This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft
File: KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft (raw, json)
Hash identifier: 41wk6Xy/MZ9SOoPqWqV7F1cmeYE8b/HGXc+gJ46Bpk4=
Subject key identifier: 57:40:09:95:33:5B:9F:39:F5:3B:91:AC:49:38:D9:B4:D1:64:EA:39
Authority key identifier: 28:FD:66:E4:3A:10:46:33:B2:7B:AC:53:9B:98:BD:F8:EB:FA:C9:AE
Certificate issuer: /CN=28fd66e43a104633b27bac539b98bdf8ebfac9ae
Certificate serial: 019AF3F7FFB414712B28BB4797801BF3847C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft
Manifest number: 0BC7
Signing time: Sat 06 Dec 2025 14:01:47 +0000
Manifest this update: Sat 06 Dec 2025 14:01:47 +0000
Manifest next update: Sun 07 Dec 2025 14:01:47 +0000
Files and hashes: 1: 4Dd_oz2TtpOXQBrGavmGYMPXNlw.roa (hash: lEaJsZdsULkNE5Gu41TR5VUrs6XkOuSkB/MqNMbSRqE=)
2: 9CKQGKCQI-bIMlSOn18EkSByP_c.roa (hash: fUEwlGorb/53MsJAC9arcQFk2OY9saq26gPtLezc70o=)
3: Ehx_bk8hfbPb2wCCkbIFutyAoiQ.roa (hash: +HKiRGiNwcMbHRNsEOcJQScZZXduQOT3b8IfA7DUH+8=)
4: KP1m5DoQRjOye6xTm5i9-Ov6ya4.crl (hash: Yyn2GlJLs7q6aqOi+yRxX3EBf7C3hYoeO+/bm2+YPOk=)
5: azXA0zek1r4GjxGORUc5CbVhlro.roa (hash: dBG8mL0HT6A6TrmZTX65GYmNTUtlNHr3mHgXq8jXk/c=)
6: fawo1EoqRqBJwHjBpTPTmcGb0cM.roa (hash: F6clH7PVg2lpM3y/mX4Zj9CRymDOfHXzUQhjxqzwyxg=)
7: o9r3uR2f73He5KEKu4BwYPFzrZs.roa (hash: di2c5UqcUyXblOdBvGL8kM199QqPxFbroxHSs6c/vq8=)
8: qF7Yer0u7ziOGGwDeljcv2iin4k.roa (hash: ahTinSaOPP9oVbrP+xhco0U3iDA/GD0BuDeaOSksTIc=)
9: sd0jlwypX7mTRSVDcmbA2KcPRVw.roa (hash: YbZCCfMPY850ehWHI89VOAxoC5oI9QnHcBkGCUColGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 13:09:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f3:f7:ff:b4:14:71:2b:28:bb:47:97:80:1b:f3:84:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28fd66e43a104633b27bac539b98bdf8ebfac9ae
Validity
Not Before: Dec 6 14:01:47 2025 GMT
Not After : Dec 7 14:01:47 2025 GMT
Subject: CN=57400995335b9f39f53b91ac4938d9b4d164ea39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7c:79:4c:67:ba:e1:37:68:3d:42:8b:09:ae:
30:d1:40:be:f8:2a:24:30:31:c6:92:e0:ed:ee:8f:
ff:06:16:72:55:fd:c4:26:5f:c3:e5:ed:55:2d:7d:
7a:9a:71:a9:c1:b8:8f:a6:4f:b8:f3:83:d5:5c:41:
37:c8:98:b4:36:ad:1b:91:94:55:74:44:fd:8b:17:
1b:32:e6:27:02:c6:6d:28:d5:14:b2:ae:5e:82:64:
25:96:a6:81:d1:ca:56:55:57:14:8d:d4:c5:31:91:
98:1c:db:9a:1c:5d:c6:b8:a8:af:fd:4c:a3:ac:29:
b6:71:21:63:94:8e:22:10:be:28:08:e8:99:0b:86:
57:e1:6a:42:b8:e9:ac:1f:7b:4c:52:82:85:8d:33:
c9:7c:ec:59:97:e3:54:db:b0:01:b3:f4:c2:54:2d:
78:d2:7c:f8:7b:b9:9a:47:b7:33:cd:32:dc:0d:03:
a1:6c:28:6b:ab:f8:e2:c5:2b:26:50:68:0a:43:d6:
b9:81:a2:e7:36:31:d7:b9:94:35:5e:5d:32:cf:18:
43:8f:b2:ca:98:73:5a:46:dd:9d:08:51:14:e0:1c:
7a:be:a4:a4:d6:da:6b:db:9d:6b:ed:4e:f5:97:a4:
ae:80:39:02:38:b5:7b:0b:36:ef:53:f6:9d:9d:57:
d6:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:40:09:95:33:5B:9F:39:F5:3B:91:AC:49:38:D9:B4:D1:64:EA:39
X509v3 Authority Key Identifier:
keyid:28:FD:66:E4:3A:10:46:33:B2:7B:AC:53:9B:98:BD:F8:EB:FA:C9:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:c0:8b:8d:4a:ef:89:5a:83:c5:55:01:95:ba:d2:48:87:be:
92:4b:94:c8:0b:9b:d4:c0:16:15:6a:f1:e3:38:b2:09:f5:eb:
72:74:91:ff:1c:4e:14:b3:fd:cd:23:7b:7b:b5:6b:e0:59:5a:
d3:30:50:8d:64:33:9f:83:9e:22:57:15:98:11:97:10:ae:14:
cd:51:27:8d:a1:86:f9:00:c6:58:a6:d6:22:65:27:27:2b:51:
db:ef:6c:48:83:6c:da:e3:e3:b7:6b:88:84:fd:4e:e0:cc:74:
e8:58:4e:37:7d:d7:76:e9:30:b7:ba:51:af:2e:42:a7:c8:b9:
d4:31:03:5b:1d:31:e9:68:e4:9a:79:d4:5e:a0:55:70:ce:03:
4d:a6:55:f6:fb:16:ed:5b:fd:f3:11:d5:06:55:b0:26:87:c4:
5d:b3:aa:02:4b:b6:f5:bc:b7:39:61:b1:9a:2d:0d:7c:d4:c6:
fb:ca:49:01:06:c3:52:1d:39:bc:1c:bc:d6:2b:f3:a1:86:43:
6d:c4:a3:64:2b:ba:6b:10:ef:b0:d0:9f:c9:d2:20:a9:53:ca:
b9:f1:88:84:c7:39:c1:a9:9c:36:ba:81:da:8a:5a:3f:53:00:
a9:ba:69:fa:e1:f5:19:c4:27:8b:93:e9:28:ad:60:3b:9a:c3:
ff:48:3d:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:28:38 2025 by rpki-client