This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.mft
File: cFngOgjhdBb2ZUYweYg0mZG4Si4.mft (raw, json)
Hash identifier: QjdJXP2d50i/00V3fP8LQH+RZd1yKNeRBaDXxVRT0c4=
Subject key identifier: 53:53:8C:E9:75:76:0E:66:BE:EB:67:3F:B2:08:18:DD:49:91:F7:40
Authority key identifier: 70:59:E0:3A:08:E1:74:16:F6:65:46:30:79:88:34:99:91:B8:4A:2E
Certificate issuer: /CN=7059e03a08e17416f66546307988349991b84a2e
Certificate serial: 019AF1648C267CEE46824DA95AD3B0EAAD0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFngOgjhdBb2ZUYweYg0mZG4Si4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.mft
Manifest number: 1762
Signing time: Sat 06 Dec 2025 02:01:29 +0000
Manifest this update: Sat 06 Dec 2025 02:01:29 +0000
Manifest next update: Sun 07 Dec 2025 02:01:29 +0000
Files and hashes: 1: _he88goyBeeMgMEtYhNW51-yKRw.roa (hash: bVhU/YoxDPNh8/p9ZgLTw8sJFTf7HVdMt0ALSYqAQ2c=)
2: cFngOgjhdBb2ZUYweYg0mZG4Si4.crl (hash: b8m4gQvlooJCaRPVnyw3VgZabJBRUd/dEE0wN2niEOU=)
3: sUWqfK8lQ00leYnkVH10Ne2J_pg.roa (hash: /8L8fVSDnCy6dVHFrdbjnwTMBA89vKnVyPdJKfPn3Kk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cFngOgjhdBb2ZUYweYg0mZG4Si4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:64:8c:26:7c:ee:46:82:4d:a9:5a:d3:b0:ea:ad:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7059e03a08e17416f66546307988349991b84a2e
Validity
Not Before: Dec 6 02:01:29 2025 GMT
Not After : Dec 7 02:01:29 2025 GMT
Subject: CN=53538ce975760e66beeb673fb20818dd4991f740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:89:c0:9e:fd:77:ce:12:c1:f6:8a:1a:42:20:
a1:b1:84:f7:2f:f8:2f:62:eb:63:02:fa:da:90:05:
46:1e:f7:2b:b8:cc:69:e7:d7:1f:2b:4b:ec:e2:47:
b7:3f:98:13:c7:d5:33:b2:1d:1a:10:1f:93:fa:86:
03:e0:60:c0:0a:3c:21:06:08:3a:9f:85:fa:7b:39:
51:80:bc:7d:d0:6d:cf:28:93:4b:48:bf:c8:2e:85:
c3:e6:e4:96:14:7e:76:5d:b3:7b:aa:02:d1:80:79:
90:5e:03:8d:60:32:6f:51:07:91:82:4e:a1:d1:9c:
04:92:ff:e5:6e:fd:99:ea:e0:17:a8:08:9a:e1:97:
cf:5b:25:96:5a:d0:f0:03:7d:45:e4:4b:d0:cc:53:
26:19:1a:0e:a0:d3:2c:f7:13:5b:c6:79:2f:68:70:
c1:4c:63:32:b9:e0:33:0a:bf:87:c3:32:7c:16:ce:
f9:50:d3:c1:eb:37:55:30:4a:d2:6c:4e:5f:1f:4a:
7c:3c:fe:ee:2d:16:2b:f8:b7:2e:2c:ac:e2:52:02:
59:4b:fc:8a:0b:b0:53:80:c7:c9:92:93:f5:a7:99:
a3:03:09:ea:e1:99:4d:b5:14:54:a0:cd:91:9e:b9:
63:ec:2e:3a:93:38:44:68:69:2e:cc:43:36:7a:9c:
b6:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:53:8C:E9:75:76:0E:66:BE:EB:67:3F:B2:08:18:DD:49:91:F7:40
X509v3 Authority Key Identifier:
keyid:70:59:E0:3A:08:E1:74:16:F6:65:46:30:79:88:34:99:91:B8:4A:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFngOgjhdBb2ZUYweYg0mZG4Si4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:4b:64:dd:81:07:77:dd:80:ee:13:d1:4b:64:d9:72:d9:e6:
b8:28:f0:45:d3:e6:a6:ed:96:32:11:8f:22:4e:6b:39:d3:b4:
58:67:47:a7:b1:d4:11:21:40:8d:13:27:a0:23:23:6a:81:50:
9d:35:c6:b3:da:06:90:d1:bc:99:05:0d:7c:bf:c2:8f:5f:e1:
3b:b8:e5:5f:73:52:4b:30:0f:63:15:76:ac:17:23:db:e7:5e:
ef:2a:a0:b1:46:4a:43:e9:c8:a4:4f:a2:d4:d4:80:b3:02:a0:
61:62:3f:f7:9b:1f:fd:fa:b7:c4:85:7e:3d:ef:b1:11:17:dc:
6f:44:aa:d4:8c:29:84:6a:04:4a:90:7e:06:99:4a:d5:9d:9e:
aa:bb:a3:a7:a1:77:34:39:a5:84:9a:98:59:11:d1:78:f3:43:
4d:43:9a:8b:5d:63:28:3b:9d:b0:31:59:75:16:00:cb:6f:83:
3e:5b:7a:97:02:54:49:54:eb:2f:57:6e:d1:0e:96:f9:e3:c4:
d4:7e:bc:e0:06:da:0b:de:3b:5e:5c:9d:93:68:b7:6f:5b:3f:
c5:46:97:de:c5:ec:53:8f:27:51:ae:45:9a:34:66:e3:eb:c7:
1f:03:7b:dc:bc:d4:bc:da:b5:45:f5:df:5f:df:bd:85:ce:69:
9c:59:76:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrxZIwmfO5Ggk2pWtOw6q0LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwNTllMDNhMDhlMTc0MTZmNjY1NDYzMDc5ODgzNDk5OTFi
ODRhMmUwHhcNMjUxMjA2MDIwMTI5WhcNMjUxMjA3MDIwMTI5WjAzMTEwLwYDVQQD
Eyg1MzUzOGNlOTc1NzYwZTY2YmVlYjY3M2ZiMjA4MThkZDQ5OTFmNzQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArInAnv13zhLB9ooaQiChsYT3L/gv
YutjAvrakAVGHvcruMxp59cfK0vs4ke3P5gTx9Uzsh0aEB+T+oYD4GDACjwhBgg6
n4X6ezlRgLx90G3PKJNLSL/ILoXD5uSWFH52XbN7qgLRgHmQXgONYDJvUQeRgk6h
0ZwEkv/lbv2Z6uAXqAia4ZfPWyWWWtDwA31F5EvQzFMmGRoOoNMs9xNbxnkvaHDB
TGMyueAzCr+HwzJ8Fs75UNPB6zdVMErSbE5fH0p8PP7uLRYr+LcuLKziUgJZS/yK
C7BTgMfJkpP1p5mjAwnq4ZlNtRRUoM2Rnrlj7C46kzhEaGkuzEM2epy2AQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFNTjOl1dg5mvutnP7IIGN1JkfdAMB8GA1UdIwQY
MBaAFHBZ4DoI4XQW9mVGMHmINJmRuEouMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0ZuZ09namhkQmIyWlVZd2VZZzBtWkc0U2k0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8wNjVkYmEtZWVmOS00ODBkLWE4ODAt
OTE3NWM4NDA4ZTVlLzEvY0ZuZ09namhkQmIyWlVZd2VZZzBtWkc0U2k0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS8wNjVkYmEtZWVmOS00ODBkLWE4ODAtOTE3NWM4NDA4ZTVl
LzEvY0ZuZ09namhkQmIyWlVZd2VZZzBtWkc0U2k0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa0tk3YEH
d92A7hPRS2TZctnmuCjwRdPmpu2WMhGPIk5rOdO0WGdHp7HUESFAjRMnoCMjaoFQ
nTXGs9oGkNG8mQUNfL/Cj1/hO7jlX3NSSzAPYxV2rBcj2+de7yqgsUZKQ+nIpE+i
1NSAswKgYWI/95sf/fq3xIV+Pe+xERfcb0Sq1IwphGoESpB+BplK1Z2eqrujp6F3
NDmlhJqYWRHRePNDTUOai11jKDudsDFZdRYAy2+DPlt6lwJUSVTrL1du0Q6W+ePE
1H684AbaC947Xlydk2i3b1s/xUaX3sXsU48nUa5FmjRm4+vHHwN73LzUvNq1RfXf
X9+9hc5pnFl2pA==
-----END CERTIFICATE-----
Generated at Sat Dec 6 08:26:55 2025 by rpki-client