This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/158450-dd43-4b82-ab2b-095e7188d0a0/1/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.mft
File: pB1Ol4gQ6XiaduaHp93ZdSaw2bw.mft (raw, json)
Hash identifier: 4tpzjb1tloYSDp+E3+EeRS5rehNbqC8sVnRKzYmoK7g=
Subject key identifier: 1F:75:E0:CC:BC:80:26:99:E8:C2:EF:2D:1D:B4:D4:0B:F9:F0:1C:84
Authority key identifier: A4:1D:4E:97:88:10:E9:78:9A:76:E6:87:A7:DD:D9:75:26:B0:D9:BC
Certificate issuer: /CN=a41d4e978810e9789a76e687a7ddd97526b0d9bc
Certificate serial: 019AF6F83895105EFCB5893487DC96A0DF04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/158450-dd43-4b82-ab2b-095e7188d0a0/1/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.mft
Manifest number: 1769
Signing time: Sun 07 Dec 2025 04:00:53 +0000
Manifest this update: Sun 07 Dec 2025 04:00:53 +0000
Manifest next update: Mon 08 Dec 2025 04:00:53 +0000
Files and hashes: 1: IsTCtVmTNyn-RD8cnFqGYXSoe0E.roa (hash: L2WChiXDdgP/OiZ7K6XF82266pxnvmteFE2BApkpXrw=)
2: nLB2qYSBJ1YFwwH2Uq3CWH-Xycw.roa (hash: DDaDM0x5+8q+LGF59JGSBz5quMqPXuHhZb7HpNUm6U8=)
3: pB1Ol4gQ6XiaduaHp93ZdSaw2bw.crl (hash: jTG3Anc3kLKP6nHqpVKsYxUd6YTjqi/X6ztcn5sSTNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/158450-dd43-4b82-ab2b-095e7188d0a0/1/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/158450-dd43-4b82-ab2b-095e7188d0a0/1/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 21:29:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f6:f8:38:95:10:5e:fc:b5:89:34:87:dc:96:a0:df:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a41d4e978810e9789a76e687a7ddd97526b0d9bc
Validity
Not Before: Dec 7 04:00:53 2025 GMT
Not After : Dec 8 04:00:53 2025 GMT
Subject: CN=1f75e0ccbc802699e8c2ef2d1db4d40bf9f01c84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:41:6a:4a:de:fe:4f:cd:47:51:e1:54:5a:ee:
8d:3f:d1:60:d3:4a:33:6a:9f:3c:fd:85:fb:a8:40:
f8:86:d5:3c:54:d8:fe:92:87:22:16:83:b9:31:f0:
b9:ae:2a:c1:a8:d9:8e:03:db:7b:9c:3e:09:3d:9b:
af:8c:2c:27:ec:ec:25:b0:71:3b:6a:fe:a3:67:08:
af:98:b0:d7:f9:25:12:ab:ce:29:31:27:2b:4f:fe:
02:c0:e9:28:ee:4d:bb:3d:12:f8:7d:b1:14:cf:39:
26:23:06:10:d4:bc:83:96:b6:64:12:1f:ff:7b:e5:
4e:8c:89:ee:a2:4d:e4:c7:3f:c9:63:b6:a5:d2:6d:
ee:f8:bf:d8:0a:41:d3:c6:ba:17:19:c5:81:73:36:
d2:7a:f0:0a:6b:a3:eb:40:1f:83:3c:22:07:c4:74:
1e:5a:3c:7e:65:e1:17:f3:53:7a:9d:43:09:35:c5:
06:89:ab:c3:27:32:38:71:2a:9a:b7:53:a2:1c:88:
93:79:b9:41:80:8b:31:45:10:58:35:ef:3f:6d:96:
74:08:e7:c4:7a:8c:bc:41:f0:0b:14:0c:d0:7f:81:
0c:c2:a3:fc:c5:d0:69:0e:c5:28:ad:90:9b:72:35:
ae:0e:80:8f:eb:3e:94:c7:b9:c4:39:64:20:2f:22:
2e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:75:E0:CC:BC:80:26:99:E8:C2:EF:2D:1D:B4:D4:0B:F9:F0:1C:84
X509v3 Authority Key Identifier:
keyid:A4:1D:4E:97:88:10:E9:78:9A:76:E6:87:A7:DD:D9:75:26:B0:D9:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/158450-dd43-4b82-ab2b-095e7188d0a0/1/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/158450-dd43-4b82-ab2b-095e7188d0a0/1/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:bc:78:40:73:cf:a6:a0:86:bc:82:f0:c1:05:c6:cb:df:a1:
3d:28:3c:4a:1f:53:a3:20:7a:89:c3:3e:70:e8:1c:e9:58:4e:
9f:79:44:d7:6e:29:7c:eb:88:5d:a1:95:0a:0c:ad:85:26:a1:
97:36:1c:48:e2:3e:e1:cf:52:f2:4f:3a:50:d5:7c:67:f5:b7:
7d:4c:17:dc:57:5b:3c:35:e4:3d:15:3d:b1:ad:28:9c:e8:1f:
07:5d:a0:4b:c1:91:dd:b2:32:e5:31:3b:e2:c7:f1:c2:f6:ea:
f1:48:2e:20:41:34:3d:fc:39:0d:a9:70:9e:48:c0:f9:29:89:
54:b9:70:c9:0e:53:ab:26:d0:0a:12:ee:ca:5c:d8:18:b8:5e:
46:d0:43:ff:5f:15:88:9d:e7:ad:79:c5:3d:7c:e8:d7:42:d6:
b9:5f:94:4f:c8:c8:89:9e:e3:bd:ab:8a:3d:4b:cd:37:71:8e:
08:72:85:5e:eb:63:ae:0b:09:80:50:d5:a7:85:94:ee:4a:a4:
0f:3f:e5:7e:76:1a:87:ab:85:f6:70:11:b6:b3:b8:4d:d8:12:
f3:26:0d:83:6a:39:6a:0a:60:52:99:46:d5:39:b5:08:07:d7:
12:ec:ef:dd:d5:dd:55:b0:4a:e0:9e:5e:1b:2b:da:95:c0:64:
73:aa:a5:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZr2+DiVEF78tYk0h9yWoN8EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0MWQ0ZTk3ODgxMGU5Nzg5YTc2ZTY4N2E3ZGRkOTc1MjZi
MGQ5YmMwHhcNMjUxMjA3MDQwMDUzWhcNMjUxMjA4MDQwMDUzWjAzMTEwLwYDVQQD
EygxZjc1ZTBjY2JjODAyNjk5ZThjMmVmMmQxZGI0ZDQwYmY5ZjAxYzg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUFqSt7+T81HUeFUWu6NP9Fg00oz
ap88/YX7qED4htU8VNj+kociFoO5MfC5rirBqNmOA9t7nD4JPZuvjCwn7OwlsHE7
av6jZwivmLDX+SUSq84pMScrT/4CwOko7k27PRL4fbEUzzkmIwYQ1LyDlrZkEh//
e+VOjInuok3kxz/JY7al0m3u+L/YCkHTxroXGcWBczbSevAKa6PrQB+DPCIHxHQe
Wjx+ZeEX81N6nUMJNcUGiavDJzI4cSqat1OiHIiTeblBgIsxRRBYNe8/bZZ0COfE
eoy8QfALFAzQf4EMwqP8xdBpDsUorZCbcjWuDoCP6z6Ux7nEOWQgLyIuXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB914My8gCaZ6MLvLR201Av58ByEMB8GA1UdIwQY
MBaAFKQdTpeIEOl4mnbmh6fd2XUmsNm8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEIxT2w0Z1E2WGlhZHVhSHA5M1pkU2F3MmJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8xNTg0NTAtZGQ0My00YjgyLWFiMmIt
MDk1ZTcxODhkMGEwLzEvcEIxT2w0Z1E2WGlhZHVhSHA5M1pkU2F3MmJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS8xNTg0NTAtZGQ0My00YjgyLWFiMmItMDk1ZTcxODhkMGEw
LzEvcEIxT2w0Z1E2WGlhZHVhSHA5M1pkU2F3MmJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcLx4QHPP
pqCGvILwwQXGy9+hPSg8Sh9ToyB6icM+cOgc6VhOn3lE124pfOuIXaGVCgythSah
lzYcSOI+4c9S8k86UNV8Z/W3fUwX3FdbPDXkPRU9sa0onOgfB12gS8GR3bIy5TE7
4sfxwvbq8UguIEE0Pfw5DalwnkjA+SmJVLlwyQ5TqybQChLuylzYGLheRtBD/18V
iJ3nrXnFPXzo10LWuV+UT8jIiZ7jvauKPUvNN3GOCHKFXutjrgsJgFDVp4WU7kqk
Dz/lfnYah6uF9nARtrO4TdgS8yYNg2o5agpgUplG1Tm1CAfXEuzv3dXdVbBK4J5e
GyvalcBkc6qlTA==
-----END CERTIFICATE-----
Generated at Sun Dec 7 05:53:16 2025 by rpki-client