This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/cf7c19-1c7d-4ebe-b4dd-cbccf90455fe/1/LS19l0PeLvovYzN4omj1jyqhYFA.mft
File: LS19l0PeLvovYzN4omj1jyqhYFA.mft (raw, json)
Hash identifier: tYy1Pzbm6uAbBcEjbl0qTlRSW0WT6uC/22Nhvl3UIwc=
Subject key identifier: FB:2D:E3:04:B8:B3:0D:73:51:91:03:90:E5:B4:00:BE:4F:70:E5:C2
Authority key identifier: 2D:2D:7D:97:43:DE:2E:FA:2F:63:33:78:A2:68:F5:8F:2A:A1:60:50
Certificate issuer: /CN=2d2d7d9743de2efa2f633378a268f58f2aa16050
Certificate serial: 019AF12E4849443D8B911D04003C14FEA3F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LS19l0PeLvovYzN4omj1jyqhYFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/cf7c19-1c7d-4ebe-b4dd-cbccf90455fe/1/LS19l0PeLvovYzN4omj1jyqhYFA.mft
Manifest number: 1610
Signing time: Sat 06 Dec 2025 01:02:13 +0000
Manifest this update: Sat 06 Dec 2025 01:02:13 +0000
Manifest next update: Sun 07 Dec 2025 01:02:13 +0000
Files and hashes: 1: 1-buam4cvzrUESLjjB1PACZifMOE.roa (hash: +T6bdmpI7/RrpdxHnXaaldhbLqtyNHZghNENwZHAAMA=)
2: 1Xxzpu5NB_tAOFF7vKFky5CdRts.roa (hash: n+JshJ/fSDMDcSDZOom+oloo+zJzlcN/7rhG+Doia9U=)
3: LS19l0PeLvovYzN4omj1jyqhYFA.crl (hash: BZjp3LtU3qA1CEDXoBi6oUQiMGP1hqp8Tc1DFwwaRzY=)
4: fKVvugVq57Vok-HeOBFsVeEq_KY.roa (hash: F7Yehco5YSDWcARYN+I7zPfrg1uSQ0Y+IfgsllPqsIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/cf7c19-1c7d-4ebe-b4dd-cbccf90455fe/1/LS19l0PeLvovYzN4omj1jyqhYFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/cf7c19-1c7d-4ebe-b4dd-cbccf90455fe/1/LS19l0PeLvovYzN4omj1jyqhYFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LS19l0PeLvovYzN4omj1jyqhYFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 01:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:2e:48:49:44:3d:8b:91:1d:04:00:3c:14:fe:a3:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d2d7d9743de2efa2f633378a268f58f2aa16050
Validity
Not Before: Dec 6 01:02:13 2025 GMT
Not After : Dec 7 01:02:13 2025 GMT
Subject: CN=fb2de304b8b30d7351910390e5b400be4f70e5c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2b:7f:37:4f:96:53:d0:6c:aa:57:da:57:4d:
9c:8c:79:1c:4f:99:f7:e4:d5:c0:2d:36:d4:a8:76:
0e:36:73:b7:d5:43:e3:54:d9:47:77:5d:03:3b:10:
d6:7d:da:2c:52:54:ce:c4:5e:f2:a4:c3:08:40:3a:
75:63:5a:cd:f5:3c:4d:4a:a0:a3:e6:02:1a:47:86:
31:d7:89:83:15:d6:84:f2:e0:e6:02:ed:43:d3:44:
37:aa:7d:4a:66:7b:91:38:3d:6a:ab:dc:07:a3:da:
fe:bb:b2:56:4f:2d:8f:e0:ac:b4:57:2c:1c:e1:00:
c7:aa:04:97:c7:84:d4:9c:a6:f4:d5:7a:b2:35:36:
57:da:8a:fc:47:e5:fa:af:b7:5b:42:e4:ca:ef:d8:
73:83:20:e9:45:89:36:0d:ac:2a:3a:74:7a:0e:9f:
e8:90:e0:38:17:c9:06:7f:03:4a:de:d0:5d:ef:54:
25:96:0f:d2:9f:5e:a1:e0:87:f4:25:b3:74:8d:04:
0c:7d:c4:ea:6a:e9:98:11:09:97:38:af:a7:c1:3e:
09:6e:84:b2:dc:e7:6b:50:7b:0a:2f:7e:65:ed:1e:
f2:55:b5:2b:41:31:dc:58:8b:86:eb:73:3f:0e:6d:
32:40:5a:e3:66:57:fb:6b:1b:36:ad:06:0f:9d:13:
bc:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:2D:E3:04:B8:B3:0D:73:51:91:03:90:E5:B4:00:BE:4F:70:E5:C2
X509v3 Authority Key Identifier:
keyid:2D:2D:7D:97:43:DE:2E:FA:2F:63:33:78:A2:68:F5:8F:2A:A1:60:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LS19l0PeLvovYzN4omj1jyqhYFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/cf7c19-1c7d-4ebe-b4dd-cbccf90455fe/1/LS19l0PeLvovYzN4omj1jyqhYFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/cf7c19-1c7d-4ebe-b4dd-cbccf90455fe/1/LS19l0PeLvovYzN4omj1jyqhYFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:9b:16:a9:9e:2f:c8:be:40:99:46:a3:2a:7b:15:aa:45:2d:
c0:94:b1:26:a2:33:21:88:c6:7d:fd:21:3e:7e:d5:bc:da:4a:
87:1a:9b:17:b1:16:2d:9a:b1:fa:08:0c:b9:8b:79:d6:15:27:
71:85:6e:4b:24:48:68:1e:0a:ff:1e:d9:6b:90:c3:10:78:83:
06:77:41:57:67:6f:f3:b3:b8:6a:e2:e7:0e:1d:e8:84:c4:25:
dc:97:4d:5c:78:49:54:02:c3:1b:6d:61:e6:90:e1:0c:6e:1c:
d4:87:3f:c0:1a:7e:09:3b:2e:c9:55:46:d9:05:0d:34:e0:1b:
5e:f5:72:d2:0c:fc:72:1b:b0:29:93:fe:60:9c:41:7d:c7:00:
05:da:42:f9:46:17:1c:65:1c:47:5e:44:c4:0c:56:e3:9f:bf:
7f:b8:74:25:42:e8:19:51:0f:90:e6:24:69:de:82:40:37:13:
f3:ba:7c:d5:5f:c7:4f:de:d5:79:cd:e2:56:be:e3:a3:8d:7c:
01:8a:d1:ab:dd:91:5e:0a:e6:d5:18:d0:28:92:a6:c0:a7:c4:
d1:ce:95:c7:5a:cb:d9:fe:0b:de:1a:da:63:7d:31:92:b7:2c:
de:61:4f:36:b6:27:cb:49:b1:86:d9:d8:66:ce:39:39:0b:84:
02:a6:52:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:24:47 2025 by rpki-client