This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/fda8c9-6efa-4954-a5c3-630bd73ce267/1/fggLq1W_NHMYjCDHNmpssETHGVw.mft
File: fggLq1W_NHMYjCDHNmpssETHGVw.mft (raw, json)
Hash identifier: xwjZFMSi/DsLHNJ13UfE2jGhttkczhYSKZuYUl8e/T8=
Subject key identifier: C5:15:FC:A5:B7:61:F3:26:8A:1A:3A:AD:C1:74:9E:4B:0A:E3:53:47
Authority key identifier: 7E:08:0B:AB:55:BF:34:73:18:8C:20:C7:36:6A:6C:B0:44:C7:19:5C
Certificate issuer: /CN=7e080bab55bf3473188c20c7366a6cb044c7195c
Certificate serial: 019AF0BF8E1FD205EB6D35F4B590DAA0236D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fggLq1W_NHMYjCDHNmpssETHGVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/fda8c9-6efa-4954-a5c3-630bd73ce267/1/fggLq1W_NHMYjCDHNmpssETHGVw.mft
Manifest number: 1205
Signing time: Fri 05 Dec 2025 23:01:16 +0000
Manifest this update: Fri 05 Dec 2025 23:01:16 +0000
Manifest next update: Sat 06 Dec 2025 23:01:16 +0000
Files and hashes: 1: 8m52WXmC6DqVDLH9lI-6WR69u6s.roa (hash: 0BZo5xqp89NE8ExAG9qblE2VcBVND0AxeF/zdrSRKa8=)
2: fggLq1W_NHMYjCDHNmpssETHGVw.crl (hash: /cp6HldPM6do4eRdxIH4VsBu2PUwTLRSWCuvd0yZF7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/fda8c9-6efa-4954-a5c3-630bd73ce267/1/fggLq1W_NHMYjCDHNmpssETHGVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/fda8c9-6efa-4954-a5c3-630bd73ce267/1/fggLq1W_NHMYjCDHNmpssETHGVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fggLq1W_NHMYjCDHNmpssETHGVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Dec 2025 23:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f0:bf:8e:1f:d2:05:eb:6d:35:f4:b5:90:da:a0:23:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e080bab55bf3473188c20c7366a6cb044c7195c
Validity
Not Before: Dec 5 23:01:16 2025 GMT
Not After : Dec 6 23:01:16 2025 GMT
Subject: CN=c515fca5b761f3268a1a3aadc1749e4b0ae35347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:fd:95:47:46:e9:b4:bd:3a:3d:97:8c:1c:2b:
55:b4:b5:e6:5a:26:3a:bd:06:2a:f5:aa:70:bb:a8:
d0:ce:7a:15:0e:e9:36:2e:02:67:da:fd:99:f7:91:
bf:7d:13:5d:1c:16:b2:44:e7:77:f9:b6:de:4f:2b:
72:ec:3a:f1:84:1a:22:1b:7d:e0:81:85:10:26:a8:
c1:16:33:ff:48:2f:85:35:ba:b2:de:38:7e:12:80:
ca:7a:fd:63:43:20:6a:9d:37:56:2c:61:ef:89:1d:
6b:dc:f9:b6:3f:0f:d4:95:45:68:1d:e7:59:47:3a:
b5:62:6f:79:5a:c0:b3:86:53:06:9b:a5:96:bb:42:
3e:99:e7:ba:98:9f:b1:25:6d:64:2c:15:38:58:59:
bb:57:70:9f:8d:04:09:fb:90:19:53:10:8c:4b:7a:
9b:a0:41:f5:e3:40:1a:b2:16:98:f0:fe:4f:1a:a1:
0d:e1:54:8a:4b:a6:43:13:1c:96:17:fc:8b:ed:e3:
5b:b8:c0:98:37:67:6e:1d:94:b0:31:59:1f:22:f8:
6a:6e:90:a3:ba:df:32:9a:a9:30:1c:90:be:eb:92:
09:d1:16:d2:86:a5:c3:24:e3:52:a3:ea:c7:06:6e:
b9:7b:70:de:31:a2:11:86:71:ab:dc:bf:c5:e1:77:
2c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:15:FC:A5:B7:61:F3:26:8A:1A:3A:AD:C1:74:9E:4B:0A:E3:53:47
X509v3 Authority Key Identifier:
keyid:7E:08:0B:AB:55:BF:34:73:18:8C:20:C7:36:6A:6C:B0:44:C7:19:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fggLq1W_NHMYjCDHNmpssETHGVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/fda8c9-6efa-4954-a5c3-630bd73ce267/1/fggLq1W_NHMYjCDHNmpssETHGVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/fda8c9-6efa-4954-a5c3-630bd73ce267/1/fggLq1W_NHMYjCDHNmpssETHGVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:d6:54:09:fb:f5:22:8c:2f:e0:1d:31:33:2e:e4:8e:48:db:
6c:96:2c:d2:1c:8b:65:7c:68:39:ff:4c:e2:ec:b5:57:84:f9:
4c:c5:a3:2e:32:ba:14:6f:40:40:5c:e0:21:d6:ce:9a:d8:c8:
02:9c:20:47:e6:57:b9:e9:79:ba:46:33:7d:92:9c:31:b0:c6:
76:b1:c4:32:5c:15:93:34:c2:80:4f:3e:db:21:87:f8:11:18:
5c:4e:00:f0:e9:34:67:31:4e:fb:54:16:a3:26:d9:ac:a9:6b:
29:87:a2:0a:d0:d0:96:fe:53:da:0b:17:2a:f4:bf:bb:4d:f8:
1d:be:b0:05:7d:c8:52:18:45:56:14:da:46:5f:98:03:a7:27:
b7:8f:f8:8c:b7:25:90:60:6a:ac:8f:2d:1f:c1:72:42:1b:19:
62:4d:81:4b:f5:99:5d:0a:3b:f4:63:67:35:ef:b5:bb:4b:09:
99:38:32:f1:48:4b:49:24:d0:2b:64:f5:9c:70:7d:95:5f:57:
b3:a9:f7:bf:c2:47:97:5e:40:cd:1d:10:6c:64:93:77:17:8d:
8b:28:a2:46:bf:9b:0e:87:dd:2e:64:2e:2b:c2:a8:d4:09:0c:
61:1a:6b:45:6f:60:90:cd:b3:ac:7c:61:03:1a:4b:d1:4d:4e:
b3:15:da:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:22:23 2025 by rpki-client