This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft
File: S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft (raw, json)
Hash identifier: 8dG3e2J1/wL8aOyDS5Y+3If8dD5N7HGyNzu8RjLrwCs=
Subject key identifier: 4D:5C:4F:3D:E7:B2:C1:D4:30:64:D4:9D:72:A1:30:97:2D:F2:3B:63
Authority key identifier: 4B:98:12:79:43:E7:17:57:34:96:40:10:C8:9E:F8:21:41:6A:31:B3
Certificate issuer: /CN=4b98127943e7175734964010c89ef821416a31b3
Certificate serial: 019B5CE5176AC4B77537D60636DCE39219F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S5gSeUPnF1c0lkAQyJ74IUFqMbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft
Manifest number: 17A8
Signing time: Fri 26 Dec 2025 23:01:16 +0000
Manifest this update: Fri 26 Dec 2025 23:01:16 +0000
Manifest next update: Sat 27 Dec 2025 23:01:16 +0000
Files and hashes: 1: 7fLUpyKKPrBgGFQS34m8446XoSg.roa (hash: OTvk1iOGoxbyUJ3vxjQiy7VEf0n7PWAfE2T+vy9sMmc=)
2: QGXKuMyMj7np7BrXR-UiykLNelo.roa (hash: TouINLMwq+4tSpfvKTTYgiCKqK8iE1oP/BBT+AyGC04=)
3: S5gSeUPnF1c0lkAQyJ74IUFqMbM.crl (hash: Job5H/8CHO0TCjQdA11n1dTs9/ub2H5sUe4lk0RJKDE=)
4: hQq_Mzj6yvSFG9yKT5t3-faZTLc.roa (hash: BBc6f7cproUgj+FmpvLZwr/JuHZHEz2FSSvrDPt/yFI=)
5: pPYYG56VOORuxgT5M_ZuhSvmRfg.roa (hash: UBXy6znS5i9dvxzfkJnX+PZpKfrnJ0My4xHbPC9KdaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/S5gSeUPnF1c0lkAQyJ74IUFqMbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Dec 2025 23:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:5c:e5:17:6a:c4:b7:75:37:d6:06:36:dc:e3:92:19:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b98127943e7175734964010c89ef821416a31b3
Validity
Not Before: Dec 26 23:01:16 2025 GMT
Not After : Dec 27 23:01:16 2025 GMT
Subject: CN=4d5c4f3de7b2c1d43064d49d72a130972df23b63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:49:b7:32:be:0e:f2:b9:a4:ea:e8:71:ff:3b:
4e:88:d3:04:24:e3:06:b3:02:af:f4:10:fd:48:93:
7b:74:bd:20:78:6c:1e:53:b5:57:8f:d6:0e:78:7c:
6f:e0:4a:e1:fe:f7:04:2a:f0:a6:58:74:b0:8e:97:
09:33:5b:af:dc:44:a3:f8:27:8a:02:8c:21:64:3e:
dd:c2:fb:ed:a7:a4:2c:f6:e7:51:0d:d4:94:6b:7f:
40:7d:ce:85:87:c4:7f:9f:12:5f:08:d2:bd:35:d5:
91:77:d1:20:87:27:ff:d0:02:7a:4e:70:86:82:da:
e3:88:74:06:a7:c7:2e:27:fa:a1:80:30:dd:64:97:
e0:a2:be:9c:f9:ed:e8:09:c1:a7:72:77:b8:e2:f5:
8f:13:f7:dc:cd:93:68:31:9d:cf:d0:ea:1c:68:b4:
a3:22:73:d4:3e:e8:a5:d0:a4:c0:f9:fb:7c:d5:fe:
a1:8a:54:66:3e:e4:8c:c7:66:78:7a:87:5d:1b:5d:
9f:00:7f:e4:2c:14:3d:86:c8:5b:87:54:b3:3b:c5:
d5:93:92:3a:af:e9:41:f7:75:a6:ff:2f:c5:25:09:
8c:fa:f5:a7:11:7a:d9:ef:c1:ff:f5:ed:7a:51:b3:
4b:8b:12:29:3d:0a:df:dc:6c:2e:ae:bf:87:b4:6f:
46:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:5C:4F:3D:E7:B2:C1:D4:30:64:D4:9D:72:A1:30:97:2D:F2:3B:63
X509v3 Authority Key Identifier:
keyid:4B:98:12:79:43:E7:17:57:34:96:40:10:C8:9E:F8:21:41:6A:31:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5gSeUPnF1c0lkAQyJ74IUFqMbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:f5:bb:2d:82:e4:9a:dd:2f:f0:36:0a:68:85:8e:50:8f:f5:
ce:fb:99:a3:49:98:85:af:9e:3c:dc:a7:93:86:52:c5:8f:d5:
7f:68:64:0d:15:22:db:5c:9d:ec:23:da:d9:e0:8b:4e:4b:55:
57:5c:4b:77:47:e0:07:c1:82:ed:a7:b8:8c:ae:a6:01:c2:7b:
57:8d:01:8c:30:57:48:55:69:2b:76:5c:79:7e:3f:8c:d6:3e:
dc:2b:91:b3:ae:fd:7a:31:d3:6f:7a:27:1d:c2:04:40:30:14:
e7:8f:84:e9:6f:41:6e:6e:8d:15:40:51:db:7c:66:4b:cf:10:
6c:80:c4:67:fe:c5:ed:ac:ba:7d:91:69:2f:21:31:da:0f:ce:
47:83:3c:f9:65:6b:32:a7:ad:25:71:1f:56:34:f1:90:9a:94:
18:d9:8b:1b:f1:39:34:fe:15:c3:22:f3:03:37:51:0f:82:20:
32:69:bb:22:53:e3:54:dc:9c:23:2b:8e:cf:d8:55:61:3c:4d:
6a:3c:d6:c8:9b:46:97:c0:83:b5:06:c1:a9:6f:e9:e7:29:79:
57:fa:7f:a1:34:e4:f4:ea:d3:86:f7:7d:75:98:64:93:e3:4c:
59:ce:21:5d:5b:a6:cd:a8:01:dc:cc:87:67:6e:24:9e:7d:3e:
2d:ec:26:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 06:17:38 2025 by rpki-client