This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.mft
File: grE25oINlPA7HF1x7uPUsiGRUo8.mft (raw, json)
Hash identifier: TC+uiFmjgeLpIjaKcR65nhHmTwjbgSQfLGzHVN5LYyo=
Subject key identifier: 61:5E:DA:D0:71:CE:AB:CA:A2:31:1C:7D:2E:2F:7C:9E:ED:95:48:77
Authority key identifier: 82:B1:36:E6:82:0D:94:F0:3B:1C:5D:71:EE:E3:D4:B2:21:91:52:8F
Certificate issuer: /CN=82b136e6820d94f03b1c5d71eee3d4b22191528f
Certificate serial: 019AF20937B4A9E143F349B110BD7205D918
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/grE25oINlPA7HF1x7uPUsiGRUo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.mft
Manifest number: 1308
Signing time: Sat 06 Dec 2025 05:01:21 +0000
Manifest this update: Sat 06 Dec 2025 05:01:21 +0000
Manifest next update: Sun 07 Dec 2025 05:01:21 +0000
Files and hashes: 1: PXiVKqc-gzBW0DpV9A_yfa7v6KE.roa (hash: L22rZjAObHC63x5DS7bDRlGFpJbFt5MxhJzGQ+tq5BE=)
2: grE25oINlPA7HF1x7uPUsiGRUo8.crl (hash: UiIEMjddcaqr/1Udj17FJNIdpRYkrDF2TKTyT7O5rI8=)
3: xFHz4_XjwzN0pPKWaqRmrbsppf4.roa (hash: RMJsZt2RIHwd0V36eKXMJsELKCwZUihxIvWX1Ne3Nog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/grE25oINlPA7HF1x7uPUsiGRUo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f2:09:37:b4:a9:e1:43:f3:49:b1:10:bd:72:05:d9:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82b136e6820d94f03b1c5d71eee3d4b22191528f
Validity
Not Before: Dec 6 05:01:21 2025 GMT
Not After : Dec 7 05:01:21 2025 GMT
Subject: CN=615edad071ceabcaa2311c7d2e2f7c9eed954877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1b:0b:c9:69:17:1c:26:29:4a:dd:e9:c5:93:
8f:24:a4:5c:0b:4e:2c:22:20:77:e9:d4:4b:8a:28:
11:e3:4e:cd:aa:c7:d5:ac:f1:85:17:52:f4:7f:51:
bc:9b:e0:78:a3:3a:ca:36:2a:29:6a:b8:79:d1:5e:
36:47:91:a9:8a:79:3e:da:5e:e5:09:5e:8a:2a:bd:
f3:f1:7d:a9:23:c3:00:2b:fc:85:ee:e9:14:b3:a2:
94:73:5b:ef:61:70:6b:6d:b9:93:25:ae:fc:6d:1d:
d3:04:03:61:62:65:14:e2:b2:dc:35:d2:72:b2:05:
91:f9:da:93:1c:e9:ee:f4:6f:23:bf:df:41:e8:c5:
e6:73:ea:d4:28:e3:de:16:a5:c6:76:fa:55:9c:4d:
1b:48:e7:1d:19:d4:8a:15:94:e8:5e:ed:e5:50:ae:
6e:63:19:80:9b:0d:a7:2b:f2:86:59:12:51:e0:4a:
26:f8:67:c6:87:8b:06:70:67:10:f8:9b:b0:b7:70:
c1:bf:60:03:cd:21:45:0b:8d:48:f8:55:96:27:2b:
ab:a2:a0:42:b3:b3:43:a4:77:e1:48:6d:c6:5b:d7:
e6:fe:9b:4b:30:1b:31:47:d8:2b:a5:ea:a1:74:6f:
df:4e:d7:72:0d:39:71:ad:3c:d0:4c:45:62:28:38:
ca:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:5E:DA:D0:71:CE:AB:CA:A2:31:1C:7D:2E:2F:7C:9E:ED:95:48:77
X509v3 Authority Key Identifier:
keyid:82:B1:36:E6:82:0D:94:F0:3B:1C:5D:71:EE:E3:D4:B2:21:91:52:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grE25oINlPA7HF1x7uPUsiGRUo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:63:11:91:6b:28:ed:92:fa:3f:e7:4e:84:a0:cd:67:eb:ba:
3d:3c:be:6d:e5:fb:19:80:e0:d9:e5:d3:90:c3:4f:f7:db:16:
f8:bd:a7:78:0e:5f:cd:27:84:26:a3:82:c7:53:b4:d0:20:29:
b1:3f:4f:db:a0:ac:88:48:9d:8e:45:ae:6d:e2:e2:8a:e1:6d:
83:77:cf:d5:9b:60:ed:14:a2:f3:68:39:a1:46:e2:95:05:ed:
f5:b1:e4:0e:b9:65:c8:8f:c7:c5:a5:43:f5:73:e6:a4:26:b0:
df:ba:0d:b9:f3:98:60:90:3b:78:19:35:3d:3d:b5:3f:29:81:
62:6b:2a:04:95:da:6b:1a:91:b2:30:1c:51:86:e4:c6:c9:38:
37:2f:8f:86:3f:a7:15:ca:29:17:98:3d:74:c2:58:2b:e5:45:
f5:4d:e2:af:d7:ae:15:88:81:79:41:8d:f5:f3:1a:0c:22:8b:
64:b7:6f:d4:ab:38:79:7a:61:30:53:6d:db:1c:e6:ff:b0:60:
75:bb:5c:b4:d1:57:94:e2:b9:6e:ac:a3:bd:82:a1:3f:6a:50:
01:79:09:b2:a3:80:00:cf:22:03:ee:40:30:59:11:18:1b:2c:
d2:31:6a:e6:0b:9f:65:40:b0:a4:80:1f:df:cf:23:26:a3:2e:
80:04:f8:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZryCTe0qeFD80mxEL1yBdkYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyYjEzNmU2ODIwZDk0ZjAzYjFjNWQ3MWVlZTNkNGIyMjE5
MTUyOGYwHhcNMjUxMjA2MDUwMTIxWhcNMjUxMjA3MDUwMTIxWjAzMTEwLwYDVQQD
Eyg2MTVlZGFkMDcxY2VhYmNhYTIzMTFjN2QyZTJmN2M5ZWVkOTU0ODc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBsLyWkXHCYpSt3pxZOPJKRcC04s
IiB36dRLiigR407NqsfVrPGFF1L0f1G8m+B4ozrKNioparh50V42R5Gpink+2l7l
CV6KKr3z8X2pI8MAK/yF7ukUs6KUc1vvYXBrbbmTJa78bR3TBANhYmUU4rLcNdJy
sgWR+dqTHOnu9G8jv99B6MXmc+rUKOPeFqXGdvpVnE0bSOcdGdSKFZToXu3lUK5u
YxmAmw2nK/KGWRJR4Eom+GfGh4sGcGcQ+Juwt3DBv2ADzSFFC41I+FWWJyuroqBC
s7NDpHfhSG3GW9fm/ptLMBsxR9grpeqhdG/fTtdyDTlxrTzQTEViKDjKfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGFe2tBxzqvKojEcfS4vfJ7tlUh3MB8GA1UdIwQY
MBaAFIKxNuaCDZTwOxxdce7j1LIhkVKPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3JFMjVvSU5sUEE3SEYxeDd1UFVzaUdSVW84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi8yMjExMmUtNGUxMy00M2QwLTllYjEt
MGRhM2NhYTkxNDI5LzEvZ3JFMjVvSU5sUEE3SEYxeDd1UFVzaUdSVW84Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi8yMjExMmUtNGUxMy00M2QwLTllYjEtMGRhM2NhYTkxNDI5
LzEvZ3JFMjVvSU5sUEE3SEYxeDd1UFVzaUdSVW84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABmMRkWso
7ZL6P+dOhKDNZ+u6PTy+beX7GYDg2eXTkMNP99sW+L2neA5fzSeEJqOCx1O00CAp
sT9P26CsiEidjkWubeLiiuFtg3fP1Ztg7RSi82g5oUbilQXt9bHkDrllyI/HxaVD
9XPmpCaw37oNufOYYJA7eBk1PT21PymBYmsqBJXaaxqRsjAcUYbkxsk4Ny+Phj+n
FcopF5g9dMJYK+VF9U3ir9euFYiBeUGN9fMaDCKLZLdv1Ks4eXphMFNt2xzm/7Bg
dbtctNFXlOK5bqyjvYKhP2pQAXkJsqOAAM8iA+5AMFkRGBss0jFq5gufZUCwpIAf
388jJqMugAT4YA==
-----END CERTIFICATE-----
Generated at Sat Dec 6 07:24:44 2025 by rpki-client