This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft
File: Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft (raw, json)
Hash identifier: GNX17aU9q6EDRabnRmtat6elCq71n49BqxxFegyQk2o=
Subject key identifier: 58:CD:E8:05:9B:EE:D4:12:E9:74:32:2D:14:44:C8:8B:93:75:70:A7
Authority key identifier: 1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69
Certificate issuer: /CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
Certificate serial: 019AF276ABC8C5A40FFCB94084E18FEF8910
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft
Manifest number: 11B8
Signing time: Sat 06 Dec 2025 07:00:54 +0000
Manifest this update: Sat 06 Dec 2025 07:00:54 +0000
Manifest next update: Sun 07 Dec 2025 07:00:54 +0000
Files and hashes: 1: 0YFrK6qX5oK4oz56JrHQD13FS0g.roa (hash: 2tfLb6Tn0cvmd2+fqOkkBuAviLh+tji+ZUyN/qd72mA=)
2: 6PxBgUSRHd1EjYh3aR3NrW9EPHg.roa (hash: WiFLNJi8EFWrkwSxJcCvJRnRmfSBPW/TIg84s3LJWkY=)
3: B1Q4xWffdUN7zPjy1sq3Dtrabr0.roa (hash: XSRbcDFmD2SBWhC9QVnlq9zNA7EtDeg2/jCNqGJ6Vow=)
4: BltIltrPNtOVsknySdgzZNaUN_4.roa (hash: WMYNT5I2vgtrILz6VHDUB+xIT43rEaNfRX33jCnS1HU=)
5: EFpp1ecMW8TWRG-p4oYa7fPPvPI.roa (hash: a7nT0f4Aii6pfEA07RoNM/fESmlRPCmSXyaPHHhHtfc=)
6: G5aSz4shLC5EKgp2SbNK-UcpZls.roa (hash: ao0JJHFk2t7w93DBJFTmDX4+D2u79wITuPAaWZsRu74=)
7: Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl (hash: /fWlQJKN8Nyo1/w09FHuqPiFgqjv/8p8MkuquWqYaCc=)
8: K03TI5nYUitEhr3tDnZaspm3S48.roa (hash: 0GhwyXOcDmriRSuXnm9/II1OmPaoLu8Djc5b090uRNw=)
9: OHszSGY9IAc7LRuICB5fLtwPJEE.roa (hash: rQ/hF7bQMR8MBO0Cmc6ufUVgRC+5bZHKljx2lgxb3/s=)
10: RRfbWS9gJIpkQlUHUBT_C-4iKW4.roa (hash: 5YJMcnD8st6XyEBie4P9czS9E91f4FDnUOlRC1amfu0=)
11: RdAiuj0CKwGdWqOPsTysiaxS8RM.roa (hash: RUegU9jus91oC1XvjlC85kvkBYAhgdo3GTaU32XzLRI=)
12: VHuw9bCvd_xbchW3ciS0PDWXw_w.roa (hash: gsE8OKW+/bE0pDGpsJc+2dHPUTMKwzSWKQdDcL2OGGQ=)
13: VQdBddpukAmJt5hMDo3MH_s40gY.roa (hash: Ye0y1BoPENu4y2+F2w73JV34dGGP4dVDpycXyq9GQwY=)
14: XIaayusDHQd-T-OQnZeJmKeMqGM.roa (hash: 4YgriKRQoCnrntt03LwL2mbgR+kxZCmjlyyQb3gT+ZE=)
15: YPCVZfdLkRnpwRWt5j9ECFmQgkw.roa (hash: hjB0AgE/bEo2D0PnqWgeOepZ8iy64G1fbs2WbSURiyc=)
16: ZDwPo4eEroHvW0Q-cNvO-pGgd80.roa (hash: MhXd3/42bxWERGmNkex/8mTYhYeR1LhuzyC3QmH77TY=)
17: w5dYOa54vKNEPegbP1ILAe4B70k.roa (hash: UG3Pt6aB2V/te9hBV8WZU509/953v6ZJ4S6EVvmx5A0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f2:76:ab:c8:c5:a4:0f:fc:b9:40:84:e1:8f:ef:89:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
Validity
Not Before: Dec 6 07:00:54 2025 GMT
Not After : Dec 7 07:00:54 2025 GMT
Subject: CN=58cde8059beed412e974322d1444c88b937570a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:7b:8d:32:f5:09:27:82:ea:79:55:71:10:ff:
61:e3:5a:5d:c6:f6:01:44:58:4b:e5:4a:f9:7d:d4:
03:cd:65:3a:ca:96:76:77:e8:e4:2e:c3:b7:b0:ba:
72:30:c8:e7:95:c8:84:01:54:01:69:81:0e:76:1f:
6f:21:76:ad:85:4c:47:51:03:b9:4b:d4:54:e7:49:
49:3f:b5:14:19:cd:d4:d6:95:a6:50:53:97:32:ae:
a8:0a:5a:58:16:2a:87:ee:96:a9:4f:bd:1e:8a:d4:
a7:be:08:ce:fe:e3:fd:e6:54:26:6c:7d:36:99:e2:
16:8b:93:7d:7f:25:5d:bd:63:e0:4c:95:8a:fe:a3:
f5:ae:7e:1e:ce:35:33:26:71:ce:b9:1b:8b:8e:5b:
ab:b2:ee:51:f0:12:f7:5a:2f:c9:9c:29:a3:4a:8e:
f5:2b:a0:0c:01:92:3b:e8:2f:2e:37:43:c5:0e:67:
5a:02:09:fb:76:a5:a5:e7:52:65:6a:63:b3:d8:80:
1f:7d:d0:76:0d:2b:eb:b5:26:21:b1:ef:24:e4:4c:
9d:95:aa:b7:84:ac:1d:43:64:29:43:c9:de:7f:bc:
a8:91:5d:0d:10:2e:4f:0c:62:3f:58:35:00:0d:cc:
02:93:d8:7d:e5:9b:1f:6b:ad:42:11:e4:70:cd:47:
61:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:CD:E8:05:9B:EE:D4:12:E9:74:32:2D:14:44:C8:8B:93:75:70:A7
X509v3 Authority Key Identifier:
keyid:1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:5a:40:5c:5b:a5:87:4d:95:1a:aa:a5:60:26:03:59:75:52:
e5:38:67:b6:e3:2a:a3:25:a4:3a:b7:bf:62:69:dc:94:ac:f7:
3b:1b:6e:77:72:62:0c:6a:ba:ab:0c:ef:ee:03:15:cd:e3:29:
1f:b8:e5:22:24:ae:86:3c:cf:88:80:e1:4f:19:c3:8b:f7:a6:
c5:1d:6d:7d:a7:29:93:bd:3c:b3:3c:2e:c6:54:b3:79:81:69:
28:d8:f7:5f:25:0a:19:8a:28:ab:d9:90:74:8e:5a:9d:e9:f6:
8d:94:19:21:fd:6d:c2:5e:34:a0:d6:f2:6c:a9:29:d5:e9:ca:
bc:f2:4a:fe:bf:12:7a:01:02:d3:ed:d2:0c:f2:9c:76:b7:87:
62:50:60:4e:89:62:f6:43:be:9e:78:98:c9:3d:a9:71:1d:73:
e2:a3:f0:56:a6:86:0c:32:7a:1d:33:a6:aa:da:7e:9a:f4:81:
54:ae:ed:da:cb:80:73:a4:26:e1:95:5d:46:f6:66:3a:f9:b4:
65:18:c3:b4:4b:65:9e:b8:22:81:37:8e:0b:73:df:b8:66:10:
97:0a:d9:f8:e2:57:99:bd:df:40:c1:5b:fb:e2:10:c2:ab:7e:
4f:f9:2f:5d:1a:64:b3:50:b3:4f:31:82:a5:b2:11:73:29:ec:
f9:e1:d0:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:45:37 2025 by rpki-client