This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/f1byiUjIMvLUNLtE1d4OoSJgGwU.mft
File: f1byiUjIMvLUNLtE1d4OoSJgGwU.mft (raw, json)
Hash identifier: sFcfZ8PKgs5Y2gGR3wBYM1ymgtfKxCg4kli6wb5hkdU=
Subject key identifier: 5D:17:11:35:D1:0E:F8:9A:30:3B:9E:05:66:BD:88:4E:51:F2:7F:49
Authority key identifier: 7F:56:F2:89:48:C8:32:F2:D4:34:BB:44:D5:DE:0E:A1:22:60:1B:05
Certificate issuer: /CN=7f56f28948c832f2d434bb44d5de0ea122601b05
Certificate serial: 019AF50AF291141F2AE6209970A78F291541
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1byiUjIMvLUNLtE1d4OoSJgGwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/f1byiUjIMvLUNLtE1d4OoSJgGwU.mft
Manifest number: 1763
Signing time: Sat 06 Dec 2025 19:02:06 +0000
Manifest this update: Sat 06 Dec 2025 19:02:06 +0000
Manifest next update: Sun 07 Dec 2025 19:02:06 +0000
Files and hashes: 1: NvmfsV1sm7XmyjVKzPOWhb7earQ.roa (hash: r7bWWSDXyiXMj/Swi3flONfAIYfEqRkATWw60gas71A=)
2: WPpLjvv6YbGI7GsTe1ygm0Vy3Lk.roa (hash: N+pPrOkjdISbUNAALF5nqmKzIaYbhj0lt6NwOuwgniw=)
3: f1byiUjIMvLUNLtE1d4OoSJgGwU.crl (hash: AdjAxDiG69IgENVpWhPePU1WyRRkiXM76iz757x6Ja0=)
4: tLoY5nfmVJWTJGYh886gVbz0Hf0.roa (hash: g2GCG3am8xDu8ahhY94JoBYaTCS9zIT5JVCSvfgRMSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/f1byiUjIMvLUNLtE1d4OoSJgGwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/f1byiUjIMvLUNLtE1d4OoSJgGwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/f1byiUjIMvLUNLtE1d4OoSJgGwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 19:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f5:0a:f2:91:14:1f:2a:e6:20:99:70:a7:8f:29:15:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f56f28948c832f2d434bb44d5de0ea122601b05
Validity
Not Before: Dec 6 19:02:06 2025 GMT
Not After : Dec 7 19:02:06 2025 GMT
Subject: CN=5d171135d10ef89a303b9e0566bd884e51f27f49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e1:3e:e1:99:a7:ff:6d:40:c7:39:b0:e0:63:
c0:a4:dd:58:b7:5e:af:75:b1:2b:44:8d:42:1d:cc:
a8:a4:a4:47:f9:4a:c0:b6:32:87:b8:48:24:27:27:
b4:75:83:a9:18:99:77:37:42:a5:de:a0:35:1c:bb:
88:78:23:54:b1:f1:50:5d:d6:47:03:84:72:3b:53:
70:9e:19:86:c4:d7:23:51:d4:07:5b:4b:e5:ed:e5:
e2:49:d4:91:75:93:35:37:28:8d:82:02:f9:fc:04:
29:70:9d:b4:ad:b3:cd:45:20:03:64:95:e1:c6:33:
37:9f:03:1b:2c:63:6a:ed:e6:05:80:15:dc:39:9a:
f7:21:4e:3f:aa:f8:d8:a9:a7:92:69:f3:a0:51:d3:
4c:78:88:aa:5d:e5:7b:92:53:fa:99:bb:2b:dd:c2:
dd:e4:ee:6a:5c:85:16:7d:b9:fd:99:5a:0a:aa:03:
ce:b9:9c:a7:a0:a0:07:ba:6d:c9:b6:d5:9c:1c:c4:
51:49:f3:49:80:41:80:e8:39:84:a3:15:ae:ca:83:
cd:5b:7b:20:0e:b5:a6:ea:39:b2:79:87:14:74:60:
38:a0:be:04:78:25:ca:dd:a1:4b:e3:0c:72:a6:6f:
e8:67:89:f0:61:3d:c8:aa:94:a4:e6:d9:30:fc:5e:
f7:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:17:11:35:D1:0E:F8:9A:30:3B:9E:05:66:BD:88:4E:51:F2:7F:49
X509v3 Authority Key Identifier:
keyid:7F:56:F2:89:48:C8:32:F2:D4:34:BB:44:D5:DE:0E:A1:22:60:1B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1byiUjIMvLUNLtE1d4OoSJgGwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/f1byiUjIMvLUNLtE1d4OoSJgGwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/f1byiUjIMvLUNLtE1d4OoSJgGwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:0a:bd:24:2a:e0:1e:9b:87:15:79:e6:6b:db:fe:20:2a:c2:
63:a6:99:8f:67:1f:75:bd:b5:60:b8:1a:8c:a9:cc:db:b1:12:
c5:3c:5d:38:4a:fd:f7:3d:46:b2:e4:22:55:ae:56:ed:20:1f:
6c:4c:43:57:35:71:ef:2c:11:a8:98:f1:11:1f:44:75:39:2f:
d2:ad:b3:52:ae:8f:d6:c5:ac:de:ca:25:67:74:2b:01:d1:8a:
f3:c4:c7:69:cf:60:55:88:9f:de:e6:8f:3c:c9:b7:d5:b3:55:
7e:4f:ce:a0:da:bf:6e:db:d9:23:31:c1:d6:ae:6a:fc:94:e6:
61:bb:24:a2:1d:94:44:35:b2:5b:1f:25:1d:22:99:9f:f2:89:
af:40:08:9f:23:a6:12:28:58:dc:29:22:16:e8:dd:f6:49:c2:
eb:27:59:21:f4:0b:e2:17:57:d5:71:15:aa:7d:c7:b6:e1:ed:
2d:52:bd:9b:0a:ab:9d:90:29:2d:fa:36:3f:a4:14:23:72:02:
02:d7:70:be:2d:8d:ab:98:ce:30:7e:34:d7:c8:91:45:d1:10:
07:22:f5:1b:c3:58:29:49:85:40:d1:d6:81:da:d5:2f:02:9d:
e7:b4:73:e7:db:cc:a5:42:40:ee:fe:7d:63:8c:eb:df:7a:a0:
59:91:df:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:13:32 2025 by rpki-client