This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.mft
File: ROiIp26ZhRsB-4bOxTfU2OYQ3hY.mft (raw, json)
Hash identifier: wFh+xds8vNAnMxwbiglda8Kyz2Qo9a4aN99QO6So8G4=
Subject key identifier: 30:8D:2D:A4:FC:32:D4:CF:A6:66:1C:61:3C:D0:3C:DB:64:DE:68:FC
Authority key identifier: 44:E8:88:A7:6E:99:85:1B:01:FB:86:CE:C5:37:D4:D8:E6:10:DE:16
Certificate issuer: /CN=44e888a76e99851b01fb86cec537d4d8e610de16
Certificate serial: 019B23D0E997FDBFF3B113248BA53FBD0D36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.mft
Manifest number: 1787
Signing time: Mon 15 Dec 2025 21:00:52 +0000
Manifest this update: Mon 15 Dec 2025 21:00:52 +0000
Manifest next update: Tue 16 Dec 2025 21:00:52 +0000
Files and hashes: 1: 0HtxlG1tnNzIep81031kd9p-fBw.roa (hash: OXzBPa2feSryqGHpXn/FEvG/w29ffxoaGIUchPvm3mk=)
2: 15E544iqbijbzQkYAdS47aYrD9A.roa (hash: UqW9jr3a9GHG7Uy8FuE2NGM92ysT2U6k57t/AfdIbps=)
3: 4e59DVO4NkPnw3RUdXinXYgZKhI.roa (hash: Xsz+QLo3ua4qkoV0U1mBEVAYiGazJCq/50LjJfTfImQ=)
4: HLg6VWsPMYDiVDNc71bln7BtlmI.roa (hash: zOH/eTKTLW5itJCzaK8r7su+5axAuuxkhBxsE0F25B8=)
5: QeYOzxISXgl6M7OixDgTpfZERu4.roa (hash: s4UEY+I5WghrV5P9V2zo2Pa66DhiVa+5TyKkmVvFOc4=)
6: ROiIp26ZhRsB-4bOxTfU2OYQ3hY.crl (hash: 3Mcc82OS/fPNX8YzFfdE3a9dkFtG78t+MWT985X4Kck=)
7: UyMuRFmaCk5x7XKTvKAf7rXw_p4.roa (hash: L73FGhBPgjleo1+zJ19RP4Fe/K9eboVk+DpjFaSLBeY=)
8: mb6SEFuusb8ccfPkUgnr1G-16Gg.roa (hash: Cbmq4R34rOxE+s++uid9OxtsaiHFlr2Tu54+IMtMuXI=)
9: oD5ktIApamXxgwjGSpDfwIhQqYQ.roa (hash: yFFoY0qvHYFgL03wlalkQiMq33WT4afE35wQSaZE/qI=)
10: xHPbbeon1SNsE_0gmuT8lFya0kY.roa (hash: m7FtBUaCPAlNvC/LFbXZEFv5bG9Pb/Vc9bKRiuxNTq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Dec 2025 15:30:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:23:d0:e9:97:fd:bf:f3:b1:13:24:8b:a5:3f:bd:0d:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44e888a76e99851b01fb86cec537d4d8e610de16
Validity
Not Before: Dec 15 21:00:52 2025 GMT
Not After : Dec 16 21:00:52 2025 GMT
Subject: CN=308d2da4fc32d4cfa6661c613cd03cdb64de68fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8b:9a:e5:d2:3f:93:78:66:32:35:0e:24:a3:
c3:6a:58:e2:5a:a6:db:75:e6:3a:32:51:36:15:5c:
9f:33:08:e1:40:7a:9c:e8:15:d6:4b:dc:8e:9b:a9:
23:01:60:da:84:80:f9:e8:fd:9d:98:7b:51:b5:92:
d1:f2:f5:df:20:15:b1:94:b3:86:fd:dd:31:90:cf:
5e:52:cb:3d:ee:e9:52:f6:10:19:61:ab:0e:6d:63:
f1:6b:b4:de:a3:79:4a:c1:70:48:81:f2:10:06:0d:
be:d1:22:86:2a:f5:df:60:ca:cf:dd:e6:ab:2b:a6:
e9:b7:43:c4:6f:59:10:19:f7:27:6a:52:c3:78:f7:
4c:bc:3e:bb:bd:8c:9f:5b:16:81:72:95:72:fb:c7:
ee:b4:56:2e:2e:77:af:d2:c8:80:30:fa:12:0e:9c:
b6:b3:fe:b4:fd:2d:e6:0b:9c:0f:ee:a1:ef:df:6f:
13:6a:11:e9:4e:12:b3:de:df:f4:52:f2:ab:3d:7c:
dd:bf:9f:18:d3:f5:aa:43:b2:36:a2:78:e3:d4:d0:
c4:ee:85:a7:95:22:c2:85:ed:1c:6d:51:13:e2:08:
01:cc:91:7b:b1:14:8f:da:40:09:c3:4e:a2:01:b6:
21:67:42:65:ab:f2:14:40:d3:1e:d4:64:81:4a:da:
19:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:8D:2D:A4:FC:32:D4:CF:A6:66:1C:61:3C:D0:3C:DB:64:DE:68:FC
X509v3 Authority Key Identifier:
keyid:44:E8:88:A7:6E:99:85:1B:01:FB:86:CE:C5:37:D4:D8:E6:10:DE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:fb:db:47:75:ed:e3:fb:69:b6:ff:0f:23:37:d8:ba:f1:0d:
e5:54:d6:8a:8e:2f:07:fd:c9:d7:c0:5f:0e:e1:0b:01:db:ad:
8f:1e:1f:8b:53:dc:3e:5f:ce:69:e1:67:d0:d0:aa:e9:82:11:
18:96:2b:5d:b6:58:52:56:97:07:7b:c3:ff:c2:af:de:c3:d7:
e8:dd:b3:9d:42:02:6a:77:24:c3:23:05:21:e3:f2:7a:13:c4:
78:12:19:60:32:8c:9e:70:ae:b9:39:ed:94:df:3f:60:c9:17:
4a:26:62:95:df:e6:83:ed:d5:ab:07:c3:a7:c8:44:97:8d:1b:
eb:3b:8f:58:1c:01:41:75:25:fc:b2:1d:35:31:19:fc:e5:15:
29:d5:85:9d:ce:58:77:f2:91:88:6a:29:d0:55:f7:09:f4:90:
36:4f:b7:55:73:a9:c7:88:8f:19:d6:60:00:ae:c5:8f:b2:16:
aa:4e:06:ab:ac:a4:2a:e1:c9:00:0d:31:6b:07:05:86:95:6f:
d4:f8:3c:84:0b:9b:da:53:e3:92:65:70:96:cd:c2:26:ec:a3:
76:59:d4:4b:1a:fd:0e:c2:91:ce:86:04:4e:15:77:9f:e6:78:
d2:38:ce:06:36:82:2e:39:49:ff:35:9e:b0:99:a7:ee:71:5d:
bf:b9:92:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 00:30:38 2025 by rpki-client