This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/1-EEoFGt77IvRGFu-DDuTQKr1txQ.mft
File: 1-EEoFGt77IvRGFu-DDuTQKr1txQ.mft (raw, json)
Hash identifier: mfXxiZzPPwF1Q9GsuipUZ2XuZbDg06meVjt2G4LmBc0=
Subject key identifier: 15:9C:6A:DE:DB:A7:3D:E7:D2:C1:45:92:11:41:C1:44:D4:70:C2:B8
Authority key identifier: F8:41:28:14:6B:7B:EC:8B:D1:18:5B:BE:0C:3B:93:40:AA:F5:B7:14
Certificate issuer: /CN=f84128146b7bec8bd1185bbe0c3b9340aaf5b714
Certificate serial: 019AF540CE0CBD01266B835A6C4947B39B80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-EEoFGt77IvRGFu-DDuTQKr1txQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/1-EEoFGt77IvRGFu-DDuTQKr1txQ.mft
Manifest number: 14AB
Signing time: Sat 06 Dec 2025 20:00:55 +0000
Manifest this update: Sat 06 Dec 2025 20:00:55 +0000
Manifest next update: Sun 07 Dec 2025 20:00:55 +0000
Files and hashes: 1: 1-EEoFGt77IvRGFu-DDuTQKr1txQ.crl (hash: VhFEx7c7Ek+bmrxgWLVRkrstEQTSX5ttjX5T91MiFJ8=)
2: 1f2tT71vV1MiLQenFigoQuxRwqM.roa (hash: wpjdNTt4b7V2ll6KY5o5hcvRIp5mFl1TvHli6R2tBq8=)
3: Bsfme9lR0Aqk-MzMTzsIFR9Nk-w.roa (hash: zKd/skTxKlvTPvFh0ifMkaguOQnO05Ys88KWivYuLNY=)
4: CmmKhdciV_F_mra-YOcbKmrYhbY.roa (hash: VT8xbl1Jji+4wsCUPpHnl/UFnhMgpu5zo/k26EaRMFM=)
5: Nc9h3qvLuJI4WP6YkQa2jYc6rJI.roa (hash: 5Bmg9YYyOOpJwhqaN3H4Zio8XFaxyte8HHt0oAAzH5g=)
6: RSsMaCl57szGFCkhCpSEu-SYKeY.roa (hash: oRvnshX7DCElI5ZaHCvWWYGxI4E7w9fzHzlAFCyFjaQ=)
7: g21ix9lsPN1aDIX0bqCC1gdAPmM.roa (hash: W8EV6Gvgx+m/11ynvueehGaUvQkCO2v1KpATl4K+wEo=)
8: geP9toPWAOd-61VI__Y1Av416ac.roa (hash: 1O2o1nFJwlxv6rt2UEY74JBc/AG0NZbX/IF9C2wOTds=)
9: tyq7k6T4xEqQgbGkJ2fusYhPOJQ.roa (hash: IGWJpPuzQqbP565czDocwJaMa5FKL3JQeJDF/Y2DnIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/1-EEoFGt77IvRGFu-DDuTQKr1txQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/1-EEoFGt77IvRGFu-DDuTQKr1txQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-EEoFGt77IvRGFu-DDuTQKr1txQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 20:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f5:40:ce:0c:bd:01:26:6b:83:5a:6c:49:47:b3:9b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f84128146b7bec8bd1185bbe0c3b9340aaf5b714
Validity
Not Before: Dec 6 20:00:55 2025 GMT
Not After : Dec 7 20:00:55 2025 GMT
Subject: CN=159c6adedba73de7d2c145921141c144d470c2b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9e:49:53:78:d9:45:5c:16:ad:bf:a6:c7:82:
c0:10:dd:e4:53:46:1f:0a:dc:2b:10:13:37:c4:51:
7d:cf:e4:d5:0b:ad:18:67:28:56:98:a3:4a:48:40:
14:48:70:fd:eb:86:76:37:95:17:31:a2:a8:da:ce:
73:61:9e:44:b4:fc:3c:ab:c5:cd:4f:5e:f0:86:b5:
61:2b:4a:66:63:c5:d8:d0:45:7b:4c:9f:fa:79:2d:
1e:e2:fc:43:33:a2:1c:de:64:79:7d:e6:d5:86:df:
45:fe:92:77:5b:64:bb:06:24:9a:0d:7f:11:05:4a:
62:80:b0:b0:a2:18:7e:64:bd:d6:47:30:1e:7c:0c:
9f:f7:be:d7:d7:1c:53:fe:de:0f:90:06:7a:64:1c:
cc:9f:0e:8b:87:69:44:c8:24:01:a1:79:dd:d2:9f:
53:7c:b9:17:c5:8a:ae:48:a9:2e:5f:f3:82:ce:a1:
98:46:a8:64:18:70:84:e3:20:f4:5a:99:db:0b:e9:
87:19:4f:ae:6e:6f:ee:22:2c:e7:27:a7:53:86:ee:
c2:cf:4f:3f:66:d4:77:ba:9e:a7:cf:93:96:49:b6:
bd:72:11:5d:a4:86:19:c2:06:6d:a6:d3:3f:8c:5c:
11:2f:0f:4c:1c:cf:85:9b:53:66:8b:56:2f:17:54:
f8:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:9C:6A:DE:DB:A7:3D:E7:D2:C1:45:92:11:41:C1:44:D4:70:C2:B8
X509v3 Authority Key Identifier:
keyid:F8:41:28:14:6B:7B:EC:8B:D1:18:5B:BE:0C:3B:93:40:AA:F5:B7:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-EEoFGt77IvRGFu-DDuTQKr1txQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/1-EEoFGt77IvRGFu-DDuTQKr1txQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/1-EEoFGt77IvRGFu-DDuTQKr1txQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:3e:aa:93:72:9c:ac:d4:94:1b:90:94:9a:93:9d:65:bf:a1:
ac:0b:b5:2d:ca:c4:ba:d8:f6:98:41:da:17:f3:c0:72:da:e8:
df:8a:70:9d:9a:fa:31:08:8c:68:64:7b:03:a4:7f:57:41:4f:
e4:78:c3:b2:14:9b:8b:07:5f:e7:72:6b:8f:06:fb:d8:59:e1:
7b:96:9a:5a:b6:96:51:33:ff:9e:46:48:3d:07:20:1e:cb:ed:
d3:e7:1a:87:e3:76:01:6c:e4:14:42:de:51:1f:c1:a9:31:f6:
c1:9f:50:b4:37:1c:05:91:83:a4:af:fd:39:77:22:e7:cc:76:
9c:34:bc:86:35:75:8c:da:63:20:95:5f:f2:f6:0e:48:95:85:
53:a2:f2:c5:90:a0:18:81:c8:29:63:b1:60:ae:53:b5:c2:2e:
26:63:64:1d:58:10:a6:c3:fa:e5:7f:c7:b9:21:f3:03:0c:9b:
46:3f:b1:87:3b:34:aa:21:a8:83:d2:bc:76:77:25:50:2b:17:
fe:91:33:5c:ac:16:3e:09:30:87:1b:b7:81:d7:1a:51:b8:c1:
33:1e:b0:46:bb:2e:11:59:3d:c3:ea:c8:a2:29:ca:49:ba:22:
b6:c6:9b:d0:b5:e1:9a:0d:88:87:16:e7:4b:a7:1b:05:85:54:
57:db:7c:14
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZr1QM4MvQEma4NabElHs5uAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4NDEyODE0NmI3YmVjOGJkMTE4NWJiZTBjM2I5MzQwYWFm
NWI3MTQwHhcNMjUxMjA2MjAwMDU1WhcNMjUxMjA3MjAwMDU1WjAzMTEwLwYDVQQD
EygxNTljNmFkZWRiYTczZGU3ZDJjMTQ1OTIxMTQxYzE0NGQ0NzBjMmI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJ5JU3jZRVwWrb+mx4LAEN3kU0Yf
CtwrEBM3xFF9z+TVC60YZyhWmKNKSEAUSHD964Z2N5UXMaKo2s5zYZ5EtPw8q8XN
T17whrVhK0pmY8XY0EV7TJ/6eS0e4vxDM6Ic3mR5febVht9F/pJ3W2S7BiSaDX8R
BUpigLCwohh+ZL3WRzAefAyf977X1xxT/t4PkAZ6ZBzMnw6Lh2lEyCQBoXnd0p9T
fLkXxYquSKkuX/OCzqGYRqhkGHCE4yD0WpnbC+mHGU+ubm/uIiznJ6dThu7Cz08/
ZtR3up6nz5OWSba9chFdpIYZwgZtptM/jFwRLw9MHM+Fm1Nmi1YvF1T42wIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFBWcat7bpz3n0sFFkhFBwUTUcMK4MB8GA1UdIwQY
MBaAFPhBKBRre+yL0Rhbvgw7k0Cq9bcUMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1FRW9GR3Q3N0l2UkdGdS1ERHVUUUtyMXR4US5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjIvZmIyNDExLTQ4NWItNDE0My05MjQx
LTEzODM5NjQwYTYwNC8xLzEtRUVvRkd0NzdJdlJHRnUtRER1VFFLcjF0eFEubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzYyL2ZiMjQxMS00ODViLTQxNDMtOTI0MS0xMzgzOTY0MGE2
MDQvMS8xLUVFb0ZHdDc3SXZSR0Z1LUREdVRRS3IxdHhRLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKT6q
k3KcrNSUG5CUmpOdZb+hrAu1LcrEutj2mEHaF/PActro34pwnZr6MQiMaGR7A6R/
V0FP5HjDshSbiwdf53Jrjwb72Fnhe5aaWraWUTP/nkZIPQcgHsvt0+cah+N2AWzk
FELeUR/BqTH2wZ9QtDccBZGDpK/9OXci58x2nDS8hjV1jNpjIJVf8vYOSJWFU6Ly
xZCgGIHIKWOxYK5TtcIuJmNkHVgQpsP65X/HuSHzAwybRj+xhzs0qiGog9K8dncl
UCsX/pEzXKwWPgkwhxu3gdcaUbjBMx6wRrsuEVk9w+rIoinKSboitsab0LXhmg2I
hxbnS6cbBYVUV9t8FA==
-----END CERTIFICATE-----
Generated at Sun Dec 7 01:59:21 2025 by rpki-client