This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/8a6f72-c822-451f-a5c5-a7fd6c8e70fd/1/7YAJUKMdzayqxWrbk2pCvrhF4ks.mft
File: 7YAJUKMdzayqxWrbk2pCvrhF4ks.mft (raw, json)
Hash identifier: W5tndTZjoiBh/HluG+Vtv2ycCaTHPTTH6bCScnpCZhc=
Subject key identifier: 10:0C:A4:2A:60:C3:BC:6E:4B:7B:40:5F:04:75:6E:A0:B6:2F:4E:A1
Authority key identifier: ED:80:09:50:A3:1D:CD:AC:AA:C5:6A:DB:93:6A:42:BE:B8:45:E2:4B
Certificate issuer: /CN=ed800950a31dcdacaac56adb936a42beb845e24b
Certificate serial: 019AF19B70E7EC918A6994545E3A03CA137F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7YAJUKMdzayqxWrbk2pCvrhF4ks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/8a6f72-c822-451f-a5c5-a7fd6c8e70fd/1/7YAJUKMdzayqxWrbk2pCvrhF4ks.mft
Manifest number: 176D
Signing time: Sat 06 Dec 2025 03:01:27 +0000
Manifest this update: Sat 06 Dec 2025 03:01:27 +0000
Manifest next update: Sun 07 Dec 2025 03:01:27 +0000
Files and hashes: 1: 5MV2rdKN5gFzkLwT07F5rTi7omY.roa (hash: D3LvO+IMQRq6IdrMAHkY6QYNoiaJ3ZDYs8dNG78o/Fs=)
2: 6h2yqqYWrRghoIoxZYGFzpWfew0.roa (hash: U+lnqoe9GQk5UXj86Etet1S1TemuykTuT7gj4NeX2wA=)
3: 71BeoRLY37qqGRrW0q7PaZ4MISA.roa (hash: q87wHV6L3WsqVGDtFfCxv18cXyNSbCqzEF0eTOVfAv8=)
4: 7YAJUKMdzayqxWrbk2pCvrhF4ks.crl (hash: fSPRv9THWvHrLnk20m22qZiXrL4+LNiBuyexMGW0n0U=)
5: Z2fOpxeOdQMYHdkDGfltSVuJwJQ.roa (hash: cNSmYsaFbWz1KHK5w6io+60UGsIvpGDu7K4HhPw9GkE=)
6: iXWiAu38fSPYWYABMk3KTWR8J94.roa (hash: PeV/ss1h89xDLD9aBvw1HJFSN2Rx7428f2qqc6I2rMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/8a6f72-c822-451f-a5c5-a7fd6c8e70fd/1/7YAJUKMdzayqxWrbk2pCvrhF4ks.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/8a6f72-c822-451f-a5c5-a7fd6c8e70fd/1/7YAJUKMdzayqxWrbk2pCvrhF4ks.mft
rsync://rpki.ripe.net/repository/DEFAULT/7YAJUKMdzayqxWrbk2pCvrhF4ks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 03:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:9b:70:e7:ec:91:8a:69:94:54:5e:3a:03:ca:13:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed800950a31dcdacaac56adb936a42beb845e24b
Validity
Not Before: Dec 6 03:01:27 2025 GMT
Not After : Dec 7 03:01:27 2025 GMT
Subject: CN=100ca42a60c3bc6e4b7b405f04756ea0b62f4ea1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:9b:21:c6:54:e8:47:82:99:71:1a:5a:89:97:
82:6d:1a:51:dd:10:5e:1a:9d:cf:9f:a2:62:48:1b:
4e:3c:6c:f6:6d:53:f6:57:16:38:1c:36:57:0d:48:
b5:01:17:7d:b4:ad:4b:5d:68:ec:d3:a1:0c:83:94:
a6:68:57:a2:86:01:a1:82:e3:5a:55:71:70:b2:ae:
a7:4d:36:8f:51:4c:2c:0b:c8:df:e8:4a:ef:22:85:
32:6d:25:03:c5:98:e0:d9:a5:b7:54:d4:c9:3d:ad:
9c:38:bf:86:47:11:36:31:d8:66:c0:4e:04:f5:0d:
a5:7a:7c:b4:9f:53:3c:59:16:9c:be:49:e4:48:0e:
d2:bd:3e:e5:ed:32:2a:f7:cc:31:fd:af:ef:e0:50:
2c:c0:93:f4:8c:84:fd:ff:6c:f5:20:03:90:0f:92:
3f:9c:98:4c:a5:f1:d9:22:5a:78:b5:3f:80:a9:d8:
64:66:49:26:06:85:80:b8:e2:3c:d2:0c:ae:3a:46:
46:20:0d:d9:89:62:6e:80:e1:c7:38:3a:2b:da:ee:
36:ef:11:15:17:f9:7a:6a:c0:82:7a:2b:75:78:20:
b4:d0:71:3b:7a:0f:f7:1a:c0:d1:9f:0c:17:56:5e:
25:8d:71:86:a6:82:7c:be:c9:85:f0:07:dc:bf:80:
50:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:0C:A4:2A:60:C3:BC:6E:4B:7B:40:5F:04:75:6E:A0:B6:2F:4E:A1
X509v3 Authority Key Identifier:
keyid:ED:80:09:50:A3:1D:CD:AC:AA:C5:6A:DB:93:6A:42:BE:B8:45:E2:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7YAJUKMdzayqxWrbk2pCvrhF4ks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8a6f72-c822-451f-a5c5-a7fd6c8e70fd/1/7YAJUKMdzayqxWrbk2pCvrhF4ks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8a6f72-c822-451f-a5c5-a7fd6c8e70fd/1/7YAJUKMdzayqxWrbk2pCvrhF4ks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:2e:1e:14:54:6b:81:c8:79:84:9d:50:f8:4e:da:cb:80:8b:
cf:fb:47:e2:91:ea:d6:dd:fb:5c:b0:d6:b4:5f:b8:5b:02:a1:
4c:8f:f3:d2:11:52:7f:98:bc:73:ac:cb:a9:eb:f3:e2:9f:d0:
e3:05:5c:74:c0:00:00:80:40:c3:f1:8e:fa:e1:88:b9:36:a3:
9c:8f:43:5f:fd:24:e4:88:8c:04:60:60:1f:65:f8:8b:d4:85:
00:aa:b5:69:65:ba:95:cb:c6:98:ad:25:e1:7c:be:c8:03:35:
be:30:5f:d3:f2:d1:7a:e1:b8:d7:6a:e1:0f:2c:74:39:54:cc:
34:a6:d4:ad:75:c5:83:89:90:51:74:1f:e6:dc:a5:1d:66:0f:
38:18:e2:b3:79:e5:19:2b:99:bc:e5:c9:d4:cb:62:ce:d3:7d:
69:5b:08:bc:5c:e3:d2:39:84:bc:6c:1e:bc:58:30:cb:4b:a4:
68:73:d2:b5:49:b6:f8:76:c0:41:b6:16:f3:21:47:cc:61:80:
02:bf:1e:28:9d:28:ef:c0:bf:d9:b2:10:47:06:6b:35:5f:7e:
9a:0d:a9:26:1f:f3:e7:47:ad:4b:f6:fd:1b:42:50:bf:ce:2a:
87:1b:25:22:61:ef:1e:c0:87:d7:ee:6d:20:41:ad:36:0f:13:
d1:8e:70:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrxm3Dn7JGKaZRUXjoDyhN/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkODAwOTUwYTMxZGNkYWNhYWM1NmFkYjkzNmE0MmJlYjg0
NWUyNGIwHhcNMjUxMjA2MDMwMTI3WhcNMjUxMjA3MDMwMTI3WjAzMTEwLwYDVQQD
EygxMDBjYTQyYTYwYzNiYzZlNGI3YjQwNWYwNDc1NmVhMGI2MmY0ZWExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA15shxlToR4KZcRpaiZeCbRpR3RBe
Gp3Pn6JiSBtOPGz2bVP2VxY4HDZXDUi1ARd9tK1LXWjs06EMg5SmaFeihgGhguNa
VXFwsq6nTTaPUUwsC8jf6ErvIoUybSUDxZjg2aW3VNTJPa2cOL+GRxE2MdhmwE4E
9Q2leny0n1M8WRacvknkSA7SvT7l7TIq98wx/a/v4FAswJP0jIT9/2z1IAOQD5I/
nJhMpfHZIlp4tT+AqdhkZkkmBoWAuOI80gyuOkZGIA3ZiWJugOHHODor2u427xEV
F/l6asCCeit1eCC00HE7eg/3GsDRnwwXVl4ljXGGpoJ8vsmF8Afcv4BQxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBAMpCpgw7xuS3tAXwR1bqC2L06hMB8GA1UdIwQY
MBaAFO2ACVCjHc2sqsVq25NqQr64ReJLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1lBSlVLTWR6YXlxeFdyYmsycEN2cmhGNGtzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC84YTZmNzItYzgyMi00NTFmLWE1YzUt
YTdmZDZjOGU3MGZkLzEvN1lBSlVLTWR6YXlxeFdyYmsycEN2cmhGNGtzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC84YTZmNzItYzgyMi00NTFmLWE1YzUtYTdmZDZjOGU3MGZk
LzEvN1lBSlVLTWR6YXlxeFdyYmsycEN2cmhGNGtzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMC4eFFRr
gch5hJ1Q+E7ay4CLz/tH4pHq1t37XLDWtF+4WwKhTI/z0hFSf5i8c6zLqevz4p/Q
4wVcdMAAAIBAw/GO+uGIuTajnI9DX/0k5IiMBGBgH2X4i9SFAKq1aWW6lcvGmK0l
4Xy+yAM1vjBf0/LReuG412rhDyx0OVTMNKbUrXXFg4mQUXQf5tylHWYPOBjis3nl
GSuZvOXJ1MtiztN9aVsIvFzj0jmEvGwevFgwy0ukaHPStUm2+HbAQbYW8yFHzGGA
Ar8eKJ0o78C/2bIQRwZrNV9+mg2pJh/z50etS/b9G0JQv84qhxslImHvHsCH1+5t
IEGtNg8T0Y5wUg==
-----END CERTIFICATE-----
Generated at Sat Dec 6 11:19:54 2025 by rpki-client