This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/6cba1a-5f4d-4308-bf46-eb37a85a82c5/1/MYKMmdNcuS4tU9rxKOSX6EG2OrA.mft
File: MYKMmdNcuS4tU9rxKOSX6EG2OrA.mft (raw, json)
Hash identifier: DzXtDaUKpj83KzRqcK07MUJiUKo5Wxkf/aXe9fDHJjo=
Subject key identifier: 5B:AC:E9:87:09:E4:7E:83:E5:80:9B:01:11:84:80:BA:9B:F1:B3:D6
Authority key identifier: 31:82:8C:99:D3:5C:B9:2E:2D:53:DA:F1:28:E4:97:E8:41:B6:3A:B0
Certificate issuer: /CN=31828c99d35cb92e2d53daf128e497e841b63ab0
Certificate serial: 019B3B6BD2E7209C0AC11387EC3A1E108396
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYKMmdNcuS4tU9rxKOSX6EG2OrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/6cba1a-5f4d-4308-bf46-eb37a85a82c5/1/MYKMmdNcuS4tU9rxKOSX6EG2OrA.mft
Manifest number: 0E2B
Signing time: Sat 20 Dec 2025 11:01:20 +0000
Manifest this update: Sat 20 Dec 2025 11:01:20 +0000
Manifest next update: Sun 21 Dec 2025 11:01:20 +0000
Files and hashes: 1: 8epfI_mMakP3Lc2UTESKvosKkSQ.roa (hash: TdgdgIhwNAm+SCbAnoUIw15ZVzHOK/dqP386QKWeMpw=)
2: MYKMmdNcuS4tU9rxKOSX6EG2OrA.crl (hash: bFSqFFpfI7hfwcRpMW7XiJRqJkrr4ODM3CqeogA9TXw=)
3: QGmT3Sq2OPr697a4jgYrgI5vyvo.roa (hash: cuVDNdIzZEyCh+DXAd1wDhu2rpRcNesepLeBXruUFrc=)
4: wrK5q_yhp6CSYsOOeb2tBzjXlME.roa (hash: GpJJNVkvPjxKFXFwN00ofjrbHt5+9rV8i+MDqv4Rs8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/6cba1a-5f4d-4308-bf46-eb37a85a82c5/1/MYKMmdNcuS4tU9rxKOSX6EG2OrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/6cba1a-5f4d-4308-bf46-eb37a85a82c5/1/MYKMmdNcuS4tU9rxKOSX6EG2OrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYKMmdNcuS4tU9rxKOSX6EG2OrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 10:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:3b:6b:d2:e7:20:9c:0a:c1:13:87:ec:3a:1e:10:83:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31828c99d35cb92e2d53daf128e497e841b63ab0
Validity
Not Before: Dec 20 11:01:20 2025 GMT
Not After : Dec 21 11:01:20 2025 GMT
Subject: CN=5bace98709e47e83e5809b01118480ba9bf1b3d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:97:53:21:86:4d:22:e3:6d:77:f0:ed:a5:de:
83:74:ad:4f:e3:a0:d2:51:d1:b3:93:2b:91:b0:78:
b7:d3:6d:9c:27:24:19:4a:89:98:53:70:c4:1a:60:
3c:f5:71:3b:66:6f:75:62:3e:8e:bf:56:9b:ff:61:
4b:4e:a5:ad:12:b6:2b:f6:04:4f:48:d2:f7:ea:0f:
d3:f4:5c:ef:e4:34:50:d4:67:58:5f:9b:fb:c2:7d:
c3:6c:94:cc:de:42:bb:02:84:dc:a6:93:1e:94:51:
f1:bc:2a:f1:54:62:5d:da:87:69:58:33:4f:0f:21:
df:3a:43:21:07:e1:e4:a7:31:72:21:15:bb:0a:b0:
da:a4:9b:91:d8:f6:3a:c9:7d:47:0d:e0:69:50:32:
72:e5:ca:20:6c:8a:37:e6:3c:fd:1c:e0:e2:c5:cb:
cf:1c:ef:35:a2:57:26:43:1d:e8:32:9b:27:2f:1b:
9f:8e:54:79:8c:64:cc:d4:5c:ac:11:33:b8:03:9e:
74:8f:8a:98:9f:35:f6:5e:61:7a:02:0d:55:6b:fe:
02:15:fa:f2:96:bc:26:b1:88:aa:87:96:c1:f9:8e:
bd:12:a9:58:5a:d1:e3:67:b1:c8:68:9e:02:3d:f3:
d3:03:bf:d7:5d:be:0c:f7:9d:7d:b5:ff:05:72:81:
34:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:AC:E9:87:09:E4:7E:83:E5:80:9B:01:11:84:80:BA:9B:F1:B3:D6
X509v3 Authority Key Identifier:
keyid:31:82:8C:99:D3:5C:B9:2E:2D:53:DA:F1:28:E4:97:E8:41:B6:3A:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYKMmdNcuS4tU9rxKOSX6EG2OrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6cba1a-5f4d-4308-bf46-eb37a85a82c5/1/MYKMmdNcuS4tU9rxKOSX6EG2OrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6cba1a-5f4d-4308-bf46-eb37a85a82c5/1/MYKMmdNcuS4tU9rxKOSX6EG2OrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:d9:a0:17:ba:7d:9a:fd:6f:1a:ac:4a:fd:3b:96:67:81:6e:
b4:f4:8a:04:08:61:be:a9:13:fe:76:52:8a:1f:d1:87:c7:fb:
b2:70:40:9d:87:b9:d0:16:b9:34:7e:1d:dc:45:90:f9:e3:23:
b9:d3:11:95:76:73:21:07:d3:be:09:3c:20:ba:4e:26:66:da:
33:15:71:9b:42:2d:a7:1b:9c:0d:cd:c5:f8:0d:39:95:5b:d9:
f4:ba:89:76:9e:16:4a:0d:a9:3b:d0:29:ff:82:82:8c:1d:92:
97:35:e6:2e:72:7d:d7:d3:1a:be:37:06:0e:c0:72:7d:bc:46:
3f:04:a4:8b:f2:91:12:9e:15:c7:17:f2:41:22:3a:93:fd:6d:
d5:4d:81:ce:fb:10:b0:cf:b8:22:64:5c:2b:ce:03:4a:c3:ed:
ba:d9:61:0c:f1:b6:94:35:71:10:b4:6c:af:96:65:20:d8:a1:
ce:6a:12:f6:ce:dc:30:81:74:da:4f:54:5a:ee:4d:9f:8a:0c:
5a:54:2d:6e:17:a5:e3:0f:7b:45:d3:84:9c:67:39:4a:d1:27:
e8:04:58:a4:b4:6e:db:e3:4e:ab:ba:3a:72:80:79:27:ae:4d:
60:b6:47:9c:34:e2:f2:91:7a:16:77:e0:0d:7a:88:95:0d:6b:
db:bb:06:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 18:08:33 2025 by rpki-client