This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.mft
File: PE0_sETrHAoRvgYCrO74jl9dLd8.mft (raw, json)
Hash identifier: QqTsJi342jVWMpKD8u2I6fzg6JIj0jcJJnFiiB7baTc=
Subject key identifier: 2F:19:21:86:92:15:F1:91:E7:87:EB:F6:05:7E:7A:8D:72:84:C6:2F
Authority key identifier: 3C:4D:3F:B0:44:EB:1C:0A:11:BE:06:02:AC:EE:F8:8E:5F:5D:2D:DF
Certificate issuer: /CN=3c4d3fb044eb1c0a11be0602aceef88e5f5d2ddf
Certificate serial: 019AF3897A1BEBD59E08656AFECB0899FEAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PE0_sETrHAoRvgYCrO74jl9dLd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.mft
Manifest number: 1221
Signing time: Sat 06 Dec 2025 12:01:04 +0000
Manifest this update: Sat 06 Dec 2025 12:01:04 +0000
Manifest next update: Sun 07 Dec 2025 12:01:04 +0000
Files and hashes: 1: 1qkc6Y9jXUF8IhL-xIP9OmQuRxQ.roa (hash: FyT7i1iA2UYuQa2unCvmYr0/izQdX0gwOaXqE1QmUDA=)
2: 4pndJR5YmydmS9JXz_iQx8ck7j0.roa (hash: Z1im/UM2UzYVlqGcYguPnrUORp/DmOYEtnYcSLNDNIU=)
3: 790_0aC0pIVxZhv7VxK50ulYRQA.roa (hash: Omml7Q0FvpnQPClJTkXnFHAOdNcYGcFxuVbnF3UpV4k=)
4: 7TRbsGhzrO0599svAEtwSgPzAhc.roa (hash: W3VT9OquRIsAh2qTrbG0g8QkGqxQgHgPGhS6fP34/Qo=)
5: PE0_sETrHAoRvgYCrO74jl9dLd8.crl (hash: 1jloxoHEBQse/qssJMg/l5cvJwL27xAPPTTG8MaGZR0=)
6: rq9aneEoVWHNrooCWNRA9paJqvA.roa (hash: yfPP93JQllNK5aLLASi/RUmEtM270jETA3o9ZRbSPvY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/PE0_sETrHAoRvgYCrO74jl9dLd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 12:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f3:89:7a:1b:eb:d5:9e:08:65:6a:fe:cb:08:99:fe:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4d3fb044eb1c0a11be0602aceef88e5f5d2ddf
Validity
Not Before: Dec 6 12:01:04 2025 GMT
Not After : Dec 7 12:01:04 2025 GMT
Subject: CN=2f1921869215f191e787ebf6057e7a8d7284c62f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:cc:36:db:e2:ff:1e:08:cc:38:4d:97:cd:ba:
f1:31:f0:00:c5:01:e6:a1:12:24:55:af:b8:37:64:
2c:43:1d:ac:e8:4e:57:02:7f:31:e7:22:10:06:07:
5d:cc:16:6c:a3:3d:83:61:06:a8:03:2c:e9:91:34:
6d:f0:e8:de:be:8e:f4:58:ed:3c:67:43:58:2d:8e:
96:19:43:c0:df:72:f9:03:02:df:22:70:bf:e7:70:
ef:a4:2b:af:34:4f:58:2b:cb:e3:dd:5b:3d:d4:4b:
74:cf:f8:7e:60:b2:b6:83:8e:ae:bb:ce:c1:50:7b:
81:97:2a:48:4d:44:df:e0:42:02:83:9e:ca:fe:f3:
da:7c:7c:12:00:fa:c9:6e:1a:48:98:34:49:b2:db:
ae:a3:50:d6:4c:56:1a:78:95:5d:e3:9e:5d:aa:2a:
90:c2:dd:05:eb:3c:ab:f5:c6:54:18:95:35:89:f3:
2d:c9:ba:07:18:44:cf:f2:82:8d:4d:54:69:43:f9:
19:b6:9b:14:32:0d:cc:de:f4:2a:69:4b:ed:0d:63:
d8:1e:7d:d1:5c:6a:b9:a3:7f:dc:f1:a2:e9:95:5d:
a0:ed:f4:8e:eb:88:46:36:af:19:b3:91:69:7b:3e:
f1:5f:9a:7f:4d:51:77:7b:01:67:03:59:04:58:8b:
20:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:19:21:86:92:15:F1:91:E7:87:EB:F6:05:7E:7A:8D:72:84:C6:2F
X509v3 Authority Key Identifier:
keyid:3C:4D:3F:B0:44:EB:1C:0A:11:BE:06:02:AC:EE:F8:8E:5F:5D:2D:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PE0_sETrHAoRvgYCrO74jl9dLd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:c2:fd:40:0f:3e:8f:27:35:37:f4:9a:bf:d7:4c:ef:b2:2c:
11:08:60:ad:20:34:0e:2e:bd:06:e1:3c:d5:1b:21:be:90:f0:
1b:19:ed:8a:04:4e:ff:c5:23:2f:ba:e6:9f:6a:09:56:28:d4:
ef:b8:e2:48:9f:a6:75:09:f4:98:10:95:87:7e:84:63:66:a2:
7e:66:57:41:10:94:34:3f:76:4f:a1:99:8e:de:bb:9e:54:cc:
8b:5b:91:99:d9:5d:b4:2a:fa:5e:e8:1f:d6:6e:97:7b:f3:2e:
65:1b:37:e1:f5:ae:39:c9:4c:a9:e5:51:9d:f1:c7:cf:cb:ca:
7c:17:6e:80:c7:4c:3d:a8:dd:b5:a4:2e:e1:9c:aa:43:90:9e:
2c:9e:72:b6:33:b6:9c:81:ef:fc:90:61:8f:70:c2:1a:54:9e:
89:9f:5f:d2:bb:39:5c:8b:f1:23:6e:a8:d4:6b:df:4e:1e:12:
f9:f4:ec:eb:3d:28:98:73:4c:e3:60:c4:2c:49:26:d8:12:a6:
4d:e3:d1:02:0e:9a:d4:90:ff:d6:2f:ef:ba:82:47:5e:0e:28:
fb:cb:3f:ed:d1:14:3a:0e:55:ab:1c:75:30:dd:eb:27:96:52:
a4:31:c3:5a:98:ef:ec:ad:11:e2:aa:ec:06:9f:c3:c1:d3:00:
28:97:a8:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:47:05 2025 by rpki-client