This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.mft
File: mc5399kWUTuEkUhJlQ_kP1VpT9o.mft (raw, json)
Hash identifier: 05B7nPK5XEuxWusJ9Dud+vGcU79YHg6fdD+HfD3qf7Q=
Subject key identifier: 69:8C:15:F0:CE:22:DD:54:BC:E4:63:4B:37:1C:A0:BC:7A:4E:84:22
Authority key identifier: 99:CE:77:F7:D9:16:51:3B:84:91:48:49:95:0F:E4:3F:55:69:4F:DA
Certificate issuer: /CN=99ce77f7d916513b84914849950fe43f55694fda
Certificate serial: 019B7290CF8F733886FDA9572C31B05AC765
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mc5399kWUTuEkUhJlQ_kP1VpT9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.mft
Manifest number: 14A1
Signing time: Wed 31 Dec 2025 04:00:51 +0000
Manifest this update: Wed 31 Dec 2025 04:00:51 +0000
Manifest next update: Thu 01 Jan 2026 04:00:51 +0000
Files and hashes: 1: 04wvXQkxp_kIl5uRKr8ghukmhJI.roa (hash: GTtfMqk+jPWwguQx9YNOstJCSt+yXJTuSCt2I8sH22g=)
2: IxqqTicMk9q6G8gR9tJlENOjFRc.roa (hash: h/X3uGRGZNAQKipVXG0k+pt4jygDWjzWErh2sc4FvuM=)
3: MCU3b2xVwihTn4iMijHbh_JRyVI.roa (hash: f9gCgn5IGlkOz+OwQwChagJxpgUSziKJVT9IFUTeJPA=)
4: kPBy-28puZ8CFn-NDbUpDdz83-A.roa (hash: nQSxZr6dgfBylfZhJymFAU87J/QWTR7NQw9BEBikIEc=)
5: mc5399kWUTuEkUhJlQ_kP1VpT9o.crl (hash: 0Ja9U9rFYEsQWZToJXjIgtIknk5KGKDifsCntQUj/PU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/mc5399kWUTuEkUhJlQ_kP1VpT9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Jan 2026 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:72:90:cf:8f:73:38:86:fd:a9:57:2c:31:b0:5a:c7:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99ce77f7d916513b84914849950fe43f55694fda
Validity
Not Before: Dec 31 04:00:51 2025 GMT
Not After : Jan 1 04:00:51 2026 GMT
Subject: CN=698c15f0ce22dd54bce4634b371ca0bc7a4e8422
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fa:74:9f:89:e4:74:ad:4a:77:5d:f0:ef:e3:
60:ff:71:96:ba:74:b1:17:a8:ee:78:b2:1a:1e:09:
b5:8b:91:70:86:26:1d:95:fc:ba:39:30:2e:83:b0:
c2:be:02:28:4f:76:69:a7:ac:41:fb:75:c7:4c:47:
f8:ff:b4:09:b8:64:10:0c:40:fb:87:e0:98:b3:30:
38:cc:08:07:f7:1f:2b:8b:81:cd:7e:d5:85:7d:a3:
16:75:e5:bd:83:bf:0b:0e:22:14:3b:f9:32:12:34:
a4:f0:09:d1:62:e8:56:b1:3b:48:7d:a8:d7:49:c6:
c9:9f:0f:16:ed:2f:9c:4d:25:50:46:b5:9b:f1:be:
a2:1c:b9:2e:eb:de:a4:da:9e:ac:39:84:6f:31:70:
c2:f9:93:c4:ff:a3:c3:c8:49:82:c2:28:3d:56:d4:
1a:d2:b7:c5:eb:ea:d0:7e:9b:da:7a:d1:81:5c:1e:
a7:d0:53:42:c2:6e:56:22:8d:83:53:10:09:fa:a2:
64:69:71:b6:d8:f8:e8:56:b8:1e:6f:7c:1b:f5:e0:
0a:77:9a:e2:e0:2d:1e:8d:a8:0a:f7:cd:cc:39:6f:
83:01:6c:4e:0b:3a:fa:31:9a:a9:cc:3e:6a:89:be:
cb:50:b7:b2:e6:fe:85:5e:bc:8c:eb:a4:30:cc:37:
35:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:8C:15:F0:CE:22:DD:54:BC:E4:63:4B:37:1C:A0:BC:7A:4E:84:22
X509v3 Authority Key Identifier:
keyid:99:CE:77:F7:D9:16:51:3B:84:91:48:49:95:0F:E4:3F:55:69:4F:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mc5399kWUTuEkUhJlQ_kP1VpT9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:47:5f:cc:5e:7b:d9:72:4b:30:ee:1e:2e:26:0b:24:70:6f:
56:27:0a:44:42:c3:c4:aa:7b:fe:ef:9b:6f:8f:84:7c:fe:47:
5c:f3:57:d9:4e:7f:60:f0:46:93:f0:53:69:f1:52:f3:dc:35:
6b:f3:f2:18:0a:43:a0:86:00:5d:91:00:7a:61:56:cc:5e:d3:
6f:9e:45:55:2f:fb:5e:04:47:34:48:ae:d2:fe:ec:ba:d2:9e:
0c:1a:70:1e:d2:3e:5c:3d:21:20:cf:53:dd:cc:28:01:c5:22:
fd:19:a8:1c:8f:99:fb:a7:57:77:c7:82:1d:b1:3f:bf:ee:e1:
5b:bd:b4:84:6e:25:e2:c7:b3:cc:bf:37:40:08:05:a1:da:28:
c6:c5:8c:20:51:2c:c4:84:c7:8f:cd:7e:2d:f9:2a:8a:1b:cd:
59:2f:23:0a:54:ce:d0:be:45:71:61:84:ff:b6:60:68:58:2f:
2c:7c:d4:ed:12:4b:fc:aa:78:8e:d5:c3:6d:f8:34:28:6d:1f:
aa:a6:8d:03:ff:3a:ff:3b:b3:e3:a9:7f:6f:9f:19:b6:a0:38:
8b:af:39:5f:52:97:9e:38:28:69:d9:bf:7e:f3:61:a5:20:d3:
86:74:65:d2:64:8e:15:8f:d5:27:2b:41:4b:47:ac:06:92:02:
1d:1b:d5:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 09:36:41 2025 by rpki-client