This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft
File: bSDd05jayPYswSUmMl8YIftyT3U.mft (raw, json)
Hash identifier: 3eVLvjrR+//zeN6DijBjB+rG2UcDlIaawxu5kNajvDw=
Subject key identifier: 92:58:45:9A:41:51:41:08:45:27:DE:44:1C:68:71:38:E5:3D:54:5F
Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
Certificate issuer: /CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Certificate serial: 019AF23FB9332BEF7339DD185BEDDC14020A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft
Manifest number: 1666
Signing time: Sat 06 Dec 2025 06:00:53 +0000
Manifest this update: Sat 06 Dec 2025 06:00:53 +0000
Manifest next update: Sun 07 Dec 2025 06:00:53 +0000
Files and hashes: 1: 1-wNbXwWq_rcd31KdtUHBjHqlOYw.roa (hash: Vna41k3RUzjuu4Rno9oMx5pWO8RDhSOU/oHNJLNrfMg=)
2: 1cBjbhQO7ncLuCJPPP3ax-BP1rc.roa (hash: Jy5kekjzCQxDaa0ItIoXnMNYM41DXr2Kna+F8NZUTeI=)
3: 5eRHhosWaEn81OkNyusCZwVd7dE.roa (hash: ocfP0fS6gnrVeOxLsKmob4730X36T0aRDwqF+FQB7po=)
4: 7dOxBPA-NVqHM_R34TmdQX-eiVk.roa (hash: F50CnYYnm4HGmpVuvVtE+trmrhmEhsgxat1JiN/ij8U=)
5: 8hRBXjeqaNVqsRXwD3teVm2IptQ.roa (hash: 7trj/DN0w0nR+thBLV8DeXduqLYmWtu9yjYZdu4vyJw=)
6: Ff-r3-0iyLfe2eC4tftKl7r4ksA.roa (hash: XBCuFAzYlK+KS0b0qdNX4BGXCyC4kES1ua5iNmQkljo=)
7: Hd6EfoaV6nT3HCN6XaeOjid6KeE.roa (hash: jB+LwnmkqI7LD0NI0i2IOq5xZm+2j2nKXigXc5yngNg=)
8: I-d3mGhKAHlT8J9wAcisFqLqGFQ.roa (hash: +t66xrsaCPSb5WzTrykjh+nmEbajrQRTzYzj7itFceY=)
9: Kdr1IpxFOfOedDgEd0rr_-GJc6w.roa (hash: 4mvPk5YCIebKrrCqmTuHh7apgwePzT2ptGjzqSnMQ2k=)
10: RpFEf2i-KdvJWns5f60QFIiul8A.roa (hash: IhnLzk7nknFDNbFcmh5KMyW66l5exCsFA25jgANhkOU=)
11: S1WNVPH-yhQYVBlY1oxGoA4pYB8.roa (hash: /KwKr2NjkF6vHZXTNqR2GuVfyY5uthmni4bhiTmH1io=)
12: TKHVPCgKWgmlRhWEubfTc_2iNdo.roa (hash: kNRIFdkqpRBsn7JG22+KFQspfd2argAfeCH1zb4/CE4=)
13: V2uTQCIG7cpvASw3b1o6E1FEC9w.roa (hash: lSRRwHc5aUwf96o9oByRNWmxPAHRtbICzuXtltcIQaU=)
14: YC4l494MMi7jTGcWqfTEBZhM2VY.roa (hash: DmaVqTngLmKv88xcCzv/bh/3DcOXypOgid+RGqcY+/k=)
15: aIC6ROQmIBkJtMQV3BLilIyM4Jc.roa (hash: +ZDiWP7vx5S7AAhHLcn6ylil5bTpyx1nO3rHC5JU56A=)
16: bSDd05jayPYswSUmMl8YIftyT3U.crl (hash: C/aZap28Ykc8+Q5VkJLiXbJnLF0stAK0y/rYbttCKjQ=)
17: hmhsGXGseV2PwIXfLkkzy9brjH8.roa (hash: LD7+KdCf6+q+GHIUMNOAE/kbGPimpdSNwZOTxjTUsL4=)
18: iCZsI36d2-8-6a5AmuiDBban0Wk.roa (hash: EmGj3fjcpHlOiNERRV6BrRl723+1lvAThpgK7PMRptQ=)
19: mrPMPRRrlkwWoRTckPExVReGdzU.roa (hash: udQkxnQ/puhpRZBZD7aeBvy0qFXVY4xyBvq7R9flC08=)
20: o5T0k_44TSkIgUx_Ff4U-HFRZqU.roa (hash: IFaPUBy92F06F1cq2klHPE/ZCTKON9EkjF2KsBLKJXw=)
21: qSlaLn-7EYhvBs__DrzBebluApA.roa (hash: /m9RdlfwCPFmSdntKKJTP1sX7ETuhSL8wJhpD8u8EQU=)
22: rgzdAffmWWAVB7HsZPyDscdDfUs.roa (hash: PHFUtB9FTI42HYVNCn11UAKgdzJHvZkAvCdcalSeSVs=)
23: vyh_XE53itxxZ2DN3zJiSHad7oQ.roa (hash: BwwJTDqClirjAI8z/+dm20U+LpRGL9usTj1KRJXE4gs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f2:3f:b9:33:2b:ef:73:39:dd:18:5b:ed:dc:14:02:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Validity
Not Before: Dec 6 06:00:53 2025 GMT
Not After : Dec 7 06:00:53 2025 GMT
Subject: CN=9258459a415141084527de441c687138e53d545f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:90:51:e8:a9:fd:df:eb:a2:93:70:fe:47:7f:
0c:86:64:5e:da:18:7c:24:b8:10:87:2c:5a:6d:21:
2f:82:30:a4:33:a4:8c:2e:a5:8d:60:c1:ca:d5:24:
dd:18:57:b8:1a:ac:a7:6e:b5:ff:59:50:27:35:24:
db:42:68:8a:65:fe:69:d7:fc:0f:bc:ee:ac:e1:26:
4b:ed:a2:fa:a5:2d:5d:44:c4:60:72:90:cf:01:73:
b6:c1:bd:5a:40:31:f1:c1:05:22:7e:74:ee:c3:c3:
b6:36:88:f8:22:fc:0e:dd:9b:ac:33:d3:70:71:20:
ee:4a:ee:bd:84:2f:4a:e5:e9:1b:19:71:58:9e:6e:
c0:1f:50:50:22:7c:73:e6:5b:82:55:cc:12:ff:6d:
15:7c:71:eb:2f:ee:ce:7d:f3:47:73:41:3d:73:be:
6d:6e:8f:8d:17:36:2c:a4:9a:66:2a:74:f6:63:8b:
80:f4:09:d7:e1:05:59:25:0c:3c:94:2a:14:0c:e7:
e1:ec:3a:a4:99:a4:ea:a3:e5:28:d5:e5:70:0c:0b:
47:26:c4:5e:f2:ba:0a:c2:73:54:79:4b:3b:b0:b3:
90:51:db:59:71:fb:7e:41:68:cf:ad:61:f7:42:c6:
3f:0b:fd:77:de:97:9f:f7:66:61:ec:33:ce:5a:59:
19:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:58:45:9A:41:51:41:08:45:27:DE:44:1C:68:71:38:E5:3D:54:5F
X509v3 Authority Key Identifier:
keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:51:8d:6f:a2:de:d2:2d:9f:48:80:b8:78:98:bd:2e:10:66:
1d:3a:03:97:18:c9:f8:dd:80:11:c0:e3:9f:a4:ca:ac:98:64:
c2:5c:cc:0d:a9:06:4f:a0:a6:90:a2:8a:56:92:77:4c:dc:e1:
53:ca:f7:43:79:73:57:ab:2a:78:3f:e6:23:7e:69:ca:2d:4c:
ba:de:d8:2c:08:74:31:d8:3c:da:16:44:f2:77:f8:75:cb:59:
5d:0b:2b:63:f9:ed:03:7e:49:9f:85:34:ca:62:2e:5e:80:64:
9e:bd:f6:25:57:41:b3:13:92:71:7b:38:31:5e:66:34:e3:a7:
89:b0:aa:ec:a0:31:4e:8b:3e:0b:90:7b:6e:27:3d:6b:4e:04:
d4:87:dc:62:e6:c7:79:3a:7c:13:03:08:6b:65:d8:35:d1:87:
7f:bf:0f:0b:5c:c4:dc:0a:64:57:09:af:40:74:82:a7:ab:46:
72:e4:ef:2f:b9:fe:fe:1c:78:7b:9c:31:ab:99:55:02:d2:5c:
aa:10:ef:19:35:b8:db:ca:70:04:22:3a:1d:01:6d:62:30:15:
5c:4a:47:c7:d7:6b:d9:c5:e9:7f:b2:c9:4f:67:3a:85:cf:8c:
9a:d7:70:60:b0:7a:d4:57:39:92:e8:d1:12:ce:99:51:f9:52:
93:f0:4d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:43:59 2025 by rpki-client