This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft
File: pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft (raw, json)
Hash identifier: g58QWtfpTaS4yU+AbedeuEJwIuhMMHdGDtzctJ9ukNY=
Subject key identifier: ED:27:09:E9:70:82:92:A4:85:36:37:7E:F5:E3:5E:58:AF:2C:F7:6F
Authority key identifier: A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B
Certificate issuer: /CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b
Certificate serial: 019AF2E428CE9EE5342A6B019EC9CA8A407D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft
Manifest number: 143C
Signing time: Sat 06 Dec 2025 09:00:30 +0000
Manifest this update: Sat 06 Dec 2025 09:00:30 +0000
Manifest next update: Sun 07 Dec 2025 09:00:30 +0000
Files and hashes: 1: 3MQ1Zm2jB8qgOjCAc_a0v-3nM_o.roa (hash: T4pVm2mU2N5el1g2HcnlglhN57e23NLVS7ny7NzSBL0=)
2: 4SEUaFHVUAL3abRJwnhpLcw21dk.roa (hash: Nz767QGxnFH79p/BW/8MOsNM3RviNN1Kvy4GgZgMyGs=)
3: FCFfx3p7hHCFHlKPZobVJyLJ5MI.roa (hash: 6JV0xEEqdwivRbZdMI4zo4Wpa9PWQK4gKoasAD6odWU=)
4: IYmUJK1vApyWT119wps-ukf2n9E.roa (hash: w1dWdBHD/FLi3tR98pk3iJlbhc1nR22X1Pwn/kqhO/0=)
5: KcuMI0SBvL5BPuYJm6BH3vJKAQ0.roa (hash: s0e2eWUrZQW14pJCqfjgMZ+ViTFNuU9345bizVg0sKY=)
6: MSrSUIwYGP5OzMFaA9dwr3mO4jY.roa (hash: OHzV5kP6uhO1eFoIB7t+WKfJjHs90j+a/iXQqOXuv30=)
7: N7C2a3H5ML3ydyNI5IDIoJ6m-6U.roa (hash: FJm0Nzs6ME/1+LojcQZMLdUu/cBqlxKE16Bs75fFFLw=)
8: Nf1rHETWcCnhWhR_uM_9B2P3jb8.roa (hash: pBdKIUwSvvQqLJChVbTbSEDRXa+Ll262+ax9ivbZD0o=)
9: OFTgwkdKspRJ_TvSv6vgx_ckdLQ.roa (hash: b7UPAbBCKcuRworqLaxy25e9Gx9nfc4PaZocWvp2h84=)
10: P7ti_IIQ8gSBeG-YTlNJsuFqQ_I.roa (hash: KrffniQ2i0hPMizjKFAUVE1GuQq0ig8NP7gMfdrW5so=)
11: RzvDJbgMFFQ3RXZZowAtkGpvaYQ.roa (hash: pXgfU5zLGpdaPENK8y9IOVL5xtiIt9Fk8RRzx12JQUw=)
12: WToItz8al9Sw1IRtEOUm1ku1TzY.roa (hash: cD3Nf3okXGtPiYuFOkPnzfMJHgIYmW52aVmaOwxOEN0=)
13: dcAEUZ_ghRVpaUYo3WWA9zUPe9U.roa (hash: AsvsdGamYH2cSArWOQT5cvLOD/2t8gp5MEnt/aWjLII=)
14: pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl (hash: ManJWaOuYK8b+zdbOUDS32T3JTXjH2g5tzf+PaRrPpc=)
15: sVCQlL9zy4ci5k4im_qh1UgQSao.roa (hash: tXiv/i4AXQDYnVQqrjLO82vwz0zcYS5lORUFrc1ytqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f2:e4:28:ce:9e:e5:34:2a:6b:01:9e:c9:ca:8a:40:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b
Validity
Not Before: Dec 6 09:00:30 2025 GMT
Not After : Dec 7 09:00:30 2025 GMT
Subject: CN=ed2709e9708292a48536377ef5e35e58af2cf76f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:83:39:00:cd:b1:ef:15:af:5e:f8:29:d0:43:
89:1d:28:e4:a8:33:f8:e1:a9:d8:77:a3:03:9f:f8:
33:31:3b:01:20:c1:b8:3e:99:0a:eb:39:ca:0b:cd:
4a:52:1e:42:78:13:59:9e:a1:86:1b:60:1d:06:59:
a5:6f:20:bd:ea:f4:ac:fe:c3:68:b5:01:4a:9b:be:
1e:cb:a8:5f:12:42:06:8b:e6:a7:29:b6:9f:4e:5d:
6b:3f:ee:33:bf:e9:82:8e:b0:6b:21:17:0f:64:d9:
81:a2:fb:be:f4:7d:84:ce:40:57:24:5e:2e:4e:ed:
b9:0d:7f:35:ba:28:55:37:4a:8c:3e:46:25:7c:6b:
f4:e6:34:a4:1e:6b:65:d1:31:43:5e:30:3a:12:ef:
c7:9d:3e:82:2b:58:ce:e4:92:9d:e7:d4:b8:d8:bb:
f5:8f:79:47:2d:a3:aa:89:27:b5:b2:0e:9c:6d:17:
77:be:fe:9a:35:c4:33:39:ec:a5:ca:1c:58:53:60:
da:6d:68:63:61:b8:3e:26:f1:19:ad:05:f7:7f:ed:
44:63:b7:ab:51:82:cf:d9:18:1f:1d:fb:0b:41:eb:
11:e1:c4:21:e4:38:4f:80:59:5d:1b:55:17:72:c9:
0a:e0:6e:5a:fa:63:21:bf:48:15:5f:a4:5b:17:87:
50:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:27:09:E9:70:82:92:A4:85:36:37:7E:F5:E3:5E:58:AF:2C:F7:6F
X509v3 Authority Key Identifier:
keyid:A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:a2:a9:61:1e:bd:fc:f1:67:be:62:c5:c0:17:6f:b1:8c:77:
a5:51:91:97:a9:ce:36:f8:6c:fb:91:b2:06:7f:75:29:5c:c0:
4d:da:c4:71:1a:5b:ed:47:7e:f4:ea:96:0b:d2:58:31:e3:61:
61:36:2f:49:b0:52:5e:7c:31:2e:e3:79:08:42:64:7d:13:57:
2e:51:b0:5a:b0:8c:1e:1f:4d:34:9d:40:7a:b1:a9:86:5f:55:
f6:f1:06:a9:51:ce:1d:64:09:20:34:0b:2d:57:de:63:d9:52:
3f:74:fd:db:bb:3d:4a:84:a8:60:01:a2:7f:2c:88:74:ae:8d:
e5:f1:8a:41:4d:34:52:43:f4:9d:03:b7:37:42:d6:b4:56:55:
0c:2b:2c:cd:d7:fe:61:36:8f:48:38:1e:c7:cf:54:59:7f:d1:
ef:4e:bb:95:a2:b0:cd:1c:5a:4a:d1:6a:e9:a8:18:51:ac:89:
30:d3:aa:d9:db:64:c7:e0:55:91:db:67:fd:93:63:09:86:93:
8b:fd:54:42:b8:de:f6:63:20:9c:c2:6c:ca:a5:00:cc:1f:57:
35:88:8d:f4:67:77:be:31:54:95:8e:72:05:ec:6b:66:89:37:
91:32:48:ed:82:4c:d9:f2:09:8f:aa:9d:c9:8c:79:af:3a:76:
61:20:3c:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:04:06 2025 by rpki-client