This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/95b434-3de0-48e9-88e9-2d7f38474c08/1/1-WMkfQ2DufYIz4ZPQnzf6UslKhA.mft
File: 1-WMkfQ2DufYIz4ZPQnzf6UslKhA.mft (raw, json)
Hash identifier: v1YBXNmnEnQcQEi1wrZqpezSZNAf4MxZ3vnB41JaUEM=
Subject key identifier: 48:12:0A:1D:4A:A3:AF:C3:C6:26:5B:73:2F:C2:4F:9B:50:2E:9F:90
Authority key identifier: F9:63:24:7D:0D:83:B9:F6:08:CF:86:4F:42:7C:DF:E9:4B:25:2A:10
Certificate issuer: /CN=f963247d0d83b9f608cf864f427cdfe94b252a10
Certificate serial: 019B665596F2DAE9B226D240CA9486A2D931
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-WMkfQ2DufYIz4ZPQnzf6UslKhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/95b434-3de0-48e9-88e9-2d7f38474c08/1/1-WMkfQ2DufYIz4ZPQnzf6UslKhA.mft
Manifest number: 179F
Signing time: Sun 28 Dec 2025 19:00:43 +0000
Manifest this update: Sun 28 Dec 2025 19:00:43 +0000
Manifest next update: Mon 29 Dec 2025 19:00:43 +0000
Files and hashes: 1: 1-WMkfQ2DufYIz4ZPQnzf6UslKhA.crl (hash: u1QV2xGoLixxI92xLqtY+bnpPZp3OrPBjpw/fQJATZU=)
2: PqTOmFPSGAKNeE2YcblZG_Wl6iY.roa (hash: 8Xr6waKnu+E2qqO+UtOvKWYxqXyjlVupEIsHjk9OnCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/95b434-3de0-48e9-88e9-2d7f38474c08/1/1-WMkfQ2DufYIz4ZPQnzf6UslKhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/95b434-3de0-48e9-88e9-2d7f38474c08/1/1-WMkfQ2DufYIz4ZPQnzf6UslKhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-WMkfQ2DufYIz4ZPQnzf6UslKhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Dec 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:66:55:96:f2:da:e9:b2:26:d2:40:ca:94:86:a2:d9:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f963247d0d83b9f608cf864f427cdfe94b252a10
Validity
Not Before: Dec 28 19:00:43 2025 GMT
Not After : Dec 29 19:00:43 2025 GMT
Subject: CN=48120a1d4aa3afc3c6265b732fc24f9b502e9f90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:6f:80:3f:4b:ed:b5:b1:41:65:6e:35:63:00:
dd:cd:86:2a:e9:2e:a7:2b:db:08:72:ef:db:1b:3f:
bd:04:e5:d3:76:01:85:42:bb:93:58:b2:be:56:21:
44:5b:4c:e4:fe:50:f5:de:c7:95:11:e6:c2:fe:ab:
30:53:ea:b2:7c:8b:c5:ea:3e:9c:e7:bc:83:8f:b0:
f2:0f:1f:56:ff:8a:a5:c6:14:1d:6b:ea:cd:fa:33:
a8:96:a7:c1:2e:e5:9a:62:60:70:0c:30:d7:6e:eb:
55:3f:95:41:26:bc:1d:71:00:6e:94:eb:b3:a2:b6:
05:0d:ea:5b:a4:ee:f1:cb:d2:9d:d9:d0:c6:a4:e8:
d9:a6:90:6b:40:dc:82:d7:30:07:5d:3c:c3:c4:87:
b9:0e:e2:e5:97:9c:0f:5a:33:16:26:0b:ea:c4:4f:
7e:82:3c:a9:0d:af:5d:ac:b7:4b:a3:4b:1a:07:3c:
a4:16:b7:66:e8:3a:c7:04:a8:41:bf:e2:26:03:01:
3f:a8:d9:82:35:ff:d5:e0:9d:2e:dc:5e:71:c2:ff:
9e:3a:90:67:4b:75:6c:ee:a7:4b:72:6b:11:a1:9a:
7d:01:62:e8:6b:46:2f:40:c3:64:43:8b:93:f8:f4:
9f:dc:25:22:96:bb:e6:eb:f4:a2:19:37:57:91:75:
6f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:12:0A:1D:4A:A3:AF:C3:C6:26:5B:73:2F:C2:4F:9B:50:2E:9F:90
X509v3 Authority Key Identifier:
keyid:F9:63:24:7D:0D:83:B9:F6:08:CF:86:4F:42:7C:DF:E9:4B:25:2A:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-WMkfQ2DufYIz4ZPQnzf6UslKhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/95b434-3de0-48e9-88e9-2d7f38474c08/1/1-WMkfQ2DufYIz4ZPQnzf6UslKhA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/95b434-3de0-48e9-88e9-2d7f38474c08/1/1-WMkfQ2DufYIz4ZPQnzf6UslKhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:81:09:24:93:6c:d0:3b:f0:b6:d8:e8:a0:c6:00:bd:dc:89:
8b:14:e0:16:c1:b1:8e:59:63:fb:ff:0e:f9:07:05:bc:f5:2a:
f9:ce:ae:3b:24:66:6f:da:c7:a0:43:38:e4:a3:7c:f5:c5:9d:
df:06:fa:bd:43:ed:eb:22:e8:e4:bf:34:79:a0:e4:32:2f:23:
e3:7a:93:65:57:f9:8d:50:e2:88:95:2e:1a:82:b3:b9:8d:c8:
47:44:0a:cf:22:25:cc:b2:ee:43:06:84:ed:8b:47:80:26:8f:
01:7a:72:15:1b:6c:3c:7b:9c:e8:85:39:44:73:52:66:04:73:
93:47:1f:f3:bf:ea:92:0d:14:8f:eb:b3:6b:40:d2:cf:91:08:
c2:8b:cb:58:83:39:ba:50:e9:45:36:36:a2:3f:db:88:67:99:
b8:6d:0f:4e:0e:ce:54:4f:39:f4:52:6b:bc:5b:53:98:b8:a0:
52:41:77:16:d9:fe:1e:1c:95:ac:ed:07:79:46:5f:fa:0a:7f:
9b:16:01:c4:29:da:80:a3:8b:c4:28:65:91:c9:b0:28:e0:3d:
34:6a:ea:3d:44:df:cb:f5:fb:d0:58:20:a5:75:b1:52:45:ea:
d8:8a:60:c2:b3:97:a7:58:c6:16:87:72:e1:0f:4d:6a:1c:33:
ce:ed:fe:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 28 20:28:29 2025 by rpki-client