This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.mft
File: xeFyhy63vvCWXfE7D8XWXnU3Chk.mft (raw, json)
Hash identifier: EiOZY6kk29cT6Oi7uWDWMVnEmpt/0YXY1H2vAuh7+sc=
Subject key identifier: 16:4A:8F:09:E9:34:17:A7:99:A0:11:B8:52:EA:88:1C:58:5A:4D:FB
Authority key identifier: C5:E1:72:87:2E:B7:BE:F0:96:5D:F1:3B:0F:C5:D6:5E:75:37:0A:19
Certificate issuer: /CN=c5e172872eb7bef0965df13b0fc5d65e75370a19
Certificate serial: 019AF23F9952378683A4546A781C7AB88284
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xeFyhy63vvCWXfE7D8XWXnU3Chk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.mft
Manifest number: 1762
Signing time: Sat 06 Dec 2025 06:00:45 +0000
Manifest this update: Sat 06 Dec 2025 06:00:45 +0000
Manifest next update: Sun 07 Dec 2025 06:00:45 +0000
Files and hashes: 1: 5IdXodnCvQCBXqkFVtD9o-FVq60.roa (hash: 2nbX3JtMn955Hg0IyNJHCw2qggcvidZLlm6WpY5eTuM=)
2: 6X3WzJSI2dXN_Jv7mc-rIkDboF4.roa (hash: VArQPPbGMQURZ0LnkmgsgojEeQq56v52vVQluQg+EAo=)
3: EeFrQoh3jQtKJMeag4hpJyiwDGw.roa (hash: mlC92xTYSop56qk5KpOKiOZu5+t0f3FZU33GKeD5VtY=)
4: xeFyhy63vvCWXfE7D8XWXnU3Chk.crl (hash: /8nrIt4uiSJXz+0GclJ11y38lms8L0wo2ARDyJb/QoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xeFyhy63vvCWXfE7D8XWXnU3Chk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f2:3f:99:52:37:86:83:a4:54:6a:78:1c:7a:b8:82:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5e172872eb7bef0965df13b0fc5d65e75370a19
Validity
Not Before: Dec 6 06:00:45 2025 GMT
Not After : Dec 7 06:00:45 2025 GMT
Subject: CN=164a8f09e93417a799a011b852ea881c585a4dfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:98:0b:ee:6a:1c:76:60:de:ee:1d:37:a2:6e:
4f:33:ba:fb:f1:38:df:44:c3:c5:6e:06:ec:01:1c:
2a:4b:56:dc:3e:41:41:13:e8:6d:7f:08:fd:59:f4:
c4:d3:73:db:70:be:70:0c:3f:a0:cd:6b:b2:f9:bb:
9d:95:ca:88:79:7d:51:20:b3:83:6e:7a:26:a4:65:
8e:e5:46:62:6f:26:03:ab:bf:f3:01:8c:09:ed:33:
41:96:5a:bf:71:8b:aa:70:e2:e4:d5:b1:46:bf:39:
b3:49:82:e3:88:43:b5:4b:1d:e3:c0:d7:97:db:fd:
fd:ea:27:59:93:51:e2:90:d8:29:19:e4:fb:db:07:
88:4f:de:92:91:12:f9:3b:f9:c9:e4:a1:e7:c2:ea:
7f:d6:d5:26:0e:32:8b:1f:3e:7f:90:86:cf:e7:20:
db:98:d9:28:c5:0f:01:8a:61:d0:b3:9a:e6:e2:0c:
55:bd:97:36:08:20:2c:36:a6:6c:dc:ca:e9:eb:ca:
e4:fd:a1:7b:77:11:04:e3:e4:90:4e:aa:df:1d:12:
ae:a3:27:84:6d:bf:1b:27:65:21:9b:2a:b6:ed:f4:
8f:0d:a5:65:03:8e:7f:10:45:09:89:4e:e5:07:26:
e8:13:57:98:cb:5e:21:bb:cc:e2:95:78:ee:1d:d5:
50:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:4A:8F:09:E9:34:17:A7:99:A0:11:B8:52:EA:88:1C:58:5A:4D:FB
X509v3 Authority Key Identifier:
keyid:C5:E1:72:87:2E:B7:BE:F0:96:5D:F1:3B:0F:C5:D6:5E:75:37:0A:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xeFyhy63vvCWXfE7D8XWXnU3Chk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:f8:24:68:d4:5e:e1:be:e8:9b:d2:8f:a8:8c:c5:36:cf:ac:
c8:21:fe:a4:83:3f:0b:f7:ba:1b:65:b3:7f:0c:ab:40:2a:0e:
37:2d:65:d2:04:8e:2a:95:4c:cf:c6:17:00:dd:63:ca:a0:e8:
96:07:ed:74:60:0d:72:f1:01:8a:c0:dc:d7:96:23:34:02:f4:
1d:ce:18:51:06:df:7c:af:16:94:c4:ba:b7:10:6b:8d:7b:30:
14:52:30:d9:4e:8f:aa:6b:4d:36:ee:bb:0a:fc:d2:f7:9b:3d:
e9:df:2d:ff:e2:ba:ff:6d:91:fa:b1:4d:a8:7c:3a:52:b6:d5:
17:33:c2:21:54:c8:5e:72:71:ac:0c:ca:68:56:56:ed:2a:0a:
83:1c:40:52:35:fa:df:27:cd:67:3f:f8:f4:bb:c2:a7:69:61:
5b:9d:99:05:75:74:bd:06:62:b8:d5:4c:a1:7e:87:70:b4:78:
45:54:d4:62:08:87:4c:7a:a5:d5:7c:30:4f:a7:69:f6:54:bc:
8b:88:23:6c:19:bd:0e:4c:89:c7:13:f7:0e:f5:17:7b:99:ef:
14:c0:9b:14:32:f1:08:6e:38:13:c2:ca:08:35:8a:0b:c6:94:
34:c4:61:46:6f:c9:d0:99:b0:a9:69:c4:be:b7:34:07:68:05:
a2:a4:21:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:27:43 2025 by rpki-client