This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/0fe8ef-5911-44c4-afa3-79dfd14c3960/1/0WvfVDgfYwdK35ob2Xd4d6cgBGw.mft
File: 0WvfVDgfYwdK35ob2Xd4d6cgBGw.mft (raw, json)
Hash identifier: zwgFYMKMi/Rs17S2STwmZqG8BOMgBICjhn+M0a1x/PY=
Subject key identifier: 33:AB:04:D9:F3:DB:5A:F4:74:7F:36:F6:7C:E3:9E:C7:58:C4:55:20
Authority key identifier: D1:6B:DF:54:38:1F:63:07:4A:DF:9A:1B:D9:77:78:77:A7:20:04:6C
Certificate issuer: /CN=d16bdf54381f63074adf9a1bd9777877a720046c
Certificate serial: 019B3F11AD2789D92B862244B16994EEE8D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0WvfVDgfYwdK35ob2Xd4d6cgBGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/0fe8ef-5911-44c4-afa3-79dfd14c3960/1/0WvfVDgfYwdK35ob2Xd4d6cgBGw.mft
Manifest number: 047E
Signing time: Sun 21 Dec 2025 04:01:21 +0000
Manifest this update: Sun 21 Dec 2025 04:01:21 +0000
Manifest next update: Mon 22 Dec 2025 04:01:21 +0000
Files and hashes: 1: 0WvfVDgfYwdK35ob2Xd4d6cgBGw.crl (hash: RekL652K9qh+S4UxzM0eXJzQqrCoCghYDRfcIJg8s+s=)
2: fMqs9FskGDIW9ZbaQwk0qUEC3ks.roa (hash: CtgaQ4J8AgrMFT4kVvGV6ADv6GPEnX8MMv9l/y32iWU=)
3: idiMTHuxguw5KJd3P5FoGJbinyo.roa (hash: n+9BnqU/yI6WzHcfhLc6mXo8IOBS4JMkN/uhkjIXEGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/0fe8ef-5911-44c4-afa3-79dfd14c3960/1/0WvfVDgfYwdK35ob2Xd4d6cgBGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/0fe8ef-5911-44c4-afa3-79dfd14c3960/1/0WvfVDgfYwdK35ob2Xd4d6cgBGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0WvfVDgfYwdK35ob2Xd4d6cgBGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 22 Dec 2025 04:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:3f:11:ad:27:89:d9:2b:86:22:44:b1:69:94:ee:e8:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d16bdf54381f63074adf9a1bd9777877a720046c
Validity
Not Before: Dec 21 04:01:21 2025 GMT
Not After : Dec 22 04:01:21 2025 GMT
Subject: CN=33ab04d9f3db5af4747f36f67ce39ec758c45520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e3:c6:70:c4:e0:52:83:ae:eb:05:d4:59:d0:
88:c6:d0:5f:34:da:17:26:0f:54:db:28:6f:08:5f:
d6:fb:97:90:03:5b:af:d7:0f:e8:13:36:fa:7f:15:
0f:7f:1c:78:08:49:14:ca:1d:6d:ac:91:b6:02:a6:
d6:f7:bc:e5:89:c1:d1:5e:53:8f:35:b1:6e:1a:25:
80:29:48:de:a7:9c:c3:45:ca:34:f9:57:bf:73:95:
76:3b:1e:0b:cd:f2:88:ca:9f:47:aa:94:ca:9d:31:
d5:cc:ca:70:ea:7a:20:3a:36:d5:a8:c3:13:61:f4:
cf:00:6a:77:70:ba:99:3c:ee:15:0d:fa:64:30:c9:
95:fe:d6:9b:e4:73:30:ae:c8:85:8a:30:e5:0a:2d:
3f:82:1f:be:0d:10:9d:25:1f:f6:15:ac:19:62:96:
c5:ec:39:e5:37:c5:ec:b3:ae:c3:3b:ec:c2:7e:92:
cd:54:93:17:9b:e1:0e:8f:d1:cc:b6:f7:dc:c0:ca:
15:f6:34:0e:9f:32:e4:5b:09:19:9e:a7:47:dd:01:
48:17:ce:a9:d3:de:58:2d:11:f8:90:4a:c0:90:dd:
cc:a5:2b:41:38:9b:43:71:f8:7a:96:57:21:92:c2:
5e:e7:16:de:7e:11:54:e9:6b:4c:b9:8c:b7:28:fd:
a7:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:AB:04:D9:F3:DB:5A:F4:74:7F:36:F6:7C:E3:9E:C7:58:C4:55:20
X509v3 Authority Key Identifier:
keyid:D1:6B:DF:54:38:1F:63:07:4A:DF:9A:1B:D9:77:78:77:A7:20:04:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0WvfVDgfYwdK35ob2Xd4d6cgBGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0fe8ef-5911-44c4-afa3-79dfd14c3960/1/0WvfVDgfYwdK35ob2Xd4d6cgBGw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0fe8ef-5911-44c4-afa3-79dfd14c3960/1/0WvfVDgfYwdK35ob2Xd4d6cgBGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:56:f0:9b:74:88:86:30:b0:b8:7c:8f:b5:74:a1:c9:a3:02:
fc:0a:1d:1f:5a:0c:da:0c:7b:8a:2e:9a:93:a9:13:a0:93:ba:
d6:9c:44:d7:1d:21:0a:0e:e5:9f:40:1e:fe:71:de:00:08:a8:
3d:24:a7:45:c3:76:83:86:c5:53:73:b2:c4:97:97:4c:ae:61:
af:4e:f6:58:40:ac:fc:4a:ee:1a:09:1c:ff:45:27:58:15:ad:
ac:77:29:30:af:08:a0:9a:d8:67:f8:55:0b:64:b6:03:08:9d:
26:db:34:6b:e3:d5:cb:4d:58:87:02:a4:fd:ba:e6:5c:67:6a:
71:cc:4d:f8:88:c2:55:8f:06:4e:86:4a:ff:80:d2:3b:01:6f:
13:16:83:2c:df:0b:dd:f7:40:cc:06:52:f3:85:30:3f:26:49:
6f:85:90:9d:32:e4:27:8a:a4:f0:76:ef:0a:0f:9d:c7:ec:cf:
d0:ad:ba:28:c5:19:66:a1:88:fe:c9:a9:8a:29:ba:b3:90:b9:
09:25:1c:3b:d2:b7:1a:bc:22:4d:e3:68:2b:c6:a4:a5:d6:79:
a7:b9:05:9a:8a:36:7b:da:2d:fb:6c:34:9d:a7:8b:7b:2d:a2:
a4:5e:bb:82:d4:b6:4f:25:33:50:a8:9f:c8:a6:0a:66:7d:72:
50:1d:36:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 13:11:24 2025 by rpki-client