This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.mft
File: Fc4GtE2NxD3HQsQN472oqjdE4r0.mft (raw, json)
Hash identifier: CB8t2BsOVgQZzFQbo36EYgLIJPas9k3Gz8A6mFZei7E=
Subject key identifier: D0:99:A6:AC:FE:38:FF:B7:B1:1E:44:6F:8D:E9:85:F1:44:2A:2A:D1
Authority key identifier: 15:CE:06:B4:4D:8D:C4:3D:C7:42:C4:0D:E3:BD:A8:AA:37:44:E2:BD
Certificate issuer: /CN=15ce06b44d8dc43dc742c40de3bda8aa3744e2bd
Certificate serial: 019AF0F5F2C58E882ABC247873A42F12A5B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fc4GtE2NxD3HQsQN472oqjdE4r0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.mft
Manifest number: 13F5
Signing time: Sat 06 Dec 2025 00:00:41 +0000
Manifest this update: Sat 06 Dec 2025 00:00:41 +0000
Manifest next update: Sun 07 Dec 2025 00:00:41 +0000
Files and hashes: 1: 52KUDdFP_rD3RmJYr6LMpUPEMmM.roa (hash: usibkDt6eCnub+7x6EZqrdrQgsmz6UQ+udh3uzbsAi0=)
2: Fc4GtE2NxD3HQsQN472oqjdE4r0.crl (hash: WYghWK3wPqWZ4ccO9MRa+WD2wUc446sG7eT54xlfD3c=)
3: NjP1-VxcjUYnG6zS7LVSKs7x9vY.roa (hash: SBm121KuisZ5EZTIvc68c0K3yTgGq/5rmdZ6mqu0hNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fc4GtE2NxD3HQsQN472oqjdE4r0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 00:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f0:f5:f2:c5:8e:88:2a:bc:24:78:73:a4:2f:12:a5:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15ce06b44d8dc43dc742c40de3bda8aa3744e2bd
Validity
Not Before: Dec 6 00:00:41 2025 GMT
Not After : Dec 7 00:00:41 2025 GMT
Subject: CN=d099a6acfe38ffb7b11e446f8de985f1442a2ad1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:35:29:1a:f9:35:7b:85:50:23:4d:89:fa:b1:
0a:d2:d1:2d:bd:8e:ae:6e:6b:86:bd:5c:20:ec:51:
92:c3:27:ce:60:4d:cd:c9:0e:e3:66:44:ab:0e:ea:
6b:53:59:45:4f:28:12:41:7f:f5:65:33:cd:1c:21:
7e:d1:5b:43:f5:cb:e7:32:7a:5a:3a:16:a9:cd:a2:
a0:73:ff:ea:ef:a0:67:94:97:98:69:cd:54:7b:a6:
20:39:6a:cb:cc:22:a3:a3:70:b2:58:b1:7e:0d:9c:
9b:7c:81:17:d7:70:53:74:b2:fd:23:40:00:8d:cb:
0c:54:56:8a:29:a4:33:c9:3a:5d:34:10:ce:a3:f0:
02:75:a5:fa:da:50:94:40:0b:4e:fb:06:e5:37:19:
1b:c3:01:b7:48:90:4e:dd:e4:22:56:2f:b4:9e:44:
8b:16:22:f7:0d:0a:fb:8d:4e:68:33:7a:53:b8:03:
24:86:11:25:a2:9b:3f:f5:40:00:18:56:82:11:36:
be:93:3c:3b:00:dc:e4:9a:8f:80:80:97:fe:69:d1:
1f:3d:91:0f:3c:c3:2b:7c:68:85:26:02:99:3b:29:
0e:ef:86:e4:0e:ba:4c:c1:96:cb:93:60:d9:c0:e7:
17:9d:bc:cc:94:1a:c2:d6:51:23:7f:70:51:cf:e7:
28:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:99:A6:AC:FE:38:FF:B7:B1:1E:44:6F:8D:E9:85:F1:44:2A:2A:D1
X509v3 Authority Key Identifier:
keyid:15:CE:06:B4:4D:8D:C4:3D:C7:42:C4:0D:E3:BD:A8:AA:37:44:E2:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fc4GtE2NxD3HQsQN472oqjdE4r0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:23:e6:aa:9d:44:3c:f1:6d:4c:e5:21:37:a7:de:02:64:e6:
61:41:63:a3:78:a9:be:0a:bc:4e:65:a7:2a:68:ed:b0:22:ab:
d6:06:71:f7:1f:83:b6:67:db:09:6e:bc:34:b9:f5:13:66:ee:
d8:93:c4:60:16:48:7e:89:75:39:8d:53:cc:51:3d:3c:68:3a:
be:2a:c2:39:46:e8:0a:7f:41:cb:c5:58:f0:bc:00:e5:64:8c:
5c:ef:e3:e3:ef:71:22:df:51:3e:a0:f3:a9:05:3b:a5:36:b1:
80:2a:0c:6e:9c:f6:72:d7:4c:7c:66:2f:6c:07:47:70:b0:5c:
c8:1d:e8:d7:a6:9e:a9:12:df:87:94:e6:35:20:6d:e5:c2:b9:
45:eb:49:73:a2:c6:39:7f:c9:6e:f7:d2:58:d3:66:bc:2b:4b:
fa:01:eb:5c:e0:c0:29:f4:78:7d:be:f9:13:a9:c1:59:9b:39:
94:78:ab:bc:85:69:bb:0c:ce:78:da:9c:98:89:e2:c6:3f:8b:
18:33:07:fc:24:78:06:63:17:20:d2:ae:97:ed:46:72:f5:ab:
2e:5d:85:1c:64:17:67:53:83:8e:d4:53:cd:08:1b:9d:c2:e1:
86:e7:ad:81:32:e8:cb:c0:54:bd:9a:3b:c6:78:44:81:5c:8d:
0f:6d:a9:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:25:11 2025 by rpki-client