This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.mft
File: CR7HzPD6dh7Zm8WnqewNDusL8FU.mft (raw, json)
Hash identifier: I+26ixsj/2YrS1rUZ8o9qJ0C2TEuGvB7Qdpuy6Vg6YI=
Subject key identifier: E1:3E:2F:F3:22:FA:35:D4:52:51:DA:C3:F9:80:F3:BC:E4:EC:12:5B
Authority key identifier: 09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
Certificate issuer: /CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Certificate serial: 019AF3F7AB23E7FD4411910F831BB11292A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.mft
Manifest number: 110D
Signing time: Sat 06 Dec 2025 14:01:25 +0000
Manifest this update: Sat 06 Dec 2025 14:01:25 +0000
Manifest next update: Sun 07 Dec 2025 14:01:25 +0000
Files and hashes: 1: 5dCYwgA9XnsPyTZF0PH2sEFIENQ.roa (hash: HeN6VLa+RLAMtmcxH1afx2NR8Pkm/Q2bNQH+mpmkM84=)
2: 6SIE7lIPAfETfqeGKwz9qsqTDpo.roa (hash: baJLkGQNPC/ayO1BdamNx0wTnQsH1JjYTd+EvvvO47U=)
3: 8Iq82OAVfdAmtA73eRoKV8Dt5yo.roa (hash: aujtRiFKGUSGs6JLSKvAIV7CEwLeuy59to5pukeZQ/Q=)
4: B5NGdVBBF38v7I807spD9rlndCk.roa (hash: Ij2UQybHDi9rCMOEdxuL3uK0WnnQkl2pfO/6vc3aPyM=)
5: CR7HzPD6dh7Zm8WnqewNDusL8FU.crl (hash: 8byRd8hpn7X4+hiEVE6C+qPiwGM+j2LE4zmAmms5/Dc=)
6: D5MvDrzK0eKeBhQPT5E-qcyDegE.roa (hash: ZZ3rGXDkZjhVdVSt+mJABSAAxbotcysbVgd0Yw1KZd4=)
7: GWboZrvlBziZoBcX3EIZ1oPONJw.roa (hash: AivjmWkJZRMdojRH4kleqZQJ33BcMzsWC3Fh1Qo8D3Q=)
8: JNXkfS8Gevyb4Dt3MskQFKOQyBE.roa (hash: xyI4i/7FZY7J0bkn5v2Hrfk5UEeVMBFfBsSKz6DAPY0=)
9: L2H6UwduWaJxFicdgN2P7eBtiHA.roa (hash: P4+4JbqGYS4bGYqfrHMMZckY8WsOqty8P+Ix09bzckQ=)
10: SRcQTsQI-tcWDkKInxMrE24Ysok.roa (hash: Ahr9YcByWBXusMBM+n1pwDVQOVjVHUrt6dCBioyhQio=)
11: SqIYQtH-MyTecrJ8-T-TD9dilA8.roa (hash: p2IOkyfQBQfAepmjkkBl9kWUTrpqgo3iCz4cUJ7c12w=)
12: T1gh1hk6ej12g4Ihw5JL9jevaLA.roa (hash: S9ngvgv1d+3Twe9rVRGrD4AR8LO9wBk9cDUOi8GIi4o=)
13: THvQYIa2SprhVvWK5-tWknfJY9w.roa (hash: 5zmsJFBP7NnBZaNurwDsUUuS1oMZV7G7pUdzHmeMsEI=)
14: _2x-4OGJJSoKcxtXyC5heNpC1Lk.roa (hash: vkhFS/TDoPtaxHhXWGchXfwiYEYa7shcVneeg8uj/S8=)
15: cBFi45ZytFKgnNo2imsLe1_V7q8.roa (hash: r9FtBlSO2l8QxP7DU1HrwjHWsN6WkSKa/BKGiXhnmRk=)
16: chc7NZYTY8TAAm4omvxtyabyq7Y.roa (hash: D4ml84hX/IF5k6NvrzKJg2mEZ4TzfgqpdYCT4BEMOzQ=)
17: ehIHn3jAZtRRkA33Nc1pYTHjTDg.roa (hash: bDhk4ct8DwYt2TZGQPJBM72H8dn80wWF1VZJAu/dGpI=)
18: hhzSm6GjX7s3vRc-UjvW8KahBO0.roa (hash: Ee9hXcXaMVLm37/p4g8p7BURdDDaz2FT+WhXrMvmGFM=)
19: jCupyTailD4J3l_LQLBvtP05gjk.roa (hash: D5HBTRbrPgt5UiMToMLoELxSS8TE8kgjWsHI9+xY4kE=)
20: rPciKNxouTUmkCLDkFKKyn388Cc.roa (hash: zI+gdKXH7CP5oPaL5HXMew7Kewt2hB10+HNYNloE0UY=)
21: tY0RTrnwdeHFozdlTByKvXK-HOE.roa (hash: Sxd1viKUAgFQojN/S49L+nnSyHy1YvWaHrdPVirkqCU=)
22: vel8G0_GwQFflB8Mgko4kMTZKps.roa (hash: rEt+VHHycH8jAHwOJN7GUU5Y5p8vUpqH1HAPUwtitdw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 13:09:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f3:f7:ab:23:e7:fd:44:11:91:0f:83:1b:b1:12:92:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Validity
Not Before: Dec 6 14:01:25 2025 GMT
Not After : Dec 7 14:01:25 2025 GMT
Subject: CN=e13e2ff322fa35d45251dac3f980f3bce4ec125b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:2e:58:41:db:f8:1c:2e:f5:a4:57:ba:d6:65:
04:68:06:50:8c:e3:3c:d4:6d:04:02:0b:74:47:ad:
ab:e5:6b:12:77:3b:1a:2d:52:fe:98:6f:d1:8d:94:
e3:bf:d1:24:fc:4c:a3:4f:7e:94:17:d5:5c:cd:bb:
9a:61:4b:3e:67:43:08:0e:d1:f6:80:a1:c8:d8:a3:
66:34:66:7a:f9:5d:28:b8:6a:0c:0c:55:6f:9c:2c:
06:76:ba:bb:a0:47:3a:78:e8:f3:eb:8c:e3:c8:f4:
d4:ad:04:fb:8d:a5:b1:75:38:3d:bf:e8:49:11:83:
0f:fb:9e:33:41:68:ce:bd:17:6f:17:85:a8:28:b8:
04:7f:3d:64:15:8c:86:2b:27:fd:ef:a1:95:22:a1:
71:25:1c:2e:2a:8e:73:3c:25:4c:a7:07:8e:0e:48:
d1:45:75:a2:6c:56:37:c6:d7:c7:ed:08:de:6c:40:
b6:05:05:74:be:5a:ba:0d:0e:75:ad:6e:cc:bc:e4:
14:7a:3d:d4:43:98:27:2e:24:45:53:d4:55:75:f3:
a9:b8:47:8a:e9:3d:ef:a1:8d:1a:5f:4a:41:67:ff:
21:83:e2:69:c5:ce:dc:6b:c9:32:e3:66:e5:67:8f:
6a:c5:85:ca:21:a8:92:6f:96:36:22:75:a3:68:0b:
e1:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:3E:2F:F3:22:FA:35:D4:52:51:DA:C3:F9:80:F3:BC:E4:EC:12:5B
X509v3 Authority Key Identifier:
keyid:09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:6f:f9:17:a8:be:a3:86:d3:07:9b:1b:6e:84:81:64:27:04:
be:5c:ef:81:e9:a6:42:9e:df:da:5d:6f:dd:7e:43:a3:70:39:
4f:b2:e0:56:0d:a7:35:a1:6b:91:a0:22:10:60:54:f9:04:85:
39:a0:8b:53:f0:40:b5:b6:71:fc:48:61:63:6b:9a:f7:d2:ad:
be:36:89:e8:3c:f1:f9:e6:e7:8d:7e:ab:69:77:06:e3:56:26:
5f:3b:c5:15:9f:ae:9b:ce:0d:a9:cf:6e:22:43:ba:a9:fb:f0:
64:26:94:08:ad:0d:32:88:1b:5c:25:73:0a:7b:20:7f:69:b4:
78:1f:a7:5e:7d:33:fc:8a:15:ad:c7:91:54:de:dc:9f:7e:19:
ae:3a:42:f2:5d:91:e1:2c:ae:90:fe:07:2b:18:e0:8f:52:37:
99:4d:42:9d:07:4c:78:f8:18:ba:88:aa:22:38:86:e6:5a:c8:
21:c4:96:44:0f:26:ef:a1:a1:cf:7e:f0:1d:db:3b:d0:bb:2c:
76:0b:75:fa:84:ef:ff:17:96:e6:93:44:ee:cf:55:c6:4e:34:
04:24:3c:5c:e0:0e:9e:e0:c6:5a:00:d0:8e:e5:6f:3e:72:89:
99:8d:e0:b0:79:93:bf:a0:95:30:50:e9:07:ae:6b:73:ef:76:
67:3f:ec:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:28:56 2025 by rpki-client