This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.mft
File: fhFniG2oFSRDG78u-wVykUtobrw.mft (raw, json)
Hash identifier: qBXyMfikgLS43YmZyLrsrIWNyC0Q892nhzKCAKjRRXQ=
Subject key identifier: E6:18:BE:19:6B:46:2C:D2:6A:73:48:E0:84:45:0E:F7:FD:BE:F6:81
Authority key identifier: 7E:11:67:88:6D:A8:15:24:43:1B:BF:2E:FB:05:72:91:4B:68:6E:BC
Certificate issuer: /CN=7e1167886da81524431bbf2efb0572914b686ebc
Certificate serial: 019AF23F8A7D3DAA7325914FE2D35CC2E1FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fhFniG2oFSRDG78u-wVykUtobrw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.mft
Manifest number: 0D58
Signing time: Sat 06 Dec 2025 06:00:41 +0000
Manifest this update: Sat 06 Dec 2025 06:00:41 +0000
Manifest next update: Sun 07 Dec 2025 06:00:41 +0000
Files and hashes: 1: 2ez8zuMs85e8CXlTRW23szM974M.roa (hash: nEbfOX8jy17dtiQ2QC4585/p7vP/7oJdRyNgTQoPp+0=)
2: 55jh7ZUXwY_9NSAWp4_RLJkLobk.roa (hash: q93ZDaiBje1HE/Gb640AQrHdK3FIANVFUxJnhDp/M4A=)
3: AUDMpjmCaKaksbx4oZ86HO931ng.roa (hash: GZOJzUdAkTOPDEQqYNkLxv9JD+varoxKqavWfC1fFBk=)
4: FamIa9uVUsnSTLirzZic8UQVhs8.roa (hash: VPd/bG5XgZdRuDgLlun3vA0o7NYvRU74hM05UOQs9Vk=)
5: fhFniG2oFSRDG78u-wVykUtobrw.crl (hash: adAtWVcHq0gvcP16bBCwqjTmQyKhvQpEMyWof/1SB/g=)
6: wJH2YhXqksjsanF0KbJBwlYiZcc.roa (hash: n/0BTqFTsqTUVEvotziQ7CPQtrqIst9qVSVCHNt1hJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fhFniG2oFSRDG78u-wVykUtobrw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f2:3f:8a:7d:3d:aa:73:25:91:4f:e2:d3:5c:c2:e1:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e1167886da81524431bbf2efb0572914b686ebc
Validity
Not Before: Dec 6 06:00:41 2025 GMT
Not After : Dec 7 06:00:41 2025 GMT
Subject: CN=e618be196b462cd26a7348e084450ef7fdbef681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:56:a6:4c:5c:9a:b5:83:9a:3e:35:24:b7:bd:
80:03:88:1e:fd:29:ef:42:b3:ef:19:92:af:04:24:
31:ee:13:38:7f:b6:81:93:43:90:67:16:a6:1d:46:
df:42:b7:47:a0:b4:20:c4:5d:e8:c9:ed:01:fb:d6:
c8:e6:44:84:e5:24:6e:07:34:63:a8:c0:ff:24:c2:
af:b4:9c:2e:de:1c:40:4f:c0:b7:75:a9:a3:36:e8:
7a:a9:1f:11:16:aa:de:34:40:98:13:f8:06:45:eb:
5b:ae:ec:90:35:c0:c8:59:80:93:fd:32:05:cc:25:
56:07:cb:ee:28:0d:23:9f:42:95:e2:c6:7e:19:1c:
69:71:0c:f1:a6:cd:81:e7:10:3a:06:50:f2:be:ff:
e8:13:07:fe:7d:5c:69:66:45:85:d5:6b:60:92:09:
9d:0e:76:ff:3f:78:80:47:ac:bc:32:28:73:6f:31:
f0:93:29:73:68:d9:92:29:b8:35:bf:e4:92:ac:29:
dd:c3:29:95:f7:ba:00:ab:d4:19:74:86:89:25:06:
0d:d4:c5:75:b1:cd:a8:a4:a2:b4:77:70:0e:36:82:
15:d4:a5:2e:22:ab:8c:1b:53:03:c9:6b:e7:6a:c1:
52:c6:39:b1:8d:0f:d7:d6:c7:86:e8:87:88:a7:5c:
cd:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:18:BE:19:6B:46:2C:D2:6A:73:48:E0:84:45:0E:F7:FD:BE:F6:81
X509v3 Authority Key Identifier:
keyid:7E:11:67:88:6D:A8:15:24:43:1B:BF:2E:FB:05:72:91:4B:68:6E:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fhFniG2oFSRDG78u-wVykUtobrw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:ad:19:b8:01:ef:8c:52:f5:8a:be:21:66:2e:95:8c:a1:d8:
6c:3b:72:97:fa:25:41:a8:22:16:2f:e7:c6:69:4f:8b:9d:89:
3a:bf:7c:8b:b4:2f:80:df:92:78:9b:b6:1b:be:85:d3:4e:1d:
a4:2d:cd:17:85:f4:96:6f:4b:85:ff:c1:22:97:ea:d6:6a:87:
e0:97:4b:df:e8:90:0c:28:b3:a0:ec:aa:b0:58:73:c6:0a:61:
b5:c6:ef:fd:7e:9f:fa:18:48:85:97:72:ba:8a:82:fa:b6:39:
cf:06:c6:df:65:a0:36:ff:4a:1c:8e:02:bf:8e:0d:98:2e:6c:
b4:e4:a3:c6:e1:c2:71:d9:31:0d:dd:3e:97:7d:58:3c:fa:1e:
25:c2:b6:21:be:e0:5b:f3:30:e4:59:6a:93:0a:0d:0f:48:38:
6d:b4:c4:ae:a0:de:bf:21:5d:35:30:0f:52:67:31:cb:44:e6:
22:68:e5:4b:2e:28:7c:7e:1e:7b:c4:d5:8d:c7:97:49:09:97:
25:95:5d:3d:fe:59:9e:fa:0e:3b:c9:fc:2f:c4:d4:af:c8:36:
4e:02:d7:fc:22:5a:78:96:f3:bc:b4:5f:9d:11:5a:07:c8:58:
66:ee:5f:d3:20:c2:78:e2:5c:85:11:55:b7:8c:fa:07:4a:45:
32:05:02:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:47:57 2025 by rpki-client