This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/4toj07kw1MHzrHMGXXGmB8NdKQA.mft
File: 4toj07kw1MHzrHMGXXGmB8NdKQA.mft (raw, json)
Hash identifier: Wh7Odsd3VftSXuZtB1aqrniAGE0lkMYS0N75QlJs+2Y=
Subject key identifier: 0F:49:83:D6:DB:31:9E:69:B5:78:6C:86:43:D9:30:87:F3:6F:8A:12
Authority key identifier: E2:DA:23:D3:B9:30:D4:C1:F3:AC:73:06:5D:71:A6:07:C3:5D:29:00
Certificate issuer: /CN=e2da23d3b930d4c1f3ac73065d71a607c35d2900
Certificate serial: 019AF0BEFF85B3239A6B08A8B8D865BA465B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4toj07kw1MHzrHMGXXGmB8NdKQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/4toj07kw1MHzrHMGXXGmB8NdKQA.mft
Manifest number: 1764
Signing time: Fri 05 Dec 2025 23:00:40 +0000
Manifest this update: Fri 05 Dec 2025 23:00:40 +0000
Manifest next update: Sat 06 Dec 2025 23:00:40 +0000
Files and hashes: 1: 1-rU3n-MmX0x7vSSIglpKrM6p7wc.roa (hash: c73xh5XkAcPFRSo/oWqlfjE2NzFubQ+3BLO5+whFr6o=)
2: 4toj07kw1MHzrHMGXXGmB8NdKQA.crl (hash: qufINiZDTBimEZIhxKWXPBUmFWvqfXRA6+baXaTid/0=)
3: lAPGewAMTsg2zoYnnReshsfQhuc.roa (hash: cQriD0k+t33lYmHxMgkTAtEHjw/RaZJ3vs4rH148M98=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/4toj07kw1MHzrHMGXXGmB8NdKQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/4toj07kw1MHzrHMGXXGmB8NdKQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4toj07kw1MHzrHMGXXGmB8NdKQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Dec 2025 23:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f0:be:ff:85:b3:23:9a:6b:08:a8:b8:d8:65:ba:46:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2da23d3b930d4c1f3ac73065d71a607c35d2900
Validity
Not Before: Dec 5 23:00:40 2025 GMT
Not After : Dec 6 23:00:40 2025 GMT
Subject: CN=0f4983d6db319e69b5786c8643d93087f36f8a12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:95:30:f2:e0:22:b8:a4:a0:4d:b5:dd:43:a2:
d1:e3:c0:85:13:18:1d:f3:3e:fc:df:28:64:95:28:
83:3b:0e:b4:44:73:2a:0c:e4:ed:cd:bc:ac:9b:d6:
ae:d8:57:59:49:1a:ff:59:7d:c1:31:c0:e3:6b:a5:
6f:f1:61:10:16:ea:8d:fe:99:dc:70:76:3a:5d:7d:
a0:e9:81:a7:bc:18:af:17:94:bb:17:12:bb:64:6d:
57:49:03:c5:b0:7e:6c:4e:ac:c0:60:80:5b:13:81:
b6:77:17:b9:1b:ba:c1:5c:16:7b:49:c8:97:2b:64:
69:10:dd:df:98:cf:79:9e:43:50:39:8f:27:fc:93:
ad:03:99:c0:71:89:b3:28:fd:28:1f:27:5f:b7:0b:
af:3e:fe:d3:d1:5f:b8:48:dd:7f:f5:90:b2:7f:5d:
66:c3:db:83:1b:93:20:b2:8a:56:49:76:66:fe:93:
13:0f:02:90:6b:80:cc:75:ce:ab:48:9c:27:8c:7a:
82:36:ff:b7:b6:dd:55:ee:01:e8:09:61:6a:4b:a3:
25:32:f3:d0:d8:37:4b:f6:b3:07:fd:61:82:6c:99:
bd:50:d3:fa:b3:4c:89:b9:f3:94:24:7a:ff:1f:17:
a9:1f:d3:65:f4:77:53:51:b1:43:4e:a5:67:8a:2a:
b3:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:49:83:D6:DB:31:9E:69:B5:78:6C:86:43:D9:30:87:F3:6F:8A:12
X509v3 Authority Key Identifier:
keyid:E2:DA:23:D3:B9:30:D4:C1:F3:AC:73:06:5D:71:A6:07:C3:5D:29:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4toj07kw1MHzrHMGXXGmB8NdKQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/4toj07kw1MHzrHMGXXGmB8NdKQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/4toj07kw1MHzrHMGXXGmB8NdKQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:4c:e8:e3:db:d7:47:ab:20:b6:db:7f:27:52:f0:fb:13:ca:
73:f8:c2:8f:84:0b:c0:59:d1:66:ca:47:ea:fc:9c:1a:ef:01:
ba:9b:7b:6d:a9:d2:f5:d4:af:b1:82:98:3b:3e:c2:a4:2c:72:
aa:fa:a2:fc:e0:f0:65:3a:07:9a:6f:67:1a:bb:24:1d:3b:f0:
18:29:c1:cd:be:43:d3:a6:e6:8c:b5:ee:5c:96:21:1b:f8:af:
7f:f1:48:5a:e2:10:4d:42:01:80:28:3a:ef:5a:af:41:e5:36:
12:fe:09:51:b7:b8:6b:f0:1e:42:32:a6:b8:ca:f2:6f:d2:ca:
0e:63:51:7a:be:db:3d:e6:71:f5:74:bf:38:56:28:2f:a1:32:
0a:33:19:77:4c:11:33:ca:2a:d7:dd:97:18:13:0b:51:0a:57:
8e:65:d2:3c:12:d2:c1:ce:24:52:80:35:97:7c:c5:6a:a7:b5:
87:f5:3e:ad:26:15:a2:36:63:88:06:22:51:d7:c4:f5:cf:34:
6b:92:e1:72:04:dd:72:d2:8d:57:84:ed:a9:1a:08:19:29:27:
76:d6:6e:c9:96:d0:ce:fc:64:36:bd:ba:b5:71:bc:df:7c:1a:
19:d5:25:3f:a3:5e:c8:04:4f:8a:f4:8f:76:9e:21:bf:11:51:
13:2e:ce:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:56:14 2025 by rpki-client