This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft
File: LRyqaTWPjJj3pxnyWX1drdvQAYw.mft (raw, json)
Hash identifier: 04+pHETQikHhPypoARjOdew9NsxkZbpM8TeqOIDbvtg=
Subject key identifier: 82:2A:95:FA:22:77:AD:FF:29:0C:CC:76:76:57:B8:DB:49:29:16:29
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 019AF088AEBE57BB5FA9A840742B3B78683D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft
Manifest number: 16FD
Signing time: Fri 05 Dec 2025 22:01:20 +0000
Manifest this update: Fri 05 Dec 2025 22:01:20 +0000
Manifest next update: Sat 06 Dec 2025 22:01:20 +0000
Files and hashes: 1: 4XbrpnYb9fH0wMvekeYaI_ADm2M.roa (hash: KaRiqzoHzlwolVC6yfXNO0R4xyGemvvXu9DHgMiuTFw=)
2: 4o-wPw4Ynf0h1BoxC1fvHbONSvA.roa (hash: tiDaODRy5w9tozgqOg2LpStik670A6Jk8Q3uVbFTurY=)
3: 6IT_BzvklmTudv5oWhsnwF3a-HU.roa (hash: yHMxyci5MGgfPQNCjiVcx+HG2m+XK/ZE2dtlZ+9kpiU=)
4: 6_ol7Z5xqC1IIH-IRx34A-DKJcI.roa (hash: XecDVlXcHRTe3uKLJfofxrPQJllwwj7/IR6Dd2oXagI=)
5: 6su449BFDL9wbtNiHsGp9uByd5A.roa (hash: FxELoBod2FZxd21/i8JRxUZYOeBpv7ROxRXf1eDfWvI=)
6: 6xMftLCAOKrVwVv6NUAPSenS09M.roa (hash: r6nGwqWYBox/dH/E1KG2dY2U+dcsZh0rlvfvDm7Fpts=)
7: D7E8-V_NhqNcLw4C0IXh5yVDWzI.roa (hash: 6NJEceYzZIckxR/QluWLNHn9Z1CWXM+u1ednoRQ60/Y=)
8: EHwltC08ilFwg74PNzNRyR9hVJY.roa (hash: kTVk6RwXEmFkAsbQs66VhrNokWyowXf6IphdnMZIaOw=)
9: K0UekIqjR-B4QFvYqyuisPoIQxw.roa (hash: 3citoMQ7WPnfAIuUtz455F9SJlw4amcf7l2KAPTkKyU=)
10: LChJCjYTp7k_v-5k2BAu7BZJhF0.roa (hash: szBN38iYKk77yi/AxxkaE9KosMFhroCb+4hbaxv0syg=)
11: LRyqaTWPjJj3pxnyWX1drdvQAYw.crl (hash: jhjHtEKwhiwRg3WZLmmsupxP4oGXDYmx8OQa7sJsHYc=)
12: Sm6GHy1cLVbGh1P4m6U3nGB2lyA.roa (hash: QwO7fMLRMXItWAabX8Un1PgZbpk87z6NXn3kLsvDTxs=)
13: igZIf6qww3ioX-MlBp94m_EHBQ0.roa (hash: jTrsNlI3B5XuLk970rocPV/x/98cyaNaeeDcktw5q04=)
14: j7SwKUDozV9eRZtyWsYdGV05fvA.roa (hash: uPxd50CDn/sS3ZC0BcBHPTsoRoY4F3yBh/g2OyRVlTs=)
15: nOkgjQYrArcyyihUQCswunvrPDA.roa (hash: Lt1DqMt+BLg34tBT2X1N/gPEKBgxtUFzVdCJoM3+LOM=)
16: q05hnkzJzF9nu4-iQoM1iN-hMcc.roa (hash: csTfd7zVjSEqYYA/9FDauw7fNQCSs402Ror/CHKBe70=)
17: qWyS_CCwZbh9szrTAgVuOstQrBA.roa (hash: gGpns1ELE70H6VW/vlMxGJ6HUYrLGjc+DUj4OdunzZs=)
18: twfqByHh14E1PhLe1eBQEbxkFtc.roa (hash: L/mg/edVn6vLMggD9bZRqZbVoFCL8f6bFstrsmocwZo=)
19: y-HAJt-CbQPRgql9Ue-TAPUiTVU.roa (hash: 3yB5yJhLwEvSYs/fk2t82WQfYsXETG/NOhlzHBnsvoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Dec 2025 22:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f0:88:ae:be:57:bb:5f:a9:a8:40:74:2b:3b:78:68:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Dec 5 22:01:20 2025 GMT
Not After : Dec 6 22:01:20 2025 GMT
Subject: CN=822a95fa2277adff290ccc767657b8db49291629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ce:d8:81:f7:93:bd:4e:f0:df:5c:44:bc:2c:
e5:7c:0b:9b:ba:af:12:40:cc:12:b0:48:65:2f:e7:
a4:ea:ac:37:05:0f:7e:1c:06:19:86:bf:40:54:65:
0d:0e:c3:10:23:1a:f0:c8:b1:e4:8f:1c:63:87:9a:
af:b2:dc:1b:5c:6c:91:fd:c7:d2:30:b4:f3:35:9f:
21:08:f6:93:b1:13:62:af:e6:5f:f2:67:dc:b1:22:
c4:e4:f9:04:7a:af:83:70:40:d5:b1:8d:15:5b:63:
1c:28:96:de:4e:55:d4:ef:c6:11:56:70:f7:1e:af:
1e:78:72:ad:af:85:37:dd:d6:d9:20:44:a7:09:d3:
89:cb:ef:51:0b:12:41:a2:e5:96:5c:9a:e5:91:13:
39:f1:d3:bf:b2:9e:a5:be:70:87:bd:93:f3:f2:f4:
ec:7a:d7:09:bb:7b:12:55:c0:56:b7:20:ee:83:9a:
df:56:21:37:23:82:88:53:41:b2:94:b1:af:09:75:
20:05:36:bc:01:52:b6:cd:29:da:b4:41:3b:07:47:
a6:d1:0d:e1:f2:b8:93:81:08:2e:09:42:25:69:af:
19:b0:2d:7c:a3:07:55:4f:ae:42:f8:e9:9b:78:d0:
3f:74:05:ea:11:b9:02:4d:8c:60:3d:3b:15:55:7a:
67:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:2A:95:FA:22:77:AD:FF:29:0C:CC:76:76:57:B8:DB:49:29:16:29
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:7e:67:34:89:fc:dc:8d:4b:e0:04:dc:d3:c5:5f:f2:b1:cd:
81:94:8f:10:75:07:da:06:b9:6d:00:46:ec:95:1c:32:49:0c:
0a:0b:2d:0d:cc:1c:c6:ad:32:d5:2b:a2:af:a2:b2:98:4b:45:
7d:1b:d4:45:43:85:2e:6e:1f:81:15:db:26:17:a2:f3:f4:5d:
82:fa:10:df:d9:f8:23:1c:f4:81:53:43:6b:3a:06:c5:70:3b:
51:80:ec:bf:c8:75:a0:26:50:28:09:a3:22:b0:c2:c9:22:07:
02:9a:4a:8d:6f:9d:e9:3f:50:95:16:50:d1:cf:25:16:64:a2:
60:ba:11:e0:e9:d0:4b:b0:44:ed:7a:10:22:91:6c:4b:85:e6:
bb:ef:14:04:8a:79:0e:78:e1:61:d4:79:7f:2f:2f:a9:ed:aa:
30:e4:69:05:54:ea:66:7f:81:79:cc:7b:02:77:09:78:4d:01:
1f:35:8b:d3:72:10:c7:72:16:d5:f3:61:d1:0b:d5:62:96:12:
d7:46:5a:ca:39:2c:13:2e:28:6d:6c:e4:0d:da:db:6a:80:27:
d1:f5:ed:b6:50:94:06:70:63:3c:ff:3d:56:d2:b1:b0:20:fb:
e9:84:b7:77:eb:ed:f6:84:ac:7a:67:79:8b:30:29:7e:08:5f:
28:92:54:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:17:04 2025 by rpki-client