This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft
File: Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft (raw, json)
Hash identifier: VQTTJZvYWVMhIfCWoe+NhvvZg+dQYsf54jd3NbjNWq0=
Subject key identifier: C0:BE:E8:3E:DC:CD:E5:5D:9B:12:EF:FE:31:FC:6A:2E:AF:20:0A:0A
Authority key identifier: 15:FF:A0:42:11:43:01:36:8B:40:69:AB:D6:8A:1E:FB:AC:47:FD:CE
Certificate issuer: /CN=15ffa042114301368b4069abd68a1efbac47fdce
Certificate serial: 019AF19ABEA9BC1E1022A1A9D63A66873FB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft
Manifest number: 178A
Signing time: Sat 06 Dec 2025 03:00:41 +0000
Manifest this update: Sat 06 Dec 2025 03:00:41 +0000
Manifest next update: Sun 07 Dec 2025 03:00:41 +0000
Files and hashes: 1: 6u0Asdv1MK3aB_6LSzkcot6bBic.roa (hash: Unsvdd0urMCZdw1KCmFCBV2OeTjQKyc3NTKlxR83W+g=)
2: AGOQH07CbOv-ptcClhHBm5EQp-4.roa (hash: LGaMLQ5/MFjNXGL657nV7BSt6luG57ujXGiYSAKsY5E=)
3: CgmXJQva1qvMkAOiBhsqvURLbN0.roa (hash: 0flnpb/AlF5IKbXF0dMfdAeaC/cv9aKQrvMtfaRj4W8=)
4: Ff-gQhFDATaLQGmr1ooe-6xH_c4.crl (hash: RrQa6acOqd4Vmr4H55IjJGDlQ/pMHk1Ryu9GISLa6ec=)
5: G_eCdr_CtHHYdvx_wsfrWGJQP2E.roa (hash: m4lFNVsxQJtYcVSh1StMkG9TI91ecQZqyflVHyNHncI=)
6: O-SsLGZDDis9x7Hdr9bjMmd2BoY.roa (hash: HishzW2LB7SBBdcbiiTEBoYKX9Z+I6RhesW10ogdrys=)
7: UezMgLKKI-WhO1czQILLBRClTv8.roa (hash: AnuM+KLFPB1elW7al0sjIDYMJlOpGTtEqCymfhnESgE=)
8: X_c4nULo2I9_8M6Tnr9LOGMWT4o.roa (hash: OYUYahQ2k3gq1hCdgyN2LHpOg006aLSKZ8M7SU5zas0=)
9: pSyaNNQfHIxFiSnrATHPuSm-jfo.roa (hash: OeYszJRRDpsrfoggTZzuEZA5/POYAPXra4Ky725R5xQ=)
10: zXrOjxGX_DI-tXkFUtLuBXotuic.roa (hash: mrO+89Y/llkPbD0Oqqb4OVuncS888EEiNoMgxFZFl6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:9a:be:a9:bc:1e:10:22:a1:a9:d6:3a:66:87:3f:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15ffa042114301368b4069abd68a1efbac47fdce
Validity
Not Before: Dec 6 03:00:41 2025 GMT
Not After : Dec 7 03:00:41 2025 GMT
Subject: CN=c0bee83edccde55d9b12effe31fc6a2eaf200a0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5f:9d:da:a6:2e:7f:81:4e:e8:14:9f:aa:fe:
bc:36:b6:d9:87:fb:b4:a2:de:06:d3:a5:4a:a9:3e:
fd:d2:0b:82:25:ca:3f:18:2a:52:7b:20:90:38:0d:
7d:36:d3:43:ec:ac:65:ab:6c:65:af:07:23:5b:b9:
72:7b:37:39:9c:8d:51:e6:6f:e1:59:4a:de:3d:cb:
77:33:1b:e3:12:bc:78:74:eb:a8:cf:c5:7e:e4:28:
03:78:b0:db:58:4e:33:ac:dd:41:05:69:94:0a:1e:
71:e1:ce:e3:dd:58:b7:00:26:45:2c:86:21:15:26:
85:cd:0b:91:7a:96:cb:7b:2b:6e:44:92:cb:82:14:
30:8a:b8:64:2b:12:30:3b:31:68:d7:92:1e:6f:dc:
06:51:a4:c8:5e:32:83:b9:61:9f:a9:26:91:43:83:
df:71:f3:78:0b:18:1d:e4:de:8e:49:03:f0:87:c7:
35:c0:7d:38:c5:e5:fc:a5:b2:a4:96:c4:a3:36:60:
5a:eb:61:a2:26:73:b7:35:ea:3e:dd:ac:3d:f2:82:
34:68:9d:53:78:02:5e:d9:58:2d:85:7d:e5:38:70:
0b:22:6e:44:26:5c:4f:7b:72:1f:38:b5:36:e3:82:
4d:ab:8b:6e:b7:c3:a5:08:f0:54:6f:2f:4f:5f:e8:
a0:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:BE:E8:3E:DC:CD:E5:5D:9B:12:EF:FE:31:FC:6A:2E:AF:20:0A:0A
X509v3 Authority Key Identifier:
keyid:15:FF:A0:42:11:43:01:36:8B:40:69:AB:D6:8A:1E:FB:AC:47:FD:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:2b:10:3f:51:15:8b:68:6e:9b:5d:ca:1d:20:ac:88:09:f6:
a0:8d:6e:e3:33:46:94:ef:08:e3:7c:bc:3f:2f:63:df:21:76:
4f:ee:1c:56:f0:6b:a5:5b:61:be:44:ed:a3:c9:c3:43:02:14:
80:43:8b:9f:42:f4:25:4c:a5:f5:82:26:fe:22:6d:1a:83:bb:
3c:46:8b:32:33:9a:a5:5a:6a:a0:b7:ea:48:8b:00:b7:73:e6:
7b:8e:56:bd:f7:d5:ef:b6:b5:cb:fc:04:57:6d:dc:d6:2b:06:
7b:e0:f2:96:2f:9f:1e:f6:ab:a3:38:b3:81:d8:41:f1:f4:21:
f3:fd:16:17:94:d0:e6:1a:23:1a:36:e1:c5:ae:e4:8c:ac:5e:
69:48:ab:08:e1:22:51:1c:38:66:e8:0a:77:43:85:53:4d:58:
27:c3:30:8b:d9:cc:f5:d0:44:33:86:52:13:58:b6:7c:42:ea:
c8:cc:cb:e4:ee:40:06:e0:31:d2:91:07:65:5b:66:a9:15:a9:
1e:32:74:67:ff:05:17:98:7b:68:7a:dc:24:d3:c0:73:21:c8:
92:f3:14:51:b9:f0:65:fc:2b:53:c3:d4:13:e8:27:d7:b7:65:
73:17:67:d1:1f:b6:06:6e:8f:d5:fc:77:cd:a5:c9:9e:10:38:
71:78:37:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrxmr6pvB4QIqGp1jpmhz+1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZmZhMDQyMTE0MzAxMzY4YjQwNjlhYmQ2OGExZWZiYWM0
N2ZkY2UwHhcNMjUxMjA2MDMwMDQxWhcNMjUxMjA3MDMwMDQxWjAzMTEwLwYDVQQD
EyhjMGJlZTgzZWRjY2RlNTVkOWIxMmVmZmUzMWZjNmEyZWFmMjAwYTBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsV+d2qYuf4FO6BSfqv68NrbZh/u0
ot4G06VKqT790guCJco/GCpSeyCQOA19NtND7Kxlq2xlrwcjW7lyezc5nI1R5m/h
WUrePct3MxvjErx4dOuoz8V+5CgDeLDbWE4zrN1BBWmUCh5x4c7j3Vi3ACZFLIYh
FSaFzQuRepbLeytuRJLLghQwirhkKxIwOzFo15Ieb9wGUaTIXjKDuWGfqSaRQ4Pf
cfN4Cxgd5N6OSQPwh8c1wH04xeX8pbKklsSjNmBa62GiJnO3Neo+3aw98oI0aJ1T
eAJe2VgthX3lOHALIm5EJlxPe3IfOLU244JNq4tut8OlCPBUby9PX+igwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMC+6D7czeVdmxLv/jH8ai6vIAoKMB8GA1UdIwQY
MBaAFBX/oEIRQwE2i0Bpq9aKHvusR/3OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmYtZ1FoRkRBVGFMUUdtcjFvb2UtNnhIX2M0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi8xNDliYzUtNTFhYS00ZTdiLThmMDMt
YjczYTM2ZDkzOWIyLzEvRmYtZ1FoRkRBVGFMUUdtcjFvb2UtNnhIX2M0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi8xNDliYzUtNTFhYS00ZTdiLThmMDMtYjczYTM2ZDkzOWIy
LzEvRmYtZ1FoRkRBVGFMUUdtcjFvb2UtNnhIX2M0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhysQP1EV
i2hum13KHSCsiAn2oI1u4zNGlO8I43y8Py9j3yF2T+4cVvBrpVthvkTto8nDQwIU
gEOLn0L0JUyl9YIm/iJtGoO7PEaLMjOapVpqoLfqSIsAt3Pme45WvffV77a1y/wE
V23c1isGe+Dyli+fHvarozizgdhB8fQh8/0WF5TQ5hojGjbhxa7kjKxeaUirCOEi
URw4ZugKd0OFU01YJ8Mwi9nM9dBEM4ZSE1i2fELqyMzL5O5ABuAx0pEHZVtmqRWp
HjJ0Z/8FF5h7aHrcJNPAcyHIkvMUUbnwZfwrU8PUE+gn17dlcxdn0R+2Bm6P1fx3
zaXJnhA4cXg3Vw==
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:02:54 2025 by rpki-client