This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft
File: F7UEL8INm6sWduCa9_8bpb-trnU.mft (raw, json)
Hash identifier: oDh8UluqdVzUrl/VgrLfU26z+pxe3TEVpJu1MYdm2+s=
Subject key identifier: 29:4A:85:EC:5C:7B:EE:35:54:1D:3E:46:68:4A:B3:DA:91:B9:25:24
Authority key identifier: 17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75
Certificate issuer: /CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
Certificate serial: 019AF1645BB45481AE1D185E7BE62D4D9E7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft
Manifest number: 10CD
Signing time: Sat 06 Dec 2025 02:01:17 +0000
Manifest this update: Sat 06 Dec 2025 02:01:17 +0000
Manifest next update: Sun 07 Dec 2025 02:01:17 +0000
Files and hashes: 1: 5bIFsErhPSlmM37nhrp-eU9l5Y4.roa (hash: W0LEviwE6sQ3/HTSMFGMNopeuLD+ieboT1WS/XkZF1E=)
2: 7rGZ7Kn81ZZ9VKoeH0eLU-kXt9M.roa (hash: wbrR267hltnIltfZnIqap+bK1X+30aRn2vIaMwlZYl0=)
3: 8B9wa-TamsFPX-b9Sjwq2JWmpu0.roa (hash: mYWGy6vPQqUonSl/lzSA7r99GqgJfzuS4OhPL383spw=)
4: A39EZrrDrXLk3J8BZLUN7wQ6C50.roa (hash: Ark/uTgt37FRO8Utnxml8XHzzu9fwVEDGjmOjqbxT4E=)
5: Chb74JL8JJmMbGzdCWsV1I9XTHM.roa (hash: uqlIkNtybKQGK6oYFgs8Gcl/3LifaWUOWXgUOaIWjq4=)
6: Clzzp5xK-yp8rYv85D99LfyAh0E.roa (hash: fGSlKDGqBJuLLFO3poXUGL2bDi2qTj0GaL8Jf09spSU=)
7: F7UEL8INm6sWduCa9_8bpb-trnU.crl (hash: PXUfZGaUMDKrvucJELjD7FT5n1MmQ6qe6gYgVQyTau4=)
8: H-wI8WViyvhQ58migChLNEMEYb4.roa (hash: 55jO9FPLyHdmA0ZhDHMAOcwTS+Ma+ZmiF+DkbWOEkzk=)
9: JY2Qbmj2mgX3KDG39J6yIxJr0tc.roa (hash: 1KGhpD1HwCPZtP8VkVF45re3cg2JKrviwS59Vb+WzQ4=)
10: QnOCtXAVmX13ibu9GQu1nSs9w-k.roa (hash: 2ja4/uzYhdT+ao7xdjqgdrp8HFOJkvXcfpdXCeeEDmY=)
11: YRRXPoENpmdtt6jCnuMjG8rrikY.roa (hash: DbDzgUZdi2jed/+3x8UofBswoXpqS+WPTmkA9M7K92c=)
12: bA2-1nnLbrWRGqFV2afM2bzGsYs.roa (hash: FCcUA1F21qdmoEMQzczm0l/NGWKzFMZ3eCmf0F/+Cd0=)
13: blSvVBOfQQX8HPgRw9s7J2WaT7U.roa (hash: vl3RTDfDlA0AmENRkgmM8JLJlNA1WYfzNQBSFmihkQU=)
14: xZC_xBRdyqTElb8rKCSQViw1QQk.roa (hash: Am0BFTFCqKQ+R9vTI46rJ2D1DFX8Hh5BkVmp7WNJvlQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:64:5b:b4:54:81:ae:1d:18:5e:7b:e6:2d:4d:9e:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
Validity
Not Before: Dec 6 02:01:17 2025 GMT
Not After : Dec 7 02:01:17 2025 GMT
Subject: CN=294a85ec5c7bee35541d3e46684ab3da91b92524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:84:86:0e:3e:e2:91:06:7d:7a:07:c1:05:80:
ea:2e:01:e5:de:ff:65:a2:40:03:be:f8:80:b5:8f:
ba:3a:50:3c:54:6e:a1:d6:c2:f1:c1:68:3c:2a:43:
f5:11:cb:c3:09:aa:79:dd:42:0b:15:02:2a:48:8c:
4c:b6:77:47:5f:fc:3c:9c:fc:eb:74:0a:51:df:61:
f4:dc:1f:ff:69:23:a3:f6:55:7c:45:0b:44:eb:d5:
76:fe:9b:6f:a0:96:1b:66:fb:3a:48:d8:69:a9:07:
9b:33:33:05:44:18:24:cf:97:22:09:f3:01:2f:53:
d3:16:7c:62:3f:fd:0e:e3:e6:db:4c:2f:06:9e:1e:
1e:27:a2:f5:11:e1:98:d1:75:38:0e:40:f1:3c:3c:
ac:f4:8d:3d:93:50:38:b9:b9:dc:19:b1:f7:12:01:
d1:d9:10:b3:cf:cf:38:7c:21:dd:39:9f:7c:5a:8b:
e6:51:12:cc:e2:bf:9b:17:2f:2a:35:22:fc:f9:68:
a5:92:1f:6e:bf:1e:12:be:82:0b:67:fc:1a:4b:84:
b2:54:ca:1d:19:0c:fa:fb:59:46:11:59:14:27:af:
98:eb:56:8d:fd:3f:94:5d:cb:53:5a:1e:d1:ed:fe:
de:d8:0e:c9:c0:0f:b2:38:30:47:c6:93:8a:19:84:
5a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:4A:85:EC:5C:7B:EE:35:54:1D:3E:46:68:4A:B3:DA:91:B9:25:24
X509v3 Authority Key Identifier:
keyid:17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:1d:f0:b4:61:d4:b7:7f:68:92:81:84:0d:b5:0a:34:5b:5e:
67:c8:d7:ea:d8:79:28:8c:f1:0d:1b:e8:c0:a0:41:b9:c4:11:
4d:0f:d6:53:a8:cf:92:06:77:6c:8d:64:f5:79:6a:d3:53:7b:
27:1a:9d:ab:f1:71:0a:a4:a7:67:fa:55:31:e1:64:2e:ba:04:
8f:85:15:1c:96:5c:d4:aa:e3:1a:9f:9a:c8:83:b1:04:bc:b8:
3b:5b:4c:5d:9f:4e:3e:17:6f:3c:f8:36:14:bb:42:79:bc:c2:
75:af:01:a6:c2:cb:5b:02:52:77:65:a4:4f:53:cd:76:3e:1f:
ff:f3:d3:46:ea:f9:09:00:a2:20:7b:11:07:f8:11:17:07:2c:
df:20:02:7e:b9:55:5a:f3:01:f8:ac:c4:55:90:bb:69:9c:ae:
83:4c:26:27:ff:28:c6:51:5c:6b:ed:05:21:f8:13:cd:55:51:
ae:e9:b8:11:4f:de:ae:e3:eb:8b:ec:81:7f:ae:39:4a:d9:98:
2b:c8:8a:0c:98:55:b7:03:3a:27:df:df:d7:16:fd:f1:df:ae:
8d:dd:d7:80:38:31:35:be:52:a0:98:58:58:9a:2f:7c:cc:38:
90:8b:39:39:bb:95:ae:5f:46:58:53:5b:80:94:03:fb:b0:c9:
25:d2:dc:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:10:42 2025 by rpki-client