This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft
File: FL7g69BrS4EvnhNxbiXxw8PRTMY.mft (raw, json)
Hash identifier: qGJPNqAKKweJr2EAA+mflhZJVOeR4/Ji7bVYJjjIboM=
Subject key identifier: D9:A6:50:99:06:D6:03:04:08:9E:AA:0C:60:03:ED:A7:F2:F4:A5:EC
Authority key identifier: 14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6
Certificate issuer: /CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6
Certificate serial: 019AF49C1A927359D8C7D7ACE7B8D2C377D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft
Manifest number: 1777
Signing time: Sat 06 Dec 2025 17:01:02 +0000
Manifest this update: Sat 06 Dec 2025 17:01:02 +0000
Manifest next update: Sun 07 Dec 2025 17:01:02 +0000
Files and hashes: 1: 08gO2xhzYB9MrOPyUgzVPTFsEks.roa (hash: uuTu5Ilmhz+ZTWX0lT3lDAgUnguN/hhWVP6RiQFWbO0=)
2: 2WvVwy-PRL5GLrJD80GhjHcE31U.roa (hash: V+gab5/KP1zLki+Ce4a8elUju3qZMThRlJep3bHdmjU=)
3: DlttiF7sTnpZBCWr79VnOWAb-Cw.roa (hash: 1I+LBYXesIZu1L3F5YYgW1sIY18eU3XqF+UKWnyiXM4=)
4: E_7lfxRnXL43BaxS0BR35ae28-8.roa (hash: bsdbl8+gmpOB2GMwRa9PUSXIwKLCbxh9y6aoGWsrfmA=)
5: FL7g69BrS4EvnhNxbiXxw8PRTMY.crl (hash: 1lOdqTXRoZXykFbM6INpR8byquWAHCLgW+xaEArxCnM=)
6: FYYHYUGoGvN1v8iZEsvIMUiBDuc.roa (hash: 5TNc2AIFURoGMvX0XYbEM3UC8FEruKwZsC3SRf2KaGU=)
7: G-5B6YeJ2OAL5vWCYn9oGob6FBk.roa (hash: wzpNaRep9vHFkuM4ho/JF0i7it8caDtKDv8qyIaqtG8=)
8: LVCOq86MWXkEBLGlXajn0ZENzKo.roa (hash: za/dFUKCElp0tRhTQ1rRsumZkCaRLeXmcSoTGiaBfbk=)
9: MRT2LF_aEOeFlu0z18oRZu0OKoQ.roa (hash: RWWOAldqVltxk1TROg2IYHHxbCDwXOV9TETvXzcXc50=)
10: RS51aQgOg2IG7Kd3gYmS2BKt-mo.roa (hash: 04jNZ5D66dkBNT8VoJCjjfzY2tYl+DQ4VUJcAaUENu8=)
11: UkVGZcePqwW-KxvbBYt50liz4UM.roa (hash: HUtG9jf1oU5Vm0ZUnGnbYEpFmR4EvSJFZLnuUG/MWnk=)
12: bKyX5SG6DyCqJiQSkFdqFjg1o-E.roa (hash: yT9Yzf+uBBeDkqte+YCfH3PUHF4dkiH/zoa5XVP6GqA=)
13: kVpC8L3NVBoBD0uRMCZwUe0L0hI.roa (hash: ZhoOhvNlGipJNbOy/H0tyIYa78nFkIWP7NHbAfT2b3I=)
14: uqIp0R_dvDEsqpriRwcj3sItHGw.roa (hash: 0M8ijVLRqjXM3pBRfR1epwx7A0hp1U4azXVWoA9LspU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 13:09:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f4:9c:1a:92:73:59:d8:c7:d7:ac:e7:b8:d2:c3:77:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6
Validity
Not Before: Dec 6 17:01:02 2025 GMT
Not After : Dec 7 17:01:02 2025 GMT
Subject: CN=d9a6509906d60304089eaa0c6003eda7f2f4a5ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:7d:c2:99:68:f3:ac:a3:5a:09:24:47:49:10:
2e:72:b8:9c:b1:ef:33:ae:29:aa:f1:7d:0a:20:2d:
9c:9a:78:bf:bf:fa:87:b2:28:35:3f:b1:8d:ee:2b:
78:f3:2c:1f:ca:5e:5f:9b:f2:ad:c7:00:10:a6:d6:
d1:d5:af:26:75:2d:2b:6e:14:0e:58:59:ee:ba:c9:
94:c6:f5:10:69:1d:6a:a7:75:27:a3:51:ae:64:5d:
f5:df:d4:bc:bc:68:2b:f1:d7:13:46:2c:c8:b6:0e:
ef:b8:bb:0c:95:27:44:1c:88:4f:83:ed:62:50:fa:
d3:11:2d:8c:38:a6:86:21:10:c0:f3:90:4b:f1:18:
5b:12:11:b4:b6:01:8c:68:5a:e9:7e:fc:fa:df:f4:
2e:c8:5b:b3:7e:1c:de:b1:ac:62:20:70:b2:8d:16:
70:8c:19:86:fa:96:90:99:c3:a0:e1:e3:44:65:2f:
ad:d9:fb:d5:b9:98:c9:b9:ba:25:dc:36:cb:34:89:
ae:63:0c:d2:de:87:e8:3c:74:44:90:d9:6e:51:dd:
78:e2:fb:31:c3:06:63:b0:f4:17:ec:30:b1:45:53:
01:0f:bd:4f:06:d4:5c:37:6a:76:22:51:a1:fd:a0:
26:09:9f:f2:73:71:61:b3:87:8e:4f:51:82:be:11:
98:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:A6:50:99:06:D6:03:04:08:9E:AA:0C:60:03:ED:A7:F2:F4:A5:EC
X509v3 Authority Key Identifier:
keyid:14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:40:42:c7:c3:4b:19:8c:c1:12:f8:a1:be:fc:8a:b6:f4:05:
e3:66:dd:95:87:98:bb:9a:5d:c0:de:1c:b3:34:7a:74:40:63:
cc:f6:6b:df:14:f7:f7:1a:64:d7:dc:c7:a6:d6:1a:76:be:d4:
1a:02:f7:00:72:87:86:79:fc:82:75:82:3f:96:06:2d:f5:2b:
84:53:1d:bc:91:41:86:34:67:07:b7:2a:1d:06:41:6b:14:c1:
cd:34:54:be:71:8e:05:be:8d:da:60:6f:02:2f:b6:19:52:8c:
0c:41:1a:29:e2:64:7d:55:63:c2:19:f3:9f:8e:ed:80:d9:7d:
ae:96:ef:5c:49:43:ac:4b:10:c7:12:c5:b9:46:13:0a:7b:90:
4e:a7:af:07:76:c2:9c:83:71:3e:cb:49:44:ca:c1:1c:ac:ac:
db:ea:6b:e9:fe:e5:49:29:d5:65:df:68:2b:72:db:fa:4d:9e:
38:16:68:0c:e0:08:b9:df:97:0f:59:3b:4d:3b:f9:a0:c1:45:
25:01:35:5f:28:7e:ab:5d:e4:a3:f0:aa:1a:4f:1e:ab:f2:02:
35:98:37:11:8d:f2:82:f8:c0:d6:9f:73:2c:80:00:44:08:6c:
81:64:f2:16:39:83:60:ec:21:73:e8:b7:91:a3:fe:ad:40:e3:
df:c7:27:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:02:39 2025 by rpki-client