This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/67bbc5-64ae-41d5-93d3-3b2894f0e69c/1/An5YWPpUP-P_R02NdquXAeoBCws.mft
File: An5YWPpUP-P_R02NdquXAeoBCws.mft (raw, json)
Hash identifier: HgFm/zrs6u5pWvatCU7Bks1NVmjBToSQJ041pXXaD/w=
Subject key identifier: AF:40:E6:D8:2E:B1:54:C6:A5:80:8B:01:C9:4D:39:71:EB:4C:62:B0
Authority key identifier: 02:7E:58:58:FA:54:3F:E3:FF:47:4D:8D:76:AB:97:01:EA:01:0B:0B
Certificate issuer: /CN=027e5858fa543fe3ff474d8d76ab9701ea010b0b
Certificate serial: 019B24E386289BE47F2B0562DB8BA0FF1F67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/An5YWPpUP-P_R02NdquXAeoBCws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/67bbc5-64ae-41d5-93d3-3b2894f0e69c/1/An5YWPpUP-P_R02NdquXAeoBCws.mft
Manifest number: 053E
Signing time: Tue 16 Dec 2025 02:00:49 +0000
Manifest this update: Tue 16 Dec 2025 02:00:49 +0000
Manifest next update: Wed 17 Dec 2025 02:00:49 +0000
Files and hashes: 1: An5YWPpUP-P_R02NdquXAeoBCws.crl (hash: 8+96TOuqwEnduYHNkoDdTg1wapBlmmxE0JiNuAeCtrQ=)
2: M5q-y_pSOaw-LnhCtgtI_cxU90s.roa (hash: EkxFUEnDMMrgIyFYsLlI4yCORNtS7fa6ZKub0vDM94A=)
3: n1ZXxlY8nlsbxYQ5L076Dr17-c4.asa (hash: dzE/q21fmrH9SVkZPk72j/WGQhTy8qFsnaxN27uHbdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/67bbc5-64ae-41d5-93d3-3b2894f0e69c/1/An5YWPpUP-P_R02NdquXAeoBCws.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/67bbc5-64ae-41d5-93d3-3b2894f0e69c/1/An5YWPpUP-P_R02NdquXAeoBCws.mft
rsync://rpki.ripe.net/repository/DEFAULT/An5YWPpUP-P_R02NdquXAeoBCws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Dec 2025 02:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:24:e3:86:28:9b:e4:7f:2b:05:62:db:8b:a0:ff:1f:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=027e5858fa543fe3ff474d8d76ab9701ea010b0b
Validity
Not Before: Dec 16 02:00:49 2025 GMT
Not After : Dec 17 02:00:49 2025 GMT
Subject: CN=af40e6d82eb154c6a5808b01c94d3971eb4c62b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b8:de:d3:6a:fc:26:d1:cf:89:c5:76:8e:55:
de:71:76:87:7a:80:7b:44:a0:56:09:de:c0:a0:74:
01:cf:c6:6f:29:d7:49:1d:a9:ae:69:d5:e7:b8:df:
7d:26:58:90:13:06:05:68:d4:4e:5f:57:51:c0:d9:
17:dc:56:27:25:7c:97:1e:e1:d2:9b:89:71:3e:31:
f7:7a:07:ea:92:da:2b:07:6a:03:e3:fe:38:3c:42:
1e:9f:52:8b:18:fc:cb:e8:08:1c:94:cf:a1:e6:e6:
ad:8c:a1:84:11:5d:77:c4:3e:f3:6c:b3:ac:78:6a:
a5:c6:8b:d1:76:10:18:67:27:8f:4e:2e:ce:6e:0c:
27:63:69:ec:87:a9:cd:09:6b:60:b3:7e:08:04:ad:
79:54:1d:59:13:9f:3c:dd:5d:9e:69:2f:fa:e6:ac:
8c:0c:c9:ba:7c:8f:ef:ae:ea:26:39:28:23:c4:42:
2d:4d:d1:c1:a6:c0:94:90:eb:34:1b:64:2c:16:eb:
b6:99:e3:b8:51:84:f6:1b:8b:76:fd:b4:3d:84:b6:
f8:b5:de:bc:06:8c:3f:48:31:1c:c9:95:5c:1a:c3:
43:72:13:4c:b6:5c:3a:23:6d:f3:1a:e2:54:4e:b9:
b5:4a:e7:76:ea:80:cc:c3:8d:53:df:dd:64:ea:78:
d9:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:40:E6:D8:2E:B1:54:C6:A5:80:8B:01:C9:4D:39:71:EB:4C:62:B0
X509v3 Authority Key Identifier:
keyid:02:7E:58:58:FA:54:3F:E3:FF:47:4D:8D:76:AB:97:01:EA:01:0B:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/An5YWPpUP-P_R02NdquXAeoBCws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/67bbc5-64ae-41d5-93d3-3b2894f0e69c/1/An5YWPpUP-P_R02NdquXAeoBCws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/67bbc5-64ae-41d5-93d3-3b2894f0e69c/1/An5YWPpUP-P_R02NdquXAeoBCws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:24:66:be:a2:ef:4c:34:ab:9f:1b:be:4f:72:7a:b5:6e:84:
bb:df:ca:bc:40:bf:f5:d8:38:41:43:bf:af:e6:a2:4d:e7:ee:
7d:a9:f1:7d:7a:46:1d:bd:05:8b:ca:a1:72:f7:c2:97:15:ef:
dc:55:b9:d1:ae:07:b1:8b:27:d7:ae:e8:32:8b:6a:54:38:b7:
9f:72:ed:f0:43:fb:6b:73:b4:ab:ed:7c:43:b9:c2:76:2e:24:
04:96:99:ea:a5:25:97:25:58:5b:a4:97:d9:91:b1:26:32:b2:
3d:44:ac:08:ab:33:76:a1:1e:d8:e9:26:be:00:eb:d4:2b:32:
f5:a9:e4:a2:aa:7c:c8:9e:26:6e:dd:c5:12:9e:0d:c6:23:e5:
fa:f2:2e:7b:b4:ed:83:6b:a3:ae:76:e9:ed:92:40:49:1b:53:
1a:cf:fe:88:b4:03:6a:6a:1b:d2:b2:38:71:10:d6:20:1b:4c:
93:d1:8b:a7:f8:b0:c4:c2:07:24:c1:d3:e2:7d:77:92:3f:ab:
99:b6:73:63:c2:97:e7:70:a5:e6:ca:ca:57:fb:9a:76:75:13:
dd:60:18:a1:ac:6b:fd:97:00:74:68:60:36:35:9e:40:32:88:
e1:1c:47:a9:23:74:4b:bb:56:1d:1f:c7:0e:5d:b2:81:14:cb:
76:82:e0:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 12:50:11 2025 by rpki-client