This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.mft
File: 1YIUz6MmYR6dSUE1oSzoJ28PF4Q.mft (raw, json)
Hash identifier: JvVCLhF0n9VjKgkIPDEgVO8epFZSIgCOvFR/LEkN/Uo=
Subject key identifier: ED:38:6A:36:E4:1B:EA:D3:37:5D:82:C8:95:AA:5A:BC:08:FC:A9:07
Authority key identifier: D5:82:14:CF:A3:26:61:1E:9D:49:41:35:A1:2C:E8:27:6F:0F:17:84
Certificate issuer: /CN=d58214cfa326611e9d494135a12ce8276f0f1784
Certificate serial: 019AF23F8D1FF727CB16134ACF077BCBA804
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.mft
Manifest number: 08EA
Signing time: Sat 06 Dec 2025 06:00:42 +0000
Manifest this update: Sat 06 Dec 2025 06:00:42 +0000
Manifest next update: Sun 07 Dec 2025 06:00:42 +0000
Files and hashes: 1: 1YIUz6MmYR6dSUE1oSzoJ28PF4Q.crl (hash: NIwaOxCjEnL73WohTjeHhvd7AWVSHaktZJjwcJfLHz0=)
2: 1ga8nVlGxTmTngINMpKry6AQMr4.roa (hash: Dm3zUfcqGdu/uBK93tg3lyr6TLgweEHTMY6jPc57f2s=)
3: DGnBXPgoLqm6MITID6kUNCzRUOs.roa (hash: hIciNbRFt51fw1TxuPPGC92uEfq4OzzxLq8zVboWuDA=)
4: EXso7tzCAhfaJCky2E8mk6hxz0E.roa (hash: 9/wsiraIK6tEnjIhsMzkIKM5OLlXL/pBel2txdfmR1w=)
5: ORMftoMd9do2ooK5ue-6TvmAIxQ.roa (hash: gRL2F0Qf83gqy3K3r8kmYdUB/bOzK/Peuq/Grv7jGIY=)
6: be5WdK6iPEkhbXurpsBiJLlldps.roa (hash: 0YokzCz16IGMuCLhlbe4WQ2dF7nXC982PfyCD/leOcY=)
7: hXDhzeK-jX0gCQmDt_ZZNEI7MI4.roa (hash: 5BKSkgpGQ/JZ0CAuFzin9pgFCCI9sY5+ZEzUzT6gZfU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f2:3f:8d:1f:f7:27:cb:16:13:4a:cf:07:7b:cb:a8:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58214cfa326611e9d494135a12ce8276f0f1784
Validity
Not Before: Dec 6 06:00:42 2025 GMT
Not After : Dec 7 06:00:42 2025 GMT
Subject: CN=ed386a36e41bead3375d82c895aa5abc08fca907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:dd:b6:7d:6c:5c:ee:04:80:03:8c:a7:95:c5:
eb:b7:43:98:03:b8:b7:77:4b:56:6d:ac:e3:22:b3:
84:b8:65:db:2f:2d:85:32:e5:39:f3:ea:4f:dd:55:
d4:d1:f6:77:59:52:39:ba:80:7d:37:41:bc:b5:76:
b6:d0:d0:f9:c1:a6:72:e6:c3:a0:65:a2:55:59:9a:
08:75:d3:df:31:0e:5a:e9:82:e4:aa:93:ce:aa:cc:
ff:25:8d:8f:d3:92:94:7c:9a:2d:cc:6a:85:e1:42:
a2:f0:90:30:b4:67:bd:1b:ed:e8:43:c2:53:69:a9:
f9:91:ba:d1:75:da:66:0e:7e:a4:eb:e4:71:f4:68:
c5:99:c8:e4:88:de:ac:9d:72:71:92:69:e4:11:7a:
c8:ba:7e:ec:11:54:25:09:fd:03:ac:79:3e:5a:e7:
fd:41:fc:00:2b:4d:02:d0:c4:f0:95:df:ec:94:fd:
48:ef:68:fd:da:99:9e:f0:d4:1f:0f:dc:78:15:6a:
19:d5:a3:37:9a:d5:e9:47:0c:68:66:e5:99:13:3a:
fe:37:3a:ee:71:4d:6a:2a:7c:f1:09:96:4c:fd:ee:
9d:0f:b9:69:01:32:db:28:e5:56:3a:8a:1c:3f:dd:
f8:db:e4:ed:94:82:6f:04:dd:ff:78:8d:05:42:fc:
0d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:38:6A:36:E4:1B:EA:D3:37:5D:82:C8:95:AA:5A:BC:08:FC:A9:07
X509v3 Authority Key Identifier:
keyid:D5:82:14:CF:A3:26:61:1E:9D:49:41:35:A1:2C:E8:27:6F:0F:17:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:0a:39:53:f6:1f:79:65:f9:4f:5b:9d:a6:2b:c6:47:de:b0:
40:2f:0b:a1:2a:a1:bc:56:62:4e:b7:75:6c:87:93:6d:7c:72:
de:e0:5f:b7:ce:ea:41:ba:ec:d0:6b:b6:30:44:55:79:36:92:
38:1c:7a:56:cb:98:61:97:39:9d:7e:0f:0f:ec:41:19:25:17:
34:c6:52:8a:75:c4:e1:e2:df:f0:40:93:e5:ef:89:17:87:12:
23:df:a0:33:b0:98:bf:a4:0d:59:f8:3f:5a:0d:06:f4:4e:51:
36:28:66:89:7d:a8:11:d1:84:db:fb:11:0f:c0:5a:1f:68:05:
ea:fc:f1:11:5d:a7:e1:df:8f:27:38:39:5d:98:72:10:93:4e:
86:c7:d3:c1:f5:46:ad:55:01:87:5a:c6:51:9b:b7:43:d0:ca:
19:42:aa:52:17:34:86:7f:e1:73:3b:e6:fe:25:3e:e4:2b:be:
bc:15:10:b3:40:35:89:75:89:6e:7a:23:ad:b0:be:bd:af:70:
58:45:c9:77:cf:15:66:15:8f:ce:61:30:a2:c1:64:7c:61:fe:
4b:eb:01:42:0d:96:b2:cd:16:71:03:6a:79:ff:18:fc:df:d8:
04:ab:1c:39:88:90:2e:31:8f:2f:57:d2:b6:13:dc:38:59:13:
6c:0a:49:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:20:04 2025 by rpki-client