This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.mft
File: 22QfyQPVtMyXFkkySks05PgkIsU.mft (raw, json)
Hash identifier: /FlL83gSlAZGluYdfYr50okDvAaBJY9zAOh10OaqemE=
Subject key identifier: F0:A1:7F:FF:4F:10:C8:4E:7D:84:B9:3E:79:13:22:7E:BF:59:E4:36
Authority key identifier: DB:64:1F:C9:03:D5:B4:CC:97:16:49:32:4A:4B:34:E4:F8:24:22:C5
Certificate issuer: /CN=db641fc903d5b4cc971649324a4b34e4f82422c5
Certificate serial: 019AF3C020C67A8403E42A667939AE5DC2D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/22QfyQPVtMyXFkkySks05PgkIsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.mft
Manifest number: 1764
Signing time: Sat 06 Dec 2025 13:00:45 +0000
Manifest this update: Sat 06 Dec 2025 13:00:45 +0000
Manifest next update: Sun 07 Dec 2025 13:00:45 +0000
Files and hashes: 1: 22QfyQPVtMyXFkkySks05PgkIsU.crl (hash: 3AB5F3vCBjMYeI+13JVuyOmIoINodj7zJBHuIX0jyMw=)
2: 825nFrz3u6HGU-YZ6CH8LLOr_XE.roa (hash: jl6qorIEanDMcWiaTBA0q+h0ZRVRtDHwIH2xPi3aeGw=)
3: YgI-v6xyCyvCdaFE_0gi8JebnCU.roa (hash: 8nUg6t7h+Myv8fLu/m3fBl/zsOujrUMcs0usjBSVmFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/22QfyQPVtMyXFkkySks05PgkIsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 13:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f3:c0:20:c6:7a:84:03:e4:2a:66:79:39:ae:5d:c2:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db641fc903d5b4cc971649324a4b34e4f82422c5
Validity
Not Before: Dec 6 13:00:45 2025 GMT
Not After : Dec 7 13:00:45 2025 GMT
Subject: CN=f0a17fff4f10c84e7d84b93e7913227ebf59e436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f1:5f:90:76:c4:d5:40:46:d7:92:b0:13:4f:
db:30:aa:24:ed:7b:21:f1:f2:21:23:62:c7:57:14:
cc:f9:dd:60:41:f6:0b:16:05:b8:33:bb:3f:c3:fb:
c1:c8:4b:0c:df:19:65:db:39:ea:71:c9:2d:90:6f:
cd:88:cd:3c:a8:4b:78:67:ef:12:22:d4:a9:96:7f:
2f:b5:85:53:38:f2:da:85:5e:79:78:e4:13:22:ce:
b6:57:8b:92:26:f0:71:1d:79:f0:3d:ce:c2:1f:ef:
33:cc:06:80:c8:ee:4d:5d:18:0d:76:86:0f:fe:f8:
96:cf:c5:02:03:44:a7:c7:45:b3:c7:32:42:26:94:
b1:6c:74:c2:af:30:d2:c3:5d:8f:e9:15:ba:bb:9d:
f5:19:73:ae:02:aa:bc:b7:a5:69:cf:83:a0:a9:1d:
85:f1:b2:5c:91:51:d8:0b:2b:f1:2b:a6:58:a0:ae:
c8:58:fd:a7:a9:f3:13:22:50:95:77:8b:d0:45:55:
84:c0:81:90:e1:89:5d:2a:42:da:21:a6:3d:41:36:
22:5b:69:de:5e:aa:b7:6e:e0:7f:dd:b4:70:64:89:
f5:99:33:21:3b:07:1e:92:a8:d2:0e:b5:48:25:0a:
69:e4:6b:53:03:eb:f5:a0:c8:9d:9e:1f:93:cb:54:
4c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:A1:7F:FF:4F:10:C8:4E:7D:84:B9:3E:79:13:22:7E:BF:59:E4:36
X509v3 Authority Key Identifier:
keyid:DB:64:1F:C9:03:D5:B4:CC:97:16:49:32:4A:4B:34:E4:F8:24:22:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/22QfyQPVtMyXFkkySks05PgkIsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:a6:c1:75:f5:23:89:87:b9:83:cd:f3:18:96:84:47:36:90:
42:90:2e:a7:81:d5:b1:d0:ca:48:aa:e0:8e:1f:8b:0a:2b:b6:
cc:f8:1e:37:16:af:10:9e:79:f8:c9:67:ec:d6:3a:80:e8:c0:
33:c1:ab:f2:18:3b:34:a1:82:50:5e:28:49:0e:4a:e6:b1:08:
4b:c8:98:ce:30:ab:66:7e:34:25:ac:5a:45:52:03:ef:8e:66:
e3:ab:a4:9c:20:19:4f:92:06:46:70:ca:94:02:2e:ca:b4:eb:
e4:9c:7a:ce:92:9e:cf:78:34:37:4b:a0:7a:2a:e0:af:28:45:
38:a2:a3:39:cd:99:c7:ac:4c:e2:70:de:e5:8b:79:c0:bc:33:
2e:02:f9:7a:50:ea:de:36:79:ef:f5:8c:5d:92:d3:dc:2d:f2:
3e:87:02:12:c1:d7:c7:a1:e6:72:f8:57:ad:7f:0a:d2:fd:c6:
5f:01:24:07:31:bb:5e:0f:78:34:8c:36:03:55:15:ab:6d:38:
44:51:cc:c0:7a:e8:fd:0a:a7:2c:a9:b6:c4:87:97:54:0d:36:
cd:4f:ad:9d:51:96:69:78:25:ce:0a:ad:0f:d8:0c:fe:d5:07:
e9:c1:bd:a4:6a:13:e9:25:96:23:8a:74:20:53:fb:c4:75:48:
73:3e:8f:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:50:12 2025 by rpki-client