This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.mft
File: x1VwJGd3DtabNnt3u-ZAvG20FT4.mft (raw, json)
Hash identifier: rakrehdysloj5KxM4NJmW32qtRE23BcI5uYR70yeom0=
Subject key identifier: DD:82:F4:0F:2B:8B:A1:F8:40:51:46:05:CF:F7:45:35:63:3F:E0:E0
Authority key identifier: C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E
Certificate issuer: /CN=c755702467770ed69b367b77bbe640bc6db4153e
Certificate serial: 019AF1D1DF62D285B53197A1804DC848F16C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.mft
Manifest number: 115D
Signing time: Sat 06 Dec 2025 04:00:54 +0000
Manifest this update: Sat 06 Dec 2025 04:00:54 +0000
Manifest next update: Sun 07 Dec 2025 04:00:54 +0000
Files and hashes: 1: 2aM17soBmqh_GBtRMWQDctgH7fc.roa (hash: 6/ySI4kErv/JIgLnQhnbSKqi6Bg38OiTTBN0AB/24r8=)
2: Cujb_JMNRpBWUMNsYDzUM07sX9g.roa (hash: aPQ30rk20GzKKIz2rCdqmpPV4nPvHBgzWHC/g71TaJY=)
3: PkKwn16bpB0gLF9vU4EldEuV1BU.roa (hash: fP4l1zoE5N82M/LmyMEfGwuK+f6miXD04jLXzvpdlzg=)
4: TjpJjcuyANtrBUwpt-ltVjypyq0.roa (hash: 6I0zwsgf60E7cL93x6R+EuPe6JdbwhpcovM4vLNnw1A=)
5: Ylbq5ntwI4lobnJRn4w_8RBAWYU.roa (hash: EjqMbrULb7iRN3e+HzHVHj0EJ4f37rSShZWRA2TwvuI=)
6: bg0w0DPxuyGh5PKBC5lIXdwm3EY.roa (hash: B4U/d8xwzXF5+8shclwMswe7rUu/cS9QkWoCnLKd0HU=)
7: lEb1Jsw-Dtu5xLjUafsCpP2d3SQ.roa (hash: QTd8eFyxLptYQFcQvp6p0JN6N3jGTLG71RFCqk6mZlI=)
8: x1VwJGd3DtabNnt3u-ZAvG20FT4.crl (hash: VJIHv+93lgCqhXbbfr0pb0wXICZK1xxv9rqHNqUuE64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:d1:df:62:d2:85:b5:31:97:a1:80:4d:c8:48:f1:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c755702467770ed69b367b77bbe640bc6db4153e
Validity
Not Before: Dec 6 04:00:54 2025 GMT
Not After : Dec 7 04:00:54 2025 GMT
Subject: CN=dd82f40f2b8ba1f840514605cff74535633fe0e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:6a:db:9e:9c:2d:dd:5e:c0:41:f3:13:3f:3b:
5f:19:a7:5c:da:87:3a:52:6d:f9:ef:e1:7d:00:c4:
46:89:86:21:12:dd:40:f9:09:68:f8:f4:59:96:d0:
39:3b:fa:24:1c:16:a7:79:9b:c5:4a:2c:67:18:97:
35:c5:7f:75:1f:31:20:18:b3:c4:1e:12:4d:de:aa:
73:8e:ed:e0:2b:95:6d:ed:57:13:09:e2:bf:be:36:
ec:0b:6b:33:75:fd:f0:df:d9:31:80:96:cd:a8:a1:
87:75:55:e7:7d:ad:b8:dd:2c:9b:ef:8c:4f:8b:03:
46:20:b4:39:8b:15:e1:e3:5f:ff:ac:42:84:9c:ae:
2c:d0:8c:5b:a1:04:0b:5a:db:96:0f:74:93:49:b7:
bb:76:b9:27:7a:24:6b:ce:31:9c:b7:c7:55:fd:97:
8c:a1:4f:0a:b1:8c:af:6e:e9:4b:68:36:ee:58:7c:
69:77:af:91:41:2b:43:c6:5d:52:bf:44:63:be:b6:
ce:44:fc:9a:b5:26:7b:dc:d0:00:02:ff:34:8c:df:
0d:58:73:a5:e0:4b:00:be:b2:a2:40:be:3b:3d:67:
28:b4:61:97:f3:03:9c:5b:e8:20:34:11:44:e5:63:
4b:b8:24:d3:27:3d:25:83:2d:3a:94:6c:8e:7a:6d:
68:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:82:F4:0F:2B:8B:A1:F8:40:51:46:05:CF:F7:45:35:63:3F:E0:E0
X509v3 Authority Key Identifier:
keyid:C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:c1:59:57:b9:e3:3c:1a:5c:0c:8b:9d:55:16:6d:a2:2c:e1:
dc:24:2a:3a:94:61:e4:ca:fa:92:0e:cc:8a:f2:9f:02:db:94:
44:44:bc:28:49:ce:d4:7a:2b:92:3c:96:03:89:00:62:82:62:
66:95:06:d7:8f:2f:6f:90:09:b5:cb:38:76:06:c7:0b:71:a2:
f9:9a:9b:d8:78:c8:16:7f:d4:2c:74:fc:00:f0:c7:bf:e1:4f:
2d:e2:e8:11:02:3e:84:44:1f:6e:59:0a:25:26:36:a5:c4:39:
d6:7b:a2:2d:5c:44:10:2d:cc:60:63:ef:7f:59:88:5b:ff:d5:
aa:6c:6b:11:dc:3d:85:ce:25:e1:fa:11:8a:fc:f7:b2:60:84:
98:e9:84:69:76:96:61:25:fc:5e:ea:3e:c2:d9:90:25:e0:fc:
8f:70:96:39:5c:01:3a:d5:54:8a:a2:e5:9d:e4:37:e7:e9:4e:
4d:43:1e:55:5d:d1:7d:0d:3e:51:31:ba:80:e8:f6:ec:ab:26:
4f:be:9e:55:e2:0b:70:6b:0a:0d:88:72:89:46:d4:54:82:44:
c4:4b:bd:6e:99:d4:cb:10:6b:50:d3:50:09:a4:44:40:74:ea:
56:ba:dc:ec:24:82:25:de:54:66:18:0b:f6:e7:ef:6b:07:d0:
d0:ee:26:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:38:48 2025 by rpki-client