This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft
File: 1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft (raw, json)
Hash identifier: jtNTrUYuV08++fVFWGIslOasWK47JizC/N19Bp/EhOw=
Subject key identifier: 52:7D:4A:56:63:3C:4F:31:56:0B:8A:85:44:CD:86:74:70:99:51:39
Authority key identifier: FB:06:1A:39:F0:A0:37:92:31:13:D6:B8:BB:9B:5B:DA:B5:B2:F4:66
Certificate issuer: /CN=fb061a39f0a037923113d6b8bb9b5bdab5b2f466
Certificate serial: 019AF3F7E9C35D74CFDE83F46807039A84A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft
Manifest number: 1786
Signing time: Sat 06 Dec 2025 14:01:41 +0000
Manifest this update: Sat 06 Dec 2025 14:01:41 +0000
Manifest next update: Sun 07 Dec 2025 14:01:41 +0000
Files and hashes: 1: 0PRh-Ryf5Bbnr0lOh4NNRU5Dvtk.roa (hash: jgK2NNDoTbWiQ7uIBzHm15T4lQ1IK4iXj6RZrP5o0x4=)
2: 1-wYaOfCgN5IxE9a4u5tb2rWy9GY.crl (hash: 6pjxEaMV0rdAThebPBuOFk0+RlhZXqnxLgMYDzCvu1I=)
3: 2LNh2IK4jZn1zUGBoSeuOCdHsXI.roa (hash: oJ1ixo11Dgt3gqct0Oh6zVb2kz2NqX0+yoE97/FL8Fc=)
4: BG1cqZ9YVyNJo6yn7aRCRKFwi1E.roa (hash: iWMwZkGfB/SrRzVNIRiDbpY7F5RfXCU+vPN0FbVq8Zo=)
5: UhdjQtj-FfDyuU6V5WnFSOKYjmk.roa (hash: QbBqfb3nWseUxtS3InHqu29EzpheC2v8vhkaoLoZ0FY=)
6: X3rPCUQOCzHRW1aOB1JMsXT6ETw.roa (hash: Mnw7vSeAR5wWc2r0nd1dxOLcS1XganxG0iGji5vuiZQ=)
7: dkGowCxyAk57tMP-82kGQeDdynY.roa (hash: Vdu4x0hDwdG5RaDwCyJZJseIjrU0RN3jHw1tXALp/yQ=)
8: eV94BXe8LtEfrEreyIQkc6VGevg.roa (hash: n/7ce91I2ejVxdCN2rHxzeGGcgk6A9ogkMPQOK3FmSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 13:09:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f3:f7:e9:c3:5d:74:cf:de:83:f4:68:07:03:9a:84:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb061a39f0a037923113d6b8bb9b5bdab5b2f466
Validity
Not Before: Dec 6 14:01:41 2025 GMT
Not After : Dec 7 14:01:41 2025 GMT
Subject: CN=527d4a56633c4f31560b8a8544cd867470995139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c9:97:68:39:64:92:37:d6:2d:13:fa:78:1f:
bc:e4:3c:30:9d:7e:91:37:ad:52:0d:f7:55:dd:57:
cd:63:c6:1b:ec:45:26:9b:27:8b:33:7f:88:63:e3:
fa:45:d6:42:bb:61:d2:37:99:e3:e9:6a:e0:4f:1b:
ea:3e:ab:8c:32:3e:e1:26:d9:57:a9:be:4b:98:70:
d7:0b:f9:65:0c:30:6a:b5:52:39:1e:bd:03:21:88:
de:df:f4:b8:27:12:45:10:22:35:b5:a6:e9:aa:17:
e8:93:29:65:2c:3f:35:a4:b5:0e:12:11:d0:d2:43:
78:73:c7:cb:06:88:f9:8f:ca:93:90:bd:f1:39:45:
9f:a4:14:4c:8e:d3:98:19:61:1d:cc:85:c2:98:b8:
05:12:f5:0e:1b:ce:6d:69:8d:da:db:bf:ed:f0:f8:
34:4a:9e:62:b3:1f:e6:d9:ee:1e:44:3c:d2:c6:36:
99:31:aa:1b:8a:48:7d:2a:a0:60:48:11:f3:e8:af:
94:81:69:97:25:64:12:2f:db:e1:a8:79:56:6f:6c:
35:58:3a:e7:a4:da:68:74:cd:62:b4:96:40:62:14:
32:72:50:63:f0:47:24:64:37:62:9c:45:43:81:7f:
e9:93:84:21:bc:3a:6f:37:a8:5e:8e:78:d9:67:1d:
87:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:7D:4A:56:63:3C:4F:31:56:0B:8A:85:44:CD:86:74:70:99:51:39
X509v3 Authority Key Identifier:
keyid:FB:06:1A:39:F0:A0:37:92:31:13:D6:B8:BB:9B:5B:DA:B5:B2:F4:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:b2:45:62:c1:ef:2c:ce:0e:de:1a:19:e1:7e:50:d2:93:eb:
3c:51:b2:ca:c0:6f:4c:43:ee:04:69:5b:65:7c:92:ac:34:a5:
f2:7f:2a:de:12:33:87:a2:ac:5b:c8:dc:25:e4:05:d8:14:07:
4f:17:8a:46:b2:5e:7d:bf:51:11:7b:46:82:f9:62:58:1c:7c:
6d:bc:4f:dc:4e:d8:27:be:31:df:29:c5:1d:56:16:31:72:2b:
bd:86:95:2a:5b:f2:09:85:01:13:02:eb:9c:1d:21:c4:94:db:
d3:8f:55:ac:0d:79:1b:0c:b2:1a:eb:c6:c0:c5:40:d2:47:d7:
d3:e6:92:1d:c2:14:8c:90:1c:be:bc:d4:c2:69:3b:c1:c3:70:
8a:dc:1e:4c:2c:7c:b7:9b:df:79:ef:d9:85:b5:3c:22:d0:ca:
c3:82:b3:3d:a7:05:66:fa:b0:16:7c:d3:df:de:44:97:9f:67:
35:63:d9:c6:13:47:49:73:c9:62:8f:ed:95:85:f1:cd:66:5e:
3e:ae:73:d4:8f:5a:2b:3d:14:94:cc:fc:c3:10:8a:a5:e7:23:
9b:73:8e:9b:93:2f:08:d7:0c:72:c5:86:28:19:e0:cc:9f:f8:
4d:97:71:b0:8d:9f:30:f5:49:05:6a:f0:cc:16:ae:f1:94:f9:
1e:e0:25:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:53:44 2025 by rpki-client