This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e94652-1564-4d1b-8198-1ac5d8863082/1/fIwTcd1q_V_XnqmE2j-9oblK_iM.mft
File: fIwTcd1q_V_XnqmE2j-9oblK_iM.mft (raw, json)
Hash identifier: xDIFPTLC5RFC1zsIjQXAeVzlNclCEIEAOKh09PKYhHs=
Subject key identifier: 46:2B:01:C0:3C:78:92:77:62:6C:07:92:94:99:20:47:95:0D:D4:46
Authority key identifier: 7C:8C:13:71:DD:6A:FD:5F:D7:9E:A9:84:DA:3F:BD:A1:B9:4A:FE:23
Certificate issuer: /CN=7c8c1371dd6afd5fd79ea984da3fbda1b94afe23
Certificate serial: 019AF12EE380DCB496B686FC2754A213E912
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fIwTcd1q_V_XnqmE2j-9oblK_iM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/e94652-1564-4d1b-8198-1ac5d8863082/1/fIwTcd1q_V_XnqmE2j-9oblK_iM.mft
Manifest number: 1761
Signing time: Sat 06 Dec 2025 01:02:53 +0000
Manifest this update: Sat 06 Dec 2025 01:02:53 +0000
Manifest next update: Sun 07 Dec 2025 01:02:53 +0000
Files and hashes: 1: 4Ze6fHS1CDDIrfDprEE1yu2W5uY.roa (hash: To0AiaOH9TsCon/TYTwvzw2Mel3lXf3uulB0tRaKWIc=)
2: fIwTcd1q_V_XnqmE2j-9oblK_iM.crl (hash: bq9MwQ/rpSV8FgfnkNaags14/tU0zrJw6QeH2MFejUk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/e94652-1564-4d1b-8198-1ac5d8863082/1/fIwTcd1q_V_XnqmE2j-9oblK_iM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/e94652-1564-4d1b-8198-1ac5d8863082/1/fIwTcd1q_V_XnqmE2j-9oblK_iM.mft
rsync://rpki.ripe.net/repository/DEFAULT/fIwTcd1q_V_XnqmE2j-9oblK_iM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 01:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:2e:e3:80:dc:b4:96:b6:86:fc:27:54:a2:13:e9:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c8c1371dd6afd5fd79ea984da3fbda1b94afe23
Validity
Not Before: Dec 6 01:02:53 2025 GMT
Not After : Dec 7 01:02:53 2025 GMT
Subject: CN=462b01c03c789277626c079294992047950dd446
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c0:a9:4f:a1:22:d3:95:99:90:8b:89:eb:06:
8d:e4:f7:b5:b3:c2:83:0f:32:bb:40:0d:cf:9d:9d:
37:15:15:31:38:ea:ec:33:41:0c:b2:a7:d5:95:bf:
70:dd:93:43:3a:76:31:5f:cb:29:66:6f:66:7c:ae:
15:98:46:30:3d:78:c8:82:9b:8d:63:1b:a8:56:dc:
36:cf:45:c9:a7:9f:8f:21:78:ce:a2:e4:e2:64:76:
e0:91:b2:44:c2:3d:fc:51:88:92:43:a2:55:7f:4b:
09:8f:d5:7b:4c:56:f6:f1:e1:88:6f:f6:da:86:18:
8e:12:82:12:b5:b4:fe:e1:87:00:c2:aa:96:3d:4e:
77:d8:9d:78:72:70:b7:1e:49:82:54:ad:f1:f7:02:
ae:28:01:d1:f4:2e:07:51:75:0e:0e:3d:b4:b9:80:
35:64:6e:00:9c:2b:2b:f9:69:22:3c:2f:67:1f:a5:
da:e6:bf:7c:3f:06:fe:3b:23:77:55:36:7b:33:80:
49:47:d9:39:03:bb:21:7d:86:43:2c:6d:14:39:34:
4b:73:af:ef:78:9e:2b:bf:28:68:0d:3c:d1:a3:a9:
db:94:93:44:2a:0b:ea:0b:6a:9b:91:c8:f3:ac:e9:
50:c6:cd:c2:23:78:b0:9f:eb:0a:b8:24:d5:c2:2b:
52:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:2B:01:C0:3C:78:92:77:62:6C:07:92:94:99:20:47:95:0D:D4:46
X509v3 Authority Key Identifier:
keyid:7C:8C:13:71:DD:6A:FD:5F:D7:9E:A9:84:DA:3F:BD:A1:B9:4A:FE:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fIwTcd1q_V_XnqmE2j-9oblK_iM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e94652-1564-4d1b-8198-1ac5d8863082/1/fIwTcd1q_V_XnqmE2j-9oblK_iM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e94652-1564-4d1b-8198-1ac5d8863082/1/fIwTcd1q_V_XnqmE2j-9oblK_iM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:90:4d:bb:7c:ff:bd:6b:69:e4:0e:d9:80:c5:59:0b:55:c7:
ac:11:2c:02:70:10:ff:c2:79:b7:f1:25:85:9e:79:66:ff:7f:
00:6e:1a:5d:f9:85:56:06:ec:4c:06:5c:bb:cf:bf:66:5b:ed:
7d:92:d6:76:9a:60:56:20:5c:51:76:8a:4d:82:0b:e9:36:a6:
ce:46:81:e4:73:48:23:e1:18:25:d7:fb:ff:0e:66:5d:b2:98:
15:21:5b:14:cc:39:68:c0:36:42:cd:59:74:ea:c9:9d:39:73:
37:2e:21:d6:f4:e2:82:b8:6a:b1:ac:2a:91:bf:03:0e:51:78:
c4:fe:f4:05:2d:55:4d:c8:ab:b0:44:c4:3a:a1:7d:64:df:a2:
24:41:b2:12:de:db:b1:ec:42:8b:fb:75:c4:30:84:bb:56:c2:
3a:83:85:1e:b3:22:0a:06:10:8e:24:9a:08:a2:6e:59:2b:50:
97:01:c1:53:30:d7:4e:ef:9a:7a:de:aa:36:52:e5:97:df:ba:
b9:3a:6b:4d:ea:bb:bb:b5:b4:b0:32:3f:7c:59:38:3c:8f:b2:
19:59:e9:36:44:b4:22:51:0c:c8:03:fe:a9:f3:94:8c:2c:40:
52:b7:87:f2:62:98:15:fc:b6:70:69:dd:57:6a:2e:52:b0:ae:
53:18:32:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 06:58:41 2025 by rpki-client