This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.mft
File: 76W2I0ehtkzqSaKrOrSYPDSGH7I.mft (raw, json)
Hash identifier: VQbtXPDWVE1Pj4JxqHuldRwn4ZQ/krHt7lDuq8P5T2o=
Subject key identifier: 6B:47:16:38:68:3A:53:EF:49:6F:14:49:B4:28:4C:EB:7A:CB:1A:5D
Authority key identifier: EF:A5:B6:23:47:A1:B6:4C:EA:49:A2:AB:3A:B4:98:3C:34:86:1F:B2
Certificate issuer: /CN=efa5b62347a1b64cea49a2ab3ab4983c34861fb2
Certificate serial: 019AF2764C4DE273E0615B432E8A7C5B5AAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.mft
Manifest number: 0198
Signing time: Sat 06 Dec 2025 07:00:30 +0000
Manifest this update: Sat 06 Dec 2025 07:00:30 +0000
Manifest next update: Sun 07 Dec 2025 07:00:30 +0000
Files and hashes: 1: 76W2I0ehtkzqSaKrOrSYPDSGH7I.crl (hash: DI2ZLsVcA+7xBnxf4abJY951+nVTuism+MH0UBDuIJI=)
2: TdWCA3jMG4RcSGjTx6h7-OFQkJ0.roa (hash: i6Jk7HaD1mr34rVBZKHoNKT8LfsYuiueMYQP9x4CSCY=)
3: WnOPQ0ufHKuGIGeJgpa97dMJzZI.roa (hash: HZdjF63aWYiWvWoR/raQkcNq/IJsdTGCUZAkFXHzLn8=)
4: ZwlhiYyWQkRGz3NJHJFyM_Rg7Cg.roa (hash: 5by/fhrdm7/3f06Vze3ay8vgCnkJXF3Gh0BeggMxG98=)
5: _AP3FQaLWZZ4b07Vm6k0fkmrpNg.roa (hash: zZmmWUxFdkDgjpPPw8BHUSJ0nwj7XDsNJM3Ea4LtplY=)
6: gR_nj3KnhXU_3ijLA5gL5yTqRVo.roa (hash: yYO83gea+RX6tvgJTdvweHxx3nR1Y0pwKFCRPMjHc2I=)
7: kT-GBRdn5I-2tlMb_7_9SciQN9g.roa (hash: QjeGQjKJ8nc3raWH+8rzpohQUijqNjXsVOlYQC2T4vE=)
8: lnWvinUWS5GJDEzSwSpnFLjN5SY.roa (hash: jtKCkOjWf0Ny2MITAbfrrO67TWiVMtXecagrH1sOE/U=)
9: y3M_S9Lkx0bRvURYEJ1jFXn0IDE.roa (hash: J+owsHeEjZMxVahX59fSdFJZuQMT7sogFPyy4332cl8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f2:76:4c:4d:e2:73:e0:61:5b:43:2e:8a:7c:5b:5a:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efa5b62347a1b64cea49a2ab3ab4983c34861fb2
Validity
Not Before: Dec 6 07:00:30 2025 GMT
Not After : Dec 7 07:00:30 2025 GMT
Subject: CN=6b471638683a53ef496f1449b4284ceb7acb1a5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:23:c4:9c:15:55:c4:cb:e3:ec:99:37:58:b6:
3e:e7:cc:3e:08:ea:6f:44:52:74:06:3a:76:26:ed:
e0:ec:fe:35:f1:08:63:1c:d9:0c:b8:76:27:c3:c1:
22:f7:dc:09:59:18:97:69:de:1b:7a:04:56:61:18:
f3:44:95:fc:73:57:12:e3:41:65:fe:78:23:f1:ac:
1a:e1:ba:3f:06:b7:d0:db:85:2e:53:af:81:b0:e4:
72:3f:be:f1:1b:39:16:fd:f0:63:1d:e4:30:51:89:
6b:a6:de:db:1c:2f:79:ec:e4:01:5f:fc:c3:4e:43:
a5:ab:d1:02:2a:c1:dd:c2:04:c4:79:95:5d:aa:f3:
90:c1:9a:e2:fe:c9:3b:02:59:14:ff:ae:1e:9b:40:
9c:a1:d7:62:e7:7d:ea:80:6b:45:24:9e:1d:85:6d:
43:f3:cd:5d:19:ed:f1:a7:93:90:a1:a8:32:9b:89:
a4:6c:fd:0e:e9:ed:98:b2:82:45:fa:7f:57:c6:a2:
ec:06:33:2d:ab:c2:7c:33:0e:eb:de:52:3d:87:12:
d6:f3:a9:f6:81:10:e0:46:be:75:5e:7a:aa:d0:2f:
7c:70:c2:3e:f4:58:d8:46:cd:b2:7e:4c:01:b6:19:
c7:0a:85:37:8c:2b:34:ca:2c:8e:40:38:f9:95:d0:
81:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:47:16:38:68:3A:53:EF:49:6F:14:49:B4:28:4C:EB:7A:CB:1A:5D
X509v3 Authority Key Identifier:
keyid:EF:A5:B6:23:47:A1:B6:4C:EA:49:A2:AB:3A:B4:98:3C:34:86:1F:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:e0:6a:e4:e4:bf:e8:c9:37:d5:a2:fb:6f:c0:be:a3:fc:f8:
22:57:66:1c:11:ba:36:1c:90:34:da:20:0a:93:b8:58:b7:91:
55:4e:38:d7:e4:b1:8e:b2:ec:46:bf:ba:9b:47:c4:56:6a:e9:
e6:82:72:54:87:86:ab:49:bd:5a:fe:3b:ce:a5:78:4c:7c:bf:
90:90:42:aa:23:1e:48:7d:51:ad:c7:fb:2e:ae:00:29:b4:fd:
33:f6:3e:2f:fd:eb:23:5a:bb:4e:6f:e9:ab:61:da:22:88:a2:
16:bd:bb:c8:77:93:2d:b8:ef:2e:42:84:91:9d:65:4a:76:15:
0e:d8:48:7d:6e:9f:f8:bc:84:f4:18:f5:88:52:d1:b0:3c:82:
c1:e2:4d:9b:7f:bd:43:76:0c:d3:f0:cd:d9:06:de:53:db:2f:
43:dc:fe:8e:1d:1b:4f:46:19:e8:30:35:c9:14:fb:56:e5:f3:
83:7a:bb:88:59:41:5f:69:ea:46:fd:85:b5:a8:15:96:f5:5f:
f4:aa:b3:71:2b:83:8b:e8:e3:69:f1:ef:83:97:39:34:17:85:
96:67:46:bc:9c:d2:0f:b5:6d:e9:6a:f6:11:98:1c:72:75:1d:
02:17:2c:68:cc:90:ed:ff:ae:8b:f5:a1:61:a8:16:5c:a4:16:
4d:89:15:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:48:06 2025 by rpki-client