This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/157c8b-8f27-47dd-995e-b436d76dad65/1/fsXxiW6aRDV8nXis831I9HgFINk.mft
File: fsXxiW6aRDV8nXis831I9HgFINk.mft (raw, json)
Hash identifier: +c1ynSZ0TmXR98FBZBg5gtLEVhi2JY/5MuppTcsW8yo=
Subject key identifier: 75:37:7E:A7:6C:C6:3B:2F:F8:F4:3E:1F:00:D8:20:34:1A:6C:B2:B9
Authority key identifier: 7E:C5:F1:89:6E:9A:44:35:7C:9D:78:AC:F3:7D:48:F4:78:05:20:D9
Certificate issuer: /CN=7ec5f1896e9a44357c9d78acf37d48f4780520d9
Certificate serial: 019B2EFAF77A7BF3FB05D702976ACEAAA5B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsXxiW6aRDV8nXis831I9HgFINk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/157c8b-8f27-47dd-995e-b436d76dad65/1/fsXxiW6aRDV8nXis831I9HgFINk.mft
Manifest number: 1781
Signing time: Thu 18 Dec 2025 01:02:37 +0000
Manifest this update: Thu 18 Dec 2025 01:02:37 +0000
Manifest next update: Fri 19 Dec 2025 01:02:37 +0000
Files and hashes: 1: fsXxiW6aRDV8nXis831I9HgFINk.crl (hash: i1ODRA1LjyxCifEPsIRRZv71iHRw0A0rxrEmmw/9Ar0=)
2: tIBVHEbpT3B92jmv17nHEdfPfME.roa (hash: F4q9q1phtloOjlG43lA2x7BlugORaBByvlUxXUgAa14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/157c8b-8f27-47dd-995e-b436d76dad65/1/fsXxiW6aRDV8nXis831I9HgFINk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/157c8b-8f27-47dd-995e-b436d76dad65/1/fsXxiW6aRDV8nXis831I9HgFINk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fsXxiW6aRDV8nXis831I9HgFINk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Dec 2025 01:02:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:2e:fa:f7:7a:7b:f3:fb:05:d7:02:97:6a:ce:aa:a5:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec5f1896e9a44357c9d78acf37d48f4780520d9
Validity
Not Before: Dec 18 01:02:37 2025 GMT
Not After : Dec 19 01:02:37 2025 GMT
Subject: CN=75377ea76cc63b2ff8f43e1f00d820341a6cb2b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c0:f6:44:f4:cd:2f:a6:bc:6c:5e:9c:a4:bc:
a8:94:a8:c9:43:3c:00:c2:36:ce:4f:a4:5e:8f:73:
ea:48:55:60:14:c9:eb:4b:b3:0e:bb:46:25:81:11:
96:92:cb:fc:79:8c:39:37:8f:e3:89:9f:3c:0a:4e:
6e:29:83:86:78:54:93:5a:6c:d5:29:6e:0c:ba:80:
cc:d0:be:f4:06:4b:d7:7d:29:e8:4c:33:4c:c1:22:
47:88:bd:37:1b:7c:08:3b:0e:9e:71:5c:60:32:7e:
1c:94:9e:b4:e9:7b:e3:4d:c2:c1:ed:61:b0:48:ee:
68:1d:e5:10:9f:40:4e:de:4a:43:bb:b7:b3:1e:bf:
79:4f:da:9c:a0:fa:35:15:e7:95:48:90:62:42:ec:
06:f4:6c:77:99:ec:30:05:17:3d:96:3d:34:20:10:
f3:71:b1:9a:f7:58:5f:26:62:fd:fa:79:44:48:ee:
ee:e6:8f:4c:66:17:ea:45:bd:d6:53:86:8e:fe:42:
bf:06:d2:81:ef:d3:12:e5:8a:d8:14:0d:77:4e:c5:
e4:6e:09:0f:25:99:95:c5:db:27:d0:94:cc:51:ed:
97:fb:71:92:98:eb:ce:21:54:4e:83:21:db:88:c4:
3d:f8:ba:53:17:54:a7:bb:10:03:4a:54:34:82:3b:
03:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:37:7E:A7:6C:C6:3B:2F:F8:F4:3E:1F:00:D8:20:34:1A:6C:B2:B9
X509v3 Authority Key Identifier:
keyid:7E:C5:F1:89:6E:9A:44:35:7C:9D:78:AC:F3:7D:48:F4:78:05:20:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsXxiW6aRDV8nXis831I9HgFINk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/157c8b-8f27-47dd-995e-b436d76dad65/1/fsXxiW6aRDV8nXis831I9HgFINk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/157c8b-8f27-47dd-995e-b436d76dad65/1/fsXxiW6aRDV8nXis831I9HgFINk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:0e:61:82:27:29:fc:7e:f6:6c:4f:ee:2c:eb:5a:7d:b0:cc:
b9:f9:78:e2:d0:34:97:ab:35:b6:02:f5:2c:4e:0b:7b:ad:db:
a6:a9:ad:68:1b:ff:c9:bd:c9:ed:d7:c7:ad:36:8f:94:a6:c5:
60:ef:ea:87:1b:10:86:3c:00:4e:ab:e8:31:63:87:af:f5:96:
a9:99:81:10:24:11:d6:51:8e:5c:10:2d:8a:c7:2e:70:fb:98:
e4:fe:f1:d5:c4:b2:e4:fd:e6:67:65:b4:15:86:0e:96:9a:c0:
15:cf:68:65:8a:ad:3c:57:61:80:7f:fb:b9:3b:27:e5:ba:2e:
a9:31:37:17:ba:0c:83:5a:b5:1f:26:03:5a:79:81:0c:46:15:
43:e2:4b:c7:77:aa:51:87:d8:ec:8c:b9:a3:4e:40:5c:cd:f4:
e7:15:33:97:15:38:1d:aa:c4:2a:52:eb:66:e0:d1:24:bb:9b:
02:36:40:96:0d:f5:42:d8:6e:2c:2d:50:a9:32:9d:07:c2:ba:
f1:05:db:12:7a:e8:ff:73:27:c9:9a:f8:8c:21:10:f2:ec:e6:
10:53:55:eb:dc:bb:02:a6:73:b1:8d:35:74:75:72:19:72:5d:
5c:b0:fa:70:57:d5:77:b9:05:b0:06:82:38:43:c8:98:38:2b:
3a:33:ef:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsu+vd6e/P7BdcCl2rOqqW4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlYzVmMTg5NmU5YTQ0MzU3YzlkNzhhY2YzN2Q0OGY0Nzgw
NTIwZDkwHhcNMjUxMjE4MDEwMjM3WhcNMjUxMjE5MDEwMjM3WjAzMTEwLwYDVQQD
Eyg3NTM3N2VhNzZjYzYzYjJmZjhmNDNlMWYwMGQ4MjAzNDFhNmNiMmI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0sD2RPTNL6a8bF6cpLyolKjJQzwA
wjbOT6Rej3PqSFVgFMnrS7MOu0YlgRGWksv8eYw5N4/jiZ88Ck5uKYOGeFSTWmzV
KW4MuoDM0L70BkvXfSnoTDNMwSJHiL03G3wIOw6ecVxgMn4clJ606XvjTcLB7WGw
SO5oHeUQn0BO3kpDu7ezHr95T9qcoPo1FeeVSJBiQuwG9Gx3mewwBRc9lj00IBDz
cbGa91hfJmL9+nlESO7u5o9MZhfqRb3WU4aO/kK/BtKB79MS5YrYFA13TsXkbgkP
JZmVxdsn0JTMUe2X+3GSmOvOIVROgyHbiMQ9+LpTF1SnuxADSlQ0gjsDLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHU3fqdsxjsv+PQ+HwDYIDQabLK5MB8GA1UdIwQY
MBaAFH7F8YlumkQ1fJ14rPN9SPR4BSDZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnNYeGlXNmFSRFY4blhpczgzMUk5SGdGSU5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC8xNTdjOGItOGYyNy00N2RkLTk5NWUt
YjQzNmQ3NmRhZDY1LzEvZnNYeGlXNmFSRFY4blhpczgzMUk5SGdGSU5rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC8xNTdjOGItOGYyNy00N2RkLTk5NWUtYjQzNmQ3NmRhZDY1
LzEvZnNYeGlXNmFSRFY4blhpczgzMUk5SGdGSU5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcg5hgicp
/H72bE/uLOtafbDMufl44tA0l6s1tgL1LE4Le63bpqmtaBv/yb3J7dfHrTaPlKbF
YO/qhxsQhjwATqvoMWOHr/WWqZmBECQR1lGOXBAtiscucPuY5P7x1cSy5P3mZ2W0
FYYOlprAFc9oZYqtPFdhgH/7uTsn5bouqTE3F7oMg1q1HyYDWnmBDEYVQ+JLx3eq
UYfY7Iy5o05AXM305xUzlxU4HarEKlLrZuDRJLubAjZAlg31QthuLC1QqTKdB8K6
8QXbEnro/3MnyZr4jCEQ8uzmEFNV69y7AqZzsY01dHVyGXJdXLD6cFfVd7kFsAaC
OEPImDgrOjPvBA==
-----END CERTIFICATE-----
Generated at Thu Dec 18 08:19:40 2025 by rpki-client