This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/V5mzJ91s2hrTe8HCJKRUsC3qKvw.mft
File: V5mzJ91s2hrTe8HCJKRUsC3qKvw.mft (raw, json)
Hash identifier: 3n5Ah78vx2pcHDTHJo7d/LSINIB8fo+/ZJa8nOzJ434=
Subject key identifier: CD:67:CC:FE:F0:E3:9F:33:B0:FC:B8:FA:88:C7:44:C7:0F:BB:7A:BF
Authority key identifier: 57:99:B3:27:DD:6C:DA:1A:D3:7B:C1:C2:24:A4:54:B0:2D:EA:2A:FC
Certificate issuer: /CN=5799b327dd6cda1ad37bc1c224a454b02dea2afc
Certificate serial: 019B5C76B42626121B22A84D6BF924CD0783
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V5mzJ91s2hrTe8HCJKRUsC3qKvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/V5mzJ91s2hrTe8HCJKRUsC3qKvw.mft
Manifest number: 15E1
Signing time: Fri 26 Dec 2025 21:00:41 +0000
Manifest this update: Fri 26 Dec 2025 21:00:41 +0000
Manifest next update: Sat 27 Dec 2025 21:00:41 +0000
Files and hashes: 1: TvA9yelIeCEsBOpJLkUsBtajKVo.roa (hash: LU0UMBgUcT/XT2r0CrVUUIqkTToEzuecRy7vAdwTq9c=)
2: V5mzJ91s2hrTe8HCJKRUsC3qKvw.crl (hash: D7Z8MnTuG1cNXs9Xr5SQAlB8WfOHYw4pUEnb25+8P04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/V5mzJ91s2hrTe8HCJKRUsC3qKvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/V5mzJ91s2hrTe8HCJKRUsC3qKvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/V5mzJ91s2hrTe8HCJKRUsC3qKvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Dec 2025 20:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:5c:76:b4:26:26:12:1b:22:a8:4d:6b:f9:24:cd:07:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5799b327dd6cda1ad37bc1c224a454b02dea2afc
Validity
Not Before: Dec 26 21:00:41 2025 GMT
Not After : Dec 27 21:00:41 2025 GMT
Subject: CN=cd67ccfef0e39f33b0fcb8fa88c744c70fbb7abf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fd:e1:9d:10:bc:09:42:f1:19:f8:de:8a:e6:
3c:34:25:f1:c9:b0:b9:da:43:a7:3a:c9:63:70:cc:
0e:68:1b:30:04:30:eb:8e:33:1e:24:1e:94:06:24:
ed:86:d5:82:01:45:42:f4:45:c1:06:fb:3c:e0:6e:
45:71:6d:7b:e9:49:ea:2f:d0:d2:1f:85:3f:b6:b6:
ca:b9:64:86:c4:9b:08:79:90:c2:e5:0f:fe:c9:79:
bf:58:77:5a:f2:93:9f:c1:4e:b5:c0:35:ac:98:ef:
25:42:76:ac:c4:ea:04:1e:15:15:62:5e:77:fd:53:
ad:cd:db:af:05:28:b3:9b:bd:8d:eb:d8:b4:de:2c:
7c:8d:ae:1e:75:36:18:bb:12:5c:64:21:ed:f9:72:
75:ea:97:70:db:cd:97:55:ff:3c:41:93:8e:77:f2:
62:a3:55:52:cd:e9:2f:56:c7:1e:9d:b1:3c:b1:22:
c7:50:99:78:0e:19:1f:f2:49:a3:62:87:4a:a4:2f:
6b:45:d8:33:42:c2:32:b7:77:41:fa:95:2f:b6:83:
c4:ad:ed:95:c9:cb:37:e9:4a:d7:cc:b2:ec:af:c5:
3a:f9:d8:5d:a4:51:15:fd:87:4a:f8:8b:81:d0:0a:
6e:13:ac:33:57:9e:e2:78:91:63:cb:0a:cd:88:39:
55:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:67:CC:FE:F0:E3:9F:33:B0:FC:B8:FA:88:C7:44:C7:0F:BB:7A:BF
X509v3 Authority Key Identifier:
keyid:57:99:B3:27:DD:6C:DA:1A:D3:7B:C1:C2:24:A4:54:B0:2D:EA:2A:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5mzJ91s2hrTe8HCJKRUsC3qKvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/V5mzJ91s2hrTe8HCJKRUsC3qKvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/V5mzJ91s2hrTe8HCJKRUsC3qKvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:71:a6:87:17:e2:16:b9:9c:7d:21:48:cc:16:f6:be:17:bf:
83:dd:86:13:53:76:aa:53:d2:10:eb:80:d2:45:ab:69:81:8e:
0c:29:2a:30:05:58:d8:c9:82:86:15:38:b8:85:4a:a4:c0:48:
cb:87:81:ee:a6:63:15:89:55:15:b8:7f:05:01:5c:3a:0b:6f:
e3:74:dd:05:e4:49:b8:d6:0b:0b:f8:b0:11:60:52:85:28:4f:
85:bf:51:e6:e2:9f:56:19:e5:e9:66:78:92:92:46:61:e8:51:
99:15:e1:37:7d:a2:c1:70:e8:0e:e4:5f:9b:1e:70:23:85:d5:
d2:20:1b:79:e0:54:25:db:58:cc:d1:fd:0e:dd:c6:f2:ae:51:
79:ca:60:61:c7:ff:22:92:c6:45:e7:0d:1d:ad:43:ed:ff:9c:
ee:6e:fe:84:ab:8d:86:24:f5:66:a3:55:1b:d3:5e:aa:57:d1:
e1:44:38:db:8f:b5:58:c7:f8:7e:50:26:b3:eb:18:79:26:85:
83:37:2e:e8:64:cf:c0:99:dd:57:fb:25:9d:ef:9a:8e:68:02:
f0:0f:b6:e1:c5:d8:b3:45:11:56:66:d1:a4:2a:de:15:ad:16:
2a:94:cc:83:ab:33:13:9c:af:54:1a:8c:e6:a2:68:b8:9f:94:
12:c1:08:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 02:16:28 2025 by rpki-client