This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/akYj92vVuy3wr2bzYP90_xwA2wI.mft
File: akYj92vVuy3wr2bzYP90_xwA2wI.mft (raw, json)
Hash identifier: bd4V4CiA5CCXdb0LAycHmRHQXUmuOGjpC94/XNCSxBs=
Subject key identifier: B2:5B:54:F0:39:C5:69:94:51:08:13:16:07:4C:3B:5B:D3:A7:46:62
Authority key identifier: 6A:46:23:F7:6B:D5:BB:2D:F0:AF:66:F3:60:FF:74:FF:1C:00:DB:02
Certificate issuer: /CN=6a4623f76bd5bb2df0af66f360ff74ff1c00db02
Certificate serial: 019AF2E448E079A18077CCB55BE75850ED1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/akYj92vVuy3wr2bzYP90_xwA2wI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/akYj92vVuy3wr2bzYP90_xwA2wI.mft
Manifest number: 177A
Signing time: Sat 06 Dec 2025 09:00:38 +0000
Manifest this update: Sat 06 Dec 2025 09:00:38 +0000
Manifest next update: Sun 07 Dec 2025 09:00:38 +0000
Files and hashes: 1: 7GQjtZuQZ-J57jgxDQlSiA3I-80.roa (hash: +1PX9Rg2wkDWHSyugse1b8uCpGYlE/hzwHJtkR9jK+o=)
2: O0-go45iEHrpCNxo4yPQ-3JotBA.roa (hash: oV0cXxFcNNkUj+E/35qA+ydPvFVnE57H517+W25mlhE=)
3: akYj92vVuy3wr2bzYP90_xwA2wI.crl (hash: HUudrr411ARZoq2i+rLJ8qklbh3Ic+QqvPKUInoorSI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/akYj92vVuy3wr2bzYP90_xwA2wI.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/akYj92vVuy3wr2bzYP90_xwA2wI.mft
rsync://rpki.ripe.net/repository/DEFAULT/akYj92vVuy3wr2bzYP90_xwA2wI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f2:e4:48:e0:79:a1:80:77:cc:b5:5b:e7:58:50:ed:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a4623f76bd5bb2df0af66f360ff74ff1c00db02
Validity
Not Before: Dec 6 09:00:38 2025 GMT
Not After : Dec 7 09:00:38 2025 GMT
Subject: CN=b25b54f039c5699451081316074c3b5bd3a74662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f3:36:0c:0b:80:2e:2d:ee:dd:9d:b2:fc:90:
ef:88:17:36:cb:c5:54:03:f4:5f:33:a7:2e:76:c3:
66:c9:bc:a5:e2:32:86:90:52:5e:b8:29:89:af:3c:
0a:65:c8:09:f5:22:74:9e:20:42:dc:fe:48:d1:68:
e1:48:c8:1a:e3:41:06:90:30:ce:ec:69:9c:79:d1:
98:a5:2e:83:85:22:3c:06:40:9f:0c:79:4e:1c:7d:
e1:25:80:3c:20:53:f3:19:11:8d:02:e2:4e:27:15:
03:d4:6e:7a:4c:01:07:31:01:b2:43:af:db:b3:7e:
6b:a2:cb:ab:af:9d:45:f0:4f:99:a9:1c:9e:07:2f:
97:ee:ed:6d:94:c9:a1:fe:7d:81:a8:21:0a:9a:2b:
0a:9f:07:f0:39:1e:1d:70:1b:7f:bb:dc:69:66:dc:
99:d9:85:b7:36:af:84:2f:18:cd:f2:e9:86:c5:d5:
ad:c6:1f:2e:4e:59:3e:f1:c2:77:0b:45:6c:cc:fd:
7a:13:a9:00:e9:48:17:32:ae:d4:16:49:7d:1b:0d:
f5:1e:3c:77:bf:8f:cc:a9:7b:fc:07:c0:91:6b:ad:
7b:22:6c:f3:7e:6a:08:13:96:19:55:47:2e:d1:69:
49:55:2e:f9:60:f8:c3:7c:7f:71:48:6a:55:84:02:
e5:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:5B:54:F0:39:C5:69:94:51:08:13:16:07:4C:3B:5B:D3:A7:46:62
X509v3 Authority Key Identifier:
keyid:6A:46:23:F7:6B:D5:BB:2D:F0:AF:66:F3:60:FF:74:FF:1C:00:DB:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/akYj92vVuy3wr2bzYP90_xwA2wI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/akYj92vVuy3wr2bzYP90_xwA2wI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/akYj92vVuy3wr2bzYP90_xwA2wI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:75:12:f4:32:62:c9:96:58:6b:ac:68:43:97:16:7f:5f:40:
74:4e:d6:47:33:20:22:65:ef:ed:0e:81:82:fc:f9:4c:ae:ad:
9d:8d:c1:32:f9:af:9e:8d:97:f8:f1:52:1b:48:bf:90:ee:3d:
32:f4:fd:a8:ee:a6:3e:37:ed:18:5e:63:09:40:e3:0b:3e:3e:
ac:04:7e:3a:e1:27:ec:fb:75:c7:d2:44:d6:ba:8a:de:96:5c:
a2:5e:1b:85:a4:ea:38:ab:77:9e:78:01:6d:4f:3a:5f:7a:62:
a7:ce:c3:0c:09:26:a6:59:1f:13:c0:fe:bc:4a:79:8e:1a:40:
e4:3a:be:76:e6:3a:9f:b5:ce:a1:9e:ac:b3:23:43:9f:7b:e2:
1c:f1:82:10:02:32:65:53:91:77:7f:6e:7f:1b:dc:97:64:d8:
9e:e8:95:25:ff:86:c3:6d:a3:48:cc:99:31:d6:85:9b:5b:32:
32:70:02:9c:bb:b5:28:aa:50:ba:c6:38:cf:e1:2c:2f:e5:bf:
14:41:b3:45:13:84:e3:ee:13:22:6f:94:56:d3:0a:3f:cc:d8:
25:ee:ad:c0:8c:2a:9d:a6:9e:d7:77:14:84:ef:6d:37:c2:86:
69:25:07:7b:aa:d8:a8:e3:f5:04:52:b2:be:e3:bd:6e:b0:9f:
69:b3:6f:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZry5EjgeaGAd8y1W+dYUO0bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhNDYyM2Y3NmJkNWJiMmRmMGFmNjZmMzYwZmY3NGZmMWMw
MGRiMDIwHhcNMjUxMjA2MDkwMDM4WhcNMjUxMjA3MDkwMDM4WjAzMTEwLwYDVQQD
EyhiMjViNTRmMDM5YzU2OTk0NTEwODEzMTYwNzRjM2I1YmQzYTc0NjYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0fM2DAuALi3u3Z2y/JDviBc2y8VU
A/RfM6cudsNmybyl4jKGkFJeuCmJrzwKZcgJ9SJ0niBC3P5I0WjhSMga40EGkDDO
7GmcedGYpS6DhSI8BkCfDHlOHH3hJYA8IFPzGRGNAuJOJxUD1G56TAEHMQGyQ6/b
s35rosurr51F8E+ZqRyeBy+X7u1tlMmh/n2BqCEKmisKnwfwOR4dcBt/u9xpZtyZ
2YW3Nq+ELxjN8umGxdWtxh8uTlk+8cJ3C0VszP16E6kA6UgXMq7UFkl9Gw31Hjx3
v4/MqXv8B8CRa617ImzzfmoIE5YZVUcu0WlJVS75YPjDfH9xSGpVhALl3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLJbVPA5xWmUUQgTFgdMO1vTp0ZiMB8GA1UdIwQY
MBaAFGpGI/dr1bst8K9m82D/dP8cANsCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWtZajkydlZ1eTN3cjJiellQOTBfeHdBMndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS81OTk1MjgtYjg5ZC00NDAyLWE4MDgt
NmM4MzIwNTBlNzdhLzEvYWtZajkydlZ1eTN3cjJiellQOTBfeHdBMndJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS81OTk1MjgtYjg5ZC00NDAyLWE4MDgtNmM4MzIwNTBlNzdh
LzEvYWtZajkydlZ1eTN3cjJiellQOTBfeHdBMndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADnUS9DJi
yZZYa6xoQ5cWf19AdE7WRzMgImXv7Q6Bgvz5TK6tnY3BMvmvno2X+PFSG0i/kO49
MvT9qO6mPjftGF5jCUDjCz4+rAR+OuEn7Pt1x9JE1rqK3pZcol4bhaTqOKt3nngB
bU86X3pip87DDAkmplkfE8D+vEp5jhpA5Dq+duY6n7XOoZ6ssyNDn3viHPGCEAIy
ZVORd39ufxvcl2TYnuiVJf+Gw22jSMyZMdaFm1syMnACnLu1KKpQusY4z+EsL+W/
FEGzRROE4+4TIm+UVtMKP8zYJe6twIwqnaae13cUhO9tN8KGaSUHe6rYqOP1BFKy
vuO9brCfabNvNg==
-----END CERTIFICATE-----
Generated at Sat Dec 6 14:53:24 2025 by rpki-client