This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/ef0b92-5d85-4792-b551-9a358362829c/1/FneCvqRv0nF2j_Rtm0XAV6nfVIE.mft
File: FneCvqRv0nF2j_Rtm0XAV6nfVIE.mft (raw, json)
Hash identifier: FeY5EjZMsjKG9qUbppSOA81yOT2GVZJUN5rB/xTaJiY=
Subject key identifier: 14:3B:6C:88:CC:D0:E6:21:6F:0F:6B:A1:F7:8B:2C:8A:AF:AF:FE:FF
Authority key identifier: 16:77:82:BE:A4:6F:D2:71:76:8F:F4:6D:9B:45:C0:57:A9:DF:54:81
Certificate issuer: /CN=167782bea46fd271768ff46d9b45c057a9df5481
Certificate serial: 019AF61C41FDE40626B8E0B77379A5378822
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FneCvqRv0nF2j_Rtm0XAV6nfVIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/ef0b92-5d85-4792-b551-9a358362829c/1/FneCvqRv0nF2j_Rtm0XAV6nfVIE.mft
Manifest number: 1764
Signing time: Sun 07 Dec 2025 00:00:38 +0000
Manifest this update: Sun 07 Dec 2025 00:00:38 +0000
Manifest next update: Mon 08 Dec 2025 00:00:38 +0000
Files and hashes: 1: FneCvqRv0nF2j_Rtm0XAV6nfVIE.crl (hash: FT/XhDeggs5yfWfuUQxm/l2KcmS8iejN623WQZ1mJ+o=)
2: eiCYc7LGel4A0s7nCbJtNFosupQ.roa (hash: 8W4lu3bDrwDuQAGx18vFknQRfaq7UHlaqfsbiBLj5pU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/ef0b92-5d85-4792-b551-9a358362829c/1/FneCvqRv0nF2j_Rtm0XAV6nfVIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/ef0b92-5d85-4792-b551-9a358362829c/1/FneCvqRv0nF2j_Rtm0XAV6nfVIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/FneCvqRv0nF2j_Rtm0XAV6nfVIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 21:29:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f6:1c:41:fd:e4:06:26:b8:e0:b7:73:79:a5:37:88:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=167782bea46fd271768ff46d9b45c057a9df5481
Validity
Not Before: Dec 7 00:00:38 2025 GMT
Not After : Dec 8 00:00:38 2025 GMT
Subject: CN=143b6c88ccd0e6216f0f6ba1f78b2c8aafaffeff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:12:61:ea:01:8e:87:3e:e9:37:c9:3a:b3:9b:
78:92:1e:9f:19:97:68:8d:3f:b8:d6:9c:ca:a8:0f:
39:42:36:a7:38:cc:55:56:20:21:f7:83:5f:de:2f:
f6:cb:87:21:7c:0b:d3:4c:bb:03:49:a9:02:92:f7:
e5:6a:5a:c3:c2:fe:f1:a0:3c:ba:ee:93:9e:51:a4:
f7:72:cb:c5:57:63:85:ca:5f:78:e5:98:2d:73:46:
67:ce:c1:e4:36:dc:09:23:f1:01:df:5a:51:6e:dc:
ef:27:ef:af:1e:83:b2:a7:c6:98:84:ec:a4:f8:e8:
83:85:48:9f:a5:a5:fd:72:ff:d8:bf:fa:38:23:86:
c0:ad:04:54:97:ab:de:cb:67:59:59:ae:82:02:e7:
56:f1:05:38:a3:bc:16:b2:48:5f:6e:27:07:de:58:
8e:89:8b:02:16:42:a7:76:a0:56:ea:7c:f6:f7:b8:
0e:d9:e9:7e:c3:c0:a0:c7:af:9e:56:c1:9c:98:c7:
60:c6:32:c0:c9:80:d2:81:9e:af:e9:88:90:f8:80:
d6:8a:34:6a:91:e1:b0:f9:ae:2a:63:95:79:18:df:
1d:b3:9c:2d:8c:b1:81:2c:7b:6a:dd:c6:a9:4b:fb:
20:c0:1f:17:26:87:8b:d5:77:22:17:5f:0a:14:e0:
6d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:3B:6C:88:CC:D0:E6:21:6F:0F:6B:A1:F7:8B:2C:8A:AF:AF:FE:FF
X509v3 Authority Key Identifier:
keyid:16:77:82:BE:A4:6F:D2:71:76:8F:F4:6D:9B:45:C0:57:A9:DF:54:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FneCvqRv0nF2j_Rtm0XAV6nfVIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ef0b92-5d85-4792-b551-9a358362829c/1/FneCvqRv0nF2j_Rtm0XAV6nfVIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ef0b92-5d85-4792-b551-9a358362829c/1/FneCvqRv0nF2j_Rtm0XAV6nfVIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:a7:36:10:ab:d8:55:cf:fc:27:64:52:1d:41:56:6d:70:c4:
87:22:72:be:80:ad:dd:eb:04:a8:84:3b:34:43:1b:c9:16:9d:
d5:61:5b:66:cf:6f:26:8d:41:e1:24:e0:bb:2f:02:d3:43:29:
95:12:a2:91:66:ac:a9:5e:4b:c3:4f:e8:fd:15:bd:f7:a0:1a:
d1:e0:48:4c:5e:a4:a7:f1:40:9c:c5:9c:14:bc:b7:c4:41:50:
d7:48:94:97:64:78:89:83:0d:73:0d:6b:5f:76:c7:15:17:20:
89:7f:73:8f:e3:e9:3f:d7:24:e4:e2:58:95:e5:c9:c7:92:24:
11:1f:29:c5:ca:26:39:8a:ad:98:75:39:6c:51:e6:4c:46:cf:
3a:da:75:33:77:d4:ea:79:13:2d:09:7a:2e:a5:06:73:8e:3b:
73:97:a1:d0:1d:6d:4f:12:11:6a:87:c2:f9:34:98:c9:51:b7:
f8:86:1d:e7:02:71:b8:e7:2c:c6:01:d9:70:50:63:fe:33:35:
35:9a:e0:71:fe:de:76:dd:9a:1d:2e:af:96:f9:87:ac:6f:f3:
bb:16:21:36:ed:e2:fc:63:e7:a0:04:40:d3:4e:f9:85:aa:7b:
a4:ac:e9:2c:46:0d:09:e1:72:03:e3:1d:2f:36:4a:89:3e:b2:
9f:6d:43:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZr2HEH95AYmuOC3c3mlN4giMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2Nzc4MmJlYTQ2ZmQyNzE3NjhmZjQ2ZDliNDVjMDU3YTlk
ZjU0ODEwHhcNMjUxMjA3MDAwMDM4WhcNMjUxMjA4MDAwMDM4WjAzMTEwLwYDVQQD
EygxNDNiNmM4OGNjZDBlNjIxNmYwZjZiYTFmNzhiMmM4YWFmYWZmZWZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBJh6gGOhz7pN8k6s5t4kh6fGZdo
jT+41pzKqA85QjanOMxVViAh94Nf3i/2y4chfAvTTLsDSakCkvflalrDwv7xoDy6
7pOeUaT3csvFV2OFyl945Zgtc0ZnzsHkNtwJI/EB31pRbtzvJ++vHoOyp8aYhOyk
+OiDhUifpaX9cv/Yv/o4I4bArQRUl6vey2dZWa6CAudW8QU4o7wWskhfbicH3liO
iYsCFkKndqBW6nz297gO2el+w8Cgx6+eVsGcmMdgxjLAyYDSgZ6v6YiQ+IDWijRq
keGw+a4qY5V5GN8ds5wtjLGBLHtq3capS/sgwB8XJoeL1XciF18KFOBtJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBQ7bIjM0OYhbw9rofeLLIqvr/7/MB8GA1UdIwQY
MBaAFBZ3gr6kb9Jxdo/0bZtFwFep31SBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRm5lQ3ZxUnYwbkYyal9SdG0wWEFWNm5mVklFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9lZjBiOTItNWQ4NS00NzkyLWI1NTEt
OWEzNTgzNjI4MjljLzEvRm5lQ3ZxUnYwbkYyal9SdG0wWEFWNm5mVklFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My9lZjBiOTItNWQ4NS00NzkyLWI1NTEtOWEzNTgzNjI4Mjlj
LzEvRm5lQ3ZxUnYwbkYyal9SdG0wWEFWNm5mVklFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArKc2EKvY
Vc/8J2RSHUFWbXDEhyJyvoCt3esEqIQ7NEMbyRad1WFbZs9vJo1B4STguy8C00Mp
lRKikWasqV5Lw0/o/RW996Aa0eBITF6kp/FAnMWcFLy3xEFQ10iUl2R4iYMNcw1r
X3bHFRcgiX9zj+PpP9ck5OJYleXJx5IkER8pxcomOYqtmHU5bFHmTEbPOtp1M3fU
6nkTLQl6LqUGc447c5eh0B1tTxIRaofC+TSYyVG3+IYd5wJxuOcsxgHZcFBj/jM1
NZrgcf7edt2aHS6vlvmHrG/zuxYhNu3i/GPnoARA0075hap7pKzpLEYNCeFyA+Md
LzZKiT6yn21DWA==
-----END CERTIFICATE-----
Generated at Sun Dec 7 05:29:24 2025 by rpki-client