This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.mft
File: 1DTxaGECh2xiFrzqKKXlAuwNe2s.mft (raw, json)
Hash identifier: NZ1tLorWiI6T9Vfh3MQz/dnuK/8XSdh8tFu7hCM9gZc=
Subject key identifier: A4:9B:4D:A8:02:A6:FB:38:34:54:B2:E5:DE:A9:49:D1:88:27:5E:48
Authority key identifier: D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B
Certificate issuer: /CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
Certificate serial: 019AF20994DE95A9AD9A7B071896B109F907
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.mft
Manifest number: 17BF
Signing time: Sat 06 Dec 2025 05:01:45 +0000
Manifest this update: Sat 06 Dec 2025 05:01:45 +0000
Manifest next update: Sun 07 Dec 2025 05:01:45 +0000
Files and hashes: 1: 1DTxaGECh2xiFrzqKKXlAuwNe2s.crl (hash: q0d95KKi1Qf6e5Ze4iMgvS62wx3fu1d6GnwpDIioiCs=)
2: 7Cj5773Ww2G0LSY1fnydQfxQCM8.roa (hash: aUx5ljL2u1JfwzPAWHUuxa8lyiqbBKjx2VkYnyoKl00=)
3: 7w_UXb_9EuacQXaOkUvAB9t3GPY.roa (hash: BdddFhDjZUrdf5plsycRSqL9pb4uMD9DIqhfXxLsESI=)
4: 9Du2tHlplI8cqKMhQkDQrma7ABw.roa (hash: tHZwo/QnwGrZt6X37EyHYtZuWfqyTSrPiMBPcRX5QtA=)
5: Asu0DH_A5v7HQJH6cJ--acq6gs4.roa (hash: p83oT8k8StFZXPPk4WZFA6xLSJnWFONbnXX8tMyuY+E=)
6: DIIPkhIK2GpSY7ZT1zdEaY1N8S4.roa (hash: GZZtKk3KUtgI6t+m4e2aEMnaIKRSut5aw/uHqLEVs54=)
7: HkpMpgcE2miG9qn79yi3XbK_pOE.roa (hash: 0Rr449PN12HQpu7nIek/UBDMZP0dQl1SRcWWzh64TnM=)
8: Loa4kWXHd_gyVar7KKfuCbOTQSI.roa (hash: V+IAftZbMV1uaMDIpq8IX4vqfn+FazLdtHW0Gi6raiE=)
9: MhQOqJ6yO4vtkdZaJ529XcXplng.roa (hash: yV3s2AyGwCS79L9utxt/xv+dOsJ83DLEVBUZQJXDxnI=)
10: OiUKYkPvCpqnOXZ9zOVHLonU2AY.roa (hash: Lhbego4QvDRSaxc+Seq5OHB8z3WLSv1waMp2zJgiuoA=)
11: PwHMe4i6pz51Ahrp1W-49Rgc_vo.roa (hash: DVJmDnhZvnviJ4n66jT0o+c4DIjAzAehQrpeXl6SGUU=)
12: R0cDHc3n2qmMEAUS6woEeV4DrUw.roa (hash: QJ/g2HXWAm89HNayhA1QKb5SEB9BRX6t6S4vbuLEEGQ=)
13: RzWktUnWleyuAASpHpH94KSShkY.roa (hash: BoPLXDFgsIgaZzKNJy1XCZ2/akxih7lLoVGkf52tsHE=)
14: WfonxlLMZwy-HhCvndkmDlWeP1U.roa (hash: D2to2wlUfQBqZmE9EvBIj/W3y3+jGxVEf6JIb4l/qG8=)
15: Y1p8iN7vXVc5hkWklA-jsy2oDOs.roa (hash: TAYuH8YzwKdTZbEvh6nabM+xwxNAutYkky5c5hoWXrE=)
16: dIkGudwt-RR6RWXajZoxz1vlHzU.roa (hash: OKPlohfOihRtk51p5gTQk9DKoBwl84PalakI/wclgFg=)
17: fQowbtBwRpKjCzhE3ojDTNtTyaM.roa (hash: 5hmuOcmFlB2Eh4C339cOr4B957mNZCHeN0L/cBjITLk=)
18: gL8L6RZ2XqjaOf7a7aVACmgbZKI.roa (hash: kLhGxAypt99j/jO34VpwpOJzvqgyVsGY/56bargYYM8=)
19: lGSh8HAGsvLzJWijuCn5mOFbAtA.roa (hash: g6Sdp9SO3zguPzUUGeNhkKmFB7oPgHI90W+QRmIj6bo=)
20: q5t8pCbXocy8z93aEyQcoKIUr7k.roa (hash: SLK2Vlk0BOq5d8DR4zM41FXSCnTp47baUcSuvvAqgGA=)
21: vx0LBPGo6U2A4w4ADzD_udSk_bE.roa (hash: 1BQsFPNT0rTtzolZzu4KuR7RQiaLrcqqi5uIXl00aQQ=)
22: w1-75ZX9HBx8AUrVwUOKynI5k3I.roa (hash: hPTOiyA3+YJ83FFkcYpaKb35ER44DCXiwk4q5wNRhf8=)
23: wapfnXLlA7DvDqRs4g9z4YLu3L0.roa (hash: Hxhpn18vB/H4YZziS5GXimeo8mFzlErLcl0bPjfu1Vc=)
24: z6n_jUG6I_xYjDJHeip0DRFjTRM.roa (hash: /Wm48sS3g9Z/4zp/4yyUdkHbex7iTx088gxRDh1F6/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f2:09:94:de:95:a9:ad:9a:7b:07:18:96:b1:09:f9:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
Validity
Not Before: Dec 6 05:01:45 2025 GMT
Not After : Dec 7 05:01:45 2025 GMT
Subject: CN=a49b4da802a6fb383454b2e5dea949d188275e48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:be:c2:0f:82:30:59:02:42:47:8c:a5:21:6c:
52:88:aa:17:07:fa:7b:74:e8:16:72:49:9d:05:d0:
9f:8d:14:18:22:0b:55:b6:8e:f8:b2:ee:5e:76:e2:
92:6f:c6:06:04:b2:03:d7:a5:dd:50:13:41:9e:6b:
71:92:36:02:12:92:c3:a0:c2:07:aa:82:98:25:a8:
b5:77:f9:bb:e7:6f:34:6e:31:8a:fc:5b:85:32:50:
81:bb:13:cd:38:ee:54:80:9b:85:87:09:eb:1f:2d:
21:42:8c:52:3f:46:5c:57:2f:c6:0c:83:9e:94:71:
4e:95:40:d6:07:18:5e:a0:77:d2:c6:b9:1f:ac:b9:
b4:86:9a:ef:0c:ad:45:a4:cf:9a:4e:66:9a:b0:26:
19:61:40:57:23:f1:bc:ff:55:56:4e:70:0c:1f:50:
2b:70:96:75:7d:4e:9f:2b:4f:a6:06:cc:8b:c2:bf:
8e:dd:cf:23:de:bb:92:2b:8f:ce:34:44:94:38:b6:
9b:7e:11:1d:13:b0:90:69:cf:e7:40:07:d0:b3:fa:
4c:04:74:db:23:37:fe:8b:d9:c3:6e:02:c6:4c:36:
c0:2d:92:b5:f1:f0:9e:ce:59:c5:b6:0b:4c:fc:85:
b1:23:ed:4c:c6:d8:0a:26:f2:bf:54:99:3f:3e:71:
74:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:9B:4D:A8:02:A6:FB:38:34:54:B2:E5:DE:A9:49:D1:88:27:5E:48
X509v3 Authority Key Identifier:
keyid:D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:83:e2:ae:c5:d9:7d:e8:07:2f:e5:ad:6b:30:68:f9:f0:0e:
4b:15:68:08:98:d4:80:2a:38:23:a8:a5:3f:46:bb:6e:9a:b4:
1b:6a:c9:d4:17:23:53:c3:ab:7f:71:93:b7:3a:30:41:ca:93:
e8:17:23:1e:28:42:e3:d6:c4:88:f3:14:0f:c7:a4:b4:c1:c8:
eb:a1:5b:f9:e8:2e:7a:15:b3:ae:26:09:a1:1b:da:2d:12:bb:
9c:a5:2d:b3:43:5b:78:78:67:9a:8b:14:cb:6a:55:6a:42:fd:
bd:f1:27:59:af:d3:3c:e0:fc:e7:46:e0:79:d3:de:ee:0a:6b:
56:2b:2e:fd:26:e0:68:85:46:c6:b1:d2:b8:f6:2c:97:51:ab:
28:6c:d0:0b:85:95:ca:96:0c:46:ee:c8:08:64:42:bc:75:28:
e0:4b:d8:b1:b2:06:1e:fd:0b:ec:fa:73:2a:86:e6:31:a9:bd:
1c:84:67:6f:a6:14:da:a1:98:5d:ad:95:87:c1:30:2a:85:9b:
08:0d:b3:37:a1:ef:b0:5b:cd:54:27:d8:ab:1e:5b:ed:6f:b5:
c8:ff:5f:c7:f4:9e:9e:67:5f:3b:a1:a8:28:26:7b:fb:7e:23:
76:be:af:41:d5:04:32:fb:d5:5d:a4:73:63:ae:ec:cd:9d:07:
af:0b:5e:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:14:06 2025 by rpki-client