This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.mft
File: 5WB28n4T0YAOd9FuS2CyO29YyCA.mft (raw, json)
Hash identifier: PEwGn4J04mUaycv/wOAq35x8s14xKked0qGjkqKbKGg=
Subject key identifier: 27:6C:E9:75:FB:BE:FD:BA:48:F4:37:D3:C0:54:F6:31:CC:1D:0D:E5
Authority key identifier: E5:60:76:F2:7E:13:D1:80:0E:77:D1:6E:4B:60:B2:3B:6F:58:C8:20
Certificate issuer: /CN=e56076f27e13d1800e77d16e4b60b23b6f58c820
Certificate serial: 019B375846B6F4FFFBD33AED316C24AD7C95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.mft
Manifest number: 10DD
Signing time: Fri 19 Dec 2025 16:01:30 +0000
Manifest this update: Fri 19 Dec 2025 16:01:30 +0000
Manifest next update: Sat 20 Dec 2025 16:01:30 +0000
Files and hashes: 1: 1-BGofSFZOno9pVnXMBI7UJeHJBg.roa (hash: LL/uaCHo6NuNRF9xktkjKIvVTGv3e4Z41mGfZiStgPc=)
2: 2ml5oRq-VyEb_mJG0C7Ahdjf8IY.roa (hash: ttehz4UlNMi9cbs/FPfy9Lw9uSsUlhxDo7xqWG0gtFA=)
3: 5WB28n4T0YAOd9FuS2CyO29YyCA.crl (hash: Lk5Yj9I6rwNbDi4kyyfEqu9/yA750JTYDXdMXnmE30Y=)
4: 6SdikSl1jU5cpmKfnZzRmSDOHuU.roa (hash: ppHMqODDNYRhgCo6OadvbiBfTSlanNIKDu29ewQ4fxE=)
5: AgBjgI35YWeABs8oCUWHz3K2zWw.roa (hash: 4E8DBT5sfAcPhRkXfwuGn/b4aAai3g0fbeGZYZUWlss=)
6: SQWlc0rZJj-IH4BVVpWf4gkYzTE.roa (hash: pKU0nvpLv8g9iORRQCN0Yo6/Mr7aoPJ/lOVaNu8h5Gk=)
7: Y9YksH2bUiHljz8P5EhHyhB5y9g.roa (hash: T5FIsRO2g9NTZMOXMSlY2kZF7GuiHFYTJEt+zSOsPvQ=)
8: fX0xQGF-aX1OUm6loSYzR_yxa3s.roa (hash: WE6TQcdbZv7KpM5MoM+ZhGHXdH152fsJ6v0eYqFpKnw=)
9: yn6_FC3ZDlreYvdUbTREjMhfyxs.roa (hash: LlX6Tl5H1KTqy6O3g5CWu69Bs/CP9zvonCRnk8+j/fs=)
10: zEHHIdG3vc4H4MQ18ECQEGpabUA.roa (hash: lqID/O1hFyq6iFk/ohsI5EgJyiARLpIUr7bXj4riy1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Dec 2025 16:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:37:58:46:b6:f4:ff:fb:d3:3a:ed:31:6c:24:ad:7c:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e56076f27e13d1800e77d16e4b60b23b6f58c820
Validity
Not Before: Dec 19 16:01:30 2025 GMT
Not After : Dec 20 16:01:30 2025 GMT
Subject: CN=276ce975fbbefdba48f437d3c054f631cc1d0de5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:63:4e:22:a9:44:4c:b3:c6:d4:24:ad:6d:b3:
43:25:d5:1c:b6:bc:a4:c7:47:b2:bd:73:c0:1c:9a:
8e:7d:2c:ea:e5:bc:3e:06:6a:6e:5a:2f:91:39:9e:
2e:75:40:42:1d:dc:2d:53:15:88:85:27:f1:38:c9:
49:e3:b4:b6:0c:a5:75:da:4e:5a:af:24:0f:de:d0:
1c:ba:93:07:f5:70:c1:40:f6:71:1b:20:b1:4b:3d:
99:7d:cb:3f:f8:83:34:3a:c7:84:f0:28:32:42:c4:
db:f1:7c:79:0a:76:42:6b:77:0c:8a:a4:5e:30:f5:
2f:18:bc:40:4b:97:c7:ae:42:55:15:79:9d:9b:b6:
3c:e9:97:b0:d6:2a:8b:c3:b8:c6:4d:0e:1e:be:4d:
38:60:6f:95:7b:85:97:af:ac:eb:2d:b5:3b:78:bc:
9f:3c:94:e6:35:af:7b:55:00:9a:5c:94:cd:80:d1:
0a:04:01:c4:fb:ba:f1:c7:ea:28:ca:26:2b:5b:2f:
a2:e8:59:25:01:73:62:60:b1:a4:5f:2e:91:02:8d:
6e:93:da:2d:22:a6:10:6b:17:0e:b0:16:2c:7b:de:
81:5c:dc:2e:17:cf:c6:18:b2:6e:08:cb:86:2f:46:
cc:11:91:c1:ed:17:e9:4e:20:f0:6a:3f:92:44:15:
4f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:6C:E9:75:FB:BE:FD:BA:48:F4:37:D3:C0:54:F6:31:CC:1D:0D:E5
X509v3 Authority Key Identifier:
keyid:E5:60:76:F2:7E:13:D1:80:0E:77:D1:6E:4B:60:B2:3B:6F:58:C8:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:5e:ba:61:bf:f5:15:37:0d:14:eb:3b:52:91:e4:8a:f1:18:
b6:3b:ed:f8:b1:60:2a:56:77:a4:b3:c5:f8:cc:41:c9:f7:0a:
4f:00:63:ea:2b:9a:10:9a:bc:56:05:c8:d9:60:4f:9b:ff:de:
8d:ab:46:66:e8:82:90:2d:a3:ff:36:66:62:14:ef:5b:b3:39:
36:ee:88:af:66:f9:e4:fe:4c:7a:6c:9a:4f:5c:78:0b:35:7a:
6a:2a:04:a4:c7:ba:bd:6f:e3:c9:2d:f5:7e:54:ac:7b:de:17:
93:9d:3d:b5:3f:83:ac:8e:43:38:75:80:87:be:32:50:b5:3c:
72:56:15:38:48:5b:3c:2a:ac:df:97:92:13:fd:77:aa:cf:b2:
92:84:12:9b:33:0c:23:48:76:5a:e4:58:d6:fe:1b:fe:d6:4b:
8b:30:a1:e2:69:69:18:35:f1:1e:01:7d:22:1d:cb:d3:9e:7c:
81:50:8f:ab:ed:7d:85:99:79:b3:e8:f6:08:72:6b:c5:6d:3b:
36:3b:a8:16:40:bc:f2:76:eb:01:2c:41:8f:59:c1:87:43:82:
bb:21:59:9b:09:17:fc:c9:4a:c6:c6:79:60:d7:94:00:a7:c2:
5b:e7:37:ba:4b:aa:e6:80:7f:aa:70:2c:ff:b4:97:64:31:e0:
bb:37:0f:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 01:15:56 2025 by rpki-client