This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.mft
File: fOaNr18IlFbA4dAiRTk1Maxbj8s.mft (raw, json)
Hash identifier: uya/It1x9kSU4MEFbG+Iy1LirH++bahxyWlBSfXnR8U=
Subject key identifier: 89:F4:BE:11:74:78:10:75:B9:28:66:FA:F0:9A:2B:47:96:6F:7C:8C
Authority key identifier: 7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
Certificate issuer: /CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Certificate serial: 019AF12EEE380F4818F06049229937150F34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.mft
Manifest number: 17B5
Signing time: Sat 06 Dec 2025 01:02:55 +0000
Manifest this update: Sat 06 Dec 2025 01:02:55 +0000
Manifest next update: Sun 07 Dec 2025 01:02:55 +0000
Files and hashes: 1: AKuegXjKXAcF15mDuSJfD_t3Zbs.roa (hash: T+ejm6R1EP5zKos1L7KItkstRNeEKi9ZwovLco39PBg=)
2: Gy2CW0Td6J-rxJGzgVfuTvJN2Gc.roa (hash: /b5aRnHH3wnxArlR5kFKg9d+odQfqWviv5wIlL2Kwi4=)
3: LuPOINyFzX9xpTNNLpVMhkc3RGs.roa (hash: CVfqSYlx9earVowtUFnY2vr9Ypav6ng0WSshJUDgEG0=)
4: W0y-zOIi1-67OubMNwYseTI2YtY.roa (hash: o3q76eBrYuH9u8MB8bIslqFqm+BZyQwFbiFNU/6C+2A=)
5: fOaNr18IlFbA4dAiRTk1Maxbj8s.crl (hash: Splp0pvkfxIli4LMBwyscM6JoGd6E2DR63MtKgCp3Qw=)
6: k0BbLfW1pH9JeekCNksDJuhLIU8.roa (hash: I7bsd1t0LSwpkWSpjQNC0fheclbb8PLVx1rVQYbgTzo=)
7: liY8eILapTD5y2M0s8j0o5Q8kWY.roa (hash: S0HfWHfjX1Uqh+uYLK7ohENnIrYxlreuTzEjaVUpEss=)
8: nh1DAdGlkCnqMoRCOw5nSf1eUrE.roa (hash: 6CL3sDa/YSgMH6T3lPf7wvZWcq37OdDdy32xWrUSt1w=)
9: zavgzNemz0PuzWJnrL1r_g_mOeM.roa (hash: GhTFQ6FabhR00Vo0TF/PdK9RjLjp+971izL/zbfm494=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 01:02:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:2e:ee:38:0f:48:18:f0:60:49:22:99:37:15:0f:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Validity
Not Before: Dec 6 01:02:55 2025 GMT
Not After : Dec 7 01:02:55 2025 GMT
Subject: CN=89f4be1174781075b92866faf09a2b47966f7c8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:39:13:ff:de:0f:d1:0a:c1:83:f0:5f:5e:4e:
83:85:6a:3e:cf:1d:c7:53:ca:dd:07:6b:4d:3a:62:
cf:8c:c2:f1:64:ac:25:a8:9d:ff:72:91:0d:ce:e2:
27:a5:e8:4f:2f:99:a5:9d:e4:a0:8d:98:0c:c8:bb:
ba:30:5a:fb:eb:23:3e:f0:d2:38:6b:0e:b6:bc:4a:
97:dc:b4:ff:15:8d:7f:9a:53:f6:c1:79:cd:5b:05:
da:c1:17:ae:f4:34:09:36:4e:08:22:ca:5b:f7:ac:
f2:8d:eb:c0:5b:6c:2b:c4:8a:db:f6:97:aa:90:30:
a7:30:4d:81:ff:c4:ed:40:c0:7f:6e:42:15:7b:ee:
29:78:c3:86:87:0c:59:2d:ca:98:1d:f0:77:ad:bb:
9b:60:9b:28:da:e2:48:f2:67:70:d4:ae:cd:57:c5:
9c:fb:ee:45:ca:86:a5:2b:01:5b:82:3d:e6:2f:30:
3c:15:31:67:c3:b6:aa:8e:d3:3b:b9:e0:4f:39:26:
f2:6a:ad:7a:85:39:f5:0f:bc:d3:04:38:76:7e:22:
4c:db:b6:32:5d:0d:8f:c4:64:ae:30:c5:78:d1:55:
91:0f:12:d9:56:da:45:28:7d:d8:a5:31:4e:85:8e:
da:09:d5:0a:d5:c2:0c:24:b2:53:9f:1c:cc:03:17:
6c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:F4:BE:11:74:78:10:75:B9:28:66:FA:F0:9A:2B:47:96:6F:7C:8C
X509v3 Authority Key Identifier:
keyid:7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:6d:67:1a:c1:95:b3:da:46:ef:1d:fd:38:77:24:4e:b9:f2:
00:0c:a1:13:77:5f:38:8d:78:80:56:6c:bf:71:e2:2e:3f:19:
b1:85:3c:4c:46:da:39:a8:cd:52:ab:c4:75:b8:81:87:fe:53:
f9:b6:b5:a7:8f:d5:b5:d0:26:de:f9:b1:9a:7a:47:47:8f:c1:
69:be:31:9b:06:80:eb:a6:31:f7:04:82:6d:c4:1b:d2:55:7a:
4e:e9:a5:9d:69:9e:a9:e6:13:66:29:f8:7e:cb:15:9e:32:74:
27:02:60:42:f0:fb:d4:fc:06:c4:9d:73:20:f8:8c:8c:cc:c1:
76:88:d8:d8:28:a2:8d:a7:00:6c:1a:73:82:5f:30:3d:0a:cf:
db:0c:9c:9e:a7:64:fa:db:eb:ee:ed:f5:c1:b5:92:ef:d8:b2:
07:53:57:ba:a1:e7:f0:58:0b:18:f9:8c:22:a4:e5:5f:9c:d8:
62:40:e9:e6:0b:6c:d5:03:e8:e3:47:a7:de:b1:80:05:b2:ad:
62:10:62:10:92:ea:9a:0f:62:b0:a5:6c:13:30:bf:72:5f:7d:
52:3e:16:40:c7:a5:fb:0e:56:81:ac:c7:ad:99:ea:e8:25:44:
66:ee:af:90:45:35:83:ca:72:da:e6:a9:63:2f:74:95:79:dd:
b1:cd:da:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:09:37 2025 by rpki-client