This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/8366ae-575d-4fde-8e92-0089944980ca/1/1RXy6RSc4bQoyPHt_ACSFeKEf1U.mft
File: 1RXy6RSc4bQoyPHt_ACSFeKEf1U.mft (raw, json)
Hash identifier: bNIjAueNB3ENHS4daB4aS4+of4Wj09NYo7MnrnmL/Yo=
Subject key identifier: 26:6F:26:DD:43:4B:B7:21:D4:31:C2:01:A3:F9:C6:D0:59:10:52:E3
Authority key identifier: D5:15:F2:E9:14:9C:E1:B4:28:C8:F1:ED:FC:00:92:15:E2:84:7F:55
Certificate issuer: /CN=d515f2e9149ce1b428c8f1edfc009215e2847f55
Certificate serial: 019AF31BB7C071C597388306C88D46831DE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1RXy6RSc4bQoyPHt_ACSFeKEf1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/8366ae-575d-4fde-8e92-0089944980ca/1/1RXy6RSc4bQoyPHt_ACSFeKEf1U.mft
Manifest number: 0504
Signing time: Sat 06 Dec 2025 10:01:11 +0000
Manifest this update: Sat 06 Dec 2025 10:01:11 +0000
Manifest next update: Sun 07 Dec 2025 10:01:11 +0000
Files and hashes: 1: 1RXy6RSc4bQoyPHt_ACSFeKEf1U.crl (hash: 9IZtLKkUb9gQ2ABzpuvE3jms5T1/vkGcfpAL7nL/sIo=)
2: D3Qa_sAxJ4QAW9BgsqA95qoNdoU.roa (hash: gHeiDeVEOHYv0WXJX1y/YBwNlFOyEUt5hFygVZ9yIyc=)
3: YNsqLkitHpqkjiltdLgc2bdx6rs.roa (hash: 3Qov5yHW6YQLGF3KdMXPXf4671PbN4pLA5bsaPPsRlI=)
4: gkfVq5pqris09sYZ6oxV9_B3k7k.roa (hash: txlMX2TP/JiHw0qHy7bbrrf1DRw3ThhHjdL7DQDHFqs=)
5: zi6tgxxdXu-KjRvwqkHo4TAbCCY.roa (hash: /Ka11sy39OKnCI674OTDKtIC713gWaXNerptag8ixr0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/8366ae-575d-4fde-8e92-0089944980ca/1/1RXy6RSc4bQoyPHt_ACSFeKEf1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/8366ae-575d-4fde-8e92-0089944980ca/1/1RXy6RSc4bQoyPHt_ACSFeKEf1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1RXy6RSc4bQoyPHt_ACSFeKEf1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 10:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f3:1b:b7:c0:71:c5:97:38:83:06:c8:8d:46:83:1d:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d515f2e9149ce1b428c8f1edfc009215e2847f55
Validity
Not Before: Dec 6 10:01:11 2025 GMT
Not After : Dec 7 10:01:11 2025 GMT
Subject: CN=266f26dd434bb721d431c201a3f9c6d0591052e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:79:3c:23:24:11:44:67:43:dd:c8:c1:81:88:
82:9e:36:dd:16:f3:99:4f:46:b6:71:25:8b:37:58:
17:68:67:ff:69:79:70:01:0d:c5:2f:a4:31:e6:7a:
0e:aa:0c:e1:b2:61:26:3a:3c:ca:59:72:52:b7:41:
a6:f2:be:54:af:26:f9:57:39:28:60:44:68:d1:94:
1d:68:8f:de:d8:b4:b7:06:49:d6:90:70:d2:69:0e:
37:71:3c:08:0a:63:41:34:1a:74:4a:9f:65:fe:d1:
d8:61:89:c4:08:27:db:c7:ad:ba:23:26:0d:4f:87:
fd:35:60:67:c6:4c:f9:05:1c:05:09:2a:48:01:c7:
de:db:10:92:b8:6f:0c:e9:45:57:02:bd:02:ad:e3:
34:ee:3a:55:01:82:e9:0c:93:a1:d5:d5:2b:c5:d3:
33:6e:dc:d0:59:75:0a:e6:06:5d:32:e9:79:84:61:
9b:6b:b3:10:76:33:03:d7:9b:61:ed:6e:30:b5:4e:
18:95:79:0a:9d:20:fa:a3:08:29:be:96:64:7f:d4:
d3:21:51:4e:1d:5e:bf:b6:42:30:90:5d:7c:97:5a:
e0:7c:93:18:c6:3e:01:c4:e0:dc:e3:d1:27:0c:c4:
4f:24:70:c7:7f:60:f4:b5:6e:7e:f8:87:90:9d:17:
84:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:6F:26:DD:43:4B:B7:21:D4:31:C2:01:A3:F9:C6:D0:59:10:52:E3
X509v3 Authority Key Identifier:
keyid:D5:15:F2:E9:14:9C:E1:B4:28:C8:F1:ED:FC:00:92:15:E2:84:7F:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1RXy6RSc4bQoyPHt_ACSFeKEf1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8366ae-575d-4fde-8e92-0089944980ca/1/1RXy6RSc4bQoyPHt_ACSFeKEf1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8366ae-575d-4fde-8e92-0089944980ca/1/1RXy6RSc4bQoyPHt_ACSFeKEf1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:73:73:89:db:70:d9:81:4d:4a:34:f8:c2:6e:df:57:ac:5b:
f8:11:b3:27:bf:91:14:8e:d2:9c:7e:ac:3b:3a:8d:70:7f:ff:
f0:d9:03:6e:d8:54:29:6c:3e:28:4d:27:38:91:a6:a6:8e:5e:
7b:14:5b:55:ff:30:3f:9c:49:14:ae:3e:d0:ae:9f:be:01:12:
a3:a0:f2:1d:86:84:a6:bf:5b:b6:a3:33:df:da:75:3a:ed:19:
d8:8a:e0:7d:3a:aa:18:e3:c3:54:3d:0b:44:83:7f:6f:22:99:
22:43:a7:61:a2:0b:49:ca:83:f0:8c:f9:50:bc:94:ef:03:4d:
bf:7e:f4:71:26:5f:ff:6b:c7:0c:8e:ed:da:b0:a6:f0:4b:d5:
03:79:42:08:ab:ad:12:d3:55:af:67:8d:21:a2:ef:fa:20:5d:
4b:a8:b0:9d:2d:6c:0c:d7:d8:0b:c7:de:57:52:3c:5c:4d:4b:
a4:ca:16:8f:8e:84:59:a3:c3:cc:36:f0:ec:d9:1e:40:73:db:
f4:7d:03:51:bd:d0:0a:b5:3f:6f:8e:6e:52:02:e9:7b:81:03:
c6:c4:42:fa:3c:dc:2d:53:d2:8f:73:35:2e:e8:98:22:55:2f:
9e:43:98:ed:dc:2c:dd:eb:6b:a0:bb:82:0e:76:52:d0:c6:eb:
af:39:ba:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:40:32 2025 by rpki-client