This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/1887fa-43cc-4499-ab74-e28832323f6d/1/F2clVphEFbeOnRVGF4TIxOaR0BA.mft
File: F2clVphEFbeOnRVGF4TIxOaR0BA.mft (raw, json)
Hash identifier: DLpg5jBAp3phwDTln1mrwH2MDxFWVLTvdFY3UWG1/vA=
Subject key identifier: BF:8E:D3:3E:06:88:B4:17:6B:BC:B2:CA:E9:E9:D5:9A:4D:76:D3:17
Authority key identifier: 17:67:25:56:98:44:15:B7:8E:9D:15:46:17:84:C8:C4:E6:91:D0:10
Certificate issuer: /CN=17672556984415b78e9d15461784c8c4e691d010
Certificate serial: 019AF3F735EEAE93B19D6FC707BF935FCA79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F2clVphEFbeOnRVGF4TIxOaR0BA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/1887fa-43cc-4499-ab74-e28832323f6d/1/F2clVphEFbeOnRVGF4TIxOaR0BA.mft
Manifest number: 15FA
Signing time: Sat 06 Dec 2025 14:00:55 +0000
Manifest this update: Sat 06 Dec 2025 14:00:55 +0000
Manifest next update: Sun 07 Dec 2025 14:00:55 +0000
Files and hashes: 1: F2clVphEFbeOnRVGF4TIxOaR0BA.crl (hash: 8r5WIoolnSqHV3Pc1Q0jvJ2XlwMfeqZ41M/WaJBIfBM=)
2: uO9dPxlx5kbryFMIrW1wZfHfrqc.roa (hash: NrkTIYE8RmX0UUZREQe1a/gFtR2Be/h3baezRNBfbZg=)
3: vMfYAVSQ4CaJ9hqOmmUhZmVM_Xc.roa (hash: HKXHwGN9LbH+lPLcsRDtqfOhE6nZDez5q/T7yrcmTHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/1887fa-43cc-4499-ab74-e28832323f6d/1/F2clVphEFbeOnRVGF4TIxOaR0BA.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/1887fa-43cc-4499-ab74-e28832323f6d/1/F2clVphEFbeOnRVGF4TIxOaR0BA.mft
rsync://rpki.ripe.net/repository/DEFAULT/F2clVphEFbeOnRVGF4TIxOaR0BA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 13:09:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f3:f7:35:ee:ae:93:b1:9d:6f:c7:07:bf:93:5f:ca:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17672556984415b78e9d15461784c8c4e691d010
Validity
Not Before: Dec 6 14:00:55 2025 GMT
Not After : Dec 7 14:00:55 2025 GMT
Subject: CN=bf8ed33e0688b4176bbcb2cae9e9d59a4d76d317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a9:b7:1e:66:fa:9d:f7:bd:08:4d:64:ab:7c:
ff:75:21:6b:17:cc:02:35:2f:a1:2e:6c:d1:6c:9f:
23:48:9d:e7:13:b8:a3:70:98:f4:8d:e3:dc:26:cb:
3e:05:87:ee:0c:1a:21:81:cf:3e:81:ce:d6:7f:a5:
cb:fe:18:73:34:45:ed:c2:4d:ec:c9:72:56:d2:34:
04:ad:b2:f6:60:d0:cd:d4:8e:2d:9e:6b:fe:ff:ce:
d9:ff:c9:ff:71:f7:d6:4c:84:dc:03:10:a6:67:f3:
66:40:43:d0:ad:e3:d4:72:00:8f:c1:97:ab:a8:9f:
94:76:ee:64:51:3a:63:fe:77:f2:47:7d:2d:84:ff:
5f:35:ae:f2:11:61:08:0a:49:01:7f:66:cd:3d:25:
e6:cd:bb:21:0a:7a:c2:04:28:8f:e7:a2:a5:b4:43:
76:7c:b0:55:b1:5d:10:a9:89:fd:74:fa:1a:1b:99:
11:1d:63:0c:32:d7:11:d0:2a:85:68:29:d7:2f:c8:
c7:c3:eb:a3:1d:35:6d:f6:06:f6:89:57:96:3f:33:
22:0c:2d:66:df:5d:17:52:52:b5:d6:77:12:a3:35:
82:3c:76:3a:6a:e4:f5:e8:96:08:03:2f:ca:dc:62:
ae:b9:b9:96:bf:13:2a:e9:80:47:87:8d:44:e0:61:
8a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:8E:D3:3E:06:88:B4:17:6B:BC:B2:CA:E9:E9:D5:9A:4D:76:D3:17
X509v3 Authority Key Identifier:
keyid:17:67:25:56:98:44:15:B7:8E:9D:15:46:17:84:C8:C4:E6:91:D0:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F2clVphEFbeOnRVGF4TIxOaR0BA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/1887fa-43cc-4499-ab74-e28832323f6d/1/F2clVphEFbeOnRVGF4TIxOaR0BA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/1887fa-43cc-4499-ab74-e28832323f6d/1/F2clVphEFbeOnRVGF4TIxOaR0BA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:55:35:93:96:8e:de:54:90:3e:d5:5e:38:83:1d:38:8e:29:
0d:2a:67:ca:f4:3b:d2:6d:aa:d4:d6:26:ec:4e:55:18:b5:75:
0f:79:2b:d1:f7:6c:a5:fc:b1:bd:0d:06:b9:9a:98:e7:ba:1c:
6c:91:28:2f:a3:6a:8f:d3:30:ab:38:4f:40:5b:f1:d8:03:79:
7a:59:83:a3:a9:62:47:0b:f9:b9:8f:84:f3:e3:3f:4e:99:52:
99:73:4c:6b:78:c9:27:61:bb:f5:22:81:9b:3b:f2:aa:e3:88:
be:2a:5e:c3:68:0c:ba:8a:72:81:52:03:d3:7a:c5:69:8c:a5:
86:f3:99:3d:11:bf:3f:84:6c:bb:bb:c8:b7:53:d9:d6:6e:f3:
7a:d9:bb:4a:18:f4:df:a3:48:0e:6e:41:1f:6c:50:db:02:ac:
5d:29:62:fa:25:6c:82:ec:e0:75:64:0b:34:a8:c7:ab:89:ed:
7e:ce:cc:48:39:86:b0:45:15:ca:ae:22:bb:41:7d:2a:ed:9e:
b8:e9:96:28:37:c4:7c:e9:34:b8:72:57:51:3a:e1:2b:58:21:
5a:4e:37:13:bf:2a:37:05:43:26:19:34:b2:d6:d2:00:83:96:
ad:f6:ad:14:a5:49:9c:04:36:53:23:cd:34:41:0c:8a:57:73:
78:7a:b8:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrz9zXurpOxnW/HB7+TX8p5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3NjcyNTU2OTg0NDE1Yjc4ZTlkMTU0NjE3ODRjOGM0ZTY5
MWQwMTAwHhcNMjUxMjA2MTQwMDU1WhcNMjUxMjA3MTQwMDU1WjAzMTEwLwYDVQQD
EyhiZjhlZDMzZTA2ODhiNDE3NmJiY2IyY2FlOWU5ZDU5YTRkNzZkMzE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKm3Hmb6nfe9CE1kq3z/dSFrF8wC
NS+hLmzRbJ8jSJ3nE7ijcJj0jePcJss+BYfuDBohgc8+gc7Wf6XL/hhzNEXtwk3s
yXJW0jQErbL2YNDN1I4tnmv+/87Z/8n/cffWTITcAxCmZ/NmQEPQrePUcgCPwZer
qJ+Udu5kUTpj/nfyR30thP9fNa7yEWEICkkBf2bNPSXmzbshCnrCBCiP56KltEN2
fLBVsV0QqYn9dPoaG5kRHWMMMtcR0CqFaCnXL8jHw+ujHTVt9gb2iVeWPzMiDC1m
310XUlK11ncSozWCPHY6auT16JYIAy/K3GKuubmWvxMq6YBHh41E4GGKyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL+O0z4GiLQXa7yyyunp1ZpNdtMXMB8GA1UdIwQY
MBaAFBdnJVaYRBW3jp0VRheEyMTmkdAQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjJjbFZwaEVGYmVPblJWR0Y0VEl4T2FSMEJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC8xODg3ZmEtNDNjYy00NDk5LWFiNzQt
ZTI4ODMyMzIzZjZkLzEvRjJjbFZwaEVGYmVPblJWR0Y0VEl4T2FSMEJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC8xODg3ZmEtNDNjYy00NDk5LWFiNzQtZTI4ODMyMzIzZjZk
LzEvRjJjbFZwaEVGYmVPblJWR0Y0VEl4T2FSMEJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhFU1k5aO
3lSQPtVeOIMdOI4pDSpnyvQ70m2q1NYm7E5VGLV1D3kr0fdspfyxvQ0GuZqY57oc
bJEoL6Nqj9MwqzhPQFvx2AN5elmDo6liRwv5uY+E8+M/TplSmXNMa3jJJ2G79SKB
mzvyquOIvipew2gMuopygVID03rFaYylhvOZPRG/P4Rsu7vIt1PZ1m7zetm7Shj0
36NIDm5BH2xQ2wKsXSli+iVsguzgdWQLNKjHq4ntfs7MSDmGsEUVyq4iu0F9Ku2e
uOmWKDfEfOk0uHJXUTrhK1ghWk43E78qNwVDJhk0stbSAIOWrfatFKVJnAQ2UyPN
NEEMildzeHq48Q==
-----END CERTIFICATE-----
Generated at Sat Dec 6 22:52:42 2025 by rpki-client