This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/rRCd7m-9wlbfkRRgzMkV0Gao_4s.mft
File: rRCd7m-9wlbfkRRgzMkV0Gao_4s.mft (raw, json)
Hash identifier: cF3lXdJL9RgiqQrqUZWxxadYpRserdXeRHIoirLYnTc=
Subject key identifier: D6:EC:3A:20:B2:35:C2:6B:6A:A1:BF:0E:0D:15:0F:BB:20:75:2B:65
Authority key identifier: AD:10:9D:EE:6F:BD:C2:56:DF:91:14:60:CC:C9:15:D0:66:A8:FF:8B
Certificate issuer: /CN=ad109dee6fbdc256df911460ccc915d066a8ff8b
Certificate serial: 019AF31B412628AD52F55C70A88E26A6A3D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rRCd7m-9wlbfkRRgzMkV0Gao_4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/rRCd7m-9wlbfkRRgzMkV0Gao_4s.mft
Manifest number: 1767
Signing time: Sat 06 Dec 2025 10:00:40 +0000
Manifest this update: Sat 06 Dec 2025 10:00:40 +0000
Manifest next update: Sun 07 Dec 2025 10:00:40 +0000
Files and hashes: 1: Om1wv9kKbABhZ26Wcsp4q_OWfLk.roa (hash: oXVUH9ZBbgANEdJAJeCILVApckD4agNE3Eg9le5/r/E=)
2: VwUk7y0zO5Mx4dqI1nqU1mCPomA.roa (hash: 3ETxsuTriFcqg8JNihvATf+SJzxphG0A2lHFWKrQspQ=)
3: X4IP2kI-czd9MCpMhWTXvpvPDiU.roa (hash: JHSYTyokADXHW2ty3rRXa/J2++iIi8eoIsZUayXCWYo=)
4: rRCd7m-9wlbfkRRgzMkV0Gao_4s.crl (hash: mc7nnc1mK/GctP0nYYhh3DC6K3mJMXW/MU45fAOoOLc=)
5: sIxfC6vb_F45uySffIKtVbXqOYs.roa (hash: ++32p2bkxPyvz4Hx8QLxSpYxKyhb3oHx1J6fv7+P8ts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/rRCd7m-9wlbfkRRgzMkV0Gao_4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/rRCd7m-9wlbfkRRgzMkV0Gao_4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/rRCd7m-9wlbfkRRgzMkV0Gao_4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f3:1b:41:26:28:ad:52:f5:5c:70:a8:8e:26:a6:a3:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad109dee6fbdc256df911460ccc915d066a8ff8b
Validity
Not Before: Dec 6 10:00:40 2025 GMT
Not After : Dec 7 10:00:40 2025 GMT
Subject: CN=d6ec3a20b235c26b6aa1bf0e0d150fbb20752b65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4b:18:57:80:b2:b0:04:9a:c4:05:61:46:8d:
c1:b1:1f:94:9a:c7:19:e9:f1:2d:09:c4:97:6b:35:
54:3a:b7:f8:c3:3c:6a:60:c4:e3:11:a0:c0:cd:9f:
e3:e8:89:4a:02:81:7c:25:ea:5c:4f:cd:7c:6b:c5:
38:9b:28:98:e5:4c:19:b9:32:bc:b2:0e:c3:c3:df:
d1:b5:9e:98:fa:de:c3:57:03:d3:16:58:8e:85:12:
b6:bf:a0:b2:ec:23:b2:3d:7b:50:fc:ef:07:b5:4c:
dc:28:46:98:59:59:47:5c:38:1f:b1:f0:32:9e:dc:
75:59:00:25:6a:3c:2f:db:50:ac:e9:0b:90:34:b9:
9d:f6:4c:e5:72:54:88:df:72:f3:ad:9f:6b:e4:08:
bb:48:ba:46:96:4e:49:33:0f:6f:60:48:48:05:21:
36:b9:4c:0e:70:91:07:44:6b:d1:23:36:dd:c7:33:
0e:dd:75:19:67:8c:8e:f7:1e:40:32:6d:39:a6:f8:
02:82:5f:fb:e1:c4:91:91:80:a4:16:7a:c9:3a:ff:
7b:f2:96:79:ac:3e:63:d2:2e:ce:28:34:44:34:57:
44:53:ac:6a:47:67:c7:81:e8:be:bc:fc:58:d4:ac:
3c:1c:5b:e0:ab:f7:96:90:17:0d:a9:5a:e4:a9:1b:
b5:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:EC:3A:20:B2:35:C2:6B:6A:A1:BF:0E:0D:15:0F:BB:20:75:2B:65
X509v3 Authority Key Identifier:
keyid:AD:10:9D:EE:6F:BD:C2:56:DF:91:14:60:CC:C9:15:D0:66:A8:FF:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rRCd7m-9wlbfkRRgzMkV0Gao_4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/rRCd7m-9wlbfkRRgzMkV0Gao_4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/rRCd7m-9wlbfkRRgzMkV0Gao_4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:e2:8b:fa:2a:f6:48:31:68:04:d4:fb:5a:89:0b:d5:f4:88:
ac:b6:54:e0:08:c8:3f:bc:68:a3:25:30:96:7f:50:b0:b1:35:
2b:d7:bc:af:35:ca:5a:c2:be:dc:97:41:b2:b2:a0:b0:d4:a8:
6f:fa:8a:eb:d2:5a:70:04:91:3c:ae:9b:12:51:39:93:4d:c0:
83:09:4a:4a:c9:85:1f:86:5a:d1:e5:4d:53:db:66:09:51:ab:
7e:fe:ac:71:48:12:85:7d:8d:29:0f:f1:18:49:33:5d:ca:84:
d8:a1:a6:57:8d:cf:d9:e4:87:0e:86:fa:0b:28:f1:ee:49:11:
48:5e:2e:ff:4d:f8:80:3f:00:9a:aa:c7:48:09:7d:e7:17:87:
50:14:20:f5:c4:0e:7d:bd:6e:55:1d:d7:31:b1:9f:5b:7a:52:
8d:15:55:a3:62:f6:68:64:2e:37:4a:83:34:cf:cc:cb:8d:80:
c8:9e:ed:eb:50:e9:d6:a6:5f:b0:96:19:41:72:3e:5d:63:e9:
a2:ef:d5:5d:00:90:db:3f:3e:bc:20:4f:71:fc:fb:5b:8c:0a:
48:fa:b5:c2:61:b3:90:1c:4b:4e:81:a3:f2:ae:00:5d:4c:ac:
d5:66:1c:7a:cf:27:08:42:25:9b:d1:38:a1:ce:35:44:da:b6:
a1:c9:3a:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:33:20 2025 by rpki-client