This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft
File: rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft (raw, json)
Hash identifier: 9F4HDoX8R+c7D9R+Z0m6hiGqHGUkCclyqdCQAX1EWa4=
Subject key identifier: FE:EE:97:82:C4:F9:D5:C0:C2:99:AB:8E:5C:FD:BF:90:32:12:50:29
Authority key identifier: AD:80:67:9B:96:CA:32:2B:FA:85:50:0C:AB:20:6C:6D:47:41:2E:DF
Certificate issuer: /CN=ad80679b96ca322bfa85500cab206c6d47412edf
Certificate serial: 019AF19AAAE355348CFCE9B89BB9EA69EA6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rYBnm5bKMiv6hVAMqyBsbUdBLt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft
Manifest number: 176A
Signing time: Sat 06 Dec 2025 03:00:36 +0000
Manifest this update: Sat 06 Dec 2025 03:00:36 +0000
Manifest next update: Sun 07 Dec 2025 03:00:36 +0000
Files and hashes: 1: 47RTgndCr3WK9uvLA47Mf3Veeq0.roa (hash: nqkQXS//GUp6pq9hI3HV70pQJ3Mrf63Mr+wizeUmh6Y=)
2: AjQ1qmq1QAXjvAuMHhBzyxf3AQQ.roa (hash: PhWZ+RwWSScRWkGQiHT3k31EkR3n/BR9waZYYFuBjy8=)
3: BqxQqMXfVsv8J4WaLs72INfcI-w.roa (hash: E4uf1aplKzZlY/g2WLAMnV1cBOEsVJ+7b0auNGq9law=)
4: EbiER1YyYwAg31JRo_4MT9hutgE.roa (hash: 58aF5sG9ezc8MIrgsG64fLq6UpWN9k1MeWSXyTcyYrs=)
5: eEjb8DAP9bahq2O5j_HQb2xzlO4.roa (hash: fOyU7lhmD+ZIHBvuQudHEnoFTSwbSNrbIy4UHUxoCs0=)
6: rYBnm5bKMiv6hVAMqyBsbUdBLt8.crl (hash: GJYJ+yDWrweD8zVuZuw8iTMBGiYICZNq5z/jMbj6IMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rYBnm5bKMiv6hVAMqyBsbUdBLt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:9a:aa:e3:55:34:8c:fc:e9:b8:9b:b9:ea:69:ea:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad80679b96ca322bfa85500cab206c6d47412edf
Validity
Not Before: Dec 6 03:00:36 2025 GMT
Not After : Dec 7 03:00:36 2025 GMT
Subject: CN=feee9782c4f9d5c0c299ab8e5cfdbf9032125029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:fb:c4:03:32:c7:c3:ea:73:de:7c:c7:b8:93:
7f:79:d6:2d:f2:d7:b3:17:2e:70:d4:8a:30:69:48:
df:45:ad:62:0f:96:b0:ec:af:c1:08:6f:fc:c7:46:
77:22:34:e1:cd:1c:50:62:d2:19:24:a8:09:77:35:
04:a2:a7:32:95:cd:63:c9:f8:0b:ed:7f:ca:5d:3b:
39:c0:70:9c:ea:e0:11:fd:60:2d:31:55:50:2c:36:
0f:49:b0:ab:df:dd:aa:19:19:e8:87:36:99:c7:62:
86:f4:26:9d:5e:5b:01:09:34:48:34:72:d2:a9:86:
38:53:ea:e8:88:a1:80:f9:70:5d:03:f1:a0:c4:f9:
43:9a:1a:fe:68:62:b6:a7:75:5e:35:d8:11:bd:a4:
8f:f3:ff:89:d4:ea:f3:06:78:e2:e5:24:ae:cc:17:
4a:4d:ed:99:0e:08:d0:ed:78:4c:39:6f:22:af:7a:
73:f3:73:47:4f:88:7d:e3:ae:1c:13:40:11:94:62:
25:77:5c:a0:db:47:39:6c:3a:3c:17:11:db:81:31:
e2:a1:67:42:4c:bf:73:81:d6:c6:a0:91:59:34:e4:
64:a0:aa:b0:e8:37:e3:51:79:bc:34:1f:77:59:85:
b1:c7:25:7c:be:03:ed:5f:c1:e8:53:3c:fc:99:f5:
1a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:EE:97:82:C4:F9:D5:C0:C2:99:AB:8E:5C:FD:BF:90:32:12:50:29
X509v3 Authority Key Identifier:
keyid:AD:80:67:9B:96:CA:32:2B:FA:85:50:0C:AB:20:6C:6D:47:41:2E:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rYBnm5bKMiv6hVAMqyBsbUdBLt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:13:fa:44:0e:7e:7c:11:74:76:7b:c1:48:11:0e:a5:5a:1e:
48:ae:88:2b:ac:b0:ce:b1:e0:45:f8:2f:74:61:f9:d6:97:f3:
55:76:c5:8c:af:f1:8f:bb:d6:e2:34:51:e4:43:51:b2:b7:d8:
d4:b0:ef:6b:d8:ba:fb:cc:a0:49:1e:65:5f:f6:6d:e5:ec:de:
75:2f:3a:46:db:29:75:d0:77:fc:32:b6:1c:10:5b:03:f9:44:
3d:c7:e0:ae:1e:df:b3:b3:c1:16:6b:82:38:3f:9f:ac:2c:24:
c0:e3:0e:55:d8:7f:cf:6c:74:a2:00:59:1c:31:00:0e:ef:86:
b4:86:d3:05:c7:80:35:ab:27:b0:f1:c2:b4:eb:04:c2:07:62:
fd:a4:5c:cd:15:e4:99:fc:98:02:9b:9c:97:7a:d0:de:e3:eb:
0a:e0:c0:86:54:c7:6b:67:1e:fe:aa:83:bf:79:0b:d8:d0:e9:
6d:75:3b:a3:68:41:13:ff:d0:0e:2a:10:2a:84:78:8d:bc:30:
4c:08:5e:a0:46:28:a0:15:81:0c:bd:97:49:50:85:25:85:85:
23:78:17:4b:0c:2d:ac:eb:9b:67:72:37:92:d1:a5:76:a2:00:
70:da:80:de:8c:26:b9:4e:c6:0a:de:37:7d:25:89:ad:15:33:
38:e9:33:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:10:38 2025 by rpki-client