This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft
File: R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft (raw, json)
Hash identifier: 005glrcc3Rj17wK7a+8g51MRt+BgSwIenZWvFV0jLic=
Subject key identifier: B6:88:29:6F:C8:1F:1D:B4:4E:95:D7:C5:20:8F:71:7B:A8:CA:6C:57
Authority key identifier: 47:4A:88:BC:6E:9E:10:BB:AF:15:0F:01:9B:BF:8A:61:5A:2B:03:C2
Certificate issuer: /CN=474a88bc6e9e10bbaf150f019bbf8a615a2b03c2
Certificate serial: 019AF6FA0F88A36BC0ADB4D21CC74916529C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R0qIvG6eELuvFQ8Bm7-KYVorA8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft
Manifest number: 1764
Signing time: Sun 07 Dec 2025 04:02:54 +0000
Manifest this update: Sun 07 Dec 2025 04:02:54 +0000
Manifest next update: Mon 08 Dec 2025 04:02:54 +0000
Files and hashes: 1: M_ZucCsuJb1Fkv6phLwqAkn6J0Q.roa (hash: f0NnZS14FEEVK+otZH9sTWdHvzqdq6zBgg0/lm/taxs=)
2: R0qIvG6eELuvFQ8Bm7-KYVorA8I.crl (hash: OXPW7ipg8K64+rSymaNxGrr8rRhxD1Ur52mfcdi4q7Q=)
3: kNpqx0tZlqJV-cV06kVoinEAEvE.roa (hash: yXJYbGR5++qBsVQrRHL4bHSCZiui648QCWfzX8PBFak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/R0qIvG6eELuvFQ8Bm7-KYVorA8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 21:29:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f6:fa:0f:88:a3:6b:c0:ad:b4:d2:1c:c7:49:16:52:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=474a88bc6e9e10bbaf150f019bbf8a615a2b03c2
Validity
Not Before: Dec 7 04:02:54 2025 GMT
Not After : Dec 8 04:02:54 2025 GMT
Subject: CN=b688296fc81f1db44e95d7c5208f717ba8ca6c57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:cf:ac:62:fc:04:26:a0:81:1f:8a:49:fa:23:
12:93:ba:31:16:a3:5b:7d:1e:0b:08:ef:c5:ad:b8:
fe:ad:0a:38:0f:2b:86:b5:71:b5:c9:bd:30:70:0d:
ce:71:e5:f9:df:27:de:5c:f8:ea:ea:4c:79:74:78:
2a:27:b0:96:c6:92:45:c6:37:e5:82:96:02:0b:2e:
c1:e5:14:1c:dc:cb:68:e7:2a:9f:ab:ab:6c:e0:10:
a4:7e:a9:3b:19:e0:08:08:85:5b:e2:ca:f5:43:05:
cf:38:17:96:bf:31:7c:7a:74:a4:8a:7b:91:87:28:
c8:f1:47:9a:10:1f:c6:8b:3e:8d:ee:df:4a:37:3d:
19:45:d2:a4:8a:de:26:3f:26:14:31:9f:34:fc:4c:
de:4a:99:6f:5c:bd:3c:2c:39:90:38:4a:7b:3b:12:
ff:88:50:dc:79:64:09:e4:f8:b7:af:73:8b:b8:1d:
1f:57:e4:c2:b7:9b:8d:f0:da:1d:6d:35:19:1e:95:
d7:57:d2:33:1f:9f:39:7b:9f:ef:42:4c:6f:80:ff:
fb:f5:23:8e:2c:67:1b:31:4d:eb:61:e6:7e:89:ea:
4c:ad:db:b7:34:05:95:13:98:34:f4:de:3a:49:f0:
ea:3a:31:d6:35:e9:8f:6c:81:98:57:9c:c6:a1:ab:
e6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:88:29:6F:C8:1F:1D:B4:4E:95:D7:C5:20:8F:71:7B:A8:CA:6C:57
X509v3 Authority Key Identifier:
keyid:47:4A:88:BC:6E:9E:10:BB:AF:15:0F:01:9B:BF:8A:61:5A:2B:03:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R0qIvG6eELuvFQ8Bm7-KYVorA8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:2b:e0:b6:64:da:11:c9:6d:04:93:f9:98:33:6e:af:b6:06:
59:25:86:54:f1:2d:61:12:64:77:27:55:a4:0b:55:bb:5b:0c:
ba:db:c1:0d:9c:17:d0:99:0a:da:93:6d:b4:0f:64:5d:87:2d:
7e:90:d8:8c:68:e7:b1:5f:2a:06:4d:bb:47:e2:ae:dd:aa:42:
19:5a:f3:d7:56:81:3c:f6:13:d2:a8:65:1b:10:2c:63:96:75:
df:72:58:d5:1e:2b:e4:e2:94:06:b2:fd:98:dc:05:32:66:bf:
47:de:dc:9c:d8:05:51:81:da:17:24:3d:a5:33:8f:4c:7a:fb:
99:84:c3:51:24:25:0c:b3:97:23:28:a1:4a:56:f0:9f:22:e1:
ee:78:ed:c6:20:ec:0c:c5:c9:34:de:3e:92:ee:54:d7:9b:e0:
12:37:42:34:62:32:f7:de:45:3d:c8:76:30:d3:30:ed:fc:80:
08:1a:d7:10:cb:66:76:ee:10:f2:1e:4f:38:84:3d:54:e4:3d:
54:23:12:b3:de:42:64:49:4a:8a:99:05:a9:e3:25:53:73:48:
ad:90:fb:5a:9d:c4:2f:a2:a0:1e:7e:b7:84:e4:e3:61:71:ae:
34:ed:e6:5b:c9:08:60:ad:49:a3:63:50:81:87:bb:34:70:17:
b3:72:3c:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZr2+g+Io2vArbTSHMdJFlKcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3NGE4OGJjNmU5ZTEwYmJhZjE1MGYwMTliYmY4YTYxNWEy
YjAzYzIwHhcNMjUxMjA3MDQwMjU0WhcNMjUxMjA4MDQwMjU0WjAzMTEwLwYDVQQD
EyhiNjg4Mjk2ZmM4MWYxZGI0NGU5NWQ3YzUyMDhmNzE3YmE4Y2E2YzU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoM+sYvwEJqCBH4pJ+iMSk7oxFqNb
fR4LCO/Frbj+rQo4DyuGtXG1yb0wcA3OceX53yfeXPjq6kx5dHgqJ7CWxpJFxjfl
gpYCCy7B5RQc3Mto5yqfq6ts4BCkfqk7GeAICIVb4sr1QwXPOBeWvzF8enSkinuR
hyjI8UeaEB/Giz6N7t9KNz0ZRdKkit4mPyYUMZ80/EzeSplvXL08LDmQOEp7OxL/
iFDceWQJ5Pi3r3OLuB0fV+TCt5uN8NodbTUZHpXXV9IzH585e5/vQkxvgP/79SOO
LGcbMU3rYeZ+iepMrdu3NAWVE5g09N46SfDqOjHWNemPbIGYV5zGoavmLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLaIKW/IHx20TpXXxSCPcXuoymxXMB8GA1UdIwQY
MBaAFEdKiLxunhC7rxUPAZu/imFaKwPCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjBxSXZHNmVFTHV2RlE4Qm03LUtZVm9yQThJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9iYWQxYzEtMzY1ZC00MWRlLWFkN2Mt
Y2U4ZmM5M2FkYjIxLzEvUjBxSXZHNmVFTHV2RlE4Qm03LUtZVm9yQThJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny9iYWQxYzEtMzY1ZC00MWRlLWFkN2MtY2U4ZmM5M2FkYjIx
LzEvUjBxSXZHNmVFTHV2RlE4Qm03LUtZVm9yQThJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdivgtmTa
EcltBJP5mDNur7YGWSWGVPEtYRJkdydVpAtVu1sMutvBDZwX0JkK2pNttA9kXYct
fpDYjGjnsV8qBk27R+Ku3apCGVrz11aBPPYT0qhlGxAsY5Z133JY1R4r5OKUBrL9
mNwFMma/R97cnNgFUYHaFyQ9pTOPTHr7mYTDUSQlDLOXIyihSlbwnyLh7njtxiDs
DMXJNN4+ku5U15vgEjdCNGIy995FPch2MNMw7fyACBrXEMtmdu4Q8h5POIQ9VOQ9
VCMSs95CZElKipkFqeMlU3NIrZD7Wp3EL6KgHn63hOTjYXGuNO3mW8kIYK1Jo2NQ
gYe7NHAXs3I8vQ==
-----END CERTIFICATE-----
Generated at Sun Dec 7 07:08:03 2025 by rpki-client