This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.mft
File: EX-dVYJrQkht_ITTXBpjpc6HUHw.mft (raw, json)
Hash identifier: tYi0GMORMtFpaIxOsXZRF6g/u1yn9m4+/fTSQGlBEcQ=
Subject key identifier: C2:60:3F:8D:9C:E0:C3:EC:77:55:62:69:18:18:6E:D5:95:46:2D:91
Authority key identifier: 11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
Certificate issuer: /CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Certificate serial: 019AF23F63FD947E6A3B4C3A99DF35C7E748
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.mft
Manifest number: 0A16
Signing time: Sat 06 Dec 2025 06:00:31 +0000
Manifest this update: Sat 06 Dec 2025 06:00:31 +0000
Manifest next update: Sun 07 Dec 2025 06:00:31 +0000
Files and hashes: 1: 3lIHjKuigd-8wnJOYmIpykPGwEE.roa (hash: RbhnGqyFBszn7eUWI0qn8+G1e8ScDlyeFe7EddnRngY=)
2: 7RN5SRH01vnVuwmId81dIIGGm8U.roa (hash: 1/C/E5eYkrY6D/S5+koDYApbhvcMTNf0kx5arKlMVwM=)
3: CwxwigW-yHA-vYKKZaAl1IxpzAA.roa (hash: rW7hw/nZ3SfsJ2xESW9df5rJCWkAlL57M/KGPQGcJMI=)
4: Cyn89nSP-A380xB9jFU-SvGwOLk.roa (hash: 55NLzajp924cjij1HdQXLRUI6O4Sv4/7fK+uH+Ovruw=)
5: EX-dVYJrQkht_ITTXBpjpc6HUHw.crl (hash: 3xAkq//NhFeUm8Lremu2/IYK0lmL4cMkaPUiUvvlaoA=)
6: GYViSX4l2vjHhmFNhomqHFqkpSc.roa (hash: 3CgVrq2niOAF6athi7j5otFEVOSff0VY2syy7+cJym4=)
7: JXgg0_l5GaO7jP1zJeiTZnzRqjE.roa (hash: 4YX6bHKXPEIoYDxsMxDe1UOLGJ38lDkQmJub7lQqJ88=)
8: QhKGhq9RVjLUPSCejjoRE221C7U.roa (hash: 0khB5n2A42sHpAsF0tPwxAXTpxJUh3W1WQBMyyOav6Y=)
9: RXOWuzIO3GP1EkbIwvuqPcEpiDs.roa (hash: vXTbGxFCLWqp0CNvIIccpXNG33skDlTQkxc0RSBrijk=)
10: TU10gdUCxQBjCnIZW9U6VNshcy8.roa (hash: LBXY7Mu4+F2Stbby6TE9MpekUANg9/WfPHUHl5054wI=)
11: WOeiegJydkxVE1vjiwGx6ATuFEY.roa (hash: QQ0/7N7W7DkOMFKnzycHP6yPRCFiGEALp7b0CpA3RZ0=)
12: XaybEw_MkTY28IquFGQbHrSpM7k.roa (hash: TwRW1DKYPixpCJP4Q5rOfw8R+B/zkE9LC0Lipg8NmYQ=)
13: fQ7bPgK9ouvS7fbPuIpfuslK-RU.roa (hash: 3FK6PbiJEFCVQCpQogIU0uOqOIRz4gHsO2agb5Bk1QM=)
14: vLlnIbM4IzjjaW5_ksMl5w3Mdyo.roa (hash: qNTbjySkAkE6BruFWTSoo36zWMNK/1N9V7FWTBB9+Gc=)
15: zB69TVx0sEbC1RySFuzqMAIu3a0.roa (hash: usN4D5QBcD6XXA42H1Ot8IvkjdBuShhuURXZHjJ1m3k=)
16: zhgXsJzHOSwZ2vW5K0nW1lO6VOU.roa (hash: Yt6DAu9pUe7VspoY5/vTE3HMguhU3RqgQubcaVH+tIw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f2:3f:63:fd:94:7e:6a:3b:4c:3a:99:df:35:c7:e7:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Validity
Not Before: Dec 6 06:00:31 2025 GMT
Not After : Dec 7 06:00:31 2025 GMT
Subject: CN=c2603f8d9ce0c3ec7755626918186ed595462d91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:85:f2:5f:09:b4:f4:71:62:bc:53:ac:67:22:
0c:36:f4:2b:2b:ef:78:a5:da:a5:10:87:eb:a6:d8:
a1:52:46:cf:7d:37:bf:48:0d:f6:92:dc:2b:f3:49:
98:6a:1c:29:2a:76:eb:55:81:5c:ca:de:76:ba:45:
ac:94:fc:d1:25:97:ae:2d:d9:b8:15:24:bc:c1:7d:
f2:b2:f5:87:0d:38:82:52:6c:40:9c:e0:d8:35:f0:
04:3a:d0:2b:12:64:e4:d0:fc:67:0a:32:63:19:23:
6b:00:e4:ef:6f:9c:de:46:77:c8:77:1f:25:ad:02:
28:24:1f:f8:d7:b6:84:d9:f8:ed:9f:50:12:40:d3:
03:9e:6b:85:c6:43:3d:b2:75:92:bd:1f:55:3b:f8:
fd:7f:b6:2e:72:43:a9:69:2e:d9:8c:b5:aa:d5:60:
dd:74:d5:b5:89:4c:10:a1:3e:32:24:9d:4e:e5:28:
ac:7a:a6:53:b3:eb:5a:b0:de:b5:5b:b8:f4:8e:89:
5a:22:20:0b:f8:ea:55:51:e9:71:82:b6:22:b8:2b:
29:51:9f:2e:b7:e4:fa:f3:71:8e:eb:05:8f:be:25:
c4:a2:ea:2c:5a:e5:44:70:c3:89:bb:34:b1:8c:9b:
a3:3f:5a:b9:0b:30:c1:41:45:14:6f:5f:81:10:bb:
ca:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:60:3F:8D:9C:E0:C3:EC:77:55:62:69:18:18:6E:D5:95:46:2D:91
X509v3 Authority Key Identifier:
keyid:11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:2c:9e:b5:ea:a0:c9:c5:57:76:57:4a:43:87:a3:33:c8:ac:
fa:42:13:fc:ba:19:62:6c:d0:36:ee:3a:28:ea:e7:fe:b8:b8:
0e:34:89:40:59:84:f5:cc:58:a1:a9:ca:3c:14:72:92:80:aa:
bb:c3:e7:53:46:f6:a4:e9:fc:1a:81:86:f2:3e:7c:db:6f:de:
90:ab:18:f5:4e:63:9c:d6:c3:d5:47:40:a9:c7:a1:c1:47:cb:
bf:23:12:b3:37:62:9b:21:b6:28:cd:0c:f1:37:f9:29:d1:8c:
ed:cf:1b:75:78:f6:e6:90:c4:1a:a7:70:d3:4e:c6:13:1b:c4:
72:90:79:74:00:48:1e:db:22:d9:da:bd:a6:58:35:d9:6b:25:
da:f4:20:f6:53:e1:da:60:a5:f4:97:fa:0e:f3:28:de:1a:af:
d1:4c:15:16:6a:c7:3d:9f:06:3a:f7:53:af:ee:93:5f:b8:c9:
4b:cf:52:db:e6:3a:68:67:6d:b6:e9:3a:6c:74:ad:44:cc:6d:
1e:3c:69:b5:da:3d:cb:e2:de:fe:68:8d:bf:bf:41:87:11:65:
43:54:72:ad:23:7b:fd:89:d3:c0:c6:b2:65:aa:c3:6d:0c:3f:
3e:96:f7:2e:ef:19:09:f9:77:79:16:be:82:46:a9:bc:8b:12:
bb:f6:37:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:54:37 2025 by rpki-client