This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/p0xnBuP769_xRqihTsKjKEqSumI.mft
File: p0xnBuP769_xRqihTsKjKEqSumI.mft (raw, json)
Hash identifier: eutA3C1cu63isRVZzwm0G5XS84yKxhw5SMSE5LJpiuE=
Subject key identifier: B8:72:52:73:72:15:D8:EB:6F:04:56:B6:85:6E:1B:92:A3:77:37:3C
Authority key identifier: A7:4C:67:06:E3:FB:EB:DF:F1:46:A8:A1:4E:C2:A3:28:4A:92:BA:62
Certificate issuer: /CN=a74c6706e3fbebdff146a8a14ec2a3284a92ba62
Certificate serial: 019AF3F7ADC86CCE2635B8343465A0734CB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p0xnBuP769_xRqihTsKjKEqSumI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/p0xnBuP769_xRqihTsKjKEqSumI.mft
Manifest number: 16C9
Signing time: Sat 06 Dec 2025 14:01:26 +0000
Manifest this update: Sat 06 Dec 2025 14:01:26 +0000
Manifest next update: Sun 07 Dec 2025 14:01:26 +0000
Files and hashes: 1: 0W8nkJLPOtwLXBXYQYvqsqJv0P0.roa (hash: VE1CmVXCh6nFsIzINtN+7cbMnpKw/coprnM0Z6DgP9w=)
2: T4IdyPOyJT-vcpUTevdsnNRpr2k.roa (hash: bowIRN0pzHA89i7IutwyoquoF4lwEHsh3PvwCnZ1E/Q=)
3: VkjC6ZXUIZzj8tvL6K7MhcJCkQY.roa (hash: 3XlfyZJkOhAphIjfT5R1eRXgrv3AJ140+2q4XOEf3nY=)
4: _1MbS75neK0OfHH5cQfHLledObA.roa (hash: n/m9uDKG5XGN2Lix9tsCCz30GU/UuRy/chtj19TvQOw=)
5: p0xnBuP769_xRqihTsKjKEqSumI.crl (hash: vf5GEo7zCWx5vdTQeOUMDynIEPeStt9eyD6bEjNLm/I=)
6: xWICqvpq-aio997r-Jl_e84mBzs.roa (hash: VzAED4IrYDOzI6JIjXM468jZwannD/UKmDolCUU8kg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/p0xnBuP769_xRqihTsKjKEqSumI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/p0xnBuP769_xRqihTsKjKEqSumI.mft
rsync://rpki.ripe.net/repository/DEFAULT/p0xnBuP769_xRqihTsKjKEqSumI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 14:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f3:f7:ad:c8:6c:ce:26:35:b8:34:34:65:a0:73:4c:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a74c6706e3fbebdff146a8a14ec2a3284a92ba62
Validity
Not Before: Dec 6 14:01:26 2025 GMT
Not After : Dec 7 14:01:26 2025 GMT
Subject: CN=b87252737215d8eb6f0456b6856e1b92a377373c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:31:31:96:ff:8d:ee:8e:32:9c:15:8f:f3:9f:
8b:f0:21:5a:3c:50:b6:30:b5:46:e8:58:c4:47:73:
c9:0c:74:71:5c:f0:9f:e6:9f:50:84:cf:19:45:6e:
3d:ac:22:e1:06:b6:68:bf:8d:f9:d9:dc:35:f2:80:
d7:69:c4:57:7c:c3:06:8c:b9:68:36:23:fc:87:d8:
c7:c0:ea:4a:c9:21:2c:19:36:b1:d3:70:6c:cb:f0:
8c:aa:3a:e1:53:99:62:a8:ab:35:00:51:6a:5d:b2:
97:9e:a0:96:4b:26:df:fe:60:6b:13:0a:e4:51:a0:
fa:f8:a4:5a:8f:d4:2c:8d:59:0a:e5:e3:a9:92:23:
07:4d:13:17:66:1f:d4:92:7c:b2:5e:68:02:3d:65:
3a:0b:01:ee:b7:a9:df:3a:ec:04:b1:c5:3a:c8:d6:
32:7b:ce:03:16:63:c6:5e:8b:52:d6:56:de:8f:ce:
a3:f4:2c:76:32:af:d6:37:dc:4e:18:49:49:c8:1d:
7e:70:14:56:2b:0f:b2:9e:ee:16:d3:48:2e:5c:db:
41:9a:b5:67:d1:9d:ff:6a:14:8b:66:40:40:4b:7b:
51:a8:32:86:17:26:ec:3f:54:0f:67:79:d3:f9:06:
09:19:2e:b8:92:ad:68:40:8d:fa:40:58:e0:bd:4c:
f5:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:72:52:73:72:15:D8:EB:6F:04:56:B6:85:6E:1B:92:A3:77:37:3C
X509v3 Authority Key Identifier:
keyid:A7:4C:67:06:E3:FB:EB:DF:F1:46:A8:A1:4E:C2:A3:28:4A:92:BA:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0xnBuP769_xRqihTsKjKEqSumI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/p0xnBuP769_xRqihTsKjKEqSumI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/p0xnBuP769_xRqihTsKjKEqSumI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
eb:fb:47:70:c3:35:ab:32:5a:7a:77:ce:7f:6e:ef:2e:6a:95:
79:d4:3e:ab:12:31:46:a3:92:e9:aa:54:8f:be:3c:d0:1d:82:
7a:f9:86:a9:ea:42:c2:69:aa:c3:07:91:64:08:f8:c7:a8:86:
c3:6a:9d:3d:9c:f4:0f:1e:9a:39:af:7b:b0:e0:60:f6:0e:85:
dd:c1:72:a2:93:08:0b:16:ac:b8:4c:65:45:bf:0c:34:09:14:
a8:ae:c5:2e:1f:9f:28:c7:85:ac:be:8c:25:73:a9:81:f6:19:
ae:e6:72:b2:32:69:d3:d0:41:06:61:46:29:31:a4:fd:75:16:
69:1d:b5:56:13:59:55:e3:cd:35:0a:07:e9:db:5a:70:8f:b6:
84:88:d5:09:08:7a:d8:7f:31:50:e0:b0:77:41:33:f8:1d:cb:
72:ef:ef:ab:24:72:4d:31:d3:fa:40:61:bd:bc:59:4d:90:32:
bf:15:5a:be:65:96:b4:28:7a:dd:9e:05:1d:dc:45:a6:22:dc:
46:6f:bc:bd:cd:15:75:d1:2d:e6:95:3d:f5:07:09:f7:df:78:
09:c2:d8:b8:18:a3:c1:e1:e2:35:3e:bf:c5:24:13:b1:eb:98:
04:50:c9:ce:1d:c1:6d:8c:e2:48:2e:7a:fc:15:10:95:a4:3a:
87:1a:04:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrz963IbM4mNbg0NGWgc0yxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3NGM2NzA2ZTNmYmViZGZmMTQ2YThhMTRlYzJhMzI4NGE5
MmJhNjIwHhcNMjUxMjA2MTQwMTI2WhcNMjUxMjA3MTQwMTI2WjAzMTEwLwYDVQQD
EyhiODcyNTI3MzcyMTVkOGViNmYwNDU2YjY4NTZlMWI5MmEzNzczNzNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7jExlv+N7o4ynBWP85+L8CFaPFC2
MLVG6FjER3PJDHRxXPCf5p9QhM8ZRW49rCLhBrZov4352dw18oDXacRXfMMGjLlo
NiP8h9jHwOpKySEsGTax03Bsy/CMqjrhU5liqKs1AFFqXbKXnqCWSybf/mBrEwrk
UaD6+KRaj9QsjVkK5eOpkiMHTRMXZh/UknyyXmgCPWU6CwHut6nfOuwEscU6yNYy
e84DFmPGXotS1lbej86j9Cx2Mq/WN9xOGElJyB1+cBRWKw+ynu4W00guXNtBmrVn
0Z3/ahSLZkBAS3tRqDKGFybsP1QPZ3nT+QYJGS64kq1oQI36QFjgvUz1owIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLhyUnNyFdjrbwRWtoVuG5Kjdzc8MB8GA1UdIwQY
MBaAFKdMZwbj++vf8UaooU7CoyhKkrpiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDB4bkJ1UDc2OV94UnFpaFRzS2pLRXFTdW1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9hMGM0NDQtOTc5Ni00ZjA2LTgzZjIt
YWE3ODhhNDIwYWVjLzEvcDB4bkJ1UDc2OV94UnFpaFRzS2pLRXFTdW1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi9hMGM0NDQtOTc5Ni00ZjA2LTgzZjItYWE3ODhhNDIwYWVj
LzEvcDB4bkJ1UDc2OV94UnFpaFRzS2pLRXFTdW1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA6/tHcMM1
qzJaenfOf27vLmqVedQ+qxIxRqOS6apUj7480B2CevmGqepCwmmqwweRZAj4x6iG
w2qdPZz0Dx6aOa97sOBg9g6F3cFyopMICxasuExlRb8MNAkUqK7FLh+fKMeFrL6M
JXOpgfYZruZysjJp09BBBmFGKTGk/XUWaR21VhNZVePNNQoH6dtacI+2hIjVCQh6
2H8xUOCwd0Ez+B3Lcu/vqyRyTTHT+kBhvbxZTZAyvxVavmWWtCh63Z4FHdxFpiLc
Rm+8vc0VddEt5pU99QcJ9994CcLYuBijweHiNT6/xSQTseuYBFDJzh3BbYziSC56
/BUQlaQ6hxoEbA==
-----END CERTIFICATE-----
Generated at Sun Dec 7 00:18:58 2025 by rpki-client