This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft
File: 1gR16-fwfXQVPLHMozjBbYAfRfc.mft (raw, json)
Hash identifier: 1Jl7rPwVt0Q+LSPkRODZ06cwI+bnU0dAWfbBAwKW/NQ=
Subject key identifier: FC:6A:AA:D1:69:E4:45:67:FD:19:01:96:20:A9:A0:19:C5:3A:E6:92
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 019B3645773D91DC02995D4C5D94409ECAB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft
Manifest number: 184A
Signing time: Fri 19 Dec 2025 11:01:20 +0000
Manifest this update: Fri 19 Dec 2025 11:01:20 +0000
Manifest next update: Sat 20 Dec 2025 11:01:20 +0000
Files and hashes: 1: 1gR16-fwfXQVPLHMozjBbYAfRfc.crl (hash: n1rT6VPF30K0S37OEI5D9wRPzw0YSpKEwWD6dS7vcgg=)
2: 1x058ndDZHjc4S074b7C6G2o0KQ.roa (hash: 6NqrEtmwZV1lsLbsJ/bQBPnqsNTZmovuYZMqK+3nGes=)
3: 51SUNS4NzE-NFlYbOxa6dVSJlJg.roa (hash: pz2zCbZpIM5OE18+MtuDbYpRKziF5XB+qaDVBI26k5U=)
4: 6eBmTb7oTFjvB-t6q34h4uDQFck.roa (hash: YpMUNodMXgyKm77uqfvoskg+Hsw/cdeBYzj75L2nGxI=)
5: DF88ZnxNDnDdL7m_tpQtBOrCA5c.roa (hash: i5iFKm2PhqfkKwRSQfA3liCU+8QARl8+rKyoXe3x8yQ=)
6: HoplqEj-n_AFspE4Wkk6llxhUjs.roa (hash: XwYiYjxVBKz7NNA9iHsZMV69zxlIHiKWQZD6RKH52y0=)
7: PKx0bsHKaxWX-4t6b4C2oQj6ZdA.roa (hash: A8fByKFvsFqD6jsKpJ3oefFEQhPGUAvgn7emwJzwq9M=)
8: YaXF2_UOTL0a5rPBedbLeK27FfI.roa (hash: cO7ZZuKJbU9lC+DFXgCl+Dg10QqzkTTDSRwwBODyAvU=)
9: dMoy1ocOmEzk4dYBdRWtDeFZXh0.roa (hash: VXtb1jeW1jL5ZIe+3y/JZP2SrUZOEss2tqQVUdmb0N4=)
10: eIIy3gr4iW31K7Z0TDyYfiPIC20.roa (hash: 1OhLz2GkEhqW74cgO0W31kCn0nMoyh5rygPNaedp7uk=)
11: m7QQoFX-u7UYoA41yiP24F7uP9s.roa (hash: +WD8froPo/LUjMw2nwzZtOdRqdsnPQ5Rv0Au1qYv4lg=)
12: nHbgCrwKMfQBPZkSmNy_cFpl3S4.roa (hash: WWP6Qvn5sb0v16R7y7lOMfY54UvOgjr7TyOI6hQ1twA=)
13: p-NLwsw4XZb2x84j5S8WR2nP2QY.roa (hash: dy84ZCh6OBzC5pABeBNPTTlXjsQiBBFHY7p7FUFXzcQ=)
14: rfxFRoMAK5UZ3QXGjh3uSKRDsCI.roa (hash: B0jP1n50rUzyEhb8sNQfRdBvFRnGYSNgdCNKMzpwhpA=)
15: ubCtS1VfMlpqc29JR5yJamthyao.roa (hash: UKhp7stItN8bt5SS2ldJQEedsCZck6Jd4Nur78oK3eA=)
16: y74zxfc3T7TxFAzKOoJ3K2ImCgQ.roa (hash: 9cXqO6+RkqL3vFTAJ96TMt5j8uyMT6hOmvxxHIxVvmk=)
17: yYg3T8Ah1yuxHz6D5ehi7z823QI.roa (hash: BG6boV1lZkhAvIrJNBVNIFX81voSjiHSdy+yfJw4k5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Dec 2025 07:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:36:45:77:3d:91:dc:02:99:5d:4c:5d:94:40:9e:ca:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Dec 19 11:01:20 2025 GMT
Not After : Dec 20 11:01:20 2025 GMT
Subject: CN=fc6aaad169e44567fd19019620a9a019c53ae692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:2b:ec:ef:ec:63:9d:f1:65:4b:ba:12:08:44:
e7:da:b2:9b:5c:34:5c:22:e1:39:32:9d:ca:97:1f:
25:08:15:4b:41:c7:9e:f8:6e:91:fa:88:b6:8e:ed:
4e:77:f6:3c:b7:25:27:9b:5f:83:31:af:ea:b4:08:
ac:09:af:96:7d:c6:13:95:3b:8b:dc:04:90:af:97:
82:4b:61:fc:06:45:4d:0f:2a:20:17:ba:43:6d:ad:
1a:f1:a9:11:e8:bd:2f:26:1f:d1:22:b7:34:26:4a:
43:21:eb:ae:89:03:5e:7d:ee:a2:43:bf:01:78:23:
0f:8f:08:be:e4:cd:fa:a4:c8:99:c9:36:b9:d5:20:
ee:f2:5c:65:57:0c:4e:66:f0:76:1d:14:54:17:6a:
6e:83:71:15:f1:cf:98:14:60:dc:fe:d4:06:9c:cc:
7e:36:13:17:ec:2a:0b:5b:c6:38:73:db:db:f8:96:
2b:f6:4c:2b:20:32:cf:57:81:ae:44:d6:74:fd:0a:
db:6e:b5:57:63:75:57:b7:c2:ef:d4:63:c5:a5:15:
df:6b:0b:dd:93:06:61:be:f1:3b:a5:f1:fd:83:b9:
f6:6c:af:8d:f4:8a:2a:e9:23:e4:af:e3:62:44:c8:
82:70:70:e2:ce:d6:56:56:08:98:c5:60:14:b3:2e:
a5:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:6A:AA:D1:69:E4:45:67:FD:19:01:96:20:A9:A0:19:C5:3A:E6:92
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:35:1c:6e:88:9e:0f:a1:09:44:ab:d2:60:6a:b9:82:5b:55:
04:62:2a:b5:ac:de:74:b5:b4:c0:8d:7d:96:6d:9c:9b:fb:51:
77:d8:fd:41:ce:82:6e:c8:63:d0:1a:62:a1:41:f8:47:8f:6f:
51:1a:6b:cb:ee:e0:09:5f:c4:d6:51:aa:7a:f9:d4:ed:59:59:
eb:b6:27:12:11:c6:96:9c:88:6e:a6:4d:d3:dd:ad:59:2b:53:
f4:6c:3f:1f:36:e0:70:99:24:04:ac:fe:bc:2b:67:a8:ac:4e:
ee:14:f7:98:4a:ed:0f:84:19:86:3c:80:f1:c1:4b:5c:d9:0b:
14:07:5f:66:d9:7c:a7:54:1e:18:71:49:11:c5:d4:05:51:6e:
1e:4a:23:fe:9e:7d:50:5b:97:a1:a2:85:fc:67:b1:86:7c:37:
46:b4:bc:2d:32:bf:38:4a:be:ab:69:8e:24:5b:24:ab:32:f3:
b2:6d:f7:6d:e2:07:5a:22:3b:46:f6:b7:3d:cd:c6:3c:28:cc:
58:4f:a1:a4:ac:5e:f9:23:e3:0e:2f:5e:e1:96:f6:7f:93:1c:
d5:fb:4e:32:70:fa:2d:17:29:5d:3b:96:ea:55:95:a4:48:f7:
bd:66:09:dd:73:88:5c:08:0a:a7:ad:d3:84:6a:5e:78:9d:22:
ed:c3:b1:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 15:06:42 2025 by rpki-client