97:fc:
f1:12:a5:e3:06:ab:0b:0a:90:53:76:fc:a5:81:4c:a2:2f:b1:
25:e8:41:58:4d:48:7a:d5:94:33:13:d8:65:88:3c:7c:7e:5a:
36:01:36:60:f4:ae:ce:1a:d0:fb:cb:9a:f7:53:9f:6f:56:b1:
30:4d:d7:15:00:aa:09:53:26:b2:1e:d0:ce:73:4c:93:95:2b:
63:2c:79:64:64:d1:33:6d:a6:12:51:b5:71:e0:d8:f7:fb:29:
86:50:d9:66:b1:69:91:10:1b:49:03:49:c1:d6:84:a3:1f:87:
42:a0:58:8f:ef:e4:61:56:c1:e4:25:1e:84:91:51:ab:ce:d4:
ed:5d:b4:a3:45:0a:f3:56:91:a0:a8:dc:20:82:ba:c3:4f:a3:
39:85:99:16:c2:3c:04:40:37:9f:67:f8:6c:2f:b7:76:53:ff:
0e:50:27:80:ee:6b:3f:29:14:51:91:a1:72:df:28:b0:98:0d:
1d:7a:42:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 13:24:20 2025 by rpki-client