This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/b64837-5e86-4909-a07b-065aa4155ed4/1/V7dxGL1WsrO0SZxWanxkiq16bp8.mft
File: V7dxGL1WsrO0SZxWanxkiq16bp8.mft (raw, json)
Hash identifier: Nwl5EktebMfqiHaLIukDWkTJVZlqnOJyUQ0egiGxQEY=
Subject key identifier: 47:63:12:60:EF:C3:AB:84:78:D6:1A:8E:0B:6E:75:B7:FE:26:C6:AB
Authority key identifier: 57:B7:71:18:BD:56:B2:B3:B4:49:9C:56:6A:7C:64:8A:AD:7A:6E:9F
Certificate issuer: /CN=57b77118bd56b2b3b4499c566a7c648aad7a6e9f
Certificate serial: 019AF4653157C1DA4013163D2E14FFADA83C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V7dxGL1WsrO0SZxWanxkiq16bp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/b64837-5e86-4909-a07b-065aa4155ed4/1/V7dxGL1WsrO0SZxWanxkiq16bp8.mft
Manifest number: 1694
Signing time: Sat 06 Dec 2025 16:01:03 +0000
Manifest this update: Sat 06 Dec 2025 16:01:03 +0000
Manifest next update: Sun 07 Dec 2025 16:01:03 +0000
Files and hashes: 1: 3AgNndxC3sa0yZvKsMQhIngarPI.roa (hash: ZMLpockLoP2nXNAFFK4mODjHzPZHkVrx4CiFq319wa8=)
2: V7dxGL1WsrO0SZxWanxkiq16bp8.crl (hash: xsxIFbuZpdNy42bNf5IZByfDOboRClqWYy7WD0+tdQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/b64837-5e86-4909-a07b-065aa4155ed4/1/V7dxGL1WsrO0SZxWanxkiq16bp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/b64837-5e86-4909-a07b-065aa4155ed4/1/V7dxGL1WsrO0SZxWanxkiq16bp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/V7dxGL1WsrO0SZxWanxkiq16bp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 13:09:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f4:65:31:57:c1:da:40:13:16:3d:2e:14:ff:ad:a8:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57b77118bd56b2b3b4499c566a7c648aad7a6e9f
Validity
Not Before: Dec 6 16:01:03 2025 GMT
Not After : Dec 7 16:01:03 2025 GMT
Subject: CN=47631260efc3ab8478d61a8e0b6e75b7fe26c6ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:54:3c:37:09:16:72:f7:6b:71:0c:58:4e:57:
49:91:b7:99:54:a0:d7:9a:cc:55:13:29:3f:1a:59:
64:0b:35:1f:2f:65:9c:3f:8a:1e:b8:11:f1:65:48:
af:9a:7e:7c:2a:1c:81:89:4d:b2:c0:7b:80:ca:f6:
64:61:fc:39:fb:45:21:b5:81:fd:0e:ff:09:92:a7:
c5:08:95:62:af:29:36:f4:3f:69:2f:76:05:68:33:
d7:bd:3f:c7:00:32:31:51:a0:d2:b6:39:9a:2d:af:
99:cf:80:b5:c6:ee:4b:56:0b:87:31:82:9b:e4:1c:
c3:ea:59:dd:4e:01:fd:e7:1a:78:af:89:d7:82:f9:
f1:be:0d:e1:51:22:46:d0:c4:54:32:0a:db:7d:9c:
8b:fa:51:62:62:b3:6e:ba:e3:3f:26:fd:98:ae:52:
62:ea:c7:c9:23:83:bf:fd:fd:69:b5:c5:31:76:f0:
0a:aa:0d:64:95:43:f9:82:98:c5:00:eb:a5:7d:fe:
79:3a:c1:a0:07:34:60:84:b3:d1:d5:87:f4:8d:57:
6c:66:6d:f6:0b:e8:34:86:e3:0d:03:3c:94:45:04:
e4:22:78:24:37:77:5f:99:8d:81:e8:5c:12:13:e4:
e2:f6:31:6c:02:66:64:ff:46:7e:46:9f:d8:e1:ed:
d2:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:63:12:60:EF:C3:AB:84:78:D6:1A:8E:0B:6E:75:B7:FE:26:C6:AB
X509v3 Authority Key Identifier:
keyid:57:B7:71:18:BD:56:B2:B3:B4:49:9C:56:6A:7C:64:8A:AD:7A:6E:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V7dxGL1WsrO0SZxWanxkiq16bp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/b64837-5e86-4909-a07b-065aa4155ed4/1/V7dxGL1WsrO0SZxWanxkiq16bp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/b64837-5e86-4909-a07b-065aa4155ed4/1/V7dxGL1WsrO0SZxWanxkiq16bp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:df:56:3f:c6:46:f2:f8:8d:63:bd:cf:eb:fe:de:b5:3f:e1:
71:32:97:9c:ba:28:51:63:07:dd:a9:5f:6b:03:50:77:27:23:
b6:34:c8:b2:ce:54:d2:da:81:70:0e:90:13:d1:08:26:6b:71:
ef:cf:78:c9:da:53:a3:0f:8a:bf:b5:bc:40:c3:f6:50:5b:c1:
f5:21:1a:67:ad:c7:76:ae:78:31:c4:1f:fd:9e:47:53:37:5b:
a0:17:ed:76:9b:fa:50:49:ab:13:be:df:27:f6:de:5b:72:3f:
3e:e8:17:30:f2:f6:c0:7b:00:40:0e:d1:01:a1:c7:01:dd:2b:
a9:e5:4e:27:ee:a0:58:b1:17:88:2b:cf:bc:01:30:e1:d7:de:
a8:ae:2d:66:ae:4d:1a:22:5d:a6:fd:9e:b5:e0:4e:1a:50:f1:
fb:fd:13:3e:e4:f2:1a:ab:28:b0:4d:6f:e5:44:8d:2d:ad:4c:
6e:24:81:27:40:96:fc:a3:0f:f6:d0:11:ee:96:f7:61:40:e3:
23:91:80:1f:00:f8:99:9d:6c:dd:e9:ce:6b:39:92:b4:87:e4:
79:b7:dd:38:8c:d5:12:18:29:3a:08:34:8f:bc:7e:74:69:4f:
9b:e0:b3:1c:43:3b:07:31:3d:d9:81:76:a3:d4:2b:37:5d:6d:
a6:bf:e0:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:06:19 2025 by rpki-client