This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.mft
File: rV7aCh50ecTKeP5BxY0X6dE7Z6o.mft (raw, json)
Hash identifier: Imvm072Qwvu7fs3fQmwpD28BVWGwJTy7Rs+HPSsByp4=
Subject key identifier: 42:5C:47:7E:1E:F7:48:5C:C7:2F:D6:4B:9F:7F:F2:29:A8:2E:F7:09
Authority key identifier: AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA
Certificate issuer: /CN=ad5eda0a1e7479c4ca78fe41c58d17e9d13b67aa
Certificate serial: 019AF19AF00F39CF59493B20CAEB3713517E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.mft
Manifest number: 17D3
Signing time: Sat 06 Dec 2025 03:00:54 +0000
Manifest this update: Sat 06 Dec 2025 03:00:54 +0000
Manifest next update: Sun 07 Dec 2025 03:00:54 +0000
Files and hashes: 1: EkAtT1wisUb57TFJYIYcJsxKwsk.roa (hash: bTDaJJ3OE5tSiwj9edVtEIcHo7Qfr7K+HpTgz6mXWHU=)
2: H401Lqlj2gbFoYf6OtBoSN06cFw.roa (hash: vYELwnReHKGr6B9/fDrX/dIYrSBT2mFYuU7np1Kq32A=)
3: J32BC54TOUps-dXCn8BI2QcAuAk.roa (hash: fXhrWHP614GKDcqvfN3gZvjxypp00BlLNxmxyn4+I4c=)
4: M3stNuz4pD7ZjpMskqzv9XlCj9A.roa (hash: NMOxvF7KRmh06hpPpSGd+qY4LB/onM0QHYCbQ+IenlY=)
5: rV7aCh50ecTKeP5BxY0X6dE7Z6o.crl (hash: XdadS/QmHpM3GRofAV1q9ZMgb7mG5QlIKFRay4EF2k0=)
6: wuzH2my_mYDAlouZ5aRNnbo5Kzg.roa (hash: 8mZfF16h11ohkGa7jPqqzWnLZjCYH45hphmVsvoXp/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:9a:f0:0f:39:cf:59:49:3b:20:ca:eb:37:13:51:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad5eda0a1e7479c4ca78fe41c58d17e9d13b67aa
Validity
Not Before: Dec 6 03:00:54 2025 GMT
Not After : Dec 7 03:00:54 2025 GMT
Subject: CN=425c477e1ef7485cc72fd64b9f7ff229a82ef709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c7:fe:19:1a:04:61:ea:ab:91:09:25:7e:73:
a8:07:5a:62:59:0c:5a:be:f2:be:eb:fb:d8:2c:91:
64:4e:3a:ea:1f:3f:a3:a8:25:2a:b4:37:0d:06:ff:
35:fe:e5:55:62:83:92:6d:11:10:37:d3:19:d4:3b:
02:bf:64:e6:aa:c5:a0:96:fe:3c:1e:e5:ab:7a:99:
7c:b3:48:78:43:e1:39:02:01:ab:9e:8f:91:ce:50:
ab:a9:07:06:13:2e:ae:2e:d1:a4:65:02:a0:f3:28:
79:f4:26:c5:d3:ca:33:ad:46:38:db:2f:cd:49:6a:
2b:75:e8:41:0c:51:54:0b:c9:6c:00:e1:8d:c1:f1:
8d:0c:37:67:34:f9:db:e8:ca:a4:76:f2:cc:ab:8d:
c4:f7:1f:34:9d:3e:f3:da:8c:7d:c2:b9:4c:c9:71:
46:f8:7f:08:ed:90:5c:18:db:e7:b5:e3:83:af:ff:
ae:0c:ae:d7:71:a2:eb:92:07:9d:93:41:99:6e:a1:
b9:55:c6:ff:c9:f9:78:da:44:85:02:70:16:76:95:
96:6d:93:6a:a5:1f:bc:50:4b:6e:11:f0:dd:f9:97:
10:11:22:ad:d5:74:44:ce:76:1b:1b:3f:dd:86:bc:
d0:33:07:3b:40:48:6f:3c:55:18:b3:60:f7:5f:ad:
84:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:5C:47:7E:1E:F7:48:5C:C7:2F:D6:4B:9F:7F:F2:29:A8:2E:F7:09
X509v3 Authority Key Identifier:
keyid:AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:65:89:f5:97:a2:6c:b6:f0:44:71:45:49:cb:d8:0c:a9:28:
80:0d:31:18:12:18:09:6e:8c:a4:89:06:3e:4b:8b:0a:17:ca:
63:26:56:a1:76:3c:51:5d:b6:e1:a4:cb:f8:9b:83:7a:8e:55:
67:04:d7:eb:5c:d7:11:61:cd:e2:d7:42:e9:b1:51:5a:a4:e2:
35:8c:be:5c:27:de:73:9c:de:7b:cb:c0:ae:ea:3b:96:b0:61:
b4:06:89:20:24:3e:bd:c9:24:5b:fb:37:7e:be:e1:c0:55:a4:
a3:f9:e4:ee:92:ea:20:bb:bf:ec:f6:5f:3b:4d:28:bb:7d:f5:
02:2a:4c:2c:2a:25:79:2c:51:20:eb:ed:8e:23:0c:58:51:82:
e1:93:52:fb:51:90:02:df:33:f7:c4:a9:db:c9:dc:78:a7:88:
97:57:68:9a:ef:49:48:e5:34:14:22:4c:13:76:38:2f:16:b2:
7f:d6:1c:5f:33:77:68:ca:f1:5d:97:cc:8b:0d:59:26:d8:f8:
95:be:9c:16:13:c9:54:5d:fa:7c:d3:25:ba:8e:f3:1f:fa:f2:
cc:b5:3a:b1:c8:d6:df:46:4c:46:89:0b:ca:74:ad:ca:6b:69:
32:bd:21:14:15:6b:85:d2:d9:34:39:82:66:6a:0a:55:93:de:
8d:6c:9a:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:30:11 2025 by rpki-client