This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.mft
File: 437h7O0Z-KCjpjW_qiZCk-NDd5U.mft (raw, json)
Hash identifier: n3QjSOPgqsKMBCiYFIU70M8EJzUc6Hew16mafv0IyXY=
Subject key identifier: A8:87:D8:33:57:3B:33:CC:31:7E:AB:C9:C3:DB:0B:82:37:E9:63:36
Authority key identifier: E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95
Certificate issuer: /CN=e37ee1eced19f8a0a3a635bfaa264293e3437795
Certificate serial: 019AF2096DBCB9FEA53B65BB32A3093399C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.mft
Manifest number: 178B
Signing time: Sat 06 Dec 2025 05:01:35 +0000
Manifest this update: Sat 06 Dec 2025 05:01:35 +0000
Manifest next update: Sun 07 Dec 2025 05:01:35 +0000
Files and hashes: 1: 1-PS1jNNnBTwv-jHREhAP6k3ZYVo.roa (hash: VbVgqlFoHkyju8r4K3BXcUNoSiGbG+MwtSpHjzaMklA=)
2: 1-gMcB2tX1aJagc2aIqyie1JosUM.roa (hash: e/zYIsHTFYDxeTkK5hyPfn+knzLFEB1hZl3ZQmxyCc0=)
3: 437h7O0Z-KCjpjW_qiZCk-NDd5U.crl (hash: kGdixjHghYmDhPqG1w53cMOvKa9VGuXrlrDwZIsgXek=)
4: 9eNXipbIkyVdZ3T8NqmEYXwSLqE.roa (hash: BrQPu/EjsIQipBfThN07mTNPYYMcHP60+6UvtDcOjIw=)
5: EFuxyCYga5KedfhIetzIM8Wqp3Y.roa (hash: O+IR1hZ8a8RGzU0SmSAJy1+brABxzqq2amGl3toGZFo=)
6: JS9UWtZttem3o1fXhyj6cDhffLI.roa (hash: 2i5hM4JyTJhdNStU0tEfjgguQh3ME+ydQZVTRw+h18A=)
7: RX5TjbcaEwYk1IhE69eAlXBXNyQ.roa (hash: c0wkjrnxIEHQj5HUBmajY9pyKvCItPr80kJiD5UVJ6c=)
8: TxnmQLTJ7RG9p8EWlmGMzoVFKYM.roa (hash: ya4Fhh2AAgBvWI3PefXXRZJhuG79XQoe+sEudA3lm48=)
9: ZYZn-5YwBHa46UGZ7YpzFXkXV2c.roa (hash: nysaKplSjq7+66zMvup13xDe5hG/XF/iaG+ccwRnc48=)
10: iTq1k1-n5HC3mDH6yOxsGqky0UI.roa (hash: AGbGIRgcWmrYfxQjlQUEIVcfb2QPCldn/oJ/TJ7MR/A=)
11: ijEqoAEZpU0XwucBGAsnbQDDdNw.roa (hash: JCAoDA+s8OPB6Om2MtNX+ndsLOblJSylnwNeZbS7ZEI=)
12: oUN6hm9XIH9hez7uSosGEeiTS64.roa (hash: O2lJOrBjeZAv4ECvJJ0xPhkbtSeFQ6Qb6tFoYeeLtF0=)
13: rHz8kaauSx9yjUtMHgkc7yNJ95o.roa (hash: PhKHXgs0bJsWkyri4OmHbJXKHUs8Dv3fw5JQFOIgfUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f2:09:6d:bc:b9:fe:a5:3b:65:bb:32:a3:09:33:99:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e37ee1eced19f8a0a3a635bfaa264293e3437795
Validity
Not Before: Dec 6 05:01:35 2025 GMT
Not After : Dec 7 05:01:35 2025 GMT
Subject: CN=a887d833573b33cc317eabc9c3db0b8237e96336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:44:ce:de:43:6b:bc:88:b2:1a:a8:36:48:72:
07:19:52:a4:0a:4a:47:e7:e7:c4:cf:2b:7c:91:8f:
3b:a3:29:2a:e7:3c:ac:22:1e:9a:09:d2:06:9d:a7:
97:e9:b8:9e:df:5f:be:44:25:1a:8e:41:02:14:95:
2b:18:64:68:87:79:db:42:29:12:99:11:a9:8d:d7:
0a:15:1f:96:68:ea:85:be:cf:a6:76:52:75:fe:f9:
7b:08:96:b5:01:2f:4d:35:9d:08:12:f4:66:5b:1c:
e0:5b:fc:08:0b:24:e9:51:82:c7:0c:3c:e4:6e:35:
97:df:02:cb:d0:ab:4e:9f:aa:0b:78:33:3d:c4:e8:
08:84:4d:4d:29:a8:07:a2:c6:26:fb:e5:b7:90:18:
12:2e:b1:ff:99:44:da:7d:84:4a:1b:11:b4:73:6f:
19:3f:17:53:7d:b9:74:fe:f7:c5:f0:89:9c:7a:9d:
7b:e5:08:b9:a2:8f:14:41:60:c8:6f:64:ae:31:7f:
a6:7e:16:52:6d:75:55:0e:49:8d:66:ed:67:3a:6b:
4a:f5:d8:f1:e8:81:87:fe:1f:a9:a6:75:7a:a3:f3:
d5:6b:b9:5a:2c:99:8d:cc:2b:65:a7:2c:90:e5:ef:
20:f0:f6:a0:d8:b7:43:6f:76:98:1b:ea:ad:21:18:
57:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:87:D8:33:57:3B:33:CC:31:7E:AB:C9:C3:DB:0B:82:37:E9:63:36
X509v3 Authority Key Identifier:
keyid:E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:02:9a:e2:a1:52:e9:0e:c5:83:31:93:9a:ed:f8:60:5d:98:
35:87:25:a7:6b:c4:85:74:0d:44:e3:fe:6f:44:5b:29:03:d1:
14:84:8d:81:fa:c1:36:94:b1:8b:cf:f0:cd:19:f7:4d:c0:f3:
e2:19:42:55:c8:c7:fb:a3:ce:c8:a8:6e:04:01:8d:fb:df:2b:
f8:e7:91:cc:af:da:83:b7:85:02:00:3b:e7:b6:13:58:48:3b:
b0:c7:3e:8f:63:b0:68:47:1f:69:5f:ad:09:aa:5e:7c:3f:f2:
07:6a:58:05:f6:a8:73:78:5a:37:69:dd:c0:a8:08:9e:37:42:
8e:9f:6c:b9:02:87:20:48:a5:ad:a2:73:64:e3:22:e3:7a:00:
a0:c9:a5:d9:08:60:73:83:4c:5a:0e:3d:7b:34:82:13:1b:69:
fb:24:eb:29:63:3b:06:ae:98:44:ff:fa:71:fb:e6:b4:86:80:
3e:ef:66:07:72:39:57:5b:29:88:95:c1:38:33:f9:ad:64:b3:
92:88:ae:8a:09:77:01:d7:5d:1b:35:11:b9:d0:d9:f7:b2:43:
6c:e8:c0:56:a5:f7:13:05:a6:99:c6:47:60:43:23:36:c1:87:
56:dc:42:7b:68:a2:43:bd:46:50:fd:7e:ef:41:9c:4d:31:a4:
9e:7d:d9:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:17:49 2025 by rpki-client