This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/290fec-28f3-44b0-9cff-331d4a0d1427/1/Fxmq1dSyL0hz4JR7x_Qvod1cH0E.mft
File: Fxmq1dSyL0hz4JR7x_Qvod1cH0E.mft (raw, json)
Hash identifier: 8ksc6bADe9uJN7nS/HofLR5uow4DmNMohqwoSMNSqzA=
Subject key identifier: 1E:0D:98:75:85:66:2F:D1:9F:97:0A:AE:8F:48:E4:25:66:76:48:F0
Authority key identifier: 17:19:AA:D5:D4:B2:2F:48:73:E0:94:7B:C7:F4:2F:A1:DD:5C:1F:41
Certificate issuer: /CN=1719aad5d4b22f4873e0947bc7f42fa1dd5c1f41
Certificate serial: 019AF1D18549869C0AC70833588C4F496A0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fxmq1dSyL0hz4JR7x_Qvod1cH0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/290fec-28f3-44b0-9cff-331d4a0d1427/1/Fxmq1dSyL0hz4JR7x_Qvod1cH0E.mft
Manifest number: 1764
Signing time: Sat 06 Dec 2025 04:00:31 +0000
Manifest this update: Sat 06 Dec 2025 04:00:31 +0000
Manifest next update: Sun 07 Dec 2025 04:00:31 +0000
Files and hashes: 1: Fxmq1dSyL0hz4JR7x_Qvod1cH0E.crl (hash: O287V3VNw9zZXhJyxZ0NWon9G7a3DFi/l7tehh72prA=)
2: sXBgVFkVLsDSLFu0VPEzayMbTVY.roa (hash: 9PH3zbHvy0n97ISInagYoPKrYxbqwVNlm+VRnpV8hJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/290fec-28f3-44b0-9cff-331d4a0d1427/1/Fxmq1dSyL0hz4JR7x_Qvod1cH0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/290fec-28f3-44b0-9cff-331d4a0d1427/1/Fxmq1dSyL0hz4JR7x_Qvod1cH0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fxmq1dSyL0hz4JR7x_Qvod1cH0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 04:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:d1:85:49:86:9c:0a:c7:08:33:58:8c:4f:49:6a:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1719aad5d4b22f4873e0947bc7f42fa1dd5c1f41
Validity
Not Before: Dec 6 04:00:31 2025 GMT
Not After : Dec 7 04:00:31 2025 GMT
Subject: CN=1e0d987585662fd19f970aae8f48e425667648f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b8:43:c8:51:13:10:16:f9:79:53:65:5b:95:
3e:9e:b6:86:96:e7:a6:29:f3:4a:26:86:10:1e:a0:
71:97:29:30:fd:94:0a:af:a1:68:cd:b7:a7:49:dd:
85:80:6f:b7:68:ee:5f:33:94:a8:d0:55:52:5e:6a:
94:5e:88:30:52:59:50:04:0e:e9:cc:1e:f2:4d:22:
39:f0:93:b1:57:a0:92:78:a6:24:dd:06:cf:f9:d4:
c6:1a:b5:03:07:86:15:ea:58:c9:4c:6f:dc:62:cb:
6a:5f:b8:4e:ff:91:8a:d4:6d:58:e9:5f:ca:72:7d:
19:ec:76:09:09:7c:8d:21:b0:87:99:f9:ba:7f:ea:
9d:e5:3a:c7:4e:9a:b6:0d:bc:cd:00:ab:67:6e:5d:
f1:16:26:e6:47:cb:0a:80:d1:6b:db:df:b2:be:e7:
88:66:71:4b:2e:e7:84:47:27:07:91:9b:6e:67:44:
6b:7b:81:fe:6d:b4:f0:2a:f7:eb:52:e0:a1:32:43:
83:26:b0:5e:1e:47:53:1f:39:b1:f4:0d:3f:02:a2:
44:ae:24:e5:da:de:e4:9f:1d:7c:52:96:2e:b5:85:
73:c3:20:51:ca:11:0a:1c:fc:8a:69:67:95:b5:b8:
2a:6d:92:4b:0c:7e:3c:5f:05:8c:f2:34:7c:21:81:
14:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:0D:98:75:85:66:2F:D1:9F:97:0A:AE:8F:48:E4:25:66:76:48:F0
X509v3 Authority Key Identifier:
keyid:17:19:AA:D5:D4:B2:2F:48:73:E0:94:7B:C7:F4:2F:A1:DD:5C:1F:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fxmq1dSyL0hz4JR7x_Qvod1cH0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/290fec-28f3-44b0-9cff-331d4a0d1427/1/Fxmq1dSyL0hz4JR7x_Qvod1cH0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/290fec-28f3-44b0-9cff-331d4a0d1427/1/Fxmq1dSyL0hz4JR7x_Qvod1cH0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:06:59:10:6d:dc:08:0c:58:51:53:e6:32:4c:56:53:9e:84:
76:0a:11:3d:f9:bb:64:04:f8:d4:bd:85:3e:be:9b:a1:35:db:
05:9f:27:82:1b:be:23:9e:54:13:19:a3:e5:92:1c:e5:d9:06:
78:32:fa:f0:0a:11:08:eb:f9:ed:4f:fb:05:19:36:10:4c:7c:
8c:5b:8d:e6:91:7e:19:e5:be:29:0c:1f:eb:2e:8e:14:ec:a2:
11:7c:47:38:35:c9:8e:7f:6b:42:79:a8:88:bd:57:f6:ca:6e:
14:7e:06:2f:c2:e6:8d:56:98:e8:38:c0:5e:be:6c:b8:2d:5a:
08:cd:8c:d3:72:d3:f0:ae:93:b5:39:6e:29:ae:0d:dd:26:a7:
cd:28:54:63:b9:b2:ed:a2:02:6e:69:24:97:87:b9:00:c6:55:
6d:c9:4d:62:d8:0c:64:c9:c9:10:1f:76:02:6c:67:59:df:3a:
86:c3:05:d5:8b:83:ff:45:89:0b:21:de:ab:a3:4f:70:7c:61:
08:67:0d:50:09:1f:bc:e8:3b:51:45:eb:bf:8c:74:ff:b4:17:
a4:55:c5:61:2d:0d:3e:44:f2:88:60:b7:d1:98:72:e5:05:a2:
83:87:43:fb:be:0e:ae:70:dc:72:c2:e1:c1:08:38:a3:ef:39:
0b:b3:a5:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:38:28 2025 by rpki-client