This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.mft
File: fVAuLSSx8haRMIggeiaOZiawzjk.mft (raw, json)
Hash identifier: 2osZSmv7oXhp8Nx9Sd3DaOTCMVkE5aqsQxUCDkHEWFI=
Subject key identifier: CF:85:6E:84:4D:3A:F8:B1:7C:7E:FE:3C:8A:FD:8B:D8:A7:87:CC:CA
Authority key identifier: 7D:50:2E:2D:24:B1:F2:16:91:30:88:20:7A:26:8E:66:26:B0:CE:39
Certificate issuer: /CN=7d502e2d24b1f216913088207a268e6626b0ce39
Certificate serial: 019AF4D28CD843B6C2FCB26B3F86BAAFC287
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVAuLSSx8haRMIggeiaOZiawzjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.mft
Manifest number: 1768
Signing time: Sat 06 Dec 2025 18:00:30 +0000
Manifest this update: Sat 06 Dec 2025 18:00:30 +0000
Manifest next update: Sun 07 Dec 2025 18:00:30 +0000
Files and hashes: 1: fVAuLSSx8haRMIggeiaOZiawzjk.crl (hash: ponH1b9268dhHHg7hjgWsaY3O73IFzdaMTAvIQ7HQ2o=)
2: jtLIKZheIJbw9TwyWl-fpzVLvnE.roa (hash: IhEUym2kurgLTl3Vw4ZlxqTomcA/YLaDzPHSwrVgpmI=)
3: pIC-whUriXBZUStrVpAYvl470Dw.roa (hash: P8U8HyziEmzl2lHRrN+KrJgIgKMcwZzkigHQuPfUZ+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVAuLSSx8haRMIggeiaOZiawzjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 13:09:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f4:d2:8c:d8:43:b6:c2:fc:b2:6b:3f:86:ba:af:c2:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d502e2d24b1f216913088207a268e6626b0ce39
Validity
Not Before: Dec 6 18:00:30 2025 GMT
Not After : Dec 7 18:00:30 2025 GMT
Subject: CN=cf856e844d3af8b17c7efe3c8afd8bd8a787ccca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7c:e4:f3:ba:60:0d:9f:12:46:08:d7:0f:6d:
62:46:b7:16:7b:6b:af:96:a8:5c:7c:5b:c5:8c:33:
f0:90:6a:d0:57:c0:25:39:b4:06:a7:23:48:bd:2b:
4b:5e:54:dd:cb:e2:ad:0c:16:38:18:4e:0c:ce:05:
ad:6a:e7:b2:e7:0c:cc:18:9c:64:a3:68:f6:ee:8b:
8f:2d:fd:33:c5:f5:30:5f:a8:92:94:c1:ca:79:90:
b3:dc:50:84:32:a9:0a:c4:3c:6b:5e:63:fb:15:29:
e4:fe:ab:5a:4c:a5:f2:9a:cd:23:d8:9b:7c:d5:a0:
ca:ce:8f:6d:69:86:3a:cd:01:08:4c:5e:e4:70:ee:
4e:7a:b0:b8:d7:30:e3:8d:84:63:5f:d4:46:c1:36:
c5:1e:c8:b0:ab:2a:74:1b:c4:a5:28:39:56:e4:1a:
65:3c:54:d9:f5:49:8b:ad:3b:5b:72:da:5e:81:4b:
d1:50:5f:d3:58:1d:e7:fe:96:18:97:c6:65:36:18:
01:89:b9:10:d8:48:8c:50:a9:66:c3:d2:8c:e7:21:
71:58:4c:d2:fd:79:e8:70:6e:63:65:f4:ad:02:c3:
fa:72:f7:e8:03:19:c4:ee:f9:7d:54:2b:93:d0:e6:
e3:47:35:75:f1:42:a4:40:3c:e8:5e:f7:9c:bc:e3:
39:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:85:6E:84:4D:3A:F8:B1:7C:7E:FE:3C:8A:FD:8B:D8:A7:87:CC:CA
X509v3 Authority Key Identifier:
keyid:7D:50:2E:2D:24:B1:F2:16:91:30:88:20:7A:26:8E:66:26:B0:CE:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVAuLSSx8haRMIggeiaOZiawzjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:f2:87:53:d6:80:1e:cf:0f:bb:a5:55:8c:e6:7c:71:de:39:
00:31:3c:f8:8a:b4:0e:93:2d:b8:a1:3d:5b:f4:4e:26:9b:6d:
29:ed:81:f4:ec:2d:d2:d6:27:e8:f3:6b:cd:6a:e3:d9:71:3b:
ac:49:38:1c:2e:c1:f0:d2:31:33:d3:6f:12:d8:c0:18:03:98:
05:da:cc:4e:fd:36:af:5a:f3:8a:23:fc:8a:64:37:56:b6:7e:
13:2a:90:24:33:86:3f:c5:5e:f7:cd:7a:87:6e:64:c2:ce:f5:
cd:97:e7:bb:80:87:1b:ae:79:04:19:ed:0c:79:ad:81:6a:d7:
d8:a2:bb:bb:30:cf:06:05:1a:e9:d1:bc:53:1e:23:d7:36:f4:
c7:e4:09:16:53:23:26:53:47:4d:da:93:fa:24:9e:4d:1e:f0:
3d:99:f7:ad:2a:5c:e0:b9:86:05:71:9f:5c:e8:fa:04:99:6f:
a4:3d:1a:50:cc:af:36:5f:8f:d9:64:77:79:d4:ca:1e:bb:6b:
5a:96:21:39:43:9c:4e:10:b4:53:b8:3c:ad:b2:d4:aa:db:41:
5b:10:fe:7d:b1:74:2a:59:b8:92:88:56:d9:54:74:4d:21:05:
ae:6c:1c:ba:49:07:52:af:ee:de:9f:32:a6:b7:de:41:07:79:
50:30:b0:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:41:29 2025 by rpki-client