This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.mft
File: _a1h2OjBq9qFlpMOIfGCEaUXaB8.mft (raw, json)
Hash identifier: L2K1xsT47fBpuhPmKCEheB4Ah+2ZMkPQ+Sw7H3Egb+c=
Subject key identifier: 8F:ED:8D:42:51:26:8B:42:AE:4C:32:7F:CD:53:C8:78:DC:67:DF:ED
Authority key identifier: FD:AD:61:D8:E8:C1:AB:DA:85:96:93:0E:21:F1:82:11:A5:17:68:1F
Certificate issuer: /CN=fdad61d8e8c1abda8596930e21f18211a517681f
Certificate serial: 019AF2402656B13345671347A6B038D5F9C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_a1h2OjBq9qFlpMOIfGCEaUXaB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.mft
Manifest number: 1692
Signing time: Sat 06 Dec 2025 06:01:21 +0000
Manifest this update: Sat 06 Dec 2025 06:01:21 +0000
Manifest next update: Sun 07 Dec 2025 06:01:21 +0000
Files and hashes: 1: Fcl_aJsJt4KiIjhLtFxpQAZ--TI.roa (hash: aS0+JitqaJojivrvqxvVApMU+OsS1deS84dQZzA8Tnc=)
2: YaQeUaPm7DT5i6DIJSP2oPk6asc.roa (hash: Xe3hwh1S9IdquQYZSTUC+SBDReDUDM3Us/vWljHz8KQ=)
3: _a1h2OjBq9qFlpMOIfGCEaUXaB8.crl (hash: tPiBfDAzt6miBwLdfchvgTcXLUfuWpWeXecyIOLPTXs=)
4: b3VRvUBoZO6M6gjGueykiziKPRc.roa (hash: VBIsT3fCceZgm7iHJXEBP5n/OLHn0+1WoqHHXWi6Cy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_a1h2OjBq9qFlpMOIfGCEaUXaB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f2:40:26:56:b1:33:45:67:13:47:a6:b0:38:d5:f9:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdad61d8e8c1abda8596930e21f18211a517681f
Validity
Not Before: Dec 6 06:01:21 2025 GMT
Not After : Dec 7 06:01:21 2025 GMT
Subject: CN=8fed8d4251268b42ae4c327fcd53c878dc67dfed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:24:df:8d:7b:4a:cf:53:bb:4b:96:95:b3:8f:
dd:2e:58:45:c2:e0:e7:6c:50:a4:5c:dc:90:1d:77:
92:06:8c:4f:95:ff:dd:ba:f0:0e:db:9f:ef:f0:3c:
af:27:30:c1:b4:bc:71:b6:ae:0d:00:47:95:a3:38:
81:a0:0f:4c:52:cf:0c:38:92:c4:80:00:86:1c:14:
29:cc:5c:18:b0:ad:fa:31:f2:ef:a3:5a:9b:8b:b9:
2e:67:22:09:f0:c4:50:d3:dc:15:1e:62:2e:6c:07:
6c:00:5e:88:2d:4e:b4:ba:c8:be:d2:cc:21:ce:d1:
dd:09:06:99:cf:4a:ef:63:a9:bb:af:04:6d:54:a9:
5b:c4:ba:5c:25:df:c8:11:d2:f5:6d:d3:c7:dd:7f:
a6:76:90:58:4a:22:6c:53:81:4d:47:f5:8b:f2:e7:
5c:1c:18:7d:6e:6c:2d:5b:cb:e9:2f:6f:49:ee:e8:
e1:f0:8e:a3:75:ae:d3:18:ad:6c:6e:84:38:26:af:
06:e4:61:c2:df:33:95:1e:4d:e7:12:9e:f7:9e:4d:
e6:36:58:c3:c6:c4:5d:02:cf:30:a9:11:3b:88:2e:
7e:4d:37:fc:3e:a5:8c:b8:75:56:ab:4a:80:f5:bc:
92:ca:7e:12:66:99:17:e1:65:f2:74:13:9e:2f:bc:
1f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:ED:8D:42:51:26:8B:42:AE:4C:32:7F:CD:53:C8:78:DC:67:DF:ED
X509v3 Authority Key Identifier:
keyid:FD:AD:61:D8:E8:C1:AB:DA:85:96:93:0E:21:F1:82:11:A5:17:68:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_a1h2OjBq9qFlpMOIfGCEaUXaB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:13:8f:ae:01:bd:ed:86:59:36:61:c6:bc:a4:49:57:3d:9e:
1c:a5:c6:2b:41:4a:00:7b:68:71:c5:d0:e9:ce:87:4e:19:98:
97:9b:41:4a:c8:a5:7b:39:84:ca:27:fe:11:78:34:be:4d:af:
13:37:65:80:c3:17:d4:53:98:90:ff:b5:1a:54:0b:7a:ae:64:
50:ba:fd:0b:b0:f1:07:78:69:e7:e7:27:aa:41:c7:6d:30:17:
93:cf:7f:9b:8f:40:73:ca:0e:97:68:f5:76:b8:ef:c5:64:68:
4c:36:ad:7a:8b:f7:05:5e:14:53:e1:61:4e:b3:12:ef:bd:65:
b5:34:b4:e1:f1:e3:a7:69:eb:c8:61:24:7c:c3:43:a7:db:d1:
98:d4:af:8d:2b:80:ee:b2:21:d6:66:d4:cc:40:f1:fc:f5:bd:
36:5e:b5:97:7b:16:8f:ac:7a:14:b0:24:db:32:46:bb:cc:37:
58:26:c4:dd:b1:83:8e:0a:16:d0:0b:97:9a:85:45:6c:92:e2:
90:1f:15:91:b7:e0:44:8a:eb:22:74:66:cf:81:73:cb:fd:30:
2f:58:e2:37:73:a0:0b:23:4d:ff:15:b3:ca:48:fe:03:5c:94:
e9:57:7b:b8:64:50:c8:a1:c1:a9:74:7c:ea:ff:32:26:21:78:
73:2a:a9:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:03:02 2025 by rpki-client