This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/a6076e-1510-488c-b7fb-c94fe4c971d4/1/dgfMwwkpHcgbGRQ9TT_ijQHGvr0.mft
File: dgfMwwkpHcgbGRQ9TT_ijQHGvr0.mft (raw, json)
Hash identifier: yjd9uStv1hqxfYKkNS4JoAeMdvm5DeL7CnCNgvMxM14=
Subject key identifier: 7B:2B:FB:5C:89:65:FB:58:B7:95:18:C7:45:0C:AB:E7:23:7A:1E:47
Authority key identifier: 76:07:CC:C3:09:29:1D:C8:1B:19:14:3D:4D:3F:E2:8D:01:C6:BE:BD
Certificate issuer: /CN=7607ccc309291dc81b19143d4d3fe28d01c6bebd
Certificate serial: 019AF19A92F0D264AA29D9A6A43AF1337CD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dgfMwwkpHcgbGRQ9TT_ijQHGvr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/a6076e-1510-488c-b7fb-c94fe4c971d4/1/dgfMwwkpHcgbGRQ9TT_ijQHGvr0.mft
Manifest number: 10C4
Signing time: Sat 06 Dec 2025 03:00:30 +0000
Manifest this update: Sat 06 Dec 2025 03:00:30 +0000
Manifest next update: Sun 07 Dec 2025 03:00:30 +0000
Files and hashes: 1: Bo8-3iT2LkDa18jomlUWH5mw_LE.roa (hash: 5nJAx1GIzC2LXbuEQ6FRmtjlYW8D/Ir6+ALBKS3Ky+A=)
2: dgfMwwkpHcgbGRQ9TT_ijQHGvr0.crl (hash: TBVbpilxlt1WJ2wlpzYF3hFQfk5cAFzoizUgunPND6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/a6076e-1510-488c-b7fb-c94fe4c971d4/1/dgfMwwkpHcgbGRQ9TT_ijQHGvr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/a6076e-1510-488c-b7fb-c94fe4c971d4/1/dgfMwwkpHcgbGRQ9TT_ijQHGvr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/dgfMwwkpHcgbGRQ9TT_ijQHGvr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:9a:92:f0:d2:64:aa:29:d9:a6:a4:3a:f1:33:7c:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7607ccc309291dc81b19143d4d3fe28d01c6bebd
Validity
Not Before: Dec 6 03:00:30 2025 GMT
Not After : Dec 7 03:00:30 2025 GMT
Subject: CN=7b2bfb5c8965fb58b79518c7450cabe7237a1e47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b8:e1:3c:23:cd:88:6f:5e:48:17:3b:27:e9:
e1:73:7a:b0:15:c2:19:c0:82:30:ef:de:ca:56:69:
9d:d1:8a:a1:2b:98:c2:e3:ba:50:71:82:5b:e4:6d:
dd:27:f7:75:90:ed:be:02:1c:eb:66:53:1e:59:f3:
eb:92:01:7b:53:62:fd:cd:30:4e:c3:f0:39:c6:12:
55:5a:39:63:f0:ba:f8:68:b9:71:c3:34:aa:74:c3:
72:f2:3d:a3:55:29:55:1c:e6:73:15:68:8f:85:31:
b2:6e:5c:d5:9e:cd:26:a7:dc:f3:d5:3f:2b:18:29:
a1:ea:da:67:5e:62:ee:b9:bb:63:8a:2a:b6:ae:f0:
4f:c2:9d:63:71:ab:6e:10:60:1d:cd:aa:eb:80:77:
da:f2:7d:3d:3b:d9:03:7d:fe:30:97:a8:d9:56:d7:
af:b3:83:e3:e5:1c:5a:7c:dc:9f:3c:21:67:b1:07:
df:98:e9:5d:7c:82:55:66:38:93:32:74:02:19:1b:
d0:63:ed:67:b0:2f:50:7e:2e:bf:c4:ea:9f:0d:d3:
91:ec:ae:97:ff:e9:f6:1d:fc:ef:e2:b0:76:a0:60:
83:1a:22:99:c1:8d:af:b8:f9:7b:bf:a4:de:f7:f4:
63:d3:96:ff:26:f4:e9:6c:c3:22:6e:cf:02:9f:1c:
12:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:2B:FB:5C:89:65:FB:58:B7:95:18:C7:45:0C:AB:E7:23:7A:1E:47
X509v3 Authority Key Identifier:
keyid:76:07:CC:C3:09:29:1D:C8:1B:19:14:3D:4D:3F:E2:8D:01:C6:BE:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dgfMwwkpHcgbGRQ9TT_ijQHGvr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/a6076e-1510-488c-b7fb-c94fe4c971d4/1/dgfMwwkpHcgbGRQ9TT_ijQHGvr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/a6076e-1510-488c-b7fb-c94fe4c971d4/1/dgfMwwkpHcgbGRQ9TT_ijQHGvr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:24:e3:09:b1:58:60:39:64:e1:eb:5a:1e:89:0e:f2:fe:6e:
b5:71:6a:91:f0:ff:10:a8:ad:8a:25:4e:4b:76:49:92:1d:95:
13:23:28:4a:51:1f:fb:6c:f3:56:f6:cf:ea:1c:00:de:de:ff:
30:d3:0e:ce:a8:1f:82:1b:77:a5:2e:a9:df:e4:5f:f6:1b:85:
6d:2e:c1:2b:f8:81:f0:f6:9f:0b:75:e5:fc:d9:e6:3a:97:96:
95:de:21:de:d6:d0:73:e7:f9:26:ca:52:03:6a:a8:9f:9e:1b:
17:57:f5:3b:69:ce:cb:f5:61:cb:54:73:df:5c:5a:96:89:0e:
4b:d7:94:23:af:ea:d9:5f:91:cf:5d:78:44:74:59:3d:3a:06:
be:13:d9:5f:31:b3:0e:35:19:fa:ed:77:2b:45:69:f9:9d:3c:
94:f5:24:95:fd:32:33:70:c9:94:a4:cc:1f:e5:a0:2a:a8:9c:
64:31:b9:b4:e1:c0:db:2c:21:36:25:a2:f9:b9:b5:c6:dd:6e:
af:ed:f8:c1:97:b4:bf:99:2a:da:9f:94:b6:f6:b5:e1:49:f3:
43:25:11:17:dc:42:5f:66:61:a5:27:e7:1e:2b:a4:36:53:71:
6d:bf:19:92:8c:49:ac:98:08:e8:8f:15:59:f7:18:52:ac:1b:
09:fd:d6:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:08:53 2025 by rpki-client