This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.mft
File: g2Uo4VK23LoVcSQaxVvlvOARGLc.mft (raw, json)
Hash identifier: k72agHGsnHHdIQ5HBXxi8p2JgFJ2L4sPJPjMdhGFdBA=
Subject key identifier: 7B:C9:3C:A4:47:D2:71:D5:EA:A5:B0:22:D1:0D:6B:EF:44:53:3E:FB
Authority key identifier: 83:65:28:E1:52:B6:DC:BA:15:71:24:1A:C5:5B:E5:BC:E0:11:18:B7
Certificate issuer: /CN=836528e152b6dcba1571241ac55be5bce01118b7
Certificate serial: 019B2EFA60EB2F1BA1FE691AE74FF1E1E654
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2Uo4VK23LoVcSQaxVvlvOARGLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.mft
Manifest number: 1784
Signing time: Thu 18 Dec 2025 01:01:59 +0000
Manifest this update: Thu 18 Dec 2025 01:01:59 +0000
Manifest next update: Fri 19 Dec 2025 01:01:59 +0000
Files and hashes: 1: CvGHepAgyhQF29vgwO5RLU27Tig.roa (hash: MTqSAP2ijcRiLN3/AxskccxaBqUIlze/F2fZZstIpd0=)
2: LG2MEPQP4SA0RYNet0_i-TbLVOA.roa (hash: Q0AqpzK5pnfc1Ye6ZvO737eSRCPhdfmTWDd+EoGA7/k=)
3: g2Uo4VK23LoVcSQaxVvlvOARGLc.crl (hash: 8CqdiAjZjXFNMh+qyTt2r1mLq/hRq7abZ5rCw6Uf6ok=)
4: mM8VTopJZmHymxZODgrdAS9tCB0.roa (hash: xbQXqlIoaX+7utbFJ34rZdlVmArTuhCKQpdLZlu7I7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/g2Uo4VK23LoVcSQaxVvlvOARGLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Dec 2025 01:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:2e:fa:60:eb:2f:1b:a1:fe:69:1a:e7:4f:f1:e1:e6:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=836528e152b6dcba1571241ac55be5bce01118b7
Validity
Not Before: Dec 18 01:01:59 2025 GMT
Not After : Dec 19 01:01:59 2025 GMT
Subject: CN=7bc93ca447d271d5eaa5b022d10d6bef44533efb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:53:0a:ee:5b:1e:54:09:8e:ed:4a:d6:a7:7c:
c0:66:1a:35:59:53:f7:9b:d6:d7:6c:91:d6:7e:be:
25:13:21:14:43:13:38:f8:79:e6:ea:94:e3:9a:28:
ef:58:69:70:32:00:3a:87:17:3c:7e:18:df:a6:91:
9c:70:df:66:e0:51:07:56:c3:90:25:dc:48:24:f0:
83:b4:a2:39:1c:ee:5c:cd:c0:b8:b1:c4:20:94:a9:
ed:c8:e8:35:d3:92:45:4d:5d:93:8d:4e:27:d4:bf:
fa:20:c9:46:22:33:4f:66:2a:9a:2d:3f:da:f2:6f:
15:82:04:cb:8e:33:b8:6a:2a:fd:ce:dd:b9:56:24:
6a:f2:4b:e8:f4:71:31:80:a1:37:77:18:03:f4:4e:
aa:b3:f8:d6:01:f3:43:ef:37:38:d3:56:c1:7e:e5:
ba:73:87:a7:9d:65:a3:94:86:0f:e3:57:28:6c:81:
72:fc:52:8b:0a:67:f9:20:ee:0e:fe:74:48:75:5b:
99:5c:7a:d9:6b:9c:f4:b1:3f:20:9d:1a:12:21:b0:
62:12:59:1e:ee:a4:56:c7:d9:82:37:0c:cd:ab:24:
c8:68:d4:6d:10:46:c9:12:b4:6c:89:ea:f6:98:61:
c2:78:28:7e:27:9e:ae:b8:ae:8b:64:3c:b7:8a:d1:
b8:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:C9:3C:A4:47:D2:71:D5:EA:A5:B0:22:D1:0D:6B:EF:44:53:3E:FB
X509v3 Authority Key Identifier:
keyid:83:65:28:E1:52:B6:DC:BA:15:71:24:1A:C5:5B:E5:BC:E0:11:18:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2Uo4VK23LoVcSQaxVvlvOARGLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:ad:ff:51:bf:99:e9:17:2d:c3:8b:1b:08:71:15:5f:01:65:
52:52:cb:f4:0a:68:96:1d:10:e2:43:82:41:ce:b2:45:68:6f:
3a:24:dc:a4:1e:9f:81:55:cc:3d:90:8f:cd:8a:a5:c0:e9:42:
6d:c3:8f:00:37:5a:ec:42:01:ac:23:f0:c3:08:f6:07:64:f6:
46:c1:be:4b:2f:16:a4:fd:07:ff:5c:8d:05:57:74:91:09:df:
99:7f:bd:17:30:60:09:11:3d:60:9f:27:29:e6:df:25:53:c4:
18:84:4d:0b:fd:49:ab:2a:27:5c:3b:a0:f4:5e:f4:f0:b7:6b:
c4:91:d3:f8:20:52:60:82:3d:38:93:96:7d:a1:08:9c:17:52:
8e:67:d4:0b:f2:d7:36:92:26:0c:5a:85:25:83:c2:5c:5e:be:
70:a3:6d:eb:f7:65:42:95:7c:2c:01:47:76:69:ff:9c:ac:0b:
b4:74:e6:dc:fa:08:25:a3:40:2f:ef:c7:4b:32:65:5b:62:e5:
9d:8f:03:9d:6c:ba:3b:ae:89:b6:48:26:de:e3:53:e3:ae:9b:
8b:c2:1f:79:4a:6e:df:34:45:c0:e2:2a:9d:5d:dd:1e:3d:b1:
48:86:b5:6a:d1:01:c7:aa:56:da:88:26:15:fa:14:d9:f3:83:
8b:e6:e2:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsu+mDrLxuh/mka50/x4eZUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzNjUyOGUxNTJiNmRjYmExNTcxMjQxYWM1NWJlNWJjZTAx
MTE4YjcwHhcNMjUxMjE4MDEwMTU5WhcNMjUxMjE5MDEwMTU5WjAzMTEwLwYDVQQD
Eyg3YmM5M2NhNDQ3ZDI3MWQ1ZWFhNWIwMjJkMTBkNmJlZjQ0NTMzZWZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3lMK7lseVAmO7UrWp3zAZho1WVP3
m9bXbJHWfr4lEyEUQxM4+Hnm6pTjmijvWGlwMgA6hxc8fhjfppGccN9m4FEHVsOQ
JdxIJPCDtKI5HO5czcC4scQglKntyOg105JFTV2TjU4n1L/6IMlGIjNPZiqaLT/a
8m8VggTLjjO4air9zt25ViRq8kvo9HExgKE3dxgD9E6qs/jWAfND7zc401bBfuW6
c4ennWWjlIYP41cobIFy/FKLCmf5IO4O/nRIdVuZXHrZa5z0sT8gnRoSIbBiElke
7qRWx9mCNwzNqyTIaNRtEEbJErRsier2mGHCeCh+J56uuK6LZDy3itG4RQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHvJPKRH0nHV6qWwItENa+9EUz77MB8GA1UdIwQY
MBaAFINlKOFStty6FXEkGsVb5bzgERi3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzJVbzRWSzIzTG9WY1NRYXhWdmx2T0FSR0xjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC83YzcwZjQtNWYzYS00ZmQzLTg4M2Mt
ZWI5NDE1ZWM1NDhhLzEvZzJVbzRWSzIzTG9WY1NRYXhWdmx2T0FSR0xjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC83YzcwZjQtNWYzYS00ZmQzLTg4M2MtZWI5NDE1ZWM1NDhh
LzEvZzJVbzRWSzIzTG9WY1NRYXhWdmx2T0FSR0xjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfa3/Ub+Z
6Rctw4sbCHEVXwFlUlLL9Apolh0Q4kOCQc6yRWhvOiTcpB6fgVXMPZCPzYqlwOlC
bcOPADda7EIBrCPwwwj2B2T2RsG+Sy8WpP0H/1yNBVd0kQnfmX+9FzBgCRE9YJ8n
KebfJVPEGIRNC/1JqyonXDug9F708LdrxJHT+CBSYII9OJOWfaEInBdSjmfUC/LX
NpImDFqFJYPCXF6+cKNt6/dlQpV8LAFHdmn/nKwLtHTm3PoIJaNAL+/HSzJlW2Ll
nY8DnWy6O66Jtkgm3uNT466bi8IfeUpu3zRFwOIqnV3dHj2xSIa1atEBx6pW2ogm
FfoU2fODi+biRA==
-----END CERTIFICATE-----
Generated at Thu Dec 18 07:41:51 2025 by rpki-client