This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/00314c-9660-4558-908b-399c10b3aac5/1/wADaNsWELOEw_QaJEuv8DGnnZgY.mft
File: wADaNsWELOEw_QaJEuv8DGnnZgY.mft (raw, json)
Hash identifier: nxR7Z4TEAob9VQ1+y1HrdXbMLssI0TclTcW0KKhUwNw=
Subject key identifier: AE:14:A9:16:F6:64:C8:52:F9:72:89:29:14:01:2A:5C:C1:7A:13:33
Authority key identifier: C0:00:DA:36:C5:84:2C:E1:30:FD:06:89:12:EB:FC:0C:69:E7:66:06
Certificate issuer: /CN=c000da36c5842ce130fd068912ebfc0c69e76606
Certificate serial: 019B4E84321ACBB9BFDF5B85B637221A488E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wADaNsWELOEw_QaJEuv8DGnnZgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/00314c-9660-4558-908b-399c10b3aac5/1/wADaNsWELOEw_QaJEuv8DGnnZgY.mft
Manifest number: 061C
Signing time: Wed 24 Dec 2025 04:00:44 +0000
Manifest this update: Wed 24 Dec 2025 04:00:44 +0000
Manifest next update: Thu 25 Dec 2025 04:00:44 +0000
Files and hashes: 1: YwPa7fIjOxU3w2nMuyLflIyituY.roa (hash: bzaGLCEsglB24IqcrTEilteAr5hqEsn8c1gGVkcmknA=)
2: wADaNsWELOEw_QaJEuv8DGnnZgY.crl (hash: u8D0MJXNC8Xfauym/n1rxpdWhzIsAUNP2Sy7Iegqyck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/00314c-9660-4558-908b-399c10b3aac5/1/wADaNsWELOEw_QaJEuv8DGnnZgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/00314c-9660-4558-908b-399c10b3aac5/1/wADaNsWELOEw_QaJEuv8DGnnZgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/wADaNsWELOEw_QaJEuv8DGnnZgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Dec 2025 04:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:4e:84:32:1a:cb:b9:bf:df:5b:85:b6:37:22:1a:48:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c000da36c5842ce130fd068912ebfc0c69e76606
Validity
Not Before: Dec 24 04:00:44 2025 GMT
Not After : Dec 25 04:00:44 2025 GMT
Subject: CN=ae14a916f664c852f972892914012a5cc17a1333
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:3a:94:00:58:f4:89:8a:04:b3:87:48:49:36:
1e:0b:bb:5e:d8:a9:8b:d6:6b:f3:c9:aa:3e:fe:17:
fc:45:08:b2:66:0e:05:c6:8e:15:91:cd:dd:da:3f:
bc:ac:f4:68:75:81:6c:a5:7d:1d:c9:5d:3f:a7:51:
9e:f1:d0:27:c4:68:b6:66:6b:72:d9:78:32:2d:73:
0b:76:61:cd:e5:6e:78:08:76:ac:39:4b:e1:16:09:
d6:eb:68:9e:09:07:c7:bf:2b:2f:23:c6:a6:4b:e8:
12:2e:3d:54:5a:d0:ba:bd:a1:37:2d:79:63:0f:d0:
54:b7:2e:af:22:b7:9d:4e:cd:84:1f:87:0a:05:d5:
e9:43:bb:fc:46:92:1b:c2:c1:90:9b:79:59:c3:23:
99:8f:18:9e:70:be:6a:c9:13:ca:47:e8:ce:79:50:
7f:77:ad:3c:12:40:ed:f0:1e:91:50:83:9e:03:9d:
59:79:d4:aa:89:17:38:7c:b3:8e:c7:59:39:ef:2b:
56:37:11:2d:41:c1:12:e1:f8:b0:c0:ea:9e:9d:ed:
89:d5:9e:f4:38:65:2b:f0:5e:70:e7:d4:50:fe:bb:
82:04:e8:f2:c7:ee:e7:dd:73:82:34:63:9f:68:96:
24:b2:a3:57:c7:9c:74:37:ab:b3:ed:c8:cf:c2:eb:
2b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:14:A9:16:F6:64:C8:52:F9:72:89:29:14:01:2A:5C:C1:7A:13:33
X509v3 Authority Key Identifier:
keyid:C0:00:DA:36:C5:84:2C:E1:30:FD:06:89:12:EB:FC:0C:69:E7:66:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wADaNsWELOEw_QaJEuv8DGnnZgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/00314c-9660-4558-908b-399c10b3aac5/1/wADaNsWELOEw_QaJEuv8DGnnZgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/00314c-9660-4558-908b-399c10b3aac5/1/wADaNsWELOEw_QaJEuv8DGnnZgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:3d:63:ee:ef:84:5f:36:0e:fe:25:60:41:44:a2:62:22:6c:
e8:2f:b8:11:74:cc:da:0d:21:69:fe:82:32:22:6b:9a:f1:4c:
dd:98:ee:06:0c:6a:8a:b3:3a:41:9f:7a:e1:eb:a9:0d:b1:58:
1d:71:54:3e:80:0f:d4:16:b5:35:cd:06:a5:b2:3d:3b:54:4c:
72:35:54:9b:73:8e:d2:a6:4c:9a:b5:69:59:c2:7e:38:5a:5c:
2b:a8:36:08:e4:10:1d:95:2d:78:0a:32:cf:d5:8d:d3:a0:1a:
a6:5e:d5:59:a9:b3:37:3a:9a:3e:1c:9d:39:72:1f:7b:89:5a:
89:d2:9d:64:48:39:63:25:01:68:80:6e:1e:6f:09:1a:7f:10:
68:6b:3b:28:83:3b:8c:f8:72:68:30:01:2f:cb:e1:21:cd:f2:
66:1b:36:9a:3b:04:44:c9:c1:f9:0e:39:b7:03:33:18:63:e5:
1c:14:28:df:2b:20:cc:03:41:90:00:02:e1:99:70:09:43:d0:
64:f1:0a:7e:c0:bb:65:fd:16:21:47:4b:41:92:d5:62:c9:8f:
18:57:14:49:21:ed:15:5a:6f:6d:80:ce:07:d9:db:c3:f8:56:
09:69:c9:a1:17:d1:78:0f:29:54:a0:7d:76:88:50:57:f7:cd:
46:f8:e2:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 13:37:30 2025 by rpki-client