This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/f710ce-440f-405f-ac50-aa942994fc60/1/FW8E_FyodTFasLhUtkUGsJyZjpo.mft
File: FW8E_FyodTFasLhUtkUGsJyZjpo.mft (raw, json)
Hash identifier: t9pEyEy5GucHmbheVZk2isW+FmMMNefohKWBlsxhyiA=
Subject key identifier: D7:4D:73:F4:7A:51:4E:3C:90:D2:12:21:FE:F8:18:55:1B:26:E6:5F
Authority key identifier: 15:6F:04:FC:5C:A8:75:31:5A:B0:B8:54:B6:45:06:B0:9C:99:8E:9A
Certificate issuer: /CN=156f04fc5ca875315ab0b854b64506b09c998e9a
Certificate serial: 019B41DB0BF800A1D49C543B86D316D7E2BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FW8E_FyodTFasLhUtkUGsJyZjpo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/f710ce-440f-405f-ac50-aa942994fc60/1/FW8E_FyodTFasLhUtkUGsJyZjpo.mft
Manifest number: 1789
Signing time: Sun 21 Dec 2025 17:00:32 +0000
Manifest this update: Sun 21 Dec 2025 17:00:32 +0000
Manifest next update: Mon 22 Dec 2025 17:00:32 +0000
Files and hashes: 1: 74FiFUUCcsV_j506QvqvuUKXA1c.roa (hash: apRm/FJ7fgKknAqYO8bdqiAphQJLpxJucgrm/glKMKk=)
2: FW8E_FyodTFasLhUtkUGsJyZjpo.crl (hash: qeLOCYpKUNzkWyyhqRa7UFugaA20jrX2kG/7QDNgNwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/f710ce-440f-405f-ac50-aa942994fc60/1/FW8E_FyodTFasLhUtkUGsJyZjpo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/f710ce-440f-405f-ac50-aa942994fc60/1/FW8E_FyodTFasLhUtkUGsJyZjpo.mft
rsync://rpki.ripe.net/repository/DEFAULT/FW8E_FyodTFasLhUtkUGsJyZjpo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 22 Dec 2025 13:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:41:db:0b:f8:00:a1:d4:9c:54:3b:86:d3:16:d7:e2:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=156f04fc5ca875315ab0b854b64506b09c998e9a
Validity
Not Before: Dec 21 17:00:32 2025 GMT
Not After : Dec 22 17:00:32 2025 GMT
Subject: CN=d74d73f47a514e3c90d21221fef818551b26e65f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ec:1c:5c:c8:52:7f:25:1f:8d:35:da:81:15:
6b:66:5a:13:b8:cd:17:4b:60:6d:05:df:40:37:b5:
73:e7:4b:56:90:8b:13:62:33:1b:55:5c:a2:9e:29:
5b:38:57:8e:b6:f1:ce:68:9d:9c:18:8d:70:9f:1e:
e2:93:ce:e9:2a:2a:64:be:40:e8:6a:c4:b1:4b:8a:
34:09:2a:31:e5:1e:81:b5:19:87:c0:cc:dd:1a:dc:
08:bb:cd:25:30:9c:88:75:d9:bf:50:e9:6c:b8:21:
ee:96:be:89:46:ea:e8:1f:1c:2c:34:b7:ac:8d:99:
8f:20:3d:4f:52:76:cc:8d:76:76:fa:73:67:42:44:
ae:34:92:60:c6:54:9b:75:0c:e4:13:46:79:8d:dc:
db:06:75:ff:9b:18:88:6c:80:a5:ce:cf:4c:1d:3b:
df:59:d4:de:cc:21:5b:0a:57:a0:f9:f6:d7:10:bb:
d3:58:d5:e7:a6:a3:e2:f3:5c:4a:36:7a:1b:db:ae:
a5:dc:47:2f:f0:15:70:64:f8:fd:7f:90:b7:a9:af:
d3:91:07:f7:e7:52:39:e6:c4:75:91:f3:49:40:d0:
7e:56:c3:ce:cf:73:6c:0a:be:87:a4:88:fb:a0:7a:
28:a4:3d:40:30:d1:69:3f:b1:53:22:36:23:dc:9c:
52:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:4D:73:F4:7A:51:4E:3C:90:D2:12:21:FE:F8:18:55:1B:26:E6:5F
X509v3 Authority Key Identifier:
keyid:15:6F:04:FC:5C:A8:75:31:5A:B0:B8:54:B6:45:06:B0:9C:99:8E:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FW8E_FyodTFasLhUtkUGsJyZjpo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f710ce-440f-405f-ac50-aa942994fc60/1/FW8E_FyodTFasLhUtkUGsJyZjpo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f710ce-440f-405f-ac50-aa942994fc60/1/FW8E_FyodTFasLhUtkUGsJyZjpo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:b8:53:91:a3:cd:3a:8c:31:43:4f:67:9e:31:2a:a7:c0:69:
8a:e4:84:3a:0d:f5:1e:50:6f:d6:04:6e:08:40:1a:0f:83:e5:
99:aa:de:fe:34:ec:4e:1c:27:8d:e3:4f:6a:cf:3e:dd:87:d6:
77:b1:0d:12:ad:bd:8b:42:a7:14:fd:a9:a9:67:15:22:a7:be:
0b:3d:f1:d3:3b:11:55:5b:95:0d:ad:67:de:4d:c3:0b:05:de:
fd:45:0e:d3:8d:ac:6d:eb:be:6b:5e:37:84:06:b2:6b:4a:a5:
4b:eb:0a:a8:38:86:0f:b2:38:85:53:8c:f2:19:4d:d1:24:39:
6a:99:b2:4a:59:e6:97:9b:70:0c:a2:f9:8d:8e:d5:6d:10:2d:
e7:3b:ab:99:b1:f8:6d:91:90:80:ec:d0:4a:74:6a:a8:f2:9b:
bd:62:08:d0:3b:56:aa:62:3c:15:90:69:2a:73:34:f2:34:3b:
3a:ec:a9:f1:ed:b2:ae:af:6c:c9:84:66:03:ef:11:04:4d:98:
7e:18:ff:0a:07:6f:90:5a:90:6a:33:36:a3:6e:68:19:2e:06:
46:2e:50:d6:a2:f6:76:f2:01:dc:a0:18:3a:b9:cd:08:ff:d2:
2d:72:0f:ed:1e:53:77:2f:48:2a:36:fd:1b:07:73:00:09:bc:
93:11:a1:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 21:51:53 2025 by rpki-client