This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/efff71-7d11-4a1a-8ad3-a67d8c7ed7ca/1/7rWbeRx6EdIyqVx-8WkoXK6mlbw.mft
File: 7rWbeRx6EdIyqVx-8WkoXK6mlbw.mft (raw, json)
Hash identifier: py5SD4Gc/PtLIkYP0jcLyCLOgvqnZuslV2HRa2/0640=
Subject key identifier: 39:6F:EC:E0:3A:DB:2D:92:28:55:CF:97:A4:52:59:21:8B:6C:36:D1
Authority key identifier: EE:B5:9B:79:1C:7A:11:D2:32:A9:5C:7E:F1:69:28:5C:AE:A6:95:BC
Certificate issuer: /CN=eeb59b791c7a11d232a95c7ef169285caea695bc
Certificate serial: 019B378E7A3AD2EAE324F8550206CB354EA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rWbeRx6EdIyqVx-8WkoXK6mlbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/efff71-7d11-4a1a-8ad3-a67d8c7ed7ca/1/7rWbeRx6EdIyqVx-8WkoXK6mlbw.mft
Manifest number: 07A0
Signing time: Fri 19 Dec 2025 17:00:42 +0000
Manifest this update: Fri 19 Dec 2025 17:00:42 +0000
Manifest next update: Sat 20 Dec 2025 17:00:42 +0000
Files and hashes: 1: 5klL4oJYCAWVCtSt4Aa3ZqfkGO4.roa (hash: qBVepds6Syb8DaPWB6RynfxxSA3Sp6OU8dF9D31HEW4=)
2: 7rWbeRx6EdIyqVx-8WkoXK6mlbw.crl (hash: R/KipYP6YsTrPwvirSG+iE96GtMAXRChdbW1KJNxwiw=)
3: 8WMbOpSCq-43yrjp-Gue986sGls.roa (hash: lSFJ6DNUnrryZBRZ4iwSdCLZNyBNPcmv/tCrUVWgz2s=)
4: E6SsxrL0YU9sVh9I8GUbKrOvT1M.roa (hash: YCaqr7sid2K9NSVR3DjQ0cVKpB+Nv1AlUmt5Gzw4TLs=)
5: G40JELkFkjinZ7Bg4-gGMDe46ac.roa (hash: DxEJ7/YxUtp6mDjGz6vAkm+fJcRrhUMEE1ib29ZnNNg=)
6: dqHEZ0oARNoaVvG3IlOzVbCxw8E.roa (hash: Lu4R8BGvmtKvcPKaLg2jGVkmpU76/ij/EjZ+FuotBOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/efff71-7d11-4a1a-8ad3-a67d8c7ed7ca/1/7rWbeRx6EdIyqVx-8WkoXK6mlbw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/efff71-7d11-4a1a-8ad3-a67d8c7ed7ca/1/7rWbeRx6EdIyqVx-8WkoXK6mlbw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rWbeRx6EdIyqVx-8WkoXK6mlbw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Dec 2025 16:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:37:8e:7a:3a:d2:ea:e3:24:f8:55:02:06:cb:35:4e:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeb59b791c7a11d232a95c7ef169285caea695bc
Validity
Not Before: Dec 19 17:00:42 2025 GMT
Not After : Dec 20 17:00:42 2025 GMT
Subject: CN=396fece03adb2d922855cf97a45259218b6c36d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e8:a4:ba:2d:b1:67:00:d1:5a:ff:c7:c8:5e:
f3:83:d8:c3:12:fe:5f:80:8f:6c:74:1f:7a:84:09:
03:39:6e:49:be:74:e7:1e:c8:6e:bf:56:18:b9:36:
cf:5a:54:4a:47:cf:7d:1a:18:38:76:ed:ba:1b:4e:
1b:80:4e:74:b1:cf:6f:b2:5b:c9:79:f2:bf:84:73:
55:46:08:cb:39:c3:3d:b7:96:f8:fc:52:87:3d:bc:
cd:93:61:28:84:57:64:d3:c9:03:bd:30:e8:4f:06:
2c:78:84:2d:69:4c:24:57:58:26:de:74:91:d5:7d:
98:bf:cb:bc:d0:90:f4:74:92:b2:55:08:b3:3b:8f:
da:d1:54:d3:35:19:d6:3d:f6:ba:7f:f4:94:01:10:
f8:31:d3:30:1d:f0:99:34:db:e3:c4:79:e0:18:09:
cb:a4:e7:f9:b0:fe:96:df:86:7a:d8:c8:7a:79:f5:
61:6a:9a:09:77:ed:87:b4:58:89:50:00:36:72:73:
08:64:8a:87:e7:29:71:bc:9e:e6:55:f4:da:c7:d2:
65:3d:df:da:fc:c5:c3:90:62:fd:99:c6:fd:d1:9c:
f3:38:c2:b4:ac:6c:1d:09:e7:e2:62:5d:67:e3:3b:
ba:ab:40:99:bb:4b:c9:41:47:56:73:9e:d8:1f:bf:
9e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:6F:EC:E0:3A:DB:2D:92:28:55:CF:97:A4:52:59:21:8B:6C:36:D1
X509v3 Authority Key Identifier:
keyid:EE:B5:9B:79:1C:7A:11:D2:32:A9:5C:7E:F1:69:28:5C:AE:A6:95:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rWbeRx6EdIyqVx-8WkoXK6mlbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/efff71-7d11-4a1a-8ad3-a67d8c7ed7ca/1/7rWbeRx6EdIyqVx-8WkoXK6mlbw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/efff71-7d11-4a1a-8ad3-a67d8c7ed7ca/1/7rWbeRx6EdIyqVx-8WkoXK6mlbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:1d:c1:f7:e1:ac:cc:15:8f:c2:2c:8f:d0:35:6e:8f:46:bf:
6d:86:9f:ba:8e:4f:76:d0:5d:16:66:bd:12:eb:69:18:47:99:
05:03:5b:b6:63:96:95:95:c4:09:02:bb:da:9b:96:d6:7b:e0:
9b:fe:0e:11:35:b0:05:cf:d7:ee:f1:90:3e:e8:00:10:78:b3:
2c:aa:82:31:a0:0b:24:c0:54:ca:b7:59:04:8d:a1:d2:8d:3f:
33:0f:22:e3:fc:4a:29:27:dc:e5:36:71:a2:b8:bd:36:d7:f4:
b6:93:21:32:7f:19:31:e1:07:70:c0:83:79:b8:4a:09:ae:10:
fd:08:86:d1:f1:fe:c1:d1:cb:73:2a:9a:b8:11:03:2b:10:eb:
a8:93:2e:d7:04:9f:4c:d8:88:0e:ba:2d:9c:4b:66:4c:77:8e:
8d:4c:37:4d:26:20:41:5a:ea:81:93:18:c1:4c:d4:56:2d:94:
95:fc:58:5a:ec:c8:37:92:1c:80:26:17:7e:33:03:55:37:76:
40:78:95:b2:bd:1b:36:84:5c:60:a3:38:9f:32:db:18:85:aa:
15:15:57:ec:56:52:cc:41:cd:53:68:15:38:b5:b8:8c:b0:a2:
9a:20:c2:93:5a:39:0c:18:f0:e3:d7:16:ea:d8:bc:50:49:bc:
be:4c:0a:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 23:51:24 2025 by rpki-client