This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft
File: G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft (raw, json)
Hash identifier: l26xeanKFr+/2P4OOdVlQcExw5wuaiprIY/5XXSqDLI=
Subject key identifier: 76:F7:B8:61:5B:50:23:01:35:61:FF:84:F9:47:4E:C3:D0:B7:01:A8
Authority key identifier: 1B:68:65:61:26:19:83:73:D0:78:86:BF:4A:B8:FB:06:B9:00:67:80
Certificate issuer: /CN=1b68656126198373d07886bf4ab8fb06b9006780
Certificate serial: 019AF50AE375E653FD7B7131A09B1CFD43F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft
Manifest number: 1765
Signing time: Sat 06 Dec 2025 19:02:02 +0000
Manifest this update: Sat 06 Dec 2025 19:02:02 +0000
Manifest next update: Sun 07 Dec 2025 19:02:02 +0000
Files and hashes: 1: FseoG8adiLo0RLAf1UjvghOTljU.roa (hash: KjYrZHqJ+HstyQr/uUASJXDHhJKgj2NLAuGOtjEwvqg=)
2: G2hlYSYZg3PQeIa_Srj7BrkAZ4A.crl (hash: KsvgWHPwOdbMmnp6Uy5kbK+LhtpTH/NNSHS9QVxhWyw=)
3: HZwokTuDHsI8h-fzTOEC6oBOUUI.roa (hash: WM7QJ6OQyLcuKoO0U9leXRvAuei8nXuZdEOZY6w3qXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 19:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f5:0a:e3:75:e6:53:fd:7b:71:31:a0:9b:1c:fd:43:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b68656126198373d07886bf4ab8fb06b9006780
Validity
Not Before: Dec 6 19:02:02 2025 GMT
Not After : Dec 7 19:02:02 2025 GMT
Subject: CN=76f7b8615b5023013561ff84f9474ec3d0b701a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a1:09:28:05:f5:1a:3a:b6:83:7e:bb:21:d1:
b3:c1:7f:43:4d:fa:1e:bc:39:c0:a2:bb:c7:7a:c7:
6e:21:1b:11:5c:32:43:20:7a:a3:dc:01:29:8f:20:
e1:ba:5c:cc:b7:19:ed:d6:3a:5b:fa:ee:29:5c:72:
fc:31:26:48:07:be:b5:50:a0:31:45:90:c5:9c:0c:
8f:13:6b:1f:6c:ab:e7:28:dc:63:e9:f6:61:9e:d6:
5e:8d:59:35:9d:21:07:d7:86:95:4a:ff:79:b6:4a:
ed:68:9f:9b:4b:c8:ba:01:1c:ab:a5:1c:7e:3d:6b:
72:c0:e1:ca:dc:ec:d5:98:e5:9b:0a:b7:7f:3e:cb:
33:99:79:ce:b9:f8:ae:a2:ca:7b:bb:2d:57:b7:b7:
8a:68:70:f9:fe:19:9e:0e:2b:d3:36:d0:ef:d1:13:
15:b7:87:2b:26:41:34:48:1d:87:35:1a:64:b3:98:
2b:a3:62:3a:16:bd:22:7e:4a:ac:8f:44:6b:41:81:
a8:03:ce:0d:c3:34:d1:19:c6:a8:c3:0a:49:c9:01:
b6:a1:ba:c1:90:15:dc:12:5d:43:a2:08:65:7d:ba:
54:45:c4:e3:d6:f8:22:8a:46:10:e2:f0:c3:bd:ca:
64:f2:e2:1b:7d:3d:0f:d6:11:ed:ea:67:90:bb:f3:
21:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:F7:B8:61:5B:50:23:01:35:61:FF:84:F9:47:4E:C3:D0:B7:01:A8
X509v3 Authority Key Identifier:
keyid:1B:68:65:61:26:19:83:73:D0:78:86:BF:4A:B8:FB:06:B9:00:67:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:2c:3c:80:88:31:a3:d7:c0:28:05:c9:9c:8c:1f:82:17:b3:
25:77:c9:13:65:a1:ef:c1:5d:12:55:33:95:9c:ff:0c:87:6f:
13:41:f7:27:69:cd:ef:d2:f3:63:78:2e:ed:5c:c6:cc:30:83:
b5:41:90:16:bd:4c:fc:17:e3:7b:13:b7:f3:09:98:4f:16:43:
d6:c1:ba:81:20:a7:54:ae:d1:47:65:b8:0d:18:04:6f:04:f4:
1f:69:c9:00:91:3d:f6:cc:90:db:7a:c6:46:c2:61:05:5b:c4:
e2:0b:f2:86:91:af:03:3e:10:ee:56:6c:60:18:74:dc:e1:af:
a0:4d:f0:34:30:44:d0:9d:94:db:1a:ee:c0:b3:a8:9a:c3:fa:
65:0a:9d:fe:23:2d:61:38:2a:9a:b1:0c:ca:d2:ec:9d:8b:0e:
5b:d9:35:8f:ac:5c:1e:c5:04:d2:fd:3a:be:fb:d1:27:6b:53:
8a:95:9c:80:de:d7:cf:c3:5e:23:5b:51:4a:0a:0f:6e:a8:71:
ba:64:ad:0c:29:c4:02:9d:8a:b2:4b:c9:24:b6:84:a1:e6:dd:
59:51:5c:50:40:d6:b4:d4:88:c6:f7:65:85:58:4f:84:46:6f:
a3:5f:74:bb:14:13:4c:97:09:ce:15:95:2d:b4:e7:31:03:80:
63:e7:f1:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 04:42:42 2025 by rpki-client