This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft
File: T7K7e61Q8ZIYEKAo547dZfgfan0.mft (raw, json)
Hash identifier: L8H0L71+wcGd6Lt2ES6l4jeXezO04fl+FYTChRWZcBc=
Subject key identifier: B3:5D:40:5F:7A:BE:5C:D0:A6:CD:00:B0:9E:DA:C9:11:8A:78:6E:28
Authority key identifier: 4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D
Certificate issuer: /CN=4fb2bb7bad50f1921810a028e78edd65f81f6a7d
Certificate serial: 019AF3F79D6E915FB0A3BB95B500D9961ACA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft
Manifest number: 176C
Signing time: Sat 06 Dec 2025 14:01:22 +0000
Manifest this update: Sat 06 Dec 2025 14:01:22 +0000
Manifest next update: Sun 07 Dec 2025 14:01:22 +0000
Files and hashes: 1: 0t9k3VKpg5XpD7MVkMNQX_l1tfc.roa (hash: BzUj07EejYyyMT4Im9XK7eLGF3C5NwrA/MzbT6j9keY=)
2: 1-Z-EbEbGe8yxK4SqLWDT6Ei8Xlk.roa (hash: bPXgwf4I2BdmZ9+4bAlYkkYHbKJWbKtWdjpO/HrVdSE=)
3: 94-CfRKJcsd-Ydd4FDNQKX0Zp3E.roa (hash: T/WAoLxo0PnxVr7nnlx3pomYG3O8lrRy6KTbycXayvo=)
4: B45XvbozhNWjXkQPI-m-mjKZzQY.roa (hash: De0OPO+1rvRKuUyNflE2BB3lX6yIPfgqlTtFfQgcSF4=)
5: JaozY1LC60yKHxdIxOB-E0iX1t0.roa (hash: OPF6jBQCfVWZLlLB/67BOOY2NpB3o7UOxfL3O5afl3M=)
6: L7IG9Ln6m_zfp5UQKVs9myh5Dc0.roa (hash: jvI7jkzEKQADjdVqEl4h9ucF4+e+Qcpdc9H60hR13Xg=)
7: OdvTtHevTUmaiwlyF527qNO0goI.roa (hash: gUCiyrPmcDrIhpr3CW3AI5xYss+1xZqhcT0JZQL6Dj0=)
8: OognzbRI52-tUVqPrupLJHIhUV4.roa (hash: yDdzqTQld2bKmh7pdXZ3qLlf4D/eksuK9uXSZZ/NG7o=)
9: OryNoX3UGMIcnoUd_MsLiDY7bng.roa (hash: o+SjC06El+Rv9wA0fL1qtJp9DJ4Kq5lIbfs8S2VVaKI=)
10: T7K7e61Q8ZIYEKAo547dZfgfan0.crl (hash: fZU9iTglAFnzQef6T7eR1oq0y/ENFNms6NjiBpHvS4Q=)
11: TW9ksFbGISrm8bYlqs2ozzpmjos.roa (hash: 0ziWkPMeV4t+G/bAbhTQxZYd+oOXOylZPAVdkzMUOzI=)
12: f4d0pGSSiHub4rrjLgiCoVR8Lcs.roa (hash: B5KcDdQ8zEYWfUf5mVlUALm2ca+VbtrqnIaM9zvKgrI=)
13: oMpMmoQ50JBqv5gfULLlkVZ87kQ.roa (hash: ZaFy/IgwDL83LKh9KTxH1aabJGJHABexBAR3ZVnZnVk=)
14: qGk1e2SSj7a867DIFcXEQy9VRwk.roa (hash: FczogQCjHMZiK1Ux2uZ685nsTVBLAXheYXkPGrZoEcc=)
15: qKcCLtEG432D5WJB88yhMQT2crs.roa (hash: DjjEwdV67kxPopToL5gQtYQLfwXVH8iDrqBq6qd58Es=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft
rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 13:09:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f3:f7:9d:6e:91:5f:b0:a3:bb:95:b5:00:d9:96:1a:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fb2bb7bad50f1921810a028e78edd65f81f6a7d
Validity
Not Before: Dec 6 14:01:22 2025 GMT
Not After : Dec 7 14:01:22 2025 GMT
Subject: CN=b35d405f7abe5cd0a6cd00b09edac9118a786e28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:54:12:bb:34:94:1d:47:88:61:3d:ec:33:5c:
73:ee:a3:78:ab:7c:a8:ab:de:ed:62:d6:ee:d5:19:
97:a3:6c:aa:83:9e:51:1c:9f:85:96:ce:30:81:a9:
ad:fd:20:ca:ed:3e:0f:21:da:f4:9b:a1:6f:68:40:
f4:e7:60:90:d6:c0:94:c0:72:77:f1:25:c2:38:f7:
3c:3e:68:0f:ac:bd:44:2d:0a:9b:83:5a:13:cf:4d:
3d:42:62:ff:3e:e5:be:00:7c:dc:84:41:4d:78:f5:
f2:54:a8:92:19:4d:8d:02:39:de:89:8a:c6:2b:75:
61:9b:30:53:f6:84:7d:64:68:80:fb:ca:2b:08:d5:
c6:b9:81:6a:37:45:f0:90:25:ca:c9:64:fd:0b:71:
cb:47:f2:a3:ae:f4:9b:23:59:06:09:71:8b:0d:14:
94:43:53:8b:0b:dc:68:cd:a5:9a:ab:97:ad:48:f0:
a4:19:22:00:1e:1a:c1:c0:12:b5:7e:64:63:42:cd:
de:76:38:12:b1:82:ee:fa:b9:4f:e5:fb:92:fa:dc:
2d:50:0f:f1:45:22:7b:9a:0f:61:c9:db:a4:b5:f7:
73:2b:22:b2:c0:2a:37:f6:52:87:e5:7f:40:0b:e3:
6a:8a:ee:d5:e0:24:27:6c:cd:e8:c5:71:fd:94:35:
eb:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:5D:40:5F:7A:BE:5C:D0:A6:CD:00:B0:9E:DA:C9:11:8A:78:6E:28
X509v3 Authority Key Identifier:
keyid:4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:c6:6b:cb:39:7d:8e:c9:dc:e3:11:d0:d1:79:32:ad:4a:d2:
8e:8f:64:1a:07:e7:41:15:79:97:49:d7:42:7b:5c:70:ce:d5:
ea:0c:9e:3d:91:af:92:ce:cc:c0:d7:48:f7:d9:a5:a0:32:f5:
c7:3e:b9:07:c1:8f:59:48:1d:2b:59:06:77:ad:c6:6d:43:9f:
4f:e5:db:bb:87:93:4b:b6:a8:af:b4:5f:7b:3a:34:6a:0f:bf:
d7:b0:13:33:fd:1c:d7:f2:5b:ff:41:2a:47:25:8d:5a:67:8e:
b2:80:24:75:02:51:f4:34:37:69:29:01:e1:f0:25:80:62:ad:
ee:52:e6:85:c5:83:14:42:b0:b1:77:d6:91:a7:b6:4d:6e:14:
24:5b:b6:1b:b2:5f:07:55:c9:72:5e:36:7b:0c:4c:f3:30:70:
71:ec:ce:b7:c5:8a:07:44:4a:d2:fd:6c:c7:96:3a:95:35:36:
56:09:5e:7c:ef:33:17:5d:1c:47:9c:3f:5b:8e:c1:10:e1:2d:
0d:e3:05:e0:b4:a0:54:12:b1:ff:02:3c:fb:98:41:5e:d7:50:
68:c3:22:fe:04:8c:d5:66:f9:0f:10:31:9d:bd:a3:c5:8b:84:
8b:02:da:82:24:d3:7b:aa:e4:61:14:d4:de:ec:d9:7e:ca:c8:
f7:4a:37:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:46:53 2025 by rpki-client